Not just a Directory but a complete Directory Service Sun Directory Services

Saturday Feb 06, 2010

Flash Memory / Solid State disks are not Sci-Fi any more, they are coming to enhance user experience and bring new area of performance for Directory at affordable cost.

Leveraging them is one of the latest trend on directory and database market, our ongoin
g series of articles explore the value and benefits. However before diving into details let's make sure we all have a common understanding of the technology.

Brad Diggs, this week is our schoolmaster on Flash Memory Basics.

Monday Jan 25, 2010

Importing an ldif file is a common task that every engineer needs to create a directory service.  This is also a task that some engineers need to perform when restoring an instance in their topology.  DSEE 7 has introduced new innovations into the code has resulted in 5x improvements in performance. 

Wajih Ahmed, this Wednesday, will detail how he used the new F-20's to improve import times using DSEE 7.  This improvement results in real measurable time/cost savings.  Since these tasks sometimes take place over weekends or during maintenance periods this means engineers will have more time to do other things.  We want to know what are they doing with that time?  

Here is a potential list of activities they might be doing with that extra time:
  1. Spending time with their families
  2. Downloading and creating a POC for OpenSSO
  3. Attending a soccer game for their daughter
  4. Setting up their Super Bowl pool favoring their favorite team
  5. Finding cheats to get promoted in HALO ODST.
  6. Arranging a family movie night
  7. Learn about Fine Grained Access Control with OpenSSO here
  8. Writing a blog post on why they should allow dedicated server versions of Modern Warfare 2
  9. Checking out the IT platform that will manage, capture and deliver the Vancouver Winter Olympics
  10. Perusing Facebook to find out what is going on with their friends today.

If you have other creative ideas on what engineers should be doing with this extra time that DSEE 7 has given back, please share below.  I think everyone should be getting ready for the Olympics so I have included the latest video on the Torch Relay from the Vacouver Winter Olympics site.

Friday Jan 22, 2010

This week we have been sharing the different ways customer's can use compression to improve performance and reduce cost within your Directory Server Enterprise Edition environment.  On Wednesday, Brad Diggs, shared how customer's can use compression to reduce their storage footprint by 60%. Today, Ludo Poitou, Community Manager for OpenDS, wrote a great blog post on how to use compression in your OpenDS 2.2 instance.  Ludo shows how OpenDS can reduce the overall size of your directory instance.  He also gives pointers to how to configure in your directory environment.

Next week, Wajih Ahmed will be talking about how customer's can "Improving Import Speed Through ZFS Caching of LDIF import file".  He will show import rate of ds7 and opends with and without primary and secondary cache disabled vs. enabled.  This is another great example of the proven performance that Sun on Sun provides.  

Tuesday Jan 19, 2010

DSEE 7 launched in November and just after Christmas a couple of our Directory experts in the community at Sun took it for a test drive on the new F-20 PCIe flash drives at Sun.  The results confirmed the internal testing we did in the improved performance in import times, the reduction in Directory footprint due to compression and the overall performance improvements for DSEE 7.   This is critical for our customers because it will allow them to take advantage of growth in their business while bending the operational cost curve for their system. In some organizations, their operational budget is their biggest line-item so being able to meet growth targets while also addressing the time, cost and complexity of servicing the environment can release capital for investment in new product development.  

The team that did this great work has agreed to share the results of their testing in a series of blog articles over the next week.  The first article will be presented tomorrow by Brad Diggs, Principal Field Technologist.  Here are just a few highlights from the results that Brad will share tomorrow on compression:

  • The storage footprint was reduced by as much as 66%.
  • We were able to cache greater than 50% more entries into the filesystem cache.
  • Compression almost completely negated average entry growth that is due to the natural addition of operational attributes and replication metadata over time.
  • The nsslapd-db-page-size could be smaller and more consistent with entry growth over time. 

