Whada #yapcasia 2011

whada

YAPC::Asia 20112011/10/15tagomoris

2011年10月15日土曜日

2010/08～ livedoor

System Administration GroupDevelop Support Group



what's WADA ?


WADA Pass(和田峠)

•和田峠（わだとうげ）は東京都八王子市から神奈川県相模原市緑区（旧藤野町）の間にある、山梨県道・神奈川県道・東京都道521号上野原八王子線（陣馬街道）の峠。標高690m。全面舗装である。 (from wikipedia)

• http://ja.wikipedia.org/wiki/%E5%92%8C%E7%94%B0%E5%B3%A0_(%E6%9D%B1%E4%BA%AC%E9%83%BD%E3%83%BB%E7%A5%9E%E5%A5%88%E5%B7%9D%E7%9C%8C)


http://ja.wikipedia.org/wiki/%E6%9D%B1%E4%BA%AC%E9%83%BD

http://ja.wikipedia.org/wiki/%E6%9D%B1%E4%BA%AC%E9%83%BD

http://ja.wikipedia.org/wiki/%E5%85%AB%E7%8E%8B%E5%AD%90%E5%B8%82

http://ja.wikipedia.org/wiki/%E5%85%AB%E7%8E%8B%E5%AD%90%E5%B8%82

http://ja.wikipedia.org/wiki/%E7%A5%9E%E5%A5%88%E5%B7%9D%E7%9C%8C

http://ja.wikipedia.org/wiki/%E7%A5%9E%E5%A5%88%E5%B7%9D%E7%9C%8C

http://ja.wikipedia.org/wiki/%E7%9B%B8%E6%A8%A1%E5%8E%9F%E5%B8%82

http://ja.wikipedia.org/wiki/%E7%9B%B8%E6%A8%A1%E5%8E%9F%E5%B8%82

http://ja.wikipedia.org/wiki/%E7%B7%91%E5%8C%BA_(%E7%9B%B8%E6%A8%A1%E5%8E%9F%E5%B8%82)

http://ja.wikipedia.org/wiki/%E7%B7%91%E5%8C%BA_(%E7%9B%B8%E6%A8%A1%E5%8E%9F%E5%B8%82)

http://ja.wikipedia.org/wiki/%E8%97%A4%E9%87%8E%E7%94%BA

http://ja.wikipedia.org/wiki/%E8%97%A4%E9%87%8E%E7%94%BA

http://ja.wikipedia.org/wiki/%E5%B1%B1%E6%A2%A8%E7%9C%8C%E9%81%93%E3%83%BB%E7%A5%9E%E5%A5%88%E5%B7%9D%E7%9C%8C%E9%81%93%E3%83%BB%E6%9D%B1%E4%BA%AC%E9%83%BD%E9%81%93521%E5%8F%B7%E4%B8%8A%E9%87%8E%E5%8E%9F%E5%85%AB%E7%8E%8B%E5%AD%90%E7%B7%9A




http://ja.wikipedia.org/wiki/%E9%99%A3%E9%A6%AC%E8%A1%97%E9%81%93

http://ja.wikipedia.org/wiki/%E9%99%A3%E9%A6%AC%E8%A1%97%E9%81%93

http://ja.wikipedia.org/wiki/%E5%B3%A0

http://ja.wikipedia.org/wiki/%E5%B3%A0

http://ja.wikipedia.org/wiki/%E9%AB%98%E3%81%95

http://ja.wikipedia.org/wiki/%E9%AB%98%E3%81%95

http://ja.wikipedia.org/wiki/%E5%92%8C%E7%94%B0%E5%B3%A0_(%E6%9D%B1%E4%BA%AC%E9%83%BD%E3%83%BB%E7%A5%9E%E5%A5%88%E5%B7%9D%E7%9C%8C)






what's whada ?


whada'Whada Hits on the Advanced

Dominant Authentication.'

Multi-Protocol

Authentication/Authorization

Tool


whada

Multi-Protocol

Authentication/Authorization

Tool

(Now, LDAP only... )


Why whada ? (1)

Many internal web services requires authentication/authorization.

Authentication per services:

chaos

management worry

poor UI


Why whada ? (2)

Password dictionary is very sensitive and dangerous:

new commers

retired employees

password changes


Why NOT ActiveDirectory ?

Managed by personnel department...

We cannot :

change data structures

add attirubutes

normalize values (!)

add ACL rule (!)


Why whada ? (3)

We want to:

add/drop new privilege definitions

add/drop permission to/from anyone at anytime

ignore password management

use web centric authentication protocols


whadaauthorization data source:

by whada privilege store

authentication data source:

external data source (ex: LDAP)

client access protocol:

LDAP (OpenID/OAuth comming soon!)

https://github.com/tagomoris/whada




whada data

Account: Account Name

Privilege: Label for Authorization

(ex: WHADA, BLOG, BLOG+ADMIN, ...)



slapd perl backend

Backend module runs in

OpenLDAP Server (slapd) process

specified Perl Module.

database perlsuffix "dc=wada,dc=intranet"perlModulePath /root/whada/libperlModule Whada::SlapdBackendHandler



What i should do next ?

OpenID / OAuth

Improved Admin UI

Other password data source?

(NIS? RDBMS?)

Performance?


Thank you!


Technology

Whada #yapcasia 2011