- Submissions2015 - lists3.daasi.de

Fwd: [LDAPCON 2015]Paper submission
by Clément OUDOT 30 Jun '15

30 Jun '15

I forward a submission. ---------- Message transféré ---------- De : Alban Meunier <ameunier(a)smartwavesa.com> Date : 28 juin 2015 10:17 Objet : [LDAPCON 2015]Paper submission À : Oudot Clement <clem.oudot(a)gmail.com>, Poitou Ludovic <ludovic.poitou(a)forgerock.com> Salut à tous, je suis à la bourre mais j’ai 2 speech et un lab à proposer pour le LDAPCon 2015 je les mets en PJ car je n’ai pas l’adresse d’envoi, le site web étant aux fraises avec un joli message ce matin A+ -- -------------------------------- Alban MEUNIER Managing Director SmartWave SA Rue Lect 29 1217 MEYRIN - Switzerland Mobile: +41 79 706 20 22 Office: +41 22 783 20 20 Fax: +41 22 783 20 22 http://www.smartwavesa.com Bring value to your business --------------------------------

2 1

Driving Google Apps with LDAP
by Boyd Duffee 28 Jun '15

28 Jun '15

Hi, I'd like to submit the following abstract for a 15 minute talk at the conference. Title Driving Google Apps with LDAP Abstract After signing up to Google Apps for Education, Keele has progressed from using LDAP as our identity management tool to creating data-driven Google Groups and resources for Google Calendar. LDAP acts as the single point of truth for the data that we sync with Google using their GADS tool. It provides many options for selecting entries and populating fields for their most popular applications, yet these data mappings require care. Their idiosyncrasies are not immediately apparent and can affect your LDAP design. We have uncovered issues that necessitated adding fields to our LDAP schema to accommodate Google's data structure. By running Google Groups through GADS, you lose the option of devolving group membership management through Google's web interface. To reduce the workload on the systems group, I wrote tools to streamline managing the groups inside LDAP with an eye towards providing an authenticated web front-end to the group management tools. Written in Perl and built on top of Net::LDAP, these tools take advantage of the built-in test suite for modules, addressing quality issues, and facilitated steady progress in a disruptive environment. Warnings and workflows will be shared to save you from the same pitfalls and runarounds we've worked around. -- Boyd Duffee Most people don't even know what sysadmins do, but trust me, if they all took a lunch break at the same time they wouldn't make it to the deli before you ran out of bullets protecting your canned goods from roving bands of mutants. - p. welch

1 0

Abstract for 45 min conference "FusionDirectory : how to manage the complexity and diversity of an IT infrastructure with an LDAP server."
by Benoit Mortier 28 Jun '15

28 Jun '15

Hello, here is an abstract for a 45 min conference FusionDirectory : how to manage the complexity and diversity of an IT infrastructure with an LDAP server. It starts with the centralization of user information and its different accounts on several systems and goes to deploying Linux or Windows based systems in different environments. There are many applications written in house to manage data stored in your LDAP server, but most of them are difficult to use or poorly written, difficult to maintain and require regular patches to function properly. The FusionDirectory project aims to fill this gap by providing a nice web application that allows you to not only manage your classic LDAP data such as users, groups, services ..etc, but also offer an API to write new plugins to extend its capabilities and match your needs. Integration with other solutions is achieved by providing an interface that works the same way. FusionDirectory is built with a core and a large set of plugins that manage much of the complexity of a today's infrastructure. A list is available here : http://documentation.fusiondirectory.org/en/documentation/available_plugins During the presentation based on real use cases we show where FusionDirectory is after 4 years of existence, where it is used and how it is used to manage the infrastructure, why we choose LDAP as storage and ultimately what we expect for the future. Web site : https://www.fusiondirectory.org/ Biography ======= Benoit Mortier is the Director of OpenSides a Free software Company Based in Belgium founded in 2001. He contracted the free software virus working in computer stores and this will never leave him. It is a Free Software activist, fighting against software patents and giving many lectures during events dedicated to Free Software. Co-Chairman of the System Administration track at Libre sofware meetings from 2007 was 2013. He has been FusionDirectory project leader since 2011. -- Benoit Mortier CEO OpenSides "logiciels libres pour entreprises" : http://www.opensides.eu/ Promouvoir et défendre le Logiciel Libre http://www.april.org/ Main developper in FusionDirectory : http://www.fusiondirectory.org/ Official French representative for OPSI : http://opsi.org/

1 0

[LDAPCON 2015]Paper submission
by Alban Meunier 28 Jun '15

28 Jun '15

Hi dear LDAPCon committee members, In response to the call for paper, I’m please to submit one speech about Active Directory as an LDAP server one speech about a new universal self service password reset solution (plan the official announcement during LDAPCon one workshop on the Power of LDAP ACIs as usual, it’s just a draft of the paper with the proposed agenda Nice reading and selection party ;-) Regards -- -------------------------------- Alban MEUNIER Managing Director SmartWave SA Rue Lect 29 1217 MEYRIN - Switzerland Mobile: +41 79 706 20 22 Office: +41 22 783 20 20 Fax: +41 22 783 20 22 http://www.smartwavesa.com Bring value to your business --------------------------------

