<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for The Grimoire</title>
	<atom:link href="http://codex.grimoire.ca/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://codex.grimoire.ca</link>
	<description>Any insufficiently advanced magic is indistinguishable from technology.</description>
	<lastBuildDate>Wed, 18 Jan 2012 20:28:19 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
	<item>
		<title>Comment on Importing OpenSSL certificate/key pairs into Java keystores by Owen</title>
		<link>http://codex.grimoire.ca/2012/01/17/importing-openssl-certificatekey-pairs-into-java-keystores/comment-page-1/#comment-9583</link>
		<dc:creator>Owen</dc:creator>
		<pubDate>Wed, 18 Jan 2012 20:28:19 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=249#comment-9583</guid>
		<description>You&#039;re ahead of me, I still have Apache do the termination. This was for some contractors who wanted to let Glassfish serve directly; the alternative was teaching them to configure an httpd frontend of some sort and frankly, not my problem. :)</description>
		<content:encoded><![CDATA[<p>You&#8217;re ahead of me, I still have Apache do the termination. This was for some contractors who wanted to let Glassfish serve directly; the alternative was teaching them to configure an httpd frontend of some sort and frankly, not my problem. :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Importing OpenSSL certificate/key pairs into Java keystores by David Dossot</title>
		<link>http://codex.grimoire.ca/2012/01/17/importing-openssl-certificatekey-pairs-into-java-keystores/comment-page-1/#comment-9582</link>
		<dc:creator>David Dossot</dc:creator>
		<pubDate>Wed, 18 Jan 2012 19:55:13 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=249#comment-9582</guid>
		<description>For good or bad, I&#039;ve grown an allergy to configuring certificates in JKS. Nowadays I prefer to have Nginx do the SSL termination for me (I know it&#039;s not the fastest for that job) because I prefer to deal with certificates at OS level, not app level.</description>
		<content:encoded><![CDATA[<p>For good or bad, I&#8217;ve grown an allergy to configuring certificates in JKS. Nowadays I prefer to have Nginx do the SSL termination for me (I know it&#8217;s not the fastest for that job) because I prefer to deal with certificates at OS level, not app level.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on LDAP 101: It&#8217;s A Database, Stupid by David Dossot</title>
		<link>http://codex.grimoire.ca/2011/11/25/ldap-101-its-a-database-stupid/comment-page-1/#comment-9297</link>
		<dc:creator>David Dossot</dc:creator>
		<pubDate>Tue, 13 Dec 2011 22:16:10 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=228#comment-9297</guid>
		<description>Any experience/thoughts about Apache Directory or 389 Directory Server? They seem to both support dynamic schema reconfiguration.</description>
		<content:encoded><![CDATA[<p>Any experience/thoughts about Apache Directory or 389 Directory Server? They seem to both support dynamic schema reconfiguration.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on LDAP 101: It&#8217;s A Database, Stupid by Owen</title>
		<link>http://codex.grimoire.ca/2011/11/25/ldap-101-its-a-database-stupid/comment-page-1/#comment-9095</link>
		<dc:creator>Owen</dc:creator>
		<pubDate>Sat, 26 Nov 2011 19:00:36 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=228#comment-9095</guid>
		<description>I&#039;ve actually tried to use LDAP in anger for some of my own data storage needs (specifically, users) and run into aggravating problems that sent me back to other databases. I really want to like LDAP more than I do, but I keep being frustrated by


	Extremely limited transaction support. In particular, no XA support in common implementations. (I don&#039;t think pervasive XA is a good thing, but one data store and one message queue in the same transaction is a common pattern in my code and it works well.)
	Difficulty rolling out custom schemata. The mechanism for adding a new schema is implementation-dependent, and frequently quite invasive (for example, in OpenLDAP you need to modify the server configuration to add a new schema).
	Deeply legacy assumptions embedded in standard schemata. The person/orgPerson/inetOrgPerson schemata, which are used very widely, contain &lt;a href=&quot;http://www.kalzumeus.com/2010/06/17/falsehoods-programmers-believe-about-names/&quot; rel=&quot;nofollow&quot;&gt;most of these assumptions about names&lt;/a&gt;.
	Poor client library support. I took a good run at using Spring-LDAP to handle the authentication backend for something I&#039;m working on, and &lt;em&gt;could not figure out how to delete an attribute&lt;/em&gt;. That, plus the lack of ODirectoryM libraries that really understand things like attribute aliases, makes writing general data-access code against LDAP pretty obnoxious.
</description>
		<content:encoded><![CDATA[<p>I&#8217;ve actually tried to use LDAP in anger for some of my own data storage needs (specifically, users) and run into aggravating problems that sent me back to other databases. I really want to like LDAP more than I do, but I keep being frustrated by</p>
<p>	Extremely limited transaction support. In particular, no XA support in common implementations. (I don&#8217;t think pervasive XA is a good thing, but one data store and one message queue in the same transaction is a common pattern in my code and it works well.)<br />
	Difficulty rolling out custom schemata. The mechanism for adding a new schema is implementation-dependent, and frequently quite invasive (for example, in OpenLDAP you need to modify the server configuration to add a new schema).<br />
	Deeply legacy assumptions embedded in standard schemata. The person/orgPerson/inetOrgPerson schemata, which are used very widely, contain <a href="http://www.kalzumeus.com/2010/06/17/falsehoods-programmers-believe-about-names/" rel="nofollow">most of these assumptions about names</a>.<br />
	Poor client library support. I took a good run at using Spring-LDAP to handle the authentication backend for something I&#8217;m working on, and <em>could not figure out how to delete an attribute</em>. That, plus the lack of ODirectoryM libraries that really understand things like attribute aliases, makes writing general data-access code against LDAP pretty obnoxious.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on LDAP 101: It&#8217;s A Database, Stupid by David Dossot</title>
		<link>http://codex.grimoire.ca/2011/11/25/ldap-101-its-a-database-stupid/comment-page-1/#comment-9076</link>
		<dc:creator>David Dossot</dc:creator>
		<pubDate>Fri, 25 Nov 2011 22:06:40 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=228#comment-9076</guid>
		<description>Thank you for bringing LDAP up.