The other team members will be sharing insights that they learned during the testing so I encourage you to bookmark these blog's and take a look over the next couple of weeks.  The team will be sharing not only the results but the lessons learned.  One of the blog articles will discuss tuning to get better import times as well as how to set-up your own SLAMD environment to test your Directory infrastructure.  Please bookmark the following blog locations to see the results:

Brad Diggs, Principal Field Technologist, here
Ludo Poitou,  OpenDS Community Manager, here
Mark Craig, Directory Integration Team Manager, here
Wajih Ahmed,  Principal Field Technologist, here
Nick Wooler, Directory Server Product Line Manager, here

As you look at your business goals for 2010 and are looking for ways to meet your growth goals while keeping your costs under control then take another look at Directory Server 7.  Does your Directory Server provide you with the proven performance and continued innovation as Sun Directory Server Enterprise Edition 7? 

Wednesday Jan 06, 2010

Credit: User:SadorDirectory Proxy Server 6.3.1 Update 1 is a patch to be applied to an existing Directory Server Enterprise Edition 6.3.1.

This multi-platform patch provides fixes in the Directory Proxy Server component of DSEE as well as enhancements in the administration part of Directory Proxy server more specifically in the connection handler and monitoring.


Picture credit: Sador.

For more details, see the Directory Server Enterprise Edition 6.3.1 Release Notes which describes the list of fixes and the new administrative properties.

This patch also solves security vulnerabilities in the Directory Proxy Server component of Directory Server Enterprise Edition 6.3.1 deployments. Please read the Sunalert document 270789 to proceed. Document available at : http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1

This Directory Proxy Server 6.3.1 Update 1 patch can be downloaded  from the Sun Download Site:
http://www.sun.com/software/products/directory_srvr_ee/get.jsp.
or via Sunsolve: 141958-01 : Sun Java(TM) System Directory Proxy Server 6.3.1 Update 1 Patch

Patch 141958-01 is designed to be applied to an existing installation of Directory Server Enterprise Edition 6.3.1. Please read the "Directory Proxy Server 6.3.1 Update 1" chapter  http://docs.sun.com/app/docs/doc/820-5817/dps-631u1 in the DSEE 6.3.1 Release Notes to proceed with version prior to 6.3.1.

Directory Server Enterprise Edition
Marketing Team

Wednesday Dec 16, 2009

Sun OpenDS TM Standard Edition (SE) 2.2 is an updated version of newest member of the Sun Directory Server family of products. It includes an LDAP core that is designed for easy installation, embedding, and configuration as well as a new Directory Proxy Server for load-balancing, high availability and data distribution.

Sun OpenDS SE 2.2 is a high-performance, highly-extensible, pure Java directory server that delivers a fully compliant LDAPv3 server that passes all of the compliance, interoperability and security tests suites. Furthermore, Sun OpenDS SE 2.2 implements most of the standard and experimental LDAP extensions defined in the IETF as RFCs or Internet-Drafts, ensuring maximum interoperability with LDAP client applications.

With a limited footprint allowing the server to be embedded in other Java applications, OpenDS has a very rich set of APIs making it easy to extend and increase usage scope.

Sun OpenDS SE 2.2 also supports a multi-master replication model with optional assured replication that guarantees the high availability of the data for all operations, searches or updates. While theoretically unlimited with regards to the number of masters, the Sun OpenDS SE 2.2 server has been stressed under heavy and durable load with 8 Masters.

This 2.2 version significantly increases performance both in read and write, making it one of the most efficient commercial directory servers available.

Sun OpenDS SE 2.2 is based on the open source community project OpenDS that is constructing next generation directory service software. The initial effort is led by Sun and the primary contributions are by Sun employees, but the goal is to attract developers and other interested parties from around the world. Sun OpenDS SE is the Sun commercial offering based on this project.  

You can find out more information about Sun OpenDS SE 2.2 commercial release at:

http://wikis.sun.com/display/sunopends

Monday Dec 14, 2009

New resource for Sun Partners on Directory!

If you are enrolled in the Sun Partner Advantage program you now have access to our partner library which now includes information on our directory service product line.

Click here
to get access.
Make sure you subscribe to the Watch functionality (under the Tool menu) which will enable you to be notified of updates.

Sun Partners, please use the same login you use for http://partner.sun.com.

Tuesday Nov 17, 2009

Sun  Directory Server Enterprise Edition 7.0 just released.

The 7.0 release is a new version for Directory Server Enterprise Edition.

