Re: Oracle OpenLDAP PPolicy ppolicy and the hierarchy

Arthur de Jong wrote:

You can cache things, put them in a local database and use something other than LDAP search queries to search the data but that comes at a price. Cache lookups have to take into account the lifetime of cached entries and handle changes in LDAP gracefully (e.g. change uid of an attribute of a cached entry). In general, caching is difficult to get right and takes extra resources.

Yes, caching is difficult. But it's something you have to get done right anyway.

Ciao, Michael.