Best Practices for Writing LDAP Aware Apps?

Posted by Cliff on Sunday February 16, 2003 @11:17PM from the seking-proper-coding-suggestions dept.

Saqib Ali asks: "I am in a process of writing a web application, that makes quite a lot of transactions with the LDAP server. I would like to find out, what are the best practices in encrypting the traffic from the web application server to the LDAP server. I understand, I have few choices: SSL, TLS/SASL (supported by SunOne/OpenLDAP), and the traditional STUNNEL. Any ideas, on the best way to provide encryption? . What is the value of 'encrypting everything' and cost of encryption (encryption is process intensive)? I would also like to locally cache the data I receive from the LDAP directory. Are there any solutions for doing that? Or should I just cache the data in a SQL database running locally on the WebApp server?"

1 of 33 comments (clear)

Min score:

Reason:

Sort:

Crossover connections? by Colitis · 2003-02-16 23:47 · Score: 4, Interesting

Where I work we avoided a lot of software complexity (and freed all but one machine from the CPU overhead of encryption) by putting extra NICs in the machines and running unencrypted over crossover cables.

This obviously doesn't scale to large numbers of servers, but it's something to think about for a small implementation.