Re: [gentoo-dev] Directory services (was Re: [gentoo-dev] maybe it is time to put portage queries into a database.)

[c.wegener@itcampus.de]

On Fri, Jun 27, 2003 at 07:58:39AM -0700, Zack Gilburd wrote:
Content-Description: signed data
> On Friday 27 June 2003 05:58 am, Rigo Ketelings wrote:
> > Op vr 27-06-2003, om 14:23 schreef Eric Sammer:
> > > Just to add something to my last email about portage and database /
> > > directory services...
> > >
> > > While talking to my wife this morning (a sysadmin and security
> > > professional and fellow gentoo user) about this situation, we realized
> > > something else about portage in openldap. This would (or could,
> > > depending on implementation) severely limit the rsync bottle neck by
> > > allowing for a hierarchy of directory servers to be replicated from by
> > > users.
> >
> > I REALLY like this idea..
> 
> I /tried/ using LDAP as my authentication for pam a while back, in hopes of 
> having a nice, network-wide, roaming profile.  However, such hopes were 
> quickly shattered once I got authentication going even locally.  My login 
> attempts would take /quite/ a while and it was very inefficient.  I would 
> rather see a MySQL database.
> 

As directory services are optimized for read performance, there are
disadvantages for write access to a directory service. But compared to
the amount of user needing read access to a directory service the
number of write access updates should REALLY small.

I think your bad experience with LDAP as authentication service may
have to do with misconfiguration or lack of optimization.

> > >  With clever use of referals and replication, you could
> > > effectively remove the rsync issues of bandwidth and the
> > > "stop-syncing-so-often-it's-rude" problem. Updates to portage would be
> > > propagated down the line when commited moving a smaller (but steady)
> > > stream of traffic rather than unpredictable bursts (note: that's an
> > > assumption). This would eliminate the need for 'emerge sync' (in theory).
> > >
> > > Again, this is all very academic as the data to back up these ideas is
> > > out of the public eye (thankfully). Maybe just food for thought...
> > >
> > > Thanks to all devs for all the great work.
> >
> > Yup, can't say that enough too ;)...
> 
> Granted I am incorrect about my assertions above, I would like to see this 
> *work* in a real-world situation before I say, "Yea, sure, let's give LDAP a 
> try..."

christoph
--
^*^

--
gentoo-dev@gentoo.org mailing list