ietf-smime
[Top] [All Lists]

RE: Border directories

2000-05-12 09:01:20

More importantly, the assumption that DSAs are generally
based on RDBMS
backends is not obviously valid - directories and RDBMSs have
different
strengths.  Implementing one as an interface to the other, though
possible, is not likely to win any performance benchmarks.  Perhaps
a few DSA vendors will chime in here with some ground truth on RDBMS
usage and API accessability to 3rd party apps.


There is an assumption that because a DSA is based on a RDBMS,  you can use
RDBMS tools to access the data directly.  This is a false assumption.

Due to the mismatch between Directory requirements and a RDBMS, directory
vendors using a RDBMS generally have to write an interface layer to map data
between directory constructs and RDBMS constructs.   This generally means
the data in the RDBMS is structured to meet the directory needs, and not
other application needs.  As such, using third party RDBMS tools becomes
very difficult - the data is not is an easily-usable form.

If anyone is interested in the technical reasons why a RDBMS is bad news for
directory performance, then there is a white paper " Use of OODB Technology
for Directories" written by an independent expert on our web site
(http://www.nexor.com/info/papers.htm) that describes these problems in
detail.
NEXOR's own DSA is fundamentally not based on a RDBMS due to these problems.

If you want to access data in a Directory, then the only reliable method is
to use Directory APIs, as provided by the directory vendors.   In addition
to understanding the data structure, they also know about application
constraints.  For example access control.   Going direct to a RDBMS is
likely to bypass any application access controls provided by the Directory
vendor.

Colin


<Prev in Thread] Current Thread [Next in Thread>