This is the blog of a software engineer, specialized in LDAP, directory servers, identity management and open source. Ludovic Poitou is currently Product Management Director for ForgeRock Directory Services, as well as Director of Operations for the ForgeRock France Entity, based in France in the Grenoble area. Outside work, he enjoys photography, music, cycling and skiing with his lovely girls.

15 thoughts on “About

  1. richard bulkley 03 November 2010 / 11:02

    Hi Ludovic,
    How are things for you and your family?

    I was thinking about you the other day as we just bought a new house in a small village called Thames Ditton (opposite Hampton Court Palace). I once took you the an old pub next to the river in the village and the house is just 100m from there.

    We have more room now if you ever want to come and stay!

    All the best, Richard

  2. aatishshah 21 September 2011 / 09:08

    Ludo, thanks for all the blogs on OpenDJ. They are great
    I am testing OpenAM and OpenDJ integration and there is one requirement where I am having multiple OpenDJ instances with different users in each instance. Can a single OpenAM instance be integrated with both the DJ instances to manage the SSO for users in both these repositories

    • Ludo 21 September 2011 / 09:38

      Yes OpenAM can be configured to use multiple User repositories with different users in each OpenDJ instance. The easiest way to achieve that is to use different realms for each user repository. But it’s also possible to achieve that with an authentication chain where a user is first searched in an OpenDJ instance, and then if not found, in the other one.

  3. Brahma Reddy 12 July 2012 / 21:36

    Hi Ludo,

    I recently come across your blogs and they are really good. I was able to understand the internals.

    We have one problem with OpenDJ 2.4.4 Java 1.6.0_24 in our production env. From last 4 month intermidialy both the LDAP servers stops responding. The error logs shows java.lang.OutOfMemoryError:

    java option –xms 1GB -Xmx 2GB .

    • Ludo 16 July 2012 / 14:32

      This looks like a bad tuning of OpenDJ. You may want to enable GC logs to have a better understanding of the memory use of OpenDJ.

      Kind regards,


  4. changux 30 August 2012 / 01:18

    Great blog, very useful to openam administrators.


  5. congngale 24 October 2013 / 05:25


    I just beginner in LDAP and OpenDJ but i meet a problem about performance of OpenDJ. If you have time then email for me to help me understand more about LDAP and especially OpenDJ. My email congngale@gmail.com thanks.

    • Ludo 24 October 2013 / 08:54

      Sorry, but this is not really how open source development works. OpenDJ is a fully documented project and you can find information about tuning for performance in the Administration guide. There are also public mailing lists , where you can post your questions and the community can help (provided the questions contain enough details to be answered).

  6. congngale 30 October 2013 / 04:49

    Hi ludo,

    Again, i just met problem lost “o=test” after ran a couple of script to migrated data on OpenDJ. Do you know how many reason could make it happen ?


  7. hans-georg 01 August 2014 / 08:44

    I have downloaded former times opendj 2.7
    now i see that the last versio you offer is opendj 2.6.

    Why you where no more offering opendj 2.7

    • Ludo 01 August 2014 / 09:24

      OpenDJ 2.7 is the development version of OpenDJ. You can find nightly builds from opendj.forgerock.com.
      The latest ForgeRock product release is OpenDJ 2.6.

  8. jjdurrant 03 November 2014 / 16:57

    Ludo, have you done a OpenDS to AD LDS migration by chance? Looking for best process.

    • Ludo 04 November 2014 / 08:02

      OpenDJ, the product that i develop and manage at ForgeRock is the natural continuation of OpenDS. I’ve never had any request to replace OpenDS with AD LDS. It feels like a regression both from a feature point of view and an open source !

  9. ranjithchandran 03 June 2016 / 13:10

    Hi Ludo, thanks for your excellent blog on forgerock. We are trying OpenDJ replication, and trying to achieve topology like in : https://ludopoitou.com/2013/10/01/opendj-visualizing-the-replication-topology/ – but for a far less number of users.

    For us, our OpenIDM is using OpenDJ back-end and we have synchronization set up using “sync.json” – My question is is there a need to set up live sync between DJ and IDM once DJs start to participate in global replication ? Our main concerns are : It should not be able to provision duplicate users/orgs/groups across regions.

  10. Luszack Guillaume 15 September 2016 / 11:53

    Connaissez vous un expert ou une société que je pourrais contacter pour un audit d’un annuaire openDS qui connaît quelques faiblesses ?

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s