[H-SASIG] Trac Status and LDAP

[Greg Black]

On 2010-01-15, Daniel Devine wrote:

> I think this is something we should argue about with Russell and
> Stephen, as I am not very familiar with LDAP. I suspect OpenLDAP is
> the way it will swing though but I think DS389 is perhaps the easier
> route. In any case I would like to be involved as this is relevant to
> my education :)

Education is good, but I think we should limit ourselves here to
providing the services that we actually *need*.  There is no
doubt that OpenLDAP can do what's needed and I suggest that we
take that route, using available in-house expertise.

> Depending how hardcore we want to get we could scale up from DS389
> into FreeIPA (V2 should be stable by the time we get around to this)
> which could provide Kerberos, DNS, CA etc.

Please don't go down that rabbit hole.

> Scope creep?

Indeed.

Cheers, Greg