140 likes | 242 Views
The Directory of Directories for Higher Education DoD. Michael R Gettes DoD Project Leader, Internet2 Georgetown University. Ken Klingenstein, Project Director, Internet2 Middleware Initiative Chief Technologist, University of Colorado at Boulder. Background Goals and Timeframes
E N D
The Directory of Directories for Higher EducationDoD Michael R Gettes DoD Project Leader, Internet2 Georgetown University Ken Klingenstein, Project Director, Internet2 Middleware Initiative Chief Technologist, University of Colorado at Boulder
Background Goals and Timeframes Directory Architecture Issues Human Interface Issues Implementation Topics
Background • Mace • eduPerson • Michael Gettes • SUN
Goals • Experiment • Questions we seek to Answer • Leverage eduPerson and Campus Directory Deployments • Long-term Service Offering
DoD Architecure • Inputs to DoDHE • Inputs: Local Site View • Central Deposit Service • DoDConfig Directory • Operation • Search Operations • Search Drill Down from a list
Inputs Remote Site Directories Remote Data Sources LDAP Oracle Etc… Search Data Filtering & Submit to CDS DoD Config Central Deposit Systems (CDS)
CDS Inputs: Local Site View Submit final LDIF to CDS using authenticated POST via HTTPS. Local Data Source LDAP Filter LDIF according to local policy. Generate new LDIF for submission. DODHE Generate LDIF Data
Inputs: Why this way? • Standardized input is LDIF • Could be XML but few products generate XML now (01/2001) • Could use Architech as filter and submission mechanism • Site always submits full dataset. No worry of reconciling. Easier site participation in the DoDHE service. • CDS handles reconciliation and controls data processing. Can provide feedback.
Central Deposit Service dc=edu dc=georgetown dc=memphis dc=virginia dc=washington dn: uid=gettes,ou=People,dc=georgetown,dc=edu objectclass: {person, organizationalPerson, inetOrgPerson, eduPerson} cn: Michael Gettes sn: Gettes mail: gettes@georgetown.edu displayName: Michael R Gettes eduPersonPrimaryAffiliation: Employee eduPersonAffiliation: Employee …
DoDConfig Directory dc=edu dc=georgetown dc=memphis dc=virginia dc=washington dn: dc=georgetown,dc=edu objectclass: {organization, domain, referral, orgDoDHE } cn: Georgetown University ref: ldap://directory.georgetown.edu/dc=georgetown,dc=edu dodBase: ldap://cds1.dodhe.internet2.edu/dc=georgetown,dc=edu carnegieClass: Research-1 …
Operation • User search request • Search DoDConfig for Orgs to Scan in dc=edu tree (with do not follow referrals ctl set). Collect dodBase attributes. • Search all directories (remote or CDS, as specified by dodBase) • List results • Drill down (view full entry) follows referral back to home directory by using DN of object in question or uses Chaining ability of iPlanet DS 5 • Display object.
Search Search Operations Remote Site Directories o=University,c=US dc=domain,dc=edu SearchBase = “dc=edu” Filter = (OrgCriteria from Search page) Referrals? No Referrals DoD Config Search using SearchBases From DoDConfig Search No Referrals Results CDS
Drill Down from List From a list of results of a search … A list of results from a search … Remote Site Directories Results o=University,c=US dc=domain,dc=edu Referrals? Follow Referrals Obtains object by DN in home Directory DoD Config Obtain object Follows referral from Ref: attribute (smart-referral) in DoDConfig Directory or use chaining ability of iPlanet DS 5. Display found object in web page CDS