Re: [Ejbca-develop] LDAP support.

[Tomas G. <to...@pr...>]

Ldap is supported in a much better way in beta2, see doc/RELEASE_NOTES. 
Herrvendil implemented profiles for publishers that is configured from 
the admin-GUI. No need to edit ejb-jar.xml files any more. You can 
easily configure how many publishers you like in the admin-web.

LDAP does not hold everything that the database does, so the database is 
needed, there are lots of other information in the database except 
certificates. The database is the primary store for everything and the 
ldap can be far off even, not on the same machine. For security reasons 
it's probably better to keep the ldap separate from the CA anyhow.
The database can hold unlimited number of certificates for every user 
and every CA etc, something ldap is not so good at, so ldap can not 
replace the database.

Cheers,
Tomas

Developer wrote:

>Is ldap supported in 3.0 beta2?  I seem to remember it being in beta 1
>but I don't see any ldap options except in the
>src/ca/ca/META-INF/ejb-jar.xml.
>
>Also, Is the database still necessary if we are using ldap for a
>publisher?  Or what is the role of the database with ldap?
>
>Thanks,
>
>Chris
>
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by: IBM Linux Tutorials
>Free Linux tutorial presented by Daniel Robbins, President and CEO of
>GenToo technologies. Learn everything from fundamentals to system
>administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
>_______________________________________________
>Ejbca-develop mailing list
>Ejb...@li...
>https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>  
>