On Wed, 15 Sep 2010, Wesley Alan Wright wrote:

> Ideally, I suppose, the apps needn't keep their LDAP derived data 
> privately, since they can always look up the latest data with another 
> ldap search. Otherwise, the app would need to perform periodic 
> resynchronizations with LDAP.
> What would you ETS Systems folks prefer? in terms of both security and 
> performance?

I'd much rather not have that data copied elsewhere if possible - just 
re-query LDAP as needed.  Given the scale of our LDAP systems, I wouldn't 
think it would be a performance problem to query every time.

If you can provide the actual query being made by emailing [log in to unmask], we 
can make sure the queries are using appropriate indexes...