Directory Server Enterprise Edition 7.0 allows companies to grow faster and easier. The significant improvement in performance allows companies to accelerate their applications while reducing their total cost of ownership. Companies can reduce cost by improving serviceability with faster import times, new easy upgrade in place, and with the only solution in the market that gives customers a directory server, virtual directory, proxy server, web console and synchronization with Active Directory available all in one license.

This updated release improves overall quality and robustness of deployments. Among other features, by downloading DSEE 7.0 you will get:

    • Up to 3 time performance improvement
    • In place upgrade from previous DSEE 6 versions
    • Reduced disk space and memory footprint
    • Optional Data compression
    • Instant Restore capability
    • Advanced tuning capability
    • More use cases and increased performances with views through Directory Proxy Server virtual directory capabilities
    • Improved control over traffic going through Directory Proxy Server
    • New distribution algorithm with Directory Proxy Server
    • Updated list of supported Operating Systems as well as IP v6 supported on all platforms
    • Directory Service Control Center supported on broader list of application servers

Release Notes are available from here. Full documentation is available from here.

Information on Sun Directory Server Enterprise Edition are also available on: www.sun.com/dsee.

You can download Sun Directory Server Enterprise Edition 7.0 software from the following location:

http://www.sun.com/software/products/directory_srvr_ee/get.jsp

The download page serves as a starting point to direct you to the proper downloads depending on the distribution type you need to download.

Directory Server Enterprise Edition 7.0 is available in the following full distributions.

  • ZIP Full distribution (Solaris, OpenSolaris, Red Hat, SuSE, HP-UX, Windows) - standalone delivery to install Directory Server Enterprise Edition 7.0. For upgrade from 6.x please refer to Installation Guide.
  • Native SVR4 packages for Solaris. For upgrade from 6.x please refer to Installation Guide.

Identity Synchronization for Windows is not delivered in the Directory Server Enterprise Edition 7.0 distribution and have to be selected from the download page: http://www.sun.com/software/products/directory_srvr_ee/get.jsp


Directory Server Enterprise Edition
Marketing Team

-

Friday Nov 13, 2009

The  Sun Identity Management team will be giving a webinar next Wednesday to discuss the very important topic of Identity Management and healthcare.  As the healthcare legislation moves through congress the increase of 36M patients on healthcare providers, insurance companies, and patients will be profound.  The cost savings projected by the bills will rely on IT systems to provide increased access to information to drive productivity gains.  As we have seen with recent high profile identity security breeches at hospitals identity security is critical in making sure the right people have access to the appropriate information, that information must be shared with all members of the value chain securely.

Sun's Identity Management Suite provides a powerful package of solutions to help with storing identity information with Directory Server Enterprise Edition;  managing authorization, federation and web services security with OpenSSO; providing provisioning solutions with Identity Manager; and, defining and managing role based access control with Role Manager.

Join this free Webinar to learn how Sun's identity management solutions can help your organization to:

  • Automate management of digital identities for other providers, patients, physicians, clinicians, and payors Provide single sign-on (SSO) and secure federated access to privacy-regulated healthcare information while adhering to strict mandates
  • Enable delegated, self-service password management
  • Comply with the Health Insurance Portability and Accountability Act (HIPAA), internal security policies, and corporate governance policies with complete auditing and reporting capabilities

Sun identity management solutions make it easier for healthcare organizations to manage and share digital information.

Register here.

Topic: Topic: Sun Webinar Series - Identity Management for Healthcare
Date: Wednesday, November 18, 2009
Time: 10:00 am PDT / 1:00 pm EDT / 19.00 CET (check my timezone)
Duration: 1 hour
Speaker:

Sun Product Manager Suresh Sridharan


Thursday Nov 12, 2009

SAVE THE DATE - Wednesday, December 2, 2009
Sun Identity Management User Group Session
Grammercy Park Room
Sun Microsystems, 101 Park Avenue, New York, NY

The Sun Identity Management User Group will meet for its next session at Sun Microsystems, 101 Park Avenue, New York, NY on Wednesday, December 2, 2009. 

We are still finalizing the agenda and we will publish in this blog as soon as it is ready. 

Register here

Here are a couple of pictures from a user group in London.  Etienne is doing the presentation on Directory Server.

