Juni 2015 - Submissions2015

OATH-LDAP talk (short or long)
by Michael Ströder 26 Jun '15

26 Jun '15

HI! In another lightning talk (15 min.) I could present an approach for using a LDAP server directly as OATH-HOTP backend using yubikey as 2nd factor for a simple bind request. A current implementation uses OpenLDAP's back-sock used as overlay to intercept the bind requests and pass them to an external process which does the OTP validation. Challenges in a two-tier replication setup up are briefly discussed. If requested a longer talk (45 min.) could shed some lights on security aspects and development of a secure enrollment process and implementation. Ciao, Michael.

1 0

ApacheDS, 10+ years in the making
by Emmanuel Lécharny 26 Jun '15

26 Jun '15

Apache Directory Server has been accepted in the Apache incubator in 2003, and as a Top Level project at the end of 2004. It's more than 10 years of intense work, during which the project spawned many other sub-projects : - ApacheDS - Apache LDAP API - Apache Directory Studio - Apache Mavibot - Apache eSCIMo - Apache Fortress - Apache Kerby Tens of contributors have worked hand in hand to implement a valuable set of tools which benefit the community of developpers and users at large. With hundred of thousands of downloads of ApacheDS since its first release, and more than a million of Studio downloads, the Apache Directory project has become an important player in this area. This presentation will expose the story of this project, its current status and the future as we can foresee it. Emmanuel Lécharny

1 0

LDAPCon 2015 talk submissions
by HAMANO Tsukasa 25 Jun '15

25 Jun '15

Hi, LDAPCon committee I want to talk LDAPCon 2015. Please read through the paper. Paper: hamano-paper.pdf LaTeX Source: hamano-paper.zip Regards, HAMANO -- Open Source Solution Technology Corporation HAMANO Tsukasa <hamano(a)osstech.co.jp> fingerprint = 2285 2111 6D34 3816 3C2E A5B9 16BE D101 6069 BE55

1 0

talk on ldapcon2015
by Ludwig Krispenz 24 Jun '15

24 Jun '15

Hello, we want to submit a 45 minute talk on "Innovative replication management in FreeIPA". Abstract and speaker info attached. Regads, Ludwig

2 1

Submission for 45 minute talk LDAPCon 2015
by Christian Hollstein 24 Jun '15

24 Jun '15

Hello together! Please see below my submission abstract for a 45 minute talk. Improvements of LDAP protocol and transaction protocol The talk focuses on two fields: * Asynchronous request mode. Servers receiving asynchronous request bundles have to send an immediate response for every request because they do not know, whether the client synchronously waits for a response or will continue sending requests asynchronously. Not sending it could create a deadlock if the client is in synchronous mode. You can enforce shortest response time with TCP_NODELAY (disable Nagle). Then you have a bad TCP packet utilization. In particular LDAP responses are very short (except for search results), tending to waste most of the available packet size. Or you have the TCP Nagle algorithm enabled, have efficient packet utilization but bad response times. A solution for this is the LDAP queue length control issued by the client and telling the server how many responses are expected. The server can then send all responses in just a single TCP packet despite TCP_NODELAY enabled. This leads to a two sided agreement about the length of the asynchronous queue and optimized usage of TCP packets. * RFC 5805 improvements. The specification requires an extended request / response sequence for the transaction begin. Because of the server generated transaction identifier (TID) this communication must be synchronous and completed before the client starts sending the transactional requests. In environments where client requests travel a long distance the synchronous transaction begin is a throughput delimiter. Instead clients could also issue a TID on their own, omit the transaction begin extended request / response and use their TID with the usual transaction control. The server could detect the begin of a transaction with the first transaction control arriving. As long as it separates different client sessions by other means (TCP socket number, server side session ID, client credentials, ...) than the TID it will not puzzle different parallel transactions. Next thing: Once in transaction the server needs no reminder about this fact. The client may omit the transaction control for all requests (except the first one) that are part of the transaction. Instead it could send a "not part of transaction control" for those requests that should be handled outside of the transaction. Instead of flagging transaction membership for the majority of requests it flags non - membership for a small minority of requests. This saves network bandwidth because it avoids the redundant transmission of the same transaction control with every request. The improvements do not violate the ACID paradigm. The transaction end sequence is still needed and not affected. The server may advertise support for this extension by means of "supportedExtension" in the root object. It detects client side agreement to the changed protocol by receiving a request with transaction control without having received an extended transaction begin request before. The presentation visualizes the mentioned problems and the proposed solutions by means of graphical sequence diagrams surrounded by written explanations. Further it contains graphs of experimental verifications of the throughput improvements. The experiments are carried out once in the Amazon cloud using intercontinental connections with long latency and once using the same equipment locally within the same sub net. Biography My name is Christian Hollstein. I am the CEO and founder of TeraCortex, a start up company developing LDAP technology since end of 2012. Our main product is DVTDS, a high speed LDAP directory server. I presented the server already at the LDAPCon 2013 in Paris. This talk is not going to focus on this product. Instead it is aiming to share some of the things that make the server so fast. From 2006 I worked more than six years as LDAP data model designer for T-Mobile / DTAG mobile subscriber management. I was responsible for some of the main components (HLR / LTE) as well as for a number of mass data migrations in a distributed directory of 100 servers. Before T-Mobile I spent my professional life in various long term projects in DTAG and Siemens, most time as developer and / or data base and system administrator. Since 1985 I hold a degree in communications engineering from Fachhochschule Osnabrück, Germany. Best regards Christian Hollstein -- Christian Hollstein, CEO TeraCortex GmbH, HRB 208395 Hopfenbrede 2 D-49179 Ostercappeln, Germany Phone: 0049 5473 9933

