DragonFly BSD
DragonFly kernel List (threaded) for 2006-01
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Re: lookupd-style daemon

From: Ivan Voras <ivoras@xxxxxx>
Date: Fri, 27 Jan 2006 18:44:50 +0100

Eli Green wrote:

Would it be more clever to take advantage of the fact that we have a
persistent daemon that can maintain connections to database servers (I'm
thinking LDAP and SQL here) and cache things in memory, or would it be
in the best interest to be able to load other NSS modules?

Personally I'd rather do the former. The API for writing modules really
shouldn't be that complicated, IMHO.

If I understand you correctly, than "both" would be useful. You'd probably have a configuration file, something like:

source_name=My NSS LDAP server {

source_name=My SQL thingy {

source_name=My passwd file {

(but then again, you could just make a MySQL NSS library/provider and not have two separate cases).

I'm assuming, given the stated goals of the project, that libcaps
automatically provides network-transparent IPC, so the lookup daemon
could be sitting on a remote machine. Is this correct, or should the
daemon itself be able to forward requests to another machine and maybe
cache the results locally?

LDAP itself can be configured to pass requests to other LDAP servers.
There's also a small issue with cache_timeout: if you have local cache_timeout of 30s and configure it to contact another instance of lookupd that also caches it for 30s, could the data get 1 minute stale?

Otherwise, it would be cool, but not terribly useful to have it sit on a separate machine (network bandwith and latency are the reasons why other projects such as Linux and FreeBSD are making their own local-caching nss daemons).

[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]