1 0

LDAPCON2015 Call for Paper - 45min Talk submission
by Alessandro Avagliano 28 Jun '15

28 Jun '15

Hello all, please find below my submission with Title, Abstract and biography of the author. In case the talk is accepted I'd like a duration of 45min. Title: Identity, Access and Security: Learnings from startups Abstract: Cloud-based web applications currently play a major role in many enterprises' operations, in particular among startups. Providing secure Authentication and Authorization in such a borderless environment is becoming ever more challenging, due to the lack of central control and the huge variety of applications to integrate across multiple service providers. Conversely, security engineers aim at protecting all business-critical services without losing control on their employee data or exposing sensitive information. Outsourcing this complex task, while tempting, poses significant risks in case of third-party breaches and may result in vendor lock-in. Such security requirements, however, can be met by using open standards, by supporting a wide range of authentication protocols, and by deploying solutions based on modular and replaceable open-source components. In this talk we present our real-world case-study, showing how we transitioned from an heterogeneus ecosystem of multiple disconnected entities, to a fully integrated Identity and Access Management architecture. Our deployment, operating on-premises and based on stackable FLOSS components (ie. OpenLDAP, Shibboleth, LinOTP, etc.) encompasses multiple authentication connectors and supports a range of methods for second-factor verification. Besides, such solution allowed us to improve user experience and cover multiple authentication scenarios, ranging from local facilities to cloud platforms such as AWS, Atlassian and Google. Author biography: Alessandro is a Security Engineer at Rocket-Internet. Since 2014, he is tasked with improving the overall security and reliability of Rocket infrastructure, with particular regard to directory services and Identity and Access Management. Previously, he held engineering rols in several Fortune 500 companies, including Oracle, Sun Microsystems, Arantech (now Tektronix) and others. Over the years, Alessandro built a strong knowledge on "Unix-like" and highly-available systems in multiple projects across Europe. He designed modular infrastructures based on several components that included Directory Services (esp. OpenLDAP, Oracle OUD, Microsoft Active Directory), IAM solutions such as Sun Access Manager, Shibboleth, and Apache Syncope, and middlewares for connecting external services (eg. J2EE, desktops and virtualized environments via RADIUS, SAML and more). He is currently active on IDM/IAM and LDAP topics, and prefers to discuss about possible solutions in terms of protocols and standards instead of products. Kind Regards, Alessandro -- Alessandro Avagliano Security Engineer / IAM&IDM Solution Architect Rocket Internet SE Johannisstraße 20 | 10117 Berlin | Germany Mobile: +15737730037 Email: alessandro.avagliano(a)rocket-internet.de | www.rocket-internet.de Management Board: Oliver Samwer (CEO), Peter Kimpel, Alexander Kudlich Chairman of the Supervisory Board: Lorenzo Grabau Registration Court: Amtsgericht Charlottenburg, Registration No.: HRB 165662 B

1 0

submission to call for Paper of ldapcon 2015
by Peter Gietz 28 Jun '15

28 Jun '15

Hi all, Please see my submission "Using LDAP as Data Back-end for XML-Data from Digital Humanities Projects" attached to this mail. Cheers, Peter -- Peter Gietz, CEO DAASI International GmbH Europaplatz 3 D-72072 Tübingen Germany phone: +49 7071 407109-0 fax: +49 7071 407109-9 email: peter.gietz(a)daasi.de web: www.daasi.de Sitz der Gesellschaft: Tübingen Registergericht: Amtsgericht Stuttgart, HRB 382175 Geschäftsleitung: Peter Gietz

1 0

Asynchronous LDAP programming holding Promises !
by Ludovic Poitou 28 Jun '15

28 Jun '15

Title: Asynchronous LDAP programming is full of Promises ! Type: 45 minutes talk/tutorial Abstract: Doing LDAP client side development is not easy. For years, the client libraries haven’t really evolved and most of developers are stacked with JNDI. In the last few years, there’s been a number of new LDAP development libraries : Apache Directory SDK, UnboundID SDK and OpenDJ SDK, all of them build in Java. The OpenDJ SDK has gone under a massive work recently and is now proposing an API based on the “Promises” pattern. In this presentation, we will explain the concept of Promises and why we choose to use this pattern. We will introduce the OpenDJ SDK and its APIs and then we will go through a number of examples to demonstrate how easy it has become to write asynchronous client applications, with less but more readable code. Biography. Ludovic Poitou is senior software engineer, currently working for ForgeRock as Director of ForgeRock France, and Product Manager for OpenDJ, the open source LDAP Directory services for the Java platform. Previously, Ludovic was working for Sun Microsystems as the Architect for the Sun Directory Services products and Community Manager for the OpenDS project. Ludovic Poitou has been speaking at various conferences and blogs regularly on the subject of Identity Management, LDAP Directory Services, Java and open source software. Matthew Swift is Chief Architect at ForgeRock, overseeing the development of several products including OpenDJ, the Open Source LDAP Directory Services in Java, OpenIG, the Open source Identity Gateway. Previously Matthew worked for Sun Microsystem as the Technical Lead for OpenDS, and before at Messaging Direct Ltd (formerly Isode Ltd) where he helped developing products. -- Ludovic Poitou http://ludopoitou.com