Wednesday Nov 04, 2009

Next week, Nov. 9-11, the Identity Management Team travels down to Gartner Identity Access Management conference to showcase two of our latest releases DSEE 7 and Role Manager 5.  Gartner IAM is a great event because it not only gather's together experienced practitioners in the identity management space but has a number of events that are small enough that you can have quality conversations about real problems.  Last year, Verizon presented at this conference on the Directory and OpenSSO implementation that serves 50M users.  The presentation is a great example of the proven expertise that Sun brings to Identity Management and the proven extranet scale our products can support---not a marketing benchmark.

publisherID=1460825906">

Our team has taken a different approach to this even this year and we are participating in Gartner's Learning Lab's.  Vendors, customer's and identity specialists are encouraged to come-by in a classroom style and learn about specific problem's Sun's product, partner's and customer's are doing to solve their identity business problems.  This is crucial today as the cost of failure or doing nothing rises exponentially.  The best way to ensure success is to learn from real-world implementations not marketing based slideware presentations.  This is why we have assembled not just the product teams but partners and real customer's to share their experience in these "learning labs".

The other great thing about Gartner IAM is that there are usually a few different ways to combine great industry expertise and a little fun.  On Tuesday, Nov. 10 at 9:00pm you can meet the Sun Identity team at the Hard Rock Rooftop bar for drinks and conversation.  The first 50 people get a wristband for free drinks.  Identity management isn't hard so come to the Hard Rock to find out how to make it easy! 

Gartner IAM Sun Schedule

Monday, Nov 9th

Learning Lab:

12:40 - 1:05pm “Increase Speed & Performance while reducing TCO with Sun Directory Server Enterprise Edition” Speaker: Nick Wooler, Sr Product Manager – Sun Microsystems

1:05 - 1:30pm “Changing the Rules of the game; Raising the bar with Rule Life-cycle Management and closed-loop remediation” Speaker: Neil Gandhi, Sr Product Manager – Sun Microsystems

1:35 - 2:00pm "IAM Governance, Risk and Compliance -- the future of IAM", Speaker: Sachin Nayyar, President - BrinQa

2:05 - 2:30pm "Enterprise Single Sign On for Sun Identity Management", Speaker: Stephane Fymat, VP of Strategy and Product Management - Passlogix

Sun Booth:

12:30 - 2:30pm Daniel Raskin showcasing OpenSSO

12:30 - 2:30pm Mat Hamlin showcasing Identity Manager

Tuesday, Nov 10th

Learning Lab:

12:10 - 12:35pm “Role based user provisioning; using business roles for identity life-cycle management and identity auditing”, Speaker: Mat Hamlin, Sr Product Manager, Sun Microsystems

12:35 - 1:00pm “Three tough challenges, one powerful solution: OpenSSO for web access management, federation and Web services security”, Speaker: Daniel Raskin, Chief Identity Strategist – Sun Microsystems

1:05 - 1:30pm "Privileged Identity Risk Management: Mitigating the Insider Threat", Speaker: Richard Weeks, VP of Channels and Business Development, Cyber-Ark

1:35 - 2:00pm "The WHO behind the WHAT: Arcot Authentication and Sun OpenSSO Enterprise "  Speaker: R 'Doc' Vaidhyanathan, Chief Product Officer - Arcot

Sun Booth:

12:00 - 2:00pm Nick Wooler, showcasing DSEE

12:00 - 2:00pm Neil Ghandi, showcasing Role Manager

Monday Nov 02, 2009

This weekend the Directory Community said goodbye to a true hero, Don Bowen.  Many on the Directory Team at Sun had the pleasure of working with Don and will miss his energy and enthusiasm for life, technology and his family.  Our condolences go out to his family.  We will miss you Don!

 You can read more or leave a comment for his family here!  

Thursday Oct 22, 2009

Yesterday, Neil Ghandi, Matt Hamlin, Etienne Remillon and Nick Wooler gave a quick overview of what is new in Directory Server Enterprise Edition 7 and Role Manager 5.  Here are just a few of the great highlights that were discussed during the presentation.  Of course, you can get the full video embeded below.  Lastly, if you are interested in seeing more events like this you can go to the webinar site here.  