I wish it would be used more often and I blame myself for not using it every time I have the weakness to create a &quot;user&quot; (or &quot;player&quot;) table in a DB.

LDAP servers are solid and scalable, the protocol itself is versatile enough to support most use cases, so why am I still creating user tables? Why, despite my will to use it, I still don&#039;t do it?

Maybe because the protocol is borderline fuggly and the client libraries out there suck bags? Maybe I&#039;m just lazy and a tainted LDAP aficionado :P</description>
		<content:encoded><![CDATA[<p>Thank you for bringing LDAP up.</p>
<p>I wish it would be used more often and I blame myself for not using it every time I have the weakness to create a &#8220;user&#8221; (or &#8220;player&#8221;) table in a DB.</p>
<p>LDAP servers are solid and scalable, the protocol itself is versatile enough to support most use cases, so why am I still creating user tables? Why, despite my will to use it, I still don&#8217;t do it?</p>
<p>Maybe because the protocol is borderline fuggly and the client libraries out there suck bags? Maybe I&#8217;m just lazy and a tainted LDAP aficionado :P</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Nobody Cares About Your Makefile by Development Cloud Solutions &#124; Electric Cloud</title>
		<link>http://codex.grimoire.ca/2008/10/01/nobody-cares-about-your-makefile/comment-page-1/#comment-8754</link>
		<dc:creator>Development Cloud Solutions &#124; Electric Cloud</dc:creator>
		<pubDate>Thu, 20 Oct 2011 00:11:40 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=28#comment-8754</guid>
		<description>[...] above. This certainly gets the job done, but it has some drawbacks. Owen at The Grimoire has a more thorough exploration of the shortcomings, but basically the problems [...]</description>
		<content:encoded><![CDATA[<p>[...] above. This certainly gets the job done, but it has some drawbacks. Owen at The Grimoire has a more thorough exploration of the shortcomings, but basically the problems [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Juggling Plates in Variable Gravity by Derek Lewis</title>
		<link>http://codex.grimoire.ca/2011/09/19/juggling-plates-in-variable-gravity/comment-page-1/#comment-8371</link>
		<dc:creator>Derek Lewis</dc:creator>
		<pubDate>Mon, 19 Sep 2011 23:19:00 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=201#comment-8371</guid>
		<description>Variable gravity?  Nice pun.  Intentional?
It&#039;s not a very grave matter if you drop cheap plates.  Dropping the fine china plates though is a matter of significant gravity.</description>
		<content:encoded><![CDATA[<p>Variable gravity?  Nice pun.  Intentional?<br />
It&#8217;s not a very grave matter if you drop cheap plates.  Dropping the fine china plates though is a matter of significant gravity.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Abandoning switch In Three (And A Bit) Steps by Jorge</title>
		<link>http://codex.grimoire.ca/2010/07/23/breaking-away-from-switch/comment-page-1/#comment-8148</link>
		<dc:creator>Jorge</dc:creator>
		<pubDate>Thu, 01 Sep 2011 18:00:20 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=163#comment-8148</guid>
		<description>Good article!</description>
		<content:encoded><![CDATA[<p>Good article!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Some Notes on Replicating OpenDirectory to OpenLDAP by Bryan</title>
		<link>http://codex.grimoire.ca/2010/09/18/some-notes-on-replicating-opendirectory-to-openldap/comment-page-1/#comment-6846</link>
		<dc:creator>Bryan</dc:creator>
		<pubDate>Tue, 24 May 2011 17:30:19 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=181#comment-6846</guid>
		<description>Btw. changing olcPasswordHash to {SSHA} works.

Any crypted passwords will be inserted as a SSHA hash

You can even trick the schema by adding a 3rd authAuthority of ;basic; which allows you to have the SSHA password in userPassword and the password server authority for everthing else. (However adding basic breaks the web based password change page that apple includes because their code sucks)</description>
		<content:encoded><![CDATA[<p>Btw. changing olcPasswordHash to {SSHA} works.</p>
<p>Any crypted passwords will be inserted as a SSHA hash</p>
<p>You can even trick the schema by adding a 3rd authAuthority of ;basic; which allows you to have the SSHA password in userPassword and the password server authority for everthing else. (However adding basic breaks the web based password change page that apple includes because their code sucks)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Some Notes on Replicating OpenDirectory to OpenLDAP by alley</title>
		<link>http://codex.grimoire.ca/2010/09/18/some-notes-on-replicating-opendirectory-to-openldap/comment-page-1/#comment-6579</link>
		<dc:creator>alley</dc:creator>
		<pubDate>Mon, 02 May 2011 21:58:11 +0000</pubDate>
		<guid isPermaLink="false">http://codex.grimoire.ca/?p=181#comment-6579</guid>
		<description>danke für den interessanten artikel.</description>
		<content:encoded><![CDATA[<p>danke für den interessanten artikel.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

