LSC - Synchronizing identities @ Loadays 2010

12/04/2010 Jonathan Clarke [email_address]

About the speaker ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],Jim just got fired. Boss asks you to disable his account. Account S , that is. You do it... All done! But what about the account on the company blog? ARGH! Too late. What now!? FIRE THE SYSADMIN!!!?

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object]

About LSC Project ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Goals – functionality ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Goals – usability ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Philosophy ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

LSC synchronization principles ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

LSC synchronization principles ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

LSC synchronization principles ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Defining a synchronization ,[object Object],[object Object],[object Object]

Example: MySQL to OpenLDAP ,[object Object],Field Type Values id INT Auto-increment first_name VARCHAR « Jane » last_name VARCHAR « Doe » marital_status ENUM « Single » / « Married » / « Divorced » salary INT 42000 start_date DATE 1 st October 2009

Example: MySQL to OpenLDAP ,[object Object],[object Object],[object Object],[object Object],SELECT id, first_name AS givenName, last_name AS sn, start_date AS startDate FROM users

Example: MySQL to OpenLDAP ,[object Object],Field Type Values givenName String first_name (ex: « Jane ») sn String last_name (ex: « Doe ») cn String LAST_NAME first_name (ex: « DOE, Jane ») userPassword Binary string Defaults to « CHANGEME » uid String Unique id from MySQL table

Example: MySQL to OpenLDAP ,[object Object],dst.java.naming.provider.url = ldap://localhost/dc=lsc-project,dc=org dst.java.naming.security.authentication = simple dst.java.naming.security.principal = cn=Manager,dc=lsc-project,dc=org dst.java.naming.security.credentials = secret

Example: MySQL to OpenLDAP ,[object Object],[object Object],[object Object],lsc.tasks = MyTask lsc.tasks.MyTask.type = db2ldap lsc.tasks.MyTask.dstService.baseDn = ou=People lsc.tasks.MyTask.dstService.pivotAttrs = uid lsc.tasks.MyTask.dstService.filterAll = (uid=*) lsc.tasks.MyTask.dstService.attrs = uid sn cn givenName userPassword lsc.tasks.MyTask.dstService.filterId = (uid={uid}) lsc.tasks.MyTask.dn = "uid=" + srcBean.getAttributeValueById("uid") + "ou=People"

Example: MySQL to OpenLDAP ,[object Object],lsc.syncoptions.MyTask.default.action = F lsc.syncoptions.MyTask.cn.force_value = srcBean.getAttributeValueById("sn").toUpperCase() + " " + srcBean.getAttributeValueById("givenName") lsc.syncoptions.MyTask.userPassword.action = K lsc.syncoptions.MyTask.userPassword.default_value = SecurityUtils.hash(SecurityUtils.MD5, " CHANGEME ")

Demonstration ,[object Object],[object Object],[object Object],[object Object]

Features overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Features overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Features overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Features overview ,[object Object],[object Object],[object Object],[object Object]

Standards based – Wide support ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Perspectives ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Try it out! Get involved! ,[object Object],[object Object],[object Object]

Try it out! Get involved! ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Thanks for your attention! Any questions? Jonathan Clarke [email_address]

LSC - Synchronizing identities @ Loadays 2010

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (15)

Ähnlich wie LSC - Synchronizing identities @ Loadays 2010

Ähnlich wie LSC - Synchronizing identities @ Loadays 2010 (20)

Mehr von RUDDER

Mehr von RUDDER (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

LSC - Synchronizing identities @ Loadays 2010