Re: Openldap and Solaris 8

[Luke Howard <lukeh@PADL.COM>]

>If you use the ldap_cachemgr software, your ldap requests will not
>directly map the nss_ldap library.  This can also be accomplished to some
>extent with nscd.  If nscd or ldap_cachemgr is running, you're probably

As I understand it, in its present incarnation ldap_cachemgr caches
the LDAP profile information (configuration file) not actual results
fromhe LDAP server.
 
>pretty safe.  The biggest problem that I had with the PADL version was
>with failover capabilities.  The Sun nss_ldap module deals with down LDAP
>servers quite a bit better than PADL (keep in mind that i did this testing
>quite some time ago).

nss_ldap-168 might improve this a bit when linked against OpenLDAP
by supporting the LDAP_OPT_NETWORK_TIMEOUT option (configure it with
bind_timeout).

Also, we have our own ldapclient implementation at ftp.padl.com.

However, there is always a good reason to use Sun's nss_ldap modules:
they are supported by Sun. The NSS subsystem on Solaris is completely
undocumented and using a 3rd-party module apparently makes your 
Solaris system unsupported by Sun (although we do offer support for
our module).

regards,

-- Luke
--
Luke Howard | lukehoward.com
PADL Software | www.padl.com