Virtual Nick Wooler

Are you a Directory Hero? We want to know

Thursday Mar 05, 2009

Are you a Directory Hero?  We want to know.  In the last three months I have heard from several of you via the IRC chat on OpenDS.org at identity conferences or at user groups around the world about the great projects that leverage the innovations from the OpenDS community.  We have been able to share a few of the great stories via the blogs story site.  Everyone learns from hearing about the ways in which you are using LDAP in your organization.  It is this sharing in the open that makes being a part of an Open Source Software project exciting and a great learning experience. I am reminded of a truism "Share comes before success".

Therefore, we are annoncing a new opportunity for you to share your stories with us at Sun.  If you have deployed OpenDS and are using it please send us a story at the following email address.  Here are some suggested questions that you can answer.  Alternatively, blog or create a video about your implementation and send us the link.  We want to show our appreciation for sharing so for the top 30 stories we receive we will send you a free t-shirt.  Please include an address in your submission. 

Here is what to do:

  1. Step 1:  Download the questionaire.
  2. Step 2:  Answer the questions that apply to your deployment
  3. Step 3:  Create blog or videocast and post somewhere
  4. Step 4:  Share:  Send us the link at the email address above and include questionaire, link to your blog or video and an address for us to send the t-shirt.

Here is the suggested questionaire to guide you through what information the community would like to hear about your implementation.

Questions (Download here) and you don't have to answer them all:

  1. Can you tell us more about your company ?
  2. Can you tell us about the application, site, or service in which you have adopted OpenDS?   [ Note: this is where you can hopefully get some publicity for your  own business or project.  So consider including any hyperlinks,  screenshots, etc. that you would like for us to use in that context.  Also, are you embedding OpenDS in your application?]
  3. How and when did you first find out about OpenDS?
  4. Did you go through an evaluation process before selecting OpenDS? If so, can you tell us a little bit about the process and results?
  5. What specific version of OpenDS are you using?
  6. On what operating system do you run OpenDS? Do you use the same OS for both development and production deployment?
  7. On what hardware platform do you run OpenDS? Do you use the same platform for both development and production deployment?
  8. Have you purchased a OpenDS license? If not, have you thought about doing so and do you know it includes access to patches and sustaining releases (more details from http://wikis.sun.com/display/sunopends)?
  9. What specific features of OpenDS are you using?
  10. What do you like most about OpenDS?
  11. What would you most like to see improved in OpenDS?
  12. Does your application also use a database? If so, which one?
  13. Are there any figures about the scale of your adoption which you would like to share (such as how much traffic is being handled, how many entries are stored in OpenDS, how many servers are used)?
  14. How has OpenDS performed since your application/service went live? Have you run into any production issues which you would attribute to OpenDS?
  15. Would you recommend OpenDS to others? Why?
  16. How does OpenDS figure in your future plans?
  17. How would your describe your participation in the OpenDS project (e.g. user only, submitter of bug reports and RFEs, developer who has contributed code)?
  18. Is there anything else you think would be of interest in a story about your OpenDS adoption?


[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

Join OpenSSO and OpenDS at Community One EAST

Sunday Mar 01, 2009

March is going to be an exciting month with a number of events to help make it fun by joining us at one of the events listed below.  The month get's started with an Unconference in New York sponsored by the OpenSSO team.  The OpenDS team will be there as well leading a discussion on using LDAP and OpenDS as an identity repository.  The event is free and only requires you to sign-up at meet-up.com.  Here is the link and you can see how many people are attending.  As of tonight there were 54 attendees.  Sign-up here.


Click here to check out
The OpenSSO Community Group!

At the wiki page for the event you can add topics that you would like to discuss.  There is already a suggested list that includes a presentation by Ludo on OpenDS as a datastore.  You can access the wiki here.

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

OpenSSO and Directory Server: Verizon Wireless 75 Million Users Enabled

Wednesday Feb 18, 2009

One of the great things about being the Product Line Manager for Directory Server at Sun is I get to work with great people like Daniel Raskin, Senior Product Line Manager for OpenSSO,  and customers like Damodaram Bashyam, Directory of IT, at Verizon Wireless.  Daniel wrote a great blog today posting the slides and video recording of a recent presentation where I had the great pleasure of introducing Damodaram at Gartner IAM in Orlando last Fall.  The video below from Daniel's blog allows us all to hear about his deployment of OpenSSO and Directory Server.   It is an example of the great content that is presented at Gartner and we hope you will join us for the next Gartner conference in London on March 23-26.  

