[Samba] Setting up LDAP Authentification - Tree design/search scope

Götz Reinicke - IT-Koordinator goetz.reinicke at filmakademie.de
Wed Mar 10 05:32:45 MST 2010

Adam Tauno Williams schrieb:
>>> Aside: Although in the end I think you'll find LDAP makes a very crappy
>>> addressbook soluton.
>> Why that? For us e.g the purpose of the addressbook is to have name and
>> e-mail-address available; postal Address, phonenumber etc should not be
>> in our directory.
> (a) No client but Evolution supports write access.   This shortly equals
> unhappy users.
> (b) Clients blithely ignore schema rules [for example "mail" is
> multi-valued]
> (c) How clients map attributes to fields varies widely [and who ever
> wrote the Mozilla addressbook's LDAP support was using hard-drugs at the
> time]
> If you really want nothing more than to expose e-mail addresses it works
> reasonably well.  It is pretty terrible once you go beyond that.

Hi, thanks for sharing your thoughts.

For us the addressbook should be a look-up read only directory. Anything
else is far beyond my project scope.


Götz Reinicke

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reinicke at filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia Hübner
Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium

Prof. Thomas Schadt

More information about the samba mailing list