From owner-freebsd-questions@FreeBSD.ORG Thu Dec 18 19:30:52 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E958F1065676 for ; Thu, 18 Dec 2008 19:30:52 +0000 (UTC) (envelope-from dan-freebsd-questions@ourbrains.org) Received: from ourbrains.org (li48-221.members.linode.com [66.246.76.221]) by mx1.freebsd.org (Postfix) with SMTP id 7FFF98FC12 for ; Thu, 18 Dec 2008 19:30:52 +0000 (UTC) (envelope-from dan-freebsd-questions@ourbrains.org) Received: (qmail 8682 invoked by uid 1000); 18 Dec 2008 19:31:13 -0000 Date: Thu, 18 Dec 2008 14:31:13 -0500 From: Dan To: freebsd-questions@freebsd.org Message-ID: <20081218193113.GA8652@ourbrains.org> Mail-Followup-To: freebsd-questions@freebsd.org References: <20081212120557.V3687@wojtek.tensor.gdynia.pl> <9bbcef730812120426t3c4b8a28q337c8379cd947702@mail.gmail.com> <20081212141156.E4001@wojtek.tensor.gdynia.pl> <139b44430812120527w7b22d8a1m860cbf308e4b67c3@mail.gmail.com> <64b284310812120645m6c5ee122mb0510014343eff3f@mail.gmail.com> <49442D1B.4000608@infracaninophile.co.uk> <20081213225041.P44804@wojtek.tensor.gdynia.pl> <49443793.9030404@infracaninophile.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: <49443793.9030404@infracaninophile.co.uk> User-Agent: Mutt/1.5.18 (2008-05-17) Subject: Re: Centralized DB of "system" users X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Dec 2008 19:30:53 -0000 Matthew Seaman(m.seaman@infracaninophile.co.uk)@2008.12.13 22:30:43 +0000: > Sure LDAP is complicated, but it's of the same order of complexity as a > RDBMS system like MySQL. And like MySQL, there are right times, places > and ways to use it, and wrong ones too. Yes, there is a lot of complexit= y, > but that means there's a lot of flexibility too. > Cheers, > > Matthew I can't disagree more. LDAP is way simpler than any SQL database, even SQLite. That said because people are not familiar/don't grock the simplicity of LDAP, they decide to use SQL databases (partly because everyone else does). Now that we have had LDAP for so many years, insisting on using SQL for authentication/authorization and directory services is just not wise. This is similar to using Apache/PHP/MySQL by default when other, simpler/better options are available. "Everyone=20 else does LAMP, so will I."