Hi Daniel,
Thanks for the offer, but for us its not necessary. We are a small shop with only 20 people, full blown LDAP sync is more a nice to have thing (because I'm Lazy ).
Announcement
Collapse
No announcement yet.
Searching Information about OX-LDAP & OX-MYSQL
Collapse
X
-
Guest replied
-
By the way it is possible to store the whole userdata in a directory service like OpenLDAP, eDirectory or Active Directory. We already have working enviroments with more than 10.000 users where the userdata are stored into OpenLDAP and synchronized with the OX Server.
At the moment this plugin is not released for the community edition but if you like I can bring you in contact with our partner who developed it.
Best regards,
Daniel
Leave a comment:
-
Guest repliedYou're assuming that everybody already has a ldap service, this may not always be the case - especially not for businesses or organizations <50 users.
Btw. is data replication/clustering with ldap as easy/effective/maintainable as with a rdbms? Serious question.
Try to imagine the other way around - why should anybody who does not have a LDAP, does not want any and does not know how to use it set up one for running a groupware? Just to read contact data from data source A and the rest of the data from data source B? Isn't data synchronization/backup a problem here?
If you have a existing LDAP - you can leave it like it is and use the open-xchange-authentication-ldap plugin to authenticate against your authoritative server without need to reconfigure it or something, this way of integration is more preferable than integrating a existing infrastructure to a groupware server (imho).
/opt/open-xchange/sbin/createuser -c 1 -A oxadmin -P secret -u testuser \
-d "Test User" -g Test -s User -p secret -e testuser@example.com \
--imaplogin testuser --imapserver 127.0.0.1 --smtpserver 127.0.0.1
This is the information I would like OX to get from LDAP; Things like givenname, surname, etc for OX users. Otherwise I have to sync this data between OX and LDAP.
So i'm not proposing to make LDAP mandatory, just to add a way that OX can use all the user information from LDAP.
Leave a comment:
-
It's true that the Fedora directory server is a nice piece of software and LDAP in general is very powerful, yes - but openldap is far more spread through the distributions and we have had some bad experience with openldap on rhel/sles as it was used by OX5. I don't want to start a religious war about where to store user authentication and user data - but it's a matter of fact that it's more common to setup a database than setting up a ldap service. You're assuming that everybody already has a ldap service, this may not always be the case - especially not for businesses or organizations <50 users. I think that nearly every admin has already worked with a database for a webapp, but not everybody has worked with ldap. However, thats just my personal opinion. Remember that OX6 initially started at the hosting market, not at the 100-ppl-inhouse market.
Btw. is data replication/clustering with ldap as easy/effective/maintainable as with a rdbms? Serious question.
Try to imagine the other way around - why should anybody who does not have a LDAP, does not want any and does not know how to use it set up one for running a groupware? Just to read contact data from data source A and the rest of the data from data source B? Isn't data synchronization/backup a problem here?
If you have a existing LDAP - you can leave it like it is and use the open-xchange-authentication-ldap plugin to authenticate against your authoritative server without need to reconfigure it or something, this way of integration is more preferable than integrating a existing infrastructure to a groupware server (imho).
GreetingsLast edited by Martin Heiland; 09-30-2008, 01:21 AM.
Leave a comment:
-
Guest repliedOriginally posted by Martin Braun View PostThe cause why we store user data internally at the OX Database is simple: performance, simplicity and scalability. (open)LDAP is great for authentication but fails for storing large amounts of user data and retrieve them with a good performance.
Im no OpenLDAP specialist, but I do know that directory servers like Fedora Directory Server (The former netscape directory server and now opensource), Novell eDirectory, OpenDS (the opensource successor to Sun DS) and even Microsoft Active Directoy scale to millions and millions of user entries (and retrieve them with good performance ). It is the essence of LDAP.
Originally posted by Martin Braun View PostIt would also add one subsystem to the list of required infrastructure components which means one more system to maintain.
We also encountered some stability problems with openLDAP caused by the default berkelyDB.
Originally posted by Martin Braun View PostLast but not least, administration and maintenance of a LDAP directory service is one science for it's own, it would just increase the administration overhead
BTW: If you want to smack me on my head, im usually also in the #openxchange channel on IRCLast edited by Guest; 09-29-2008, 11:27 PM.
