Clayton Donley makes a very compelling argument that there is significant value is using a virtual directory even if an application only needs to access a single directory. So call me converted on that point.
Also, I should not have said that it’s not that difficult to write vendor independent LDAP code. It can be very difficult depending on what features are used. As Clayton points out there can be very significant differences between vendors in what should be standard behavior. I suspect there is also significant differences between virtual-directories as well, but I haven’t played with them enough to say for sure.
I often fall into the trap of thinking like a COTS software developer (since that is what I am), and forget the legions of in-house enterprise software developers. For COTS developers, writing vendor neutral LDAP code shouldn’t be that hard and should be the goal. For custom application development writing to a virtual directory may make a lot more sense. Especially if your enterprise has already deployed a virtual-directory.
It would be nice if someone maintained a KB of vendor specific LDAP behavior. If anyone knows of one that exists, please let me know.
And yes, IGF is coming. But it’s not available yet even for Java, much less .NET and scripting language developers.