Welcome to Base CAMP: Enterprise Directory Deployment Ken Klingenstein, Director, Internet2 Middleware Initiative Copyright Ken Klingenstein This work is the intellectual property of the author. Permission is granted for this material to be shared for non-commercial, educational purposes, provided that this copyright statement appears on the reproduced materials and notice is given that the copying is by permission of the author. To disseminate otherwise or to republish requires written permission from the author.

Base CAMP - February 5-7, Overview Base CAMP Goals Workshop Context A word from our sponsors A word about NMI-EDIT

Base CAMP - February 5-7, Goals of Base CAMP: Enterprise Directory Deployment Overview of deploying enterprise directories –Management Track First Day – Deployment Process –Refer to the Implementation Handout aka Roadmap Second Day – Research middleware and wrap-up –Technical Track First Day – Deployment Process –Refer to the Implementation Handout aka Roadmap Second Day – Special topics and operational issues Third Day – Future uses and Wrap-up

Base CAMP - February 5-7, Goals of Base CAMP: Enterprise Directory Deployment Develop contacts from other institutions implementing middleware Learn about current research Take home ideas to help remove those roadblocks on your campus Benchmark your own implementation against current higher-ed practices

Base CAMP - February 5-7, A Word From Our Sponsors National Science Foundation’s Middleware Initiative (NMI) NMI – Enterprise Desktop Integration Technologies (EDIT) Consortium Internet2 – primary on grant and research EDUCAUSE – primary on outreach Southeastern Universities Research Association (SURA) – primary on NMI Integration Testbed …with support from Sun Microsystems Inc.

Base CAMP - February 5-7, NMI-EDIT: Goals Create a ubiquitous common, persistent and robust core middleware infrastructure for the R&E community Provide tools and services (e.g. registries, bridge PKI components, schemas, root directories) to support inter- institutional and inter-realm collaborations

Base CAMP - February 5-7, NMI-EDIT: Core Middleware Scope Identity and Identifiers – namespaces, identifier crosswalks, real world levels of assurance Authentication – campus technologies and policies, inter-realm interoperability via PKI, Kerberos Directories – enterprise directory services architectures and tools, standard object classes, inter- realm and registry services Authorization – permissions and access controls, delegation, privacy management Integration Activities – common management tools, use of virtual, federated and hierarchical organizations

Base CAMP - February 5-7, A Map of Middleware Land

Base CAMP - February 5-7, NMI-EDIT: Strategic Direction Overall technical direction set by MACE –Middleware Architecture Committee for Education (MACE) –Bob Morgan, University of Washington, Chair –Campus IT architects and representatives from Grids and International Communities Directions set via –NSF and NMI management team –Internet2 Network Planning and Policy Advisory Council –PKI and Directory Technical Advisory Boards –Internet2 members

Base CAMP - February 5-7, Sample NMI-EDIT Process: Directories MACE-DIR Working Group –Prioritize needed materials – Establish subgroups revision of basic documents (LDAP Recipe) new best practices in groups and metadirectories standards development for eduPerson 1.5 and eduOrg 1.0 –Work in enhanced IETF approach: scenarios, requirements, architectures, recommended standards stages –Announce deliverables; start input and conference call review/feedback processes; reconvene work groups as needed Process schedule and requirements –4-6 months for completion, depending on product –6-8 primary contributors –15-50 schools participating

Base CAMP - February 5-7, NMI-EDIT: Participants Higher Ed – leadership institutions, with 50 more campuses represented as members of working groups; readership around 2000 institutions Corporate – (IBM/Metamerge, Microsoft, SUN, Liberty Alliance, DST, MitreTek, Radvision, Polycom, EBSCO, Elsevier, OCLC, Baltimore Technologies) Government – NSF, NIST, NIH, Federal CIO Council International –Terena, JISC, REDIRIS, AARnet, SWITCH

Base CAMP - February 5-7, The pieces fit together… Campus infrastructure – Name space, identifiers, directories – Enterprise authentication and authorization Inter-realm infrastructure – edu object classes – Exchange of attributes Inter-realm Upperware – Grids – Digital libraries – Video

Base CAMP - February 5-7, Middleware as Infrastructure It serves both academic and administrative units It serves both instructional and research missions It must be reliable, scalable, extensible, ubiquitous, and transparent. It must be deployed, which requires real technical, financial and political processes.

Base CAMP - February 5-7, Middleware as Art There is no proven policy path Much depends on local legacy systems Much depends on local legacy people Much of the technology base is being invented as we meet

Base CAMP - February 5-7, Two Uses Cases Middleware-enabled desktop videoconferencing Interrealm sharing of web-based resources