Single sign-on with Linux clients and Active Directory LDAP, Part 1

One project we’ve been working on for a while is single sign-on across all our servers and other services (e.g. SVN repository, a few other things). One thing I wanted to avoid, I guess for mostly religious reasons, was reliance on a Windows instance for any of our production environment. The logical part of my brain knows that people build huge websites with Windows farms and AD, but my gut still doesn’t trust it. So what I wanted to do was setup OpenLDAP as a “slave” to an Active Directory “master” and have all the LDAP info propagate over the slave whenever any changes were made in the master. I’ve done this with DNS – setup Bind as a slave to an AD server and everything basically works as I expect in a Bind-Bind master/slave scenario. Well, it turns out that it doesn’t work like that when it comes to LDAP. Apparently AD doesn’t follow the RFC for LDAP (surprise!) so many things that would be expected to work with OpenLDAP won’t.

Continue reading “Single sign-on with Linux clients and Active Directory LDAP, Part 1”

FiOS it is.

Fios was installed today. Took longer than expected but I guess it went well. FiOS digital voice is pretty good, has one or two niceties that Optimum Voice didn’t (caller ID info in the emails it sends, for instance). The Motorola STBs are way better than the Scientific Atlanta (or whatever) that CV provides… I’m awestruck that when you hit the Channel + button, the channel actually changes.

Cablevision offered to woo me back again but since the service was already installed I said no thanks. They did say they’ll pay the termination fee for me to go back. Interesting… Anyway, Fios’s speeds are pretty good, I got as high as 26/20 on the 25/15 line. The Actiontec router is pretty nice too (model #MI424WR-GEN2).

FiOS speed test to Cablevision's server 2009-12-04
FiOS speed test to Cablevision's server 2009-12-04

… or maybe I AM going with FiOS.

Well, this was unexpected. Verizon is really playing hardball with pricing. When I called this morning to cancel my install appointment, Verizon countered and they offered an extra $30/month discount. I asked for an extra STB for free (I figured all they can do is say no) and while the rep said she couldn’t do that, she did increase the credit to $40/month which would more than cover the cost of the 2nd box. So as of this moment, I’m on for FiOS tomorrow.

Ain’t competition great?

Suffolk County High School Rankings by total SAT scores

I just found this cool site which has SAT scores for high schools all over NYS, but for me the sorting didn’t work, so I copied the stuff into Excel and sorted by total score (and added the % columns). The data are supposedly from the NYS Department of Education for the 2007 graduating class. Found the link via the Long Island City-Data.com forums. Rather than trying to HTMLify the table and make it work inside WordPress, I just decided to print it to PDF, but the summary is below.

Continue reading “Suffolk County High School Rankings by total SAT scores”

Oops… sorry FiOS, I’m sticking with Cablevision.

Well that didn’t take long. I got a call this afternoon from the same Cablevision rep I spoke with to talk about cancelling after I signed up for FiOS. Apparently they received Verizon’s request to port my number over and learned I wasn’t kidding when I said I was going to move to FiOS. And good news! I can now qualify for the Optimum Triple Play again!

Continue reading “Oops… sorry FiOS, I’m sticking with Cablevision.”