Nobody is allowed to share their custom types on demand, they must first come to us". Another engineer, clearly influenced by Evil(TM), added "Not only do they have to enter just the data that we will allow them to enter on our defined type, should they want new types for their organizations. And another one, clearly influenced by Stalin, demanded, "Ok, but people can add only what's explicitly defined, nobody is allowed to enter new data unless we allow it, no deviations whatsoever". And then, someone else, clearly influenced by object-oriented design and abstract data types, said, "We should have defined types, so people won't forget to add data that's important and everything stays consistent, even across organizations". At this point, we can assume that he shared his drugs with the rest of the people involved and everyone said "YES!". And then, another engineer, who was clearly stoned, said "Yeah, let's have that AND let's have an LDAPS protocol that is just like that but on another port". So, after this kludge, someone reasoned, "Since we now have to handle authentication, we need to use TLS on the same port where we handle the directory access! We wouldn't want authentication without an encrypted channel!". WTF, this was designed for directory access, not for authentication. But then someone else said "Since we added authentication to this protocol, we should use it as the central authority for all authentication purposes in our organizations!".
Ok, maybe it's an acceptable tradeoff, everyone thought. So, we bloated the protocol a bit, and now it's a directory access protocol that also handles authentication. Someone said, "Surely not everyone should access the database! We must add authentication!". What follows is what happened at the IETF headquarters, just after the original idea was presented: Even more, everything is Standard(TM)! Cool, you imagine. This was a system administrator's wet dream: every piece of information and configuration for a user, person, service, computer, and organizational unit, and everything neatly organized and in a single place. So, what's the deal with this PoS? The idea is to access data in a hierarchical storage. Either the oldest one was designed by Cthulhu itself, or the designers were trolling the hell out of ourselves.
It was created as a lightweight replacement for another protocol. LDAP means Lightweight Directory Access Piece-of-Shit-Protocol. I don't know if you really know it, but just to be sure: it's a piece of shit. Thanks, now I know what LDAP is, and I dont even have to read the article!
0 kommentar(er)