You can download the slides here.  You can download the video here.

Monday Oct 19, 2009

 Sun Learning Services will be holding a beta class for Sun Directory Server Enterprise Edition (Directory Server EE) 7.0 Administration training in San Francisco, CA, from Tuesday, December 1 through Friday, December 4, 2009. Tuition is waived and there will be no charge for your valued partnership in this review. However, participants are responsible for travel expenses, lodging and incidentals.

This course provides students with the opportunity to learn to perform routine maintenance and troubleshooting techniques, monitor and tune servers, create and manage multiple databases, and perform other tasks encountered in day-to-day operations of Directory Server EE 7.0.

Labs acquaint students with the tools included with Directory Server EE. Students should use them to perform tasks such as searching and modifying directory data, exporting and importing data, starting and stopping servers, and troubleshooting. Students should also migrate server versions, create multiple databases, configure servers for replication, and tune
performance.

This course focuses on maintenance and operations issues related to Directory Server EE rather than planning and design issues. For planning and design topics, refer to DIR-2217: Sun Java(TM) System Directory Server Enterprise Edition: Analysis and Planning. If you are already extremely familiar with Directory Server EE, this course probably covers topics you are already familiar with.

We are looking for attendees who will provide a lot of feedback about the class and how we can improve it. We want students who will ask a lot of difficult and annoying questions that we can't answer, do the labs and make them break, and beat up on the product.

PLEASE READ CAREFULLY: If you have specific in-depth needs, such as heavy-duty performance tuning or analysis, planning, and architecture, please be advised that this class will NOT meet those needs. If you are new or somewhat new to the product, and need to know how to install and administer the product, use the command-line interface and Directory Server Control Center console, use the logs, and know a little about directory proxy server, this class will be will be an ideal introduction.

PLEASE NOTE: We require a passing level of familiarity with LDAP concepts, such as DN, DIT, RDN, search filter, and base DN. We will not have time to cover basic LDAP concepts during this beta course. You also need to know how to use the Solaris OS (or Linux) command line.

Our classroom space in San Francisco is extremely limited and we will very likely be unable to accommodate all who are interested. Apologies in advance if we cannot accept your enrollment.

If you're interested in attending, please contact David Goldsmith (David.Goldsmith@sun.com) for more information.

Friday Oct 16, 2009

Sun's Identity Team have been busy over the summer!  On Oct. 9, 2009 the Identity Management Team announced the release of Directory Server Enterprise Edition 7 and Role Manager 5.  Next Wednesday, Oct. 21 at 8:00am PT, Neil Ghandi (Role Manager Technical Product Manager) and Nick Wooler (Product Line Manager, Directory Services) will be giving an overview of some of the great features that exist in the new releases.  Here are a couple of highlights:

What's New with Directory Server EE 7.0

Boosts speed and performance: DSEE 7.0 has been optimized to improve performance of some operations by more than 3x the current version. In addition, this release provides hardware optimization with up to 60% improvement in authentications and modifications. 
Reduces Total Cost of Ownership– Reduce cost by using the only solution in the market that provides customers with a directory server, virtual directory, proxy server, web console and Active Directory synchronization tool-kit under a single license.
Hassle Free Upgrade – DSEE 7.0 provides a simple upgrade path and provides 5x performance improvement in data import times, thereby reducing migration costs.
What's New with Role Manager 5.0
360 Degree View of Assigned Access – A unified view of data related to user access that empowers reviewers to make more         intelligent decisions concerning users access.
Closed-loop Remediation – A complete end-to-end solution for reviewing user access and removing inappropriately assigned access.
Rule Life-cycle Management – The first solution for managing the complete life-cycle of role assignment and SoD audit rules.

Interested in hearing more? Interested in hearing more about the release and what business problems it solves for your enterprise?  Register here for the Webinar here:

Topic: Improve Compliance, Access Controls, and Performance with Sun's Latest Releases of Role Manager and DSEE
Date: Wednesday, October 21, 2009
Time: 10:00 am PDT / 1:00 pm EDT / 19.00 CET (check my timezone)
Duration: 1 hour
Speaker:

 Sun Product Managers: Neil Gandhi and Nick Wooler

Registration::

 Register Here