80 likes | 140 Views
“Strawperson” NIH Directory DIT Design. NIH AMG Technical Subcommittee. Introduction. Some objects to be represented: persons - organizations groups - places roles - services devices - certificates Focus initially on: persons organizations roles
E N D
“Strawperson” NIH DirectoryDIT Design NIH AMG Technical Subcommittee DIT Design--Draft #3
Introduction • Some objects to be represented: • persons - organizations • groups - places • roles - services • devices - certificates • Focus initially on: • persons • organizations • roles • groups (for directory access control and management) DIT Design--Draft #3
Introduction (Continued) • DIT must support: • object addressing • interactive browsing (e.g., moving around DIT and listing contents) • LDAP client searching (e.g., scope, search bases) • DIT design strategy: • Use flat namespace to provide stable DNs for addressing • Construct deep views of flat namespace to support browsing and searching DIT Design--Draft #3
NIH, US NCI people people people Baltimore = deep namespace = flat namespace Flat + Deep View DIT geographic MD NC groups people ... CIT Bethesda bldgs 10 people = view namespace = alias = stable namespace = organizational role entry DIT Design--Draft #3
NIH Organizational Role • Objectclass: nihOrganizationalRole • Entry describes a role or position within in organization unit (including phone, addresses, etc.) • Roles and positions are put in context with respect to placement of entry in DIT. • Can be used for NIH “green pages” construction. • Searching for objectclass=nihOrganizationalRole at one particular organizational unit level can return all roles. • Allows one person to have multiple representations of attributes (e..g, phone #, address, etc.) DIT Design--Draft #3
NIH Organizational Role Example o=National Institutes of Health ou=National Cancer Institute ou=Division of Basic Sciences ou=Varmus Lab cn=Chief objectclass = nihOrganizationalRole cn = Chief telephoneNumber = +1 301 496 7940 buildingName = 49 roomNumber = 4A56 roleOccupant = uniqueIdentifier=001-111-1111, ou=people, o=NIH, c=US ou=people uniqueIdentifier=001-111-1111 objectclass = nihInetOrgPerson o = NIH uniqueIdentifier = 011-111-1111 c = US cn = Harold E Varmus givenName = Harold sn = Varmus personalTitle = Dr telephoneNumber = +1 301 496 2433 buildingNumber = 1 roomNumber = 126 (Note differing telephone number, building/room values.) DIT Design--Draft #3
Flat + Deep View DIT Design • Organizational view constructed from: • SAC codes • Additional IC-defined organizations • All nihPerson aliases at leaves of DIT • Models current NIH Telephone Directory: • 1 entry per person in “white pages” • Multiple roles represented in “green pages” • Need other top-level directories for “yellow pages”, groups, applications, archive ... DIT Design--Draft #3
DIT Design Issues • RDNs of nihPerson Objects • uniqueIdentifier • e.g. “001-011-3232” • DN never changes • Meaningless to people who see DNs • CN % uniqueIdentifier • e.g. “Smith, Mary % 001-011-3232” • DN may change • More meaningful representation of person’s name DIT Design--Draft #3