It is a powerful example of the talented engineers we have at Sun and the results of good partnerships with customers like Verizon.  Scalability and high availability are a part of our DNA at Sun and as you can see from the video and Damodaram's presentation we believe live case studies prove the value of our product better than any controlled benchmark.  Watch and listen:

Here is a quick overview of the performance statistics from the presentation.  Download it here

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

Gartner IAM and Ten Pin Bowling

Wednesday Feb 18, 2009

Gartner Identity Access Management Conference in London March 23-26 is fast approaching.  As one of the fun extra-curricular events planned for the conference the Sun Identity Team would like to invite you to join us for some 10 Pin Bowling on Monday evening.  We will pay for your cab ride from the hotel to the event, please come by our booth for more information.  In the meantime, go to the meetup page and RSVP for the event.


Join Sun and Accenture for a Gartner IAM after-hours party in the Kingpin Suite at Bloomsbury Lanes where you can:
* Bowl (top scoring bowler at the end of the night wins a prize pak)
* Play pool and table tennis
* Show off your Karaoke skills
* Enjoy delicious food and beverages
* Enter an onsite raffle to win a Wii console with WiiSports. Must be present to win.

Party details:
When: Monday, March 23rd from 9:00 p.m. to 1:00 a.m.
Where: Kingpin Suite at Bloomsbury Lanes (basement of Tavistock Hotel on Bedford Way, London WC1H9EU)   Check it out here.
Reserve your spot by March 20th here and your cab fare to the party is on us!
* Gartner IAM Badge Required for Entry

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

Identity Security Webinar Wednesday, Jan. 21: OpenSSO and OpenDS in One Powerful Solution

Saturday Jan 17, 2009

There is a great webinar being offered on Wednesday, Jan. 21 which you may have missed the announcement because of all the excitement about the Inauguration and Martin Luther King Holiday in the US.  Daniel Raskin, Product Line Manager OpenSSO, and Jamie Nelson, Director of Engineering for OpenSSO, will be talking about the current release as well as the plans for the next release of OpenSSO Express.  There are already 200 registrants and there is a cap at 250 so register now so you don't get left out!

The Directory crowd should be interested as well, because OpenDS is bundled with OpenSSO and is used as OpenSSO's policy store and can be leveraged as a user store as well.  Here are the details:

Sun Software Webinar:
See how Sun's OpenSSO Enterprise provides a single solution for Web access management, federation, and Web services security.

Join Sun for a live webinar on one of today's most exciting aspects of identity management! During this session, we will discuss OpenSSO innovation and how it pushes access management, federation, and secure Web services capabilities to a new level. Learn how to solve challenges around these capabilities with a single solution.


Event:  Access Management, Federation, and Secure Web Services with OpenSSO Enterprise
Date:  Wednesday, January 21, 2009
Time:  10:00 am PST / 1:00 pm EST

» Register Now

This webinar will be presented by Sun's OpenSSO experts: Daniel Raskin, the senior product line manager, and Jamie Nelson, the director of engineering.
We hope that you can join us!

If you have any questions or feedback, please send a message to SWI_Webinar_Inquiries@sun.com.

Thank you,
Sun Microsystems, Inc.

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

OpenDS: Open Source Community Development Improves Product Quality

Thursday Jan 08, 2009

Gary Williams, a staff engineer and the QA lead of OpenDS, published a great article with Marina Sum on the topic of how working on an open source software project has improved quality in product development.  The process is without challenges which he outlines in the article as well.  However, he also gives great detail about the test harness that is used, the amount of automation and community involvement to address the challenges and get high quality product in community hands more frequently.  The full article is available on the Sun Developer Network here

These are the types of processes that quality open source projects do as a part of the project development process.  Indira Thangasamy, produced a similar article on how they approach QA within the OpenSSO project.  As companies evaluate other open source projects, especially in these challenging economic times where cost reduction provide stronger rational's to consider starting projects using open source software.  The quality approach of communities becomes an important differntiator as companies use open source in production and customer facing systems.

