2. Information Technologies Jeremy Mortis 1 hi LDAP The Online Directory

3. Information Technologies Jeremy Mortis 2 hi LDAP What is it What do we use it for How is it loaded How to use it Current challenges Futures

4. Information Technologies Jeremy Mortis 3 hi What is LDAP? Our web-based directory of students, faculty, and staff

5. Information Technologies Jeremy Mortis 4 hi What is LDAP? L ightweight D irectory A ccess P rotocol

6. Information Technologies Jeremy Mortis 5 hi What is LDAP? An object database An access protocol Based on X.500/DAP Optimized for searching High availability

7. Information Technologies Jeremy Mortis 6 hi LDAP Usage at U of C Campus E-mail directory Authentication & authorization > Web > Calendar > News

8. Information Technologies Jeremy Mortis 7 hi Example Uses Directory search www.ucalgary.ca/directory Netscape Address Book Restricting web content https://www.ucalgary.ca/it/SMG/minutes

9. Information Technologies Jeremy Mortis 8 hi LDAP Structure o=ucalgary.ca ou=People uid=twhite directory.ucalgary.ca cn=Administrators

10. Information Technologies Jeremy Mortis 9 hi Objectclass: uofcperson dn: uid=twhite,ou=People,o=ucalgary.ca sn: White givennames:Terrance mail:twhite@ucalgary.ca mail:theprez@ucalgary.ca department:President’s Office LDAP Objects

11. Information Technologies Jeremy Mortis 10 hi Objectclass: groupofuniquenames dn: cn=Administrators,o=ucalgary.ca owner: uid=kozlowsk,ou=... uniquemember:uid=kozlowsk,ou=… uniquemember: uid=rogjohns,ou=… uniquemember:uid=admin,ou=... LDAP Objects

12. Information Technologies Jeremy Mortis 11 hi LDAP Objects Distinguished name e.g. uid=twhite,ou=people,o=ucalgary.ca Attributes can be inherited Values can occur multiple times

13. Information Technologies Jeremy Mortis 12 hi Available Attributes uid IT username sn Surname from UCID system officialnameGiven name from UCID system givenname Preferred given name cnCommon name (givenname + sn)

14. Information Technologies Jeremy Mortis 13 hi Available Attributes faculty(for students) departmentnumber (e.g. U4705) departmentDepartment Name telephonenumber facsimiletelephonenumber roomnumber mail E-mail address labeleduri Web home page

15. Information Technologies Jeremy Mortis 14 hi Available Attributes userclass UCID category type(s) course Current courses (not published) employeenumberUofC ID Number (restricted) publish Public display flag lockedActive indicator Other stuff could be added!

16. Information Technologies Jeremy Mortis 15 hi Potential Attributes User Comments Alternate departments Departmental phone number Digital certificates Calendar preferences

17. Information Technologies Jeremy Mortis 16 hi Sources of Data Authent UCID SISHR UCID AIX Accounts Personal Updates LDAP username

18. Information Technologies Jeremy Mortis 17 hi Why am I not listed? Must have a UCID Must have an IT Username Username must be connected to UCID Username must be primary Publish flag must be set Wait for update to happen

19. Information Technologies Jeremy Mortis 18 hi Update Schedule Web update - every hour UCID updates - every hour AIX updates - daily HR/SIS data changes - weekly

20. Information Technologies Jeremy Mortis 19 hi Historical Artifacts LDAP keyed by username; authent keyed by UCID Loaded all UCIDS w/data on Aug 1, 98 Fake usernames if one didn’t exist Username required after that date Students not published after Aug 1,99

21. Information Technologies Jeremy Mortis 20 hi.ucaccess A facility for restricting access to web pages by any combination of LDAP data (e.g., IT meeting minutes)

22. Information Technologies Jeremy Mortis 21 hi.ucaccess Place rules in content directory: [ldap] uid:mortis uid:rogjohns uid:kozlowsk

23. Information Technologies Jeremy Mortis 22 hi.ucaccess [ldap] course:*MATH211* course:*MATH213* Course data format: W2000MATH211L01B03T01

24. Information Technologies Jeremy Mortis 23 hi.ucaccess Attributes are ‘or’ed together: [ldap] department:UCS* uid:fritsp course:W2000*

25. Information Technologies Jeremy Mortis 24 hi API’s Web access ldap://directory.ucalgary.ca /o=ucalgary.ca??sub?cn=*morven* AIX command line ldapsearch -b o=ucalgary.ca cn=*morven* C, Perl, Java, etc.

26. Information Technologies Jeremy Mortis 25 hi Binding Another name for ‘logging on’ Interface to AIX cluster password Required for: * view access to UCID and courses * updating LDAP directly * viewing ‘locked’ entries

27. Information Technologies Jeremy Mortis 26 hi Mainframe Calls DASAUTHS AIX password authentication DASMAILA E-mail address lookup

28. Information Technologies Jeremy Mortis 27 hi Current Problems No Yellow Pages Stale phone numbers Single faculty & department No checking of e-mail addresses No departmental administration Update time lag

29. Information Technologies Jeremy Mortis 28 hi Ideas for the Future End users update LDAP directly Interface with TeleWeb system Separate staff list Digital Certificates Calendar integration Hot failover

30. Information Technologies Jeremy Mortis 29 hi Support Admin Help Desk Leigh Schroth (account problems) Roger Johnson (data loads) Don Kozlowski (LDAP itself)

31. Information Technologies Jeremy Mortis 30 hi Coordination Committee Bob Revak (chair) Roger Johnson Don Kozlowski Jeremy Mortis Paul Starling

32. Information Technologies Jeremy Mortis 31 hi More Information LDAP in general http://developer.netscape.com/docs/.ucaccess http://www.ucalgary.ca /it/itf/general/web/web-02.html