On Tuesday, 25 בDecember 2007 21:54, Shachar Shemesh wrote: > There is one thing that everyone in this discussion seem to have missed > so far, and that is that AD *is* LDAP. > > Ariel Biener wrote: > > Well, I wouldn't chose any of the above in the way it is described. I > > believe that MS AD is the best tool to use for Windows environment, LDAP > > is the best tool for a Linux environment > > Assuming that is the case (open to discussions), then open an AD server > and use it as an LDAP server for the non-Windows machines.
Sorry, despite MSs claim that their directory server is an implementation of LDAPv3, I find it often missing, non-standard and minimalist for such a claim. Given the choice (and I was actually given this choice when I had to chose which directory server to go for @TAU), I left AD to do what it is good at, that is, management and authentication in a windows based environment, and I used a directory that is the most proven, oldest, and most extensible in the industry. It's called eDirectory. Sun's directory server is also an option. That are also others, which are not bad. MS is definetly not there, they came in late and have quite some catching up to do. --Ariel -- Ariel Biener e-mail: [EMAIL PROTECTED] PGP: http://www.tau.ac.il/~ariel/pgp.html ================================================================To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]