Here is a quick overview of the test harness used on OpenDS:

We use open-source, Java platform-based test tools, such as the following, not only to demonstrate our support for open source but also to ensure that they are accessible to everyone:

Here are a couple of other highlights:

  • Unit Testing and Automation:  "Testing starts in the programming phase with unit tests, which verify that the code works as intended and which must exist for all features. Today, we run 30,000 automated unit tests daily on different Java virtual machines. No code can be integrated without satisfying the precommit requirements."
  • Code coverage — With open-source EMMA, we find out the number of code lines, blocks, methods, and classes that are exposed by the unit and functional tests. Part of that information pinpoints the amount of the code tested as a percentage of the total, defining if we've met the quality criteria. We also define which areas of the code are not tested, called coverage holes, and create new tests to fill them.
  • Feature coverage — OpenDS delivers features that customers want, that is, customer requirements. Each feature is recorded as an issue in the Issue Tracker, a tool that monitors defects. This data tells us the state the features are in and their status: Ready for Test or Tested.
  • Documentation coverage — To ensure that the documentation is reviewed according to the test plan, we adopt a two-phase documentation review process: a technical review of the content followed by a formal QA review. Like the product features, the documentation is divided into categories—books, chapters, and sections—that are recorded in the Issue tracker. Through this coverage, we measure the percentage of the documentation reviewed over time and identify the reviewers and review status.
  • Defect rates — This is a traditional measure. The goal is to have no high-priority bugs open at release time. Our Bug Council constantly studies the defects and assesses the risks to customers. We also plot simple graph trends to gauge how well the project is converging.
Thanks to Gary and Marina for publishing this article and allowing the community to learn from your experience. 

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

Sun Directory Server Provides Infrastructure for Energy Innovators and to Help Reduce Cost

Thursday Dec 11, 2008

As President-elect Obama announced his Energy Team yesterday, I was excited for two reasons.  One, Steven Chu is a Californian from Lawrence Berkeley National Laboratory and it is nice to see local citizens playing National and Global roles improving our environment.  Two, I am proud to work at Sun because a large number of the energy innovators like Argonne Laboratory, which is also a part of the Department of Energy, are using Sun's Software to provide the backbone of innovation within these organizations.  

Argonne Laboratory uses Directory Server Enterprise Edition to power their collaboration infrastructure.  They also use MySQL, JavaES, OpenSSO Enterprise and Virtualization (e.g. xVM Server) to power their innovation.  You can see a great video with David Salbego, Director of IT Infrastructure at Argonne National Labs regarding his experience and business benefits resulting from Sun solutions. 

BC Hydro also used OpenSSO Enterprise and Directory Server to reduce cost of providing a web portal for their customers to get interact with their organization.  They reduced the use of paper and conserved resources for our environment.  You can read about the solution here.


[1] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

Socialnetworking Not Immune as Facebook Is Hit By Koobface

Wednesday Dec 10, 2008

If you are a Facebook user that has received some crazy emails recently from "friends" with enticing subject lines to click on a video or picture should think twice before clicking the link.  The Koobface virus has rared it's ugly head again and for some in the eweek article posted here have had to throw out their PC's because of being infected.  Facebook has been great about identifying scams and exploits and maintains this page for users to get information about their security.  

In the interest of spreading the word and propagating good usage of the internet:

Here are some ways to be smart and aware on Facebook:

  • If a link or message seems weird, don't click on it. This is true of all spam—whether a chain letter, an ad, or a phishing scam. If it seems weird for an old friend to write on your Wall and post a link, that friend may have gotten phished. Let the person know, and don't click on links you don't trust.

  • Be aware of where you enter your password. Just because a page on the Internet looks like Facebook, it doesn't mean it is. Learn to tell the difference between a good link and a bad one.

  • Report any spam or abuse you see on discussion boards and Walls. Those report links are there for a reason. The sooner we find spam, the sooner we can remove it and eliminate spammers from the site.

  • Don't use the same password on Facebook that you use in other places on the web. If you do this, phishers or hackers who gain access to one of your accounts will easily be able to access your others too. You might find yourself locked out of your email and even your bank account.

