Question about OpenLDAP integration with JMS

List overview All Threads
Download

newer

older

shadowLastChange can't be read

pcache overlay help

Nick

19 Mar 2013 19 Mar '13

1:42 a.m.

Dear All,

Please tell me, is there any way to integrate OpenLDAP with some JMS service (in particular - Apache ActiveMQ) to make OpenLDAP server post all changes (object creates/upadtes/deletes) to the message bus, and also to receive updates from the message bus?

Best regards Nikolay

Attachments:

attachment.htm (text/html — 336 bytes)

Show replies by date

Nick

20 Mar 20 Mar

4:26 a.m.

New subject: Synchronization of OpenLDAP with other application

Dear All,

I need to synchronize OpenLDAP database changes (create, modify, and delete) with another application, if possible in transactional mode (like with database replication), but, if this not possible, other options can also be considered. Please tell me, what is the best way to do this?

Best regards NIkolay

peter.gietz＠daasi.de

9:46 a.m.

New subject: Synchronization of OpenLDAP with other application

On Wed, 20 Mar 2013 15:26:18 +0400, Nick ngds@mail.ru wrote:

...

Dear All,

I need to synchronize OpenLDAP database changes (create, modify, and delete) with another application, if possible in transactional mode

(like

...

with database replication), but, if this not possible, other options can also be considered. Please tell me, what is the best way to do this?

Best regards NIkolay

Hi,

we use the openLDAP accesslog overlay for this and have SPML based provisioning system listening to it and that then can provision the changes to any target system.

May be such an approach works for you.

Cheers,

Peter

Clément OUDOT

2:57 p.m.

New subject: Synchronization of OpenLDAP with other application

2013/3/20 peter.gietz@daasi.de:

...

On Wed, 20 Mar 2013 15:26:18 +0400, Nick ngds@mail.ru wrote:

...
Dear All,

I need to synchronize OpenLDAP database changes (create, modify, and delete) with another application, if possible in transactional mode

(like

...
with database replication), but, if this not possible, other options can also be considered. Please tell me, what is the best way to do this?

You can have a look to LDAP Synchronization Connector: http://lsc-project.org/

It can use the syncrepl mechanism to transfer modifications on the fly to another LDAP directory or a SQL database.

Clément.

Nick

21 Mar 21 Mar

8:08 a.m.

New subject: Re[2]: Synchronization of OpenLDAP with other application

Hi Peter,

Thanks for the information. Please tell me, how many objects, roughly, you have in the access log, and how often you check the access log for changes? I'm thinking about whether there will be performance issues if I check the access log for changes, for example, every 5 seconds.

Best regards Nikolay

Среда, 20 марта 2013, 17:46 +01:00 от peter.gietz@daasi.de:

...

On Wed, 20 Mar 2013 15:26:18 +0400, Nick < ngds@mail.ru > wrote:

...
Dear All,

I need to synchronize OpenLDAP database changes (create, modify, and delete) with another application, if possible in transactional mode

(like

...
with database replication), but, if this not possible, other options can also be considered. Please tell me, what is the best way to do this?

Best regards NIkolay

Hi,

we use the openLDAP accesslog overlay for this and have SPML based provisioning system listening to it and that then can provision the changes to any target system.

May be such an approach works for you.

Cheers,

Peter

Quanah Gibson-Mount

9:20 a.m.

New subject: Re[2]: Synchronization of OpenLDAP with other application

--On Thursday, March 21, 2013 7:08 PM +0400 Nick ngds@mail.ru wrote:

...

Hi Peter,

Thanks for the information. Please tell me, how many objects, roughly, you have in the access log, and how often you check the access log for changes? I'm thinking about whether there will be performance issues if I check the access log for changes, for example, every 5 seconds.

Make a persistent client.

--Quanah

Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

peter.gietz＠daasi.de

22 Mar 22 Mar

2:01 a.m.

New subject: Re[2]: Synchronization of OpenLDAP with other application

Hi Nikolay, we have such productive for a number of customers. One deployment has these parameters:

* we keep the successful changes for one month, which are 200,000 entries * the synch engine looks for changes every 10 seconds. For this we have reqStart indexed and search for the latest changes. From OpenLDAP point of view fatser cycles are possible without any problem. A server that can handle tenthousands of request per second you can poll the access log as often as you want. So don't fear performance issues.

Cheers,

Peter

On Thu, 21 Mar 2013 19:08:48 +0400, Nick ngds@mail.ru wrote:

...

Hi Peter,

Thanks for the information. Please tell me, how many objects, roughly, you have in the access log, and how often you check the access log for changes? I'm thinking about whether there will be performance issues if

...

check the access log for changes, for example, every 5 seconds.

Best regards Nikolay

Среда, 20 марта 2013, 17:46 +01:00 от : On Wed, 20 Mar 2013 15:26:18 +0400, Nick wrote:

...
Dear All,

I need to synchronize OpenLDAP database changes (create, modify, and delete) with another application, if possible in transactional mode

(like

...
with database replication), but, if this not possible, other options

can

...
also be considered. Please tell me, what is the best way to do this?

Best regards NIkolay

Hi,

we use the openLDAP accesslog overlay for this and have SPML based provisioning system listening to it and that then can provision the changes to any target system.

May be such an approach works for you.

Cheers,

Peter

Links:

[1] http://mailserver.daasi.de/sentmsg?compose&To=ngds@mail.ru

Nick

3:32 a.m.

New subject: Re[4]: Synchronization of OpenLDAP with other application

Hi Quanah,

Do you mean persistent search? If yes - please tell me, is it supported in OpenLDAP?

I checked http://www.openldap.org/devel//cvsweb.cgi/include/ldap.h , and if I search for "2.16.840.1.113730.3.4.7" it says:

/* LDAP Persistent Search Control *//* not implemented in slapd(8) */

Best regards Nikolay

Четверг, 21 марта 2013, 9:20 -07:00 от Quanah Gibson-Mount quanah@zimbra.com:

...

--On Thursday, March 21, 2013 7:08 PM +0400 Nick < ngds@mail.ru > wrote:

...
Hi Peter,

Thanks for the information. Please tell me, how many objects, roughly, you have in the access log, and how often you check the access log for changes? I'm thinking about whether there will be performance issues if I check the access log for changes, for example, every 5 seconds.

Make a persistent client.

--Quanah

--

Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc.

Zimbra :: the leader in open source messaging and collaboration

-- Николай Горшков

Quanah Gibson-Mount

10:15 a.m.

New subject: Re[4]: Synchronization of OpenLDAP with other application

--On Friday, March 22, 2013 2:32 PM +0400 Nick ngds@mail.ru wrote:

...

Hi Quanah,

Do you mean persistent search? If yes - please tell me, is it supported in OpenLDAP?

I checked http://www.openldap.org/devel//cvsweb.cgi/include/ldap.h, and if I search for "2.16.840.1.113730.3.4.7" it says:

I suggest you read up the (delta)-syncrepl documentation, since search & persist is a clearly documented option for it..

I would also note that OpenLDAP stopped using cvs a few years ago. If you're going to look at the online source, use the git repository.

http://www.openldap.org/devel/gitweb.cgi

--Quanah

Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

4263

Age (days ago)

4266

Last active (days ago)

openldap-technical@openldap.org

8 comments

4 participants

tags (0)

participants (4)

Clément OUDOT
Nick
peter.gietz＠daasi.de
Quanah Gibson-Mount