Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Having just started using OpenLDAP to authenticate users across web apps, I'm intrigued by a pattern I'm seeing in the documentation: Most install/config guides seem to (implicitly) recommend running the ldap server on ldap.whatever.org.

As I installed ldap on my VPS, I just thought it'd be simpler to access it all through whatever.org.

Is there any benefit of either approach? Or is it just assumed that the ldap software will run on it's own machine?

share|improve this question
add comment

2 Answers 2

up vote 5 down vote accepted

If you ever wish to separate services into different boxes, you'll want to use subdomains.

Think about what happens when you run LDAP and a web server on mydomain.com and later on you decide to move the web server somewhere else, but LDAP stays in the same box.

share|improve this answer
add comment

It's good practice that services accross a domain are named as follow

protocol.domain.tld

But, that's just good practice. If you prefer to name it mygrandmotherlovesmakingcrepes.caribou.org, and this name resolves to your LDAP server, feel free to do so :)

In fact, if you ldap and your webapps are running locally, you might as well connect to it using ldap://127.0.0.1.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.