idmdude @idmdude - Tumblr Blog

The Most Complete History of Directory Services You Will Ever Find

I started working with Directory Servers back in 1997 when Netscape was but a fledging company. Over the past 20 years a lot has changed. Companies have come and gone and code has changed hands more times than I care to remember. But one thing remains the same – that little effort started by Tim Howes, Mark Smith, and Gordon Good at the University of Michiganis as important today as it was…

View On WordPress

#Directory service #Internet Standard #LDAP #Lightweight Directory Access Protocol #SLAPD #Tim Berners-Lee #Tim Howes #University of Michigan

A Review of the Grizzly Steppe (Russian Hacking) Report

I, like many, have heard the stories that the Russians hacked into sensitive applications/servers in an effort to compromise the US elections. That is a bold statement and if true, may justify the actions recently taken by the Obama administration. So it was with keen interest that I rushed to read the findings from the Joint Analysis Report (JAR-16-20296) between DHS and the FBI to see what…

View On WordPress

Performing Bulk Operations in OpenIDM

OpenIDM does not support bulk operations out of the box. One way to to do this, however, is to obtain a list of IDs that you want to perform an operation on and then loop through the list performing the desired operation on each ID.

Yes this is a hack, but let’s be honest, isn’t life just one big set of hacks when you think about it?

Here are the steps.

Suppose for instance that you want…

View On WordPress

#bulk provision #hack #openidm #script #vi

Configuring OpenIDM on a Read Only File System in 10 Easy Steps

During the normal course of events, OpenIDM writes or updates various files on the file system to which it is installed. This includes log files, audit files, process IDs, configuration files, or even cached information. There are times, however when you find yourself needing to deploy OpenIDM to a read only file system – one to which you cannot write typical data.

Fortunately, OpenIDM is…

View On WordPress

#configuration #openidm #read only

OpenIDM Property Value Substitution

Property value substitution can be a useful technique for customizing OpenIDM deployments across multiple environments.

Assume, for instance, that you have three environments (Development, Test, and Production). Your OpenIDM deployment has been configured for one OpenDJ system resource, but the configuration properties for that resource is different across each environment. The following…

View On WordPress

The Real Reason Oracle Dropped Sun Identity Manager

I always appreciate it when someone attempts to educate others about identity management and related technologies. So when I saw the the following presentation, it quickly caught my attention as I was working with both products when the Oracle deal to purchase Sun went down.

Why Oracle Dropped Waveset Lighthouse and Went to Oracle Identity Manager (OIM)

[youtube=http://www.youtube.com/watc…

View On WordPress

#oim #oracle identity manager #sun #sun identity manager

Configuring OpenIDM Password Reset

ForgeRock OpenIDM is a powerful account management and data synchronization tool that provides many robust features out of the box. Some of these features must be enabled, however, before they can be used. Once such feature allows a user to reset their password in the OpenIDM Web UI by responding to challenge questions.

The OpenIDM Web UI provides an out of the box experience for resetting an…

View On WordPress

#ForgeRock #openidm #Password Reset

OpenDJ and the Fine Art of Impersonation

Directory servers are often used in multi-tier applications to store user profiles, preferences, or other information useful to the application. Oftentimes the web application includes an administrative console to assist in the management of that data; allowing operations such as user creation or password reset. Multi-tier environments pose a challenge, however, as it is difficult to…

View On WordPress

#Access Control #ForgeRock #LDAP #Lightweight Directory Access Protocol #OpenDJ

Hacking OpenAM - An Open Response to Radovan Semancik

Hacking OpenAM – An Open Response to Radovan Semancik

I have been working with Sun, Oracle and ForgeRock products for some time now and am always looking for new and interesting topics that pertain to theirs and other open source identity products. When Google alerted me to the following blog posting, I just couldn’t resist:

Hacking OpenAM, Level: Nightmare

Radovan Semancik | February 25, 2015

There were two things in the alert that caught my…

View On WordPress

#ForgeRock #OpenAM

OpenDJ Access Control Explained

An OpenDJ implementation will contain certain data that you would like to explicitly grant or deny access to. Personally identifiable information (PII) such as a user’s home telephone number, their address, birth date, or simply their email address might be required by certain team members or applications, but it might be a good idea to keep this type of information private from others. On the…

View On WordPress

Book Review: The Catcher in the Rye

Book Review: The Cather in the Rye

The Catcher in the Rye by J. D. Salinger

See this book on Amazon »

Bill has read this book

Recommend Comment:I never read the Catcher in the Rye when I was young, maybe it was better that way. But over the years I had heard about this book mainly due to its association with Mark David Chapman (John Lennon‘s assassin) and John Hinkley (Ronald Reagon‘s would be assassin); suffice to…

View On WordPress

The Next Generation of Identity Managment

The face of identity is changing. Historically, it was the duty of an identity management solution to manage and control an individual’s access to corporate resources. Such solutions worked well as long as the identity was safe behind the corporate firewall – and the resources were owned by the organization.

But in today’s world of social identities (BYOI), mobile devices (BYOD), dynamic…

View On WordPress

#Identity Management #identity relationship management #IDM #irm #kantara

OpenIDM 3.1: A Wake Up Call for Other Identity Vendors

Having implemented Sun, Novell, and Oracle provisioning solutions in the past, the one thing that I found to be lacking in ForgeRock’s OpenIDM solution was an easy to use administrative interface for connecting to and configuring target resources.

Sure, you could configure JSON objects at the file level, but who wants to do that when “point and click” and “drag and drop” is the way to go.

With…

View On WordPress

#ForgeRock #openidm

Taking Time to Give Thanks

With Halloween in the rear view mirror and Christmas right around the corner, it is easy for Thanksgiving to get lost in the shuffle. Bordered by two holidays where much of our society is focused on gifts of candy and presents, Thanksgiving is sort of an “odd man out” and like many of the other holidays, much of its meaning is oftentimes overlooked.

While not the official start of the…

View On WordPress

OpenDJ Attribute Uniqueness (and the Effects on OpenAM)

In real life we tend to value those traits that make us unique from others; but in an identity management deployment uniqueness is essential to the authentication process and should not be taken for granted.

Case in point, attributes in OpenDJ may share values that you may or may not want (or need) to be unique. For instance the following two (different) entries are both configured with the same…

View On WordPress

#Authentication #Directory Server #ForgeRock #LDAP #OpenAM #OpenDJ

Understanding OpenAM and OpenDJ Account Lockout Behaviors

The OpenAM Authentication Service can be configured to lock a user’s account after a defined number of log in attempts has failed. Account Lockout is disabled by default, but when configured properly, this feature can be useful in fending off brute force attacks against OpenAM login screens.

If your OpenAM environment includes an LDAP server (such as OpenDJ) as an authentication database, then…

View On WordPress

It's OK to Get Stressed Out with OpenAM

http://wp.me/pirtz-eW

In fact, it’s HIGHLY recommended….

Performance testing and stress testing are closely related and are essential tasks in any OpenAM deployment.

When conducting performance testing, you are trying to determine how well your system performs when subjected to a particular load. A primary goal of performance testing is to determine whether the system that you just built can support your client…

View On WordPress

#Authentication #ForgeRock #Methodology #OpenAM #OpenDJ #performance #Single sign-on

Trending Blogs

Recently Viewed Blogs

idmdude