Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Open LDAP vs apacheDS

I am working on scalable web application.I am planing to use LDAP for login authentication purpose.I am new to LDAP when I search about it I found two important implementations.1 Open LDAP and 2.Apache DS I search about performance comparison between two but i found very confusing benchmark results from various people.Some benchmark conclusion is performance is relatively same and few are saying openLDAP having greater performance as compare to Apache DS.

like image 670
Prashant Thorat Avatar asked Mar 11 '16 05:03

Prashant Thorat


People also ask

What is difference between LDAP and OpenLDAP?

What Is the Difference Between LDAP vs. OpenLDAP? OpenLDAP is a free, open-source implementation of the LDAP protocol. Because it's a common, free iteration available to anyone, OpenLDAP is sometimes referred to as just “LDAP.” However, it is more than just the protocol; it's light LDAP directory software.

What is OpenLDAP used for?

Open LDAP is an open source LDAP application. It is a Windows LDAP client and admin tool developed for LDAP database control. This tool should allow users to browse, lookup, remove, create and change data that appears on an LDAP server. Open LDAP also allows users to manage passwords and browse by schema.

What are the main difference between OpenLDAP and Microsoft Active Directory?

But what's the difference between the two? LDAP is an open, vendor-agnostic, cross-platform protocol that works with multiple directory services, including AD. AD, in contrast, is Microsoft's proprietary directory service that organizes various IT assets like computers and users.

What is the best LDAP server?

ApacheDS ApacheDS (Apache Directory Studio) is a top directory tooling platform compatible with LDAPv3 (latest LDAP version). It is the most popular LDAP based directory server on the market. ApacheDS is written in Java language, it supports Kerberos 5 and the Change Password Protocol.


2 Answers

There are 4 open source implementations of LDAP directory servers : - OpenLDAP - Apache Directory Server - OpenDJ - Red Hat Directory Server

Since there is no standard for LDAP benchmark, you will always find results that are in favor of the preferred server of the person running them. Regardless, performances are so tied to the scale of the data stored in the server, and the underlying hardware, that you shouldn't be selecting a product based uniquely on past benchmark results.

Go to the four projects, look at the product features, get them and install them, run the same tests on them for your data and load.

OpenDJ for example has tools to generate sample data (very large sets) and run performance testing for authentication, searches, modifications, creation and deletion (authrate, searchrate, modrate, addrate...).

like image 127
Ludovic Poitou Avatar answered Oct 05 '22 02:10

Ludovic Poitou


OpenLDAP and ApacheDS are great solutions that work across many platforms.

OpenLDAP is much more scalable and lightweight, however, keep in mind there are not that many tools for managing LDAP servers. OpenLDAP must be configured via command line using LDIF's. This is repetitive work that you have almost certainly have to have a domain administrator doing.

ApacheDS has a client solution and their config's are separated into XML files. ApacheDS is built on Java and yes you can expect there to be garbage collection.

Both ApacheDS approach scaling and their data backends similarly. In fact, in both cases it's the more manual way of clustering. You cluster for availability or you cluster for performance.

The previous responder mentioned OpenDJ which is not free to use in commercial settings by the way. Their license requires you purchase a license from them to use it commercially.

like image 35
Matt O. Avatar answered Oct 05 '22 02:10

Matt O.