D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Directory service was Re: SSH key management

 

On 18/08/13 18:01, bad apple wrote:
On 18/08/13 17:40, Simon Waters wrote:
I've kind of been a fan since the W2K launch party, although the
service replication seems overly complex. The demo was by someone
who'd worked with some of the tools MS bundled before MS got involved.
So a case of nice end user tools but internally rather messy. On the
other hand if you have few or no MS clients, it doesn't seem a natural
choice. Time to sniff through Novell's portfolio again just to see
what is about. Apple have Open Directory but doesn't seem to have much
traction.
Like everything else even remotely "enterprisey" or "server strength"
that Apple attempts, their Open Directory implementation is frankly
laughable. It doesn't even work properly for Macs, let alone anything
else (trust me on this - one idiot customer of mine went ahead without
consulting me first and bought one of those hateful little Mac Mini
"servers" this last week and I've had the displeasure of configuring it).

As for Novell - Zenworks is dead my friend. Sure eDirectory was a game
changer many, many years ago (I have fond memories of Netware 6.5) but
it's largely morphed into a big, ugly, proprietary mess that literally
not one person on the face of the planet cares about any more. Sure, if
you like then go ahead and grab a free trial of the SLES based SUSE Open
Enterprise Server but you won't like it (because it's crap, and expensive).

Agreed, if you're a Linux-only shop ADS probably isn't a good fit - if
you've got more than a couple of Windows boxes lying around though
you're going to already have it by default. Costing up licensing for MS
stuff can rapidly get ruinous though, so it's often not cost effective
for smaller, tighter run shops with budgets to watch (as opposed to the
bigger outfits I usually work for, who seem to delight in just flinging
stacks of cash down for insanely expensive software licensing).

Luckily, this is one of the easier questions to definitively answer, so
let's just on with it. In order, you want either:

1: Windows ADS (if you can justify cost and have windows infrastructure)
2: RedHat Open Directory Server

And that's it. There are other choices, but you will be fired for even
thinking about any of them because they're all terrible.

Job done!

Regards

Haven’t tried RH ODS, but I did write a necessary and sufficient LDAP manager in VB once (could rewrite it in HTML/PHP without much effort) found the major problem was getting management to accept the rules they made...
Tom te tom te tom

--
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq