[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
LDAP for policy provisioning
Hi,
I'm evaluating using LDAPv3 for policy provisioning, vs COPS. Current
LDAP-server use is for local security and VPN policies. Using it for network
wide policy provisioning would mean creating a "policy" on LDAP and
sending/'pushing' it to the right list of network elements that should apply
it.
A colleague suggested that some LDAP servers support persistant searching,
and that one may be able to use this as a push mechanism. Also, one could
then check a directory flag to tell when the changes are complete.
Is this practical? Does LDAP client-server normally work [or NOT work]
inside a TCP connection {COPS requirement].
thanks for any comments,
Roy Kopeikin
Lucent Technologies
-