2 1

What's new in OpenDJ 3.0
by Ludovic Poitou 28 Jun '15

28 Jun '15

Title: What’s new in OpenDJ 3.0 Type: 45 minutes talk Abstract: OpenDJ 3.0 will be released at the end of the year, probably very shortly after the LDAP Conference. It’s been two years since the last major release and a lot of work has been done on the project. This presentation will describe the new features and benefits of OpenDJ 3.0, covering areas like database backends, replication, client SDK and toolkit, and the REST to LDAP native APIs. We will end the presentation with live demos. Biography. Ludovic Poitou is senior software engineer, currently working for ForgeRock as Director of ForgeRock France, and Product Manager for OpenDJ, the open source LDAP Directory services for the Java platform. Previously, Ludovic was working for Sun Microsystems as the Architect for the Sun Directory Services products and Community Manager for the OpenDS project. Ludovic Poitou has been speaking at various conferences and blogs regularly on the subject of Identity Management, LDAP Directory Services, Java and open source software. Matthew Swift is Chief Architect at ForgeRock, overseeing the development of several products including OpenDJ, the Open Source LDAP Directory Services in Java, OpenIG, the Open source Identity Gateway. Previously Matthew worked for Sun Microsystem as the Technical Lead for OpenDS, and before at Messaging Direct Ltd (formerly Isode Ltd) where he helped developing products. -- Ludovic Poitou http://ludopoitou.com

1 0

LDAPCon 2015 talk proposal
by Matt Todd 28 Jun '15

28 Jun '15

Hi there committee! My name is Matt Todd. I'm a web engineer at GitHub working on both github.com and GitHub Enterprise. Here is my proposal to speak at LDAPCon 2015. I've prepared this talk for the 45 minute duration. If necessary, I can compress to 15 or 5 minutes. Thank you for your consideration: I'd be more than thrilled to come share what we've learned in building LDAP support into our Enterprise product, both around general IAM concerns and in LDAP-specific support and functionality, and the many challenges we encountered. Cheers, Matt The proposal follows: ## Abstract In order to empower the Enterprise world to work like an open source community, GitHub needed to offer a product that could integrate with existing Identity and Access Management systems. Companies using systems like LDAP to manage user accounts across all internal services can't risk introducing services they can't manage centrally. Our solution was to leverage existing open source projects like Ruby's Net::LDAP client library, enabling us to launch our Enterprise product with LDAP support and gain critical customers early on. But scaling proved challenging due to our unfamiliarity with the technology: our approach was generalized to work with the common features of most LDAP directories instead of utilizing available optimizations. As we learned LDAP in depth, we saw the need to improve the library we utilized in order to make substantial improvements to our own integration. We started by tuning the performance of our directory search strategies, fixing bugs, optimizing hotspots, reducing network IO, and instrumenting the internals of Net::LDAP along the way. Early on we saw the opportunity to join the community in helping maintain it. The library itself is nearly a decade old with numerous passing maintainers. My colleague and I joined as maintainers and started fixing broken tests, cleaning up the library, and responding to long-stale issues and pull requests. The community has since seen increased involvement from new contributors in reported bugs and code. In this talk, I will delve deeper into how we optimized our software, detailing our engineering processes, and how we used those methods to make major contributions to the community. I'll be exploring the responsibility we have as members of the community to give back and help maintain projects we depend on. I'll be digging into the hard lessons we learned as we built a product to integrate with numerous supported LDAP services, including how we benchmarked, optimized, and scaled those solutions. ## Biography Matt Todd matt(a)github.com >From consulting to product engineering over the past decade, I've worked as a web engineer on new and legacy systems alike. I currently work at GitHub on our SaaS product and on our GitHub Enterprise offering, maintaining our LDAP, SAML, and other Identity and Access Management integration points. With a focus on product development, I worked with a small team to design and build innovative IAM solutions into GitHub Enterprise, specializing in LDAP support while tuning and optimizing operations.

1 0

OATH-LDAP talk (short or long)
by Michael Ströder 26 Jun '15

26 Jun '15

HI! In another lightning talk (15 min.) I could present an approach for using a LDAP server directly as OATH-HOTP backend using yubikey as 2nd factor for a simple bind request. A current implementation uses OpenLDAP's back-sock used as overlay to intercept the bind requests and pass them to an external process which does the OTP validation. Challenges in a two-tier replication setup up are briefly discussed. If requested a longer talk (45 min.) could shed some lights on security aspects and development of a secure enrollment process and implementation. Ciao, Michael.

1 0