RE: Broken opendkim caching of LDAP result

From: Murray S. Kucherawy <msk_at_cloudmark.com>
Date: Mon, 7 May 2012 22:05:51 +0000

> -----Original Message-----
> From: Quanah Gibson-Mount [mailto:quanah_at_zimbra.com]
> Sent: Monday, May 07, 2012 2:45 PM
> To: Rolf E. Sonneveld; Murray S. Kucherawy
> Cc: opendkim-users_at_lists.opendkim.org
> Subject: Re: Broken opendkim caching of LDAP result
>
> AD's inability to be a real LDAP server doesn't make my point any less
> valid. LDAP is designed for fast, scalable reads.

AD might be why that optional caching layer was added, actually. (I can't remember exactly, and this head cold isn't helping!)

Via a separate compile time option, OpenDKIM can also cache retrieved keys to keep the load on DNS down, rather than going to the resolver each time something signed is presented for verification.

-MSK
Received on Mon May 07 2012 - 22:06:26 PST