  • Never share your password with anyone. Don't do it. Facebook will never ask for your password through any form of communication. If someone pretending to be a Facebook employee asks you for it, don't give it out, and report the person immediately.
  • Don't click on links or open attachments in suspicious emails. Fake emails can be very convincing, and hackers can spoof the "From:" address so the email looks like it's from Facebook. If the email looks weird, don't trust it, and delete it from your inbox.

  • Add a security question. If your account ever does get stolen, you might need this to prove your identity to Facebook. If you haven't already done so, you can add a security question from the "Account Settings" page.

Also, if you are interested in avoiding scams during the holiday season here is a helpful site from CNET.  The site can be viewed here.


[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

CyberSecurity Advice for 44th President, Report released today

Tuesday Dec 09, 2008

BusinessWeek published an interesting article on Sunday titled "U.S. Is Losing Global Cyberwar, Commission Says".  If you are interested in Identity Management or IT security this is an important topic.  The plenary session was held this afternoon with press releases flying across the internet.  You can find the MSNBC version here.  BusinessWeek did a nice job of scooping the report and summarizing some of the recommendations which include creating a "CyberSecurity Czar".  I am not sure we need more Czar's but if you are interested in the details of the report please take a look at the full report here.

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

The Cats at OpenSSO Are Dancing because of the Gartner IAM Magic Quadrant

Tuesday Dec 02, 2008

Now I know that you are already aware that the "Cat's" on the OpenSSO team are very cool.  But did you know that Gartner has given them a positive review in the latest Magic Quadrant of their latest release.  The move up and to the right in the magic quadrant because of the innovative work on the "Fedlet", their interoperability and standards support, as well as their support of web services security via the STS has got them dancing. 

Another couple of Cool Cat's, Nick Crown and Pat Patterson, posted blog entries yesterday also praising the achievement.

Check out the team as they celebrate the latest accolade for their innovative work.  Thanks to the team over at Jib Jab and Office Depot  who helped us record the Cool Cat's as they celebrated at a local club in Santa Clara.  You should go and visit the site and get Elfed.  My three kids lauged for 5 minutes straight last night after creating a video on this site.

Send your own ElfYourself eCards


[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

Identity Heroes at Gartner Identity Access Management Event, Nov. 10-13, Orlando, FL

Wednesday Nov 05, 2008

Gartner Identity and Access Management conference is happening next week, Nov. 10-12 in Orlando, Florida.  This is a great event that brings together analysts, customers and vendors to share knowledge and experience on important topics that shape the Identity and Security industry.  I will be attending with a few of my notable Identity Product Managers at Sun including: Daniel Raskin, OpenSSO; Nick Crown, Identity and Role Manager; Craig MacDonald, Identity Manager; and our fearless leader John Barco.

Come by and spend some time with your favorite Identity team.  On Monday, November 10 we will be watching Monday Night Football and talking identity in the Presidential Suite at the Gaylord Hotel at 9:00pm ET.  There will be great food, drinks and music as well as a few discussions about Identity.  We hope to see you there.

And, we will be having a few games of Identity Hero.  If you want to practice, check it out here.


[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

OpenDS Monthly Call

Tuesday Nov 04, 2008

There are great things happening in the OpenDS project.  Last week the team released a major update to the code.  The release also contained a great new console to manage schema, edit entries, etc.  I will blog more about this later in the week.  

Additionally, Ludo is having his monthly call this morning to go over the new release and discuss some upcoming feature's.  Hopefully, you can join the call.  Here are the details.

Dear OpenDS users and developers,

Please join us on the phone for the next OpenDS monthly public  
meeting, Tuesday November 4th, 2008, 9am PST, 6pm CET, 5pm GMT.

On the agenda for this month meeting, we will review the current  
status of OpenDS 1.1, do an update on the roadmap and will present in  
details the changes that being integrated in OpenDS to be able to  
integrate it as part of OpenSolaris. These changes include SVR4  
packages, additional features with SASL authentication, SMF support,  
separation of binaries and data...

The call in details can be found here.



