Re: [Ldap-dir] DLAP Directorate review request for draft-dawkins-ldapext-subnot

It seems to me we that we have "good enough" content synchronization  
mechanisms in LDAP, but don't have any (formalized) event notification  
mechanism.

For instance, consider an intrusion detection system which wants  
notification of all password change requests, including information  
about the requestor and the outcome of the request.  At present, such  
systems tend to rely on vendor-specific audit logs.

I could support an effort to analysis requirements for event  
notification and, then, build a mechanism specifically designed to met  
these requirements.

What I don't support is designing yet another "content  
synchronization" mechanism.

But what does 3GPP want?  It seems to me they were more after content  
synchronization than event notification.

It's not clear to me whether you are after content synchronization  
than event notification.

-- Kurt

On Nov 8, 2009, at 6:01 PM, Leif Johansson wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Alexey Melnikov wrote:
>> Spencer Dawkins wrote:
>>
>>> Hi, LDAP Directorate,
>>
>
> <snip>
>
> I seem to recall that I brought up change-notification as an idea for
> new work we might take on in LDAP-space during the last MPLS IETF (?)
> LDAP bar-BOF... (I remember it was darned cold).
>
> I think the response I got from most LDAP server implementors was "yes
> but why" :-)
>
> The problem seems to be that it is difficult to tell where "simple
> notification" ends and "replication" begins and history tells us that
> the latter has been problematic for the IETF.
>
> Historically lots of people have played tricks with OpenLDAP/umich
> LDAP replication logs in order to achieve simple change notification
> for LDAP and imo that tells me that there _should_ be enough interest
> in some kind of work in this area even from LDAP server vendors!
>
> I have not opinion (yet) about this draft though.
>
> 	Cheers Leif
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkr3d+0ACgkQ8Jx8FtbMZnfdOACbBw0eAE+XlZkgRZ66+j6BOuhh
> dA8An1t1r0ZbbAEuv/BVE9OWnnifA4d3
> =c5nm
> -----END PGP SIGNATURE-----
> _______________________________________________
> Ldap-dir mailing list
> Ldap-dir@ietf.org
> https://www.ietf.org/mailman/listinfo/ldap-dir