1 0

Proposal for a 15 minute talk on the asynchronous meta back-end
by Nadezhda Ivanova 23 Jun '15

23 Jun '15

Dear Members of the LDAPCon Programme Committee, Attached is my proposal for a short (15 minutes) talk on the new asynchronous meta backend for OpenLDAP that we at Symas have been working on. As it will be contributed to the OpenLDAP project, it may be of interest to the attendees to get familiar with its capabilities. Best Regards, Nadezhda Ivanova Software Engineer at Symas Corporation

1 0

LDAPCon 2015
by Janis Young 23 Jun '15

23 Jun '15

Hi , I see that you have an upcoming event LDAPCon 2015. Would you be interested in reaching Delegates, Attendees, Visitors, Exhibitors, Buyers from our accurate database solution? Data includes: Contact name, Company Name, Company URL, Title, Physical Address, verified Phone Number, Fax Number, Industry, Revenue Size, Employee size and permission based opt-in email addresses etc. Let me know your target market (Industries, Titles and Geography) so that I would be glad to send you more information based on it. Awaiting your response. Regards, Janis Young|Business Development Executive | Phone: +1 702 331 8349 US Data - European Data - Asia Pacific Data - Email Append - Data Append - Technology Specific Data - Email Marketing. Note : To "Unsubscribe" mention the same in the subject line.

1 0

Your submissions for LDAPCon
by Andrew Findlay 23 Jun '15

23 Jun '15

Hi Amita You sent two submissions for the LDAPCon conference. I forgot to ask whether they are intended as conference papers or tutorials. The first 389 talk certainly looks more tutorial than paper. What are your thoughts on this, and how long would the 389 talk take if you did present it as a tutorial? Thanks Andrew -- ----------------------------------------------------------------------- | From Andrew Findlay, Skills 1st Ltd | | Consultant in large-scale systems, networks, and directory services | | http://www.skills-1st.co.uk/ +44 1628 782565 | -----------------------------------------------------------------------

2 2

*****SPAM***** Re:if you have Federal StudentL.....
by Freddy Colbert 19 Jun '15

19 Jun '15

Spam detection software, running on the system "mailserver", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Hello, If you have Federal StudentLoans, you may qualify for any of the studentloan forgiveness programs. Call 888-634-9403 to see which program is best for you. [...] Content analysis details: (8.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [115.221.54.90 listed in bl.score.senderscore.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [115.221.54.90 listed in psbl.surriel.com] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [115.221.54.90 listed in bb.barracudacentral.org] 0.1 MISSING_MID Missing Message-Id: header 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 1.4 MISSING_DATE Missing Date: header

1 0

*****SPAM***** Turn Your PC Into A Satellite TV Instantly + Father's Day Gift
by Gadget Advisor 18 Jun '15

18 Jun '15

Spam detection software, running on the system "mailserver", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Having trouble viewing this email? Click here to view online version Unlock 5000+ Satellite TV Channels & HD Movies On Your PC Instantly Your PC is ready to be turned into a Super TV in 2 minutes! [...] Content analysis details: (10.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [115.221.63.241 listed in psbl.surriel.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: wwwbestzips.com] 1.7 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist [URIs: bestzips.com] 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: bestzips.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 MISSING_MID Missing Message-Id: header 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 1.4 MISSING_DATE Missing Date: header The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0