70 likes | 196 Views
Some issues in databse-directory integration. Shridhar Shukla LDAP-RDBMS integration product group, PSPL. An Example of where LDAP fits. LDAP Application. RDBMS Application. SQL to LDAP (PS EnList). LDAP to SQL (?). LDAP Server. RDBMS Server. Synchronization (PS EnSure).
E N D
Some issues in databse-directory integration Shridhar Shukla LDAP-RDBMS integration product group, PSPL Persistent Systems Private Limited (http://www.pspl.co.in)
An Example of where LDAP fits Persistent Systems Private Limited (http://www.pspl.co.in)
LDAP Application RDBMS Application SQL to LDAP (PS EnList) LDAP to SQL (?) LDAP Server RDBMS Server Synchronization (PS EnSure) Database/LDAP integration Persistent Systems Private Limited (http://www.pspl.co.in)
LDAP to SQL • (&(Objectclass=*)(cn =‘sha*’)) • Option 1: A schema that fits the hierarchy • Unique id, an entry table per objectclass, indexed thin tables (IBM) • Option 2: Represent the hierarchy using foreign relations • mismatch • Option 3: Expose existing schema as LDAP • What will it take? How will write performance get affected? Can there be a general model? Persistent Systems Private Limited (http://www.pspl.co.in)
SQL to LDAP • A structured approach to splitting the query • between the LDAP server and PS EnList • Caching of query results • Consolidation of schema across servers • High-value operators and SQL extensions • Recognize LDAP usage and optimize Persistent Systems Private Limited (http://www.pspl.co.in)
LDAP to DB synchronization DB application Directory application Join Engine 1 5 3 4 Dir Change log DB Source DB 2 Persistent Systems Private Limited (http://www.pspl.co.in)
Synchronization issues • The source DB data model cannot change. • Changes from multiple tables for an entity need to be synchronized with the directory • Large volumes • Selective policies, e.g., password Persistent Systems Private Limited (http://www.pspl.co.in)