[Info-vax] ldap versus openldap on VMS

[Stephen Hoffman]

On 2020-03-30 15:33:45 +0000, gérard Calliet said:

> Perhaps I'm just dreaming, but as a newbie with Ldap on VMS I see there are:
> - proprietary Ldap kits from VSI,
> - open source openldap kits from VSI.

Two more LDAP servers that can be associated with OpenVMS:

    - Samba 4 includes an LDAP server as part of its capabilities 
compatible with Microsoft Active Directory Domain Controller, and 
there's an OpenVMS port of Samba 4.6.5 available from VSI.

    - The LDAP servers that many (most?) businesses already use and 
that OpenVMS and its apps must play well with, not the least of which 
is Microsoft Active Directory, and Azure Active Directory.

> Perhaps it's just history. But now:
> - are there functional differences between them?

Functional differences? Donno. I've not yet loaded the VSI OpenLDAP 
port for a look.

Pragmatically, LDAP is LDAP. I wouldn't expect the calls to be 
different, though I would expect to find some differences among the 
site-specific directory setups.

Where there are functional differences usually involves added parts. 
Microsoft Active Directory has its share of extensions that are useful 
for and needed by Windows clients, for instance. The Samba 4 port seeks 
to provide compatibility with those added features.

> - what is the best of them?
> - why keeping two products doing the same thing (with all the troubles 
> with compatibility...)?
> 
> Any information, explanation, pieces of advice wellcome.

Ask VSI.

Pragmatically, I've assumed that Enterprise Directory will eventually 
be shelved, and that the OpenLDAP port will eventually replace it.  But 
there's been no statement from VSI.

Another interesting question is whether and when one of these LDAP 
servers will be integrated directly into OpenVMS and not an add-on, but 
then OpenVMS does like its permutations and all the coding chaos that 
ensues.

What's your goal here?

Learning LDAP? Pick one.

Learning VSI plans? Ask VSI support.

LDAP server and app integration? That varies. And for a number of folks 
already using LDAP, that will involve Windows Server running Active 
Directory, or Azure Active Directory.


-- 
Pure Personal Opinion | HoffmanLabs LLC