To: Bearded One who wrote (26194 ) 3/22/1999 1:01:00 PM From: Rusty Johnson Respond to of 42771
Microsoft: Don't Use NDS For NT Filed at 10:29 a.m. EST By Jeffrey SChwartz for InternetWeek, CMPnet Microsoft and Novell continued their battle last week to earn the loyalty of IT managers for their respective directory technologies. One problem is Microsoft's Active Directory, scheduled to ship with Windows 2000, is not yet available. Bullish analysts said the delay of Active Directory makes NDS a viable alternative, though few debate Active Directory will eventually play a major role. "NDS has a humongous window of opportunity Microsoft has given to them on a platter," said Larry Gauthier, a senior analyst at the Burton Group. Just a few days before the start of Novell's annual BrainShare conference in Salt Lake City this week, where the company will introduce its next-generation directory, NDS v8, Microsoft issued a bulletin advising against the use of NDS for Win NT. Specifically, Microsoft said the existing NDS for NT 2.0, an application that uses redirection technology, could compromise the security of NT by bypassing NT's Security Account Manager (SAM). "We propose a very solid approach is to synchronize between the various directories" including Active Directory and NDS, said Peter Houston, Microsoft's lead product manager. Toward that end, Microsoft last week signed deals with Entevo, Fastlane Communications, and Mission Critical Software to provide their directory management tools and migration software as an alternative to NDS for NT. Novell officials accused Microsoft of hypocrisy. "Redirection has been around for ages; Microsoft uses the same thing [for its gateways]," said Adam Smith, a Novell product manager. Last week, Microsoft also submitted the technical specs for its DirSynch directory synchronization method to the Internet Engineering Task Force in the hopes of incorporating it into the Lightweight Directory Update Protocol extension to the LDAP directory standard. LDUP, designed to support server-based directory synchronization, is a work in progress its participants -- including IBM, Netscape, and Novell -- said they hope to complete this year. Houston said Microsoft intends to support LDUP, though he would not speculate whether that support will be dropped if DirSynch is not used in the LDUP spec. "Our concern is Microsoft will deliver this DirSynch capability and say, 'That's good enough,' but we think they need to continue to be engaged in the LDUP activities," said Gauthier.