Re: Authentication schemes

2001-04-28 Thread Stephane Bortzmeyer
On Sat, Apr 28, 2001 at 09:00:54AM +0200, Russell Coker <[EMAIL PROTECTED]> wrote a message of 49 lines which said: > How do you implement ACLs per-branch? It seems to me that OpenLDAP only > supports this through regular expressions which are very slow. If you have I did not try it yet bu

Re: Authentication schemes

2001-04-28 Thread Stephane Bortzmeyer
On Sat, Apr 28, 2001 at 09:00:54AM +0200, Russell Coker <[EMAIL PROTECTED]> wrote a message of 49 lines which said: > How do you implement ACLs per-branch? It seems to me that OpenLDAP only > supports this through regular expressions which are very slow. If you have I did not try it yet b

Re: Authentication schemes

2001-04-28 Thread Russell Coker
On Friday 27 April 2001 16:29, Stephane Bortzmeyer wrote: > > - Ability for owners of our hosted domains to administer > > their own user databases. > > Easy with LDAP, where ACLs are per-branch. But it means you need to > study your scheme: we plan to have a branch per group of customers (we > d

Re: Authentication schemes

2001-04-28 Thread Russell Coker
On Friday 27 April 2001 16:29, Stephane Bortzmeyer wrote: > > - Ability for owners of our hosted domains to administer > > their own user databases. > > Easy with LDAP, where ACLs are per-branch. But it means you need to > study your scheme: we plan to have a branch per group of customers (we >

Re: Authentication schemes

2001-04-27 Thread Stephane Bortzmeyer
On Wed, Apr 25, 2001 at 10:15:29AM -0600, elyograg <[EMAIL PROTECTED]> wrote a message of 57 lines which said: > Some goals for whatever we implement: We have almost exactly the same goals. We seem more advanced (we have an experimental LDAP testbed) but it is not yet in production so take it

Re: Authentication schemes

2001-04-27 Thread Stephane Bortzmeyer
On Wed, Apr 25, 2001 at 10:15:29AM -0600, elyograg <[EMAIL PROTECTED]> wrote a message of 57 lines which said: > Some goals for whatever we implement: We have almost exactly the same goals. We seem more advanced (we have an experimental LDAP testbed) but it is not yet in production so take it

Re: Authentication schemes

2001-04-25 Thread Gavin Hamill
> I had thought to use qmail, vpopmail, courier-imap to handle the email > services. If there are other choices that are either easier to > implement or offer advantages I haven't thought of, please let me > know. I can't comment on LDAP, but you may like to consider using MySQL in some capacity.

Authentication schemes

2001-04-25 Thread elyograg
Everyone, These LDAP questions have sparked me to ask something I've been pondering for a while. Currently we're using NIS. Aside from potential security issues, this solution is inelegant and has led to problems that wouldn't be experienced with standard unix authentication. Our mail server is

Authentication schemes

2001-04-25 Thread elyograg
Everyone, These LDAP questions have sparked me to ask something I've been pondering for a while. Currently we're using NIS. Aside from potential security issues, this solution is inelegant and has led to problems that wouldn't be experienced with standard unix authentication. Our mail server i

Re: Authentication schemes

2001-04-25 Thread Gavin Hamill
> I had thought to use qmail, vpopmail, courier-imap to handle the email > services. If there are other choices that are either easier to > implement or offer advantages I haven't thought of, please let me > know. I can't comment on LDAP, but you may like to consider using MySQL in some capacity