            	

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

Identity Management European User Group and Burton Catalyst Europe

Wednesday Oct 15, 2008

I will be attending Burton Catalyst Europe in Prague next week.  This is a great conference brings together a number of thought leaders and practitioners in the Identity, Security SOA and Dyanmic Data Center spaces to talk about real problems.  The event brings a fresh approach to conferences as they minimize vendor presentations.  Yes I am a vendor and I do appreciate this approach.  Because, as a vendor we attend the conference to have real open conversations with customers and analysts about the problems teams are experiencing, and hear about creative solutions that are being employed to solve those problems.  Ultimately, it is about sharing in an open environment about where we all think the identity space is headed.  I look forward to hearing what people are doing with virtual directories.  How LDAP is being used or not used in Web 2.0 architectures?   And, how this "identity bus" that Kim Cameron and Felix from Kuplinger-Cole were talking about here, may involve OpenDS or OpenESB?

Additionally, while we are in Europe, on Tuesday, October 28 we will be attending the Sun Identity User Group in Munich.  This User Group session is open to all Identity Manager, Access Manager, Directory Server Enterprise Edition, and Federation Manager customers.  For anyone new to this User Group, it is a customer driven forum providing a valuable opportunity for customers to exchange practical and technical knowledge and experiences.  Here is information on the time and location:

Sun Identity Management User Group - EMEA 2008
Tuesday, October 28, 2008
9:00 am - 4:30 pm
Registration & Continental Breakfast will begin at 8:30 am
Sun Microsystems GmbH
Sonnenallee 1
85551 Kirchheim-Heimstetten

The agenda of the User Group can be found here.  You can register for the User Group by going here.

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

User Experience Matters--install OpenDS in 5 easy steps

Sunday Oct 12, 2008

I recently moved over to the Directory Services team to take on the Product Line Management position.  I had a lot of fun working with the OpenSSO team and I am excited about the great things that team has released into the market place.  Another exciting thing about the job change, besides continuing to work with the OpenSSO team as they embed OpenDS as the configuration store in their product, is that I get to work with another team that values the importance of User Experience when building software.  Enterprise software for years has promulgated the myth that all that matters is innovation or features within new releases.  User Experience has always been an after-thought.

OpenDS has worked hard to promulgate a different approach which puts User Experience at the top of the priority list.  You can see this in the installation experience of the software.  MySQL builds software with a design guideline Martin Mickos call the "15 minute rule".  This is the rule that their enterprise version should be downloaded and installed in 15 minutes or less.  OpenDS can beat this by being installed in less than 3 minutes.  This is even true when you are allowing OpenDS to generate 2000 simluated Directory Entries.  Powerful stuff.  Not only do you get a great directory engine up and running quickly but if you are a Developer or QA Engineer you can get going quicker as well.

More to come on the performance data and some of our plans soon.  See for yourself how great the User Experience is for OpenDS in the video below:


[2] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg

Register to see Mr. Winky, The IdentiCat, Introduce OpenSSO Enterprise 8 in SecondLife

Tuesday Sep 16, 2008

I have been reading Daniel Raskin, aka The Smoking Monkey (Ask Mr. Cote why), Pat Patterson and Mr. Dixon's posts recently and I thought that things were getting very interesting in the Identity space at Sun.  The phenomenon of the IdentiCat has caused interesting questions to be raised about the role of identity as related to the Yeti, BigFoot and now the IdentiCat.  I saw this offer to register for a presentation in SecondLife.  I am going to be there to find out what this is all about.

Mr. Winky, The IdentiCat will be giving an overview of OpenSSO Enterprise 8 in SecondLife on September, 30 at 8:00am PST.  You can register the for the presentation here.  

The IdentiCat is rumored to outnumber the Yeti and BigFoot throughout the world.  It is just not as big or is commonly confused with Tigger (Image to the Right provided by Disney) or Tony the Tiger.  As a result there is not as much press that is generated because sightings often result in "back away from the sugar cereal" comments.  It has even resulted in some people wanting to ban or limit the use of sugar cereals by children lest they start to proclaim they had actualy seen an IdentiCat.

The real IdentiCat has come out to set the record straight.  It is refreshing that we are able to get the truth about this confusion and be able to see the true IdentiCat.  At the same time it is fitting to have Mr. Winky explain what great features will be available in the OpenSSO Enterprise 8 release.  The juxtaposition of identity protection and revealing the IdentiCat now that he is ready to reveal himself attests to the security capabilities of OpenSSO Enteprise 8.  I hope to see you all in SecondLife.

[0] Comments
Like this post? del.icio.us | furl | slashdot | technorati | digg