Despite not understanding the architecture completely, it sounds like LDAP will fill your needs.
Have a read of the following man pages to see if it's what you're after:
slapd-ldap slapo-translucent slapo-chain
Good luck!
_____
From: Yang Sun [mailto:aegir.china@yahoo.com.cn] Sent: Monday, April 30, 2007 10:59 PM To: openldap-software@openldap.org Subject: LDAP Reference Works? Hi, I am new to LDAP world. And I am trying to design a distribute data structure for storing the user information in our project. I am not sure whether using ldap reference is the right way to do this job. Please give me some suggestion. The detailed situation is: We manage tens of sites. And the sites are orgnized in a tree structure. The requirement is to store the information in the local site (means no central place to store the information for all the sites). It will give the system the maximum flexiblity to expand and when the site is isolated the local site still works well. Sometimes, the local site will need information stored in other sites. I think it is a distribute database architecture. And it reminds me to use the LDAP reference function. So each local site will have a reference to its parent site and some references to its child sites. It gives a logical view of the tree with information for all the sites. I am not sure whether it is possible to do that and whether it has some difficulties to implement it using OpenLDAP. Any suggestion? Thanks, Yang Sun
On Tuesday, 1 May 2007, Mark Mcdonald wrote:
Despite not understanding the architecture completely, it sounds like LDAP will fill your needs.
Have a read of the following man pages to see if it's what you're after:
slapd-ldap slapo-translucent slapo-chain
Of course, LDAP - without any special backends or overlays - was designed to allow this in the first place, via referrals. So, if the software in question follows referrals, and assuming it has (e.g. firewall) access to all the LDAP servers in question, no special tricks should be necessary.
back-dns could even be an option to easily provide referrals.
Using a proxy and/or the chain overlay would ease some aspects of this (e.g. not require any LDAP client to have network access to all LDAP servers), but is not strictly necessary.
Regards, Buchan
openldap-software@openldap.org