It's always been awful. OpenLDAP by itself is already attrocious and a pain to make work.

I have always been convinced it was on purpose. It's the point where you were supposed to decide paying Redhat is actually a good idea and nowadays it pushes towards a cloud based authentication solution you can integrate.

Realistically, who has any interest in fixing the mess?

▲

xorcist an hour ago | parent | next [-]

> you were supposed to decide paying Redhat

Fwiw, all Red Hat LDAP products are based on 389DS because they thought OpenLDAP had too many pain points or something.

▲

doctorpangloss 4 hours ago | parent | prev [-]

> Realistically, who has any interest in fixing the mess?

Okta is a multi billion dollar company, there is a lot of venture opportunity in this space.

	▲	StopDisinfo910 4 hours ago \| parent [-]
		I think that's actually directly in agreement with what I said. Okta built their own thing on the side without touching the Linux stack and is very happy for you to turn to them. So did Authentik actually.