Embed Size (px)
Citation preview
What is a Virtual LDAP Directory?
Layer of abstraction between backend user and data stores and applications that consume LDAP (or maybe SQL).
Click icon to add picture
For instance…
Maybe more interesting and vendor specific
Contextualized Virtual Views
Let’s take a closer look at that first picture….
So, if I’m actually pulling information from all of those data sources listed in the picture what’s performance going to look like? Are these data stores highly available? Are they running on an old 486 under some guy’s desk (don’t laugh)? Are they even in the same country as my servers?
What if there’s not a common key between these stores?
In Memory and Persistent Cache
In memory cache sounds nice… except we’re talking about a virtual directory. It could be really useful or it could just be a huge waste of system resources. In memory caches work best on systems that have a single version of the truth.
Standalone directory and metadirectory
Persistent Cache … excellent for data that doesn’t change often or does not have a high cost when it’s out of date.
So why do I want one?App developers & vendors can’t agree on what attribute values look like let alone what the DIT should look like. You could use a metadirectory and a separate standalone LDAP directory but that seems like a lot of work.
Directories should be flatAll app users should be under a common OUstreetAddress is the physical addressstreetAddress is the mailing addresstelephoneNumber should only be numerictelephoneNumber should be (xxx) xxx-xxxx My app crashes if uid isn’t the naming attribute but all of my
users are in Active Directory I need SSN but it can’t be the real one
Keep talking… Mergers Users in more than one
user store Prevent duplication of
information (entitlements)
Flexible taxonomy Availability Fast Complete Up to date Everyone else has one
Cheaper than correlating data on a per app basis
Layer of abstraction works both ways
Makes a great PIP if you’re into that sort of thing
(cue dramatic music…) The Cloud!
Really good auditing Single point of security Can write back Sharepoint!!!
Current VendorsRadiant LogicMarket Leader. Lot’s of good stuff. The prettiest diagrams of the lot.Radiantlogic.com
OptimalIDM.Net based for you Java haters.Optimalidm.com
Symlabs Virtual Directory ServerQuest One Identity Solution & Quest MigrationPretty nice and it’s the fastest virtual directory out thereSymblabs.com
Oracle Virtual DirectoryHey, no one ever got fired for buying Oracle.They also have Virtual Directory Lite (SunONE Directory)Oracle.com
Questions and Demo
Our Esteemed MascotLlarry the Lldap Llama
FROM "LLAMA-FRESH" FARMS LTD. NEAR PARAGUAY
