[Info-vax] LDAP

[Dave Froble]

On 10/10/2020 1:22 PM, Grant Taylor wrote:
> On 10/10/20 5:07 AM, Marc Van Dyck wrote:
>> LDAP does not have any provision to store the SYSUAF info
>
> That surprises me.
>
> LDAP is eminently extensible.  You can create new methods to define and
> store things all day long.
>
> Of course that would depend on something client side being willing to
> look for those things in LDAP.
>
> Dip your toe into the great lake of "extending the LDAP schema".  It's
> something that frequently happens with major OS upgrades in Windows.
> E.g. extend the AD schema to support the new features of the new version
> of the server OS.
>
>
>

I think using LDAP for passwords for VMS access is a good idea.  Let 
those people who are suppose to be controlling such things do so, and 
without having to know much about VMS.

Now, everyone knows I don't get out much, so the following may not be 
accurate.

There is much in SYSUAF that is rather VMS specific.  Trying to have 
people without VMS experience setting up some of that data seems 
counter-productive to me.  Usually, this data doesn't change, so have a 
VMS person involved in setting up such data seems reasonable.

For most, I'd think allowing the use of a "local" password would not be 
reasonable.  Too much chance to get around the corporate (or whatever) 
control of access.

-- 
David Froble                       Tel: 724-529-0450
Dave Froble Enterprises, Inc.      E-Mail: davef at tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA  15486