Understanding and Deploying LDAP Directory Services > 25. Case Study: A Large Multinational Enterprise > Deployment |
DeploymentWhile the directory design was being completed and reviewed, HugeCo formed a directory deployment team. The deployment team included all the people who participated in the design process, plus system administrators responsible for the actual rollout and for running the service on a day-to-day basis. An IS employee who had expertise in network monitoring and escalation procedures was also added to the team. Product ChoiceBefore making a final choice of LDAP server software, HugeCo performed an extensive in-house evaluation. After talking to a large number of directory server vendors , HugeCo narrowed its choice to three products: Netscape Directory Server, ISOCOR's Global Directory Server, and OpenDirectory's Dxserver. Evaluation copies of each of the three products were obtained, and each was subjected to a thorough evaluation that involved installing the products, configuring them with HugeCo's custom schema, setting up replication, and conducting performance and scalability testing using custom tools. In the end, the team selected the Netscape Directory Server product for the following reasons:
HugeCo also evaluated several LDAP software development kits (SDKs), including Netscape's C and Java SDKs, a few LDAP Perl modules they found on the Internet, Microsoft's ADSI, and JavaSoft's JNDI. The team found that all these SDKs were functional but decided to focus on Netscape's SDKs and the PerLDAP Perl module for most of its own development projects. Availability of source code for the SDKs was considered a nice bonus, but the main reason the team recommended the Netscape SDKs was because it felt confident that they would work well with the Netscape server products already selected. PilotingA fairly extensive directory service pilot was conducted to prove the directory design, become familiar with the directory software, and determine the level of effort required to roll out and maintain the production service. HugeCo's North America and Asia Pacific regions participated in the pilot, which was conducted over four months. During the pilot, the directory service was deployed in a limited number of physical sites within each region. Figure 25.10 shows the pilot topology. Figure 25.10 HugeCo's directory pilot topology.The directory-enabled applications used in the pilot included the following:
Apart from testing the directory-enabled applications, an important goal of the pilot project was to obtain feedback on the directory service from end users and system administrators. To collect feedback from end users, the directory phonebook was modified halfway through the pilot to occasionally display a simple survey form before providing access to the phonebook itself. Face-to-face and telephone interviews were conducted to collect feedback from system administrators of directory-enabled applications and the directory service. The pilot showed that most of HugeCo's directory design choices were sound. One major redesign was done halfway through the pilot after the team experienced the pain of managing a replication topology that included a large number of partitions. (As discussed earlier in this case study, the directory namespace was redesigned to use a simpler structure based on regions instead of DNS subdomains.) After the pilot project was complete, most of the hardware used was incorporated into the production directory service. A few servers were reserved to form a testbed for future experiments with new applications, new directory server software, and directory design changes. Figure 25.11 shows the testbed topology. Figure 25.11 The HugeCo directory testbed.Normally, none of the servers in the testbed are connected to the production directory service, although sometimes they are temporarily incorporated into the production topology to prepare for software upgrades or obtain data for testing purposes. Analyzing and Reducing CostsHugeCo tried to minimize the ongoing cost for its directory service by saving money in the following ways:
HugeCo has not conducted a thorough analysis of directory costs and has no immediate plans to do so. Going ProductionBecause HugeCo's directory deployment involved a large number of sites, servers, and applications, the production rollout was a complex undertaking. The key to success was to roll out the service in four phases:
In conjunction with the production rollout, training sessions were conducted within each region for IS system administrators and help desk staff. The IS communication group spread the word about the directory service by publishing a series of how-to articles in the employee newsletter and through a "Do you know where your directory entry is?" poster campaign. Posters were placed in every HugeCo building to encourage employees to try the phonebook application and update their own directory entry. The poster campaign raised awareness of the new service and improved the accuracy and completeness of employee information in the directory.
|
Index terms contained in this sectioncase studiesHugeCo deployment 2nd 3rd 4th 5th 6th 7th 8th 9th 10th costs reducing HugeCo case study 2nd deployment HugeCo case study 2nd 3rd 4th 5th 6th 7th 8th 9th 10th piloting 2nd 3rd 4th product choices 2nd 3rd production rollouts 2nd 3rd reducing costs 2nd directories case studies HugeCo 2nd 3rd 4th 5th 6th 7th 8th 9th 10th software HugeCo case study 2nd 3rd feedback piloting HugeCo case study HugeCo case study deployment 2nd 3rd 4th 5th 6th 7th 8th 9th 10th piloting 2nd 3rd 4th product choices 2nd 3rd production rollouts 2nd 3rd reducing costs 2nd piloting HugeCo case study 2nd obtaining feedback testbeds production rollouts HugeCo case study 2nd 3rd reducing costs HugeCo case study 2nd rollouts HugeCo case study 2nd 3rd software directories HugeCo case study 2nd 3rd testbeds piloting HugeCo case study |
2002, O'Reilly & Associates, Inc. |