Leave a comment:
-
Hi,
there is a proper working and stable authentication plugin for LDAP available:
The cause why we store user data internally at the OX Database is simple: performance, simplicity and scalability. (open)LDAP is great for authentication but fails for storing large amounts of user data and retrieve them with a good performance. It would also add one subsystem to the list of required infrastructure components which means one more system to maintain. We also encountered some stability problems with openLDAP caused by the default berkelyDB. Last but not least, administration and maintenance of a LDAP directory service is one science for it's own, it would just increase the administration overhead.
Final conclusion: LDAP for authentication, databases for storing user data.
Greetings
Leave a comment:
-
Guest repliedThere seems to some sort of plugin for authenticating against LDAP, Database or plain text files at: http://www.open-xchange.com/wiki/ind...in_description
Haven't attempted to implement such a plugin myself yet - it seems quite experimental currently. I am very interested in ways to allow Hyperion to authenticate as well as store the address book against our existing OpenLDAP server...
Any reason to why Hyperion stores everything internally instead of through OpenLDAP? Are there any ways to get our existing OpenLDAP user to use Open Xchange's directory for authentication?
Leave a comment:
-
Hi,
Originally posted by swetter View PostWhat Kind of Information does OX save/get from/in MySQL-DB? As far as i can see all Groupware-Data is stored there and Hyperion stores user/pwds there. The existence of a configdb leads me to the assumption that some of the config is stored there, too.
The configdb is a central and unique information storage where groupware server(s) get information about storage backends, quota handling, context mapping and so on. It seems to not make sense to keep a seperate database for this at the first look. But when it comes to server clustering and multiple storage backends for different servers (for example), the configdb is the one and only point where all other groupware server get those information. Otherwise it would be redundant and more unflexible to manage.
Originally posted by swetterMails are not stored by OX, but OX is only Client of SMTP/IMAP-Servers?
Originally posted by swetterWhere does OX get User/Passwd from to authenticate itself to SMTP/IMAP-Server?
For example:
Joe Doe logs in to the groupware webinterface as "joe.doe" with password "secret". The OX groupware server now checks the user id mapping for "joe.doe" and reads the field "imapLogin" and "smtpLogin" from the database. Those fields may contain a different username as some E-Mail providers use their very own mailbox name syntax. In our case, the login name for the IMAP and SMTP server is "jdoe@provider.com". The password from the webinterface login is kept untouched and is used in combination with the IMAP/SMTP username stored at the database. In our case, the groupware server will authentificate "joe.doe" as jdoe@provider.com and the entered password.
Originally posted by swetterIs it possible to have a cost-free OX-installation (community edition) that authenticates against ldap without changing the source or not? And if so, where do i have to configure that sort of stuff?
As far as i know there is no LDAP authentification plugin available at a default installaten, neither Community, Express nor Hosted Edition. Those plugins for integrating a 3rd party interface are delivered on request of a customer. I am no LDAP guru but i guess it is possible to add LDAP authentification by minor changes at the sourcecode. It would be nice to see such a plugin one day for the community editon.
Greetings.Last edited by Martin Heiland; 10-06-2007, 11:57 PM.
Leave a comment:
-
Searching Information about OX-LDAP & OX-MYSQL
Hello!
I am searching more Information. Maybe it can be found on the website, but i did not find it in 2 Days of searching the site and the net.
What Kind of Information does OX save/get in/from LDAP? As far as i can see only the Addressbook is stored in LDAP, and as far as i red in the forum OX5 stores User/PWD in LDAP, but Hyperion does not.
What Kind of Information does OX save/get from/in MySQL-DB? As far as i can see all Groupware-Data is stored there and Hyperion stores user/pwds there. The existence of a configdb leads me to the assumption that some of the config is stored there, too.
Mails are not stored by OX, but OX is only Client of SMTP/IMAP-Servers?
Where does OX get User/Passwd from to authenticate itself to SMTP/IMAP-Server? As long as all of these three authenticate against the same backend, OX could save the pwd when logging in in a global Var, but where can i get this and what can i configure there?
The questions reason is one other question:
Is it possible to have a cost-free OX-installation (community edition) that authenticates against ldap without changing the source or not? And if so, where do i have to configure that sort of stuff?
Thank you very much!Tags: None
Leave a comment: