Meta-Directory Implementation

Organizations Tree

We are are currently designing and implementing a portion of the directory tree that will include departments and other organizations.  Links for our work so far are:

• Organization Tree Design Draft

• Meeting Notes

Web Interface

We are are currently re-implementing the web interface as the Directory Services Channel in the MyNAU web portal.  Links for our work so far are

• Instructions for linking to the Directory search tool from your website

Sun ONE Directory Proxy Server 5.2

Notes about the DPS configuration and SSL support can be found here.

White Pages Applications

A preliminary list of White Pages Applications has been identified here.

Schema Development

(NEW) Real-Time Schema Documentation:
A new dynamic documentation system has been developed to allow real-time documentation of the LDAP schema. Not all of the attributes have good descriptions as of yet, but we are working to update this information, If you have any questions about attributes you see here please contact us.

The new utility currently allows the following:

• Real-time access to the attributes/objectclasses that are in the schema for both TEST and Production
• Documentation of attributes/objectclasses that are currently active in the schema.
• Documentation of historic attributes that are no longer in use

The new documentation utility can be found by clicking on either of the two links below:
Real-Time LDAP Schema Object Class Design
Real-Time LDAP Schema Attributes Design

The following pages detail the primary directory identifiers, they layout of the directory tree itself and the design of the person regestry:

• Directory Identifiers

• Directory Information Tree Layout

• Person Registry Design

Social Security Numbers

Social Security Numbers are stored in the directory, but are not viewable by the vast majority of people.  You can view your own SSN by going to the directory web interface.  You must login and then search for yourself.  Click on your name and the details page will show your SSN.  If your SSN is incorrect you can get it corrected by contacting:

employees and student employees:  email to HR.Contact@nau.edu or call 928-523-2223

students: Contact Savannah Sydney in the Bursar's office.  email Savannah.Sydney@nau.edu, phone 928-523-9459.

Meta-Directory Feeds
The following pages document the data feeds to and from the meta-directory.

• Human Resources/PeopleSoft

• Student Information System

Supported API's and examples
The following pages have code examples written in several languages that show how to connect to and search LDAP.

• PERL example using Net::LDAP module

• Secure PERL example using TLS with the Net::LDAP module (converting a connection into a secure connection)

• Secure PERL example using alternate port 636 and old style SSL (This method has been replaced with the above TLS approach)

• C# .Net example using System.DirectoryServices

• VB .Net example using System.DirectoryServices

User Interfaces
The following pages are examples the user interfaces to the directory.  So far these are pages are just ideas, nothing has been finalized.

• Directory Searches

  • Sample 1

  • Sample 2

  • Sample 3

Presentations about the Meta-Directory 
The following links refer to presentations that have been made to various groups.  These Power Point presentations are better viewed with Internet Explorer than Netscape Navigator, especially at higher screen resolutions.

• Virtual Enterprise Networks and Services Based Architectures - August 2000, describes a vision for NAU's architecture development for the next few years.  It was given to all groups within ITS and to Unix and NT administrators across campus. This is the presentation that gained approval for the Meta-Directory project.

• LDAP schema and use - October 2000, describes the structure of the directory tree and explains objectclasses and objects.  This was presented to the Academic Computing group in ITS.  It includes sample perl code for searching the directory.  The code for the get_email example is out of date now because it uses the no longer supported Net::LDAPapi module.  Programmers should use the Net::LDAP module instead.  The code for the ldap_search example does use the Net::LDAP module.

• Directory Services for Business Units - January 2001,  gives an overview of the new directory to departments at NAU and describes how the new directory and meta-directory will affect their business processes.

Useful Links
The following links provide good resources for designing and implementing a directory.

• www.educause.edu/eduperson - This is an object class for working with other higher education directories.

• www.internet2.edu - The home page for the Internet 2.  The following Internet 2 links are more relevant to directory deployment.

• middleware.internet2.edu - The Internet 2's main middleware page talking about schema considerations, PKI, etc.

• middleware.internet2.edu/best-practices.html - The current best practices of the Internet 2 middleware developers.  This includes demographic information that should be stored as well as how the directory can and should be used.

• www.georgetown.edu/giia/internet2/ldap-recipe/ - An account of implementing a directory with the eduPerson object from Georgetown University.

• perl-ldap.sourceforge.net/ - This is the home page for the Perl Net::LDAP module.  It also contains a link to the pod documentation.

RFCs relevant to this project

• RFC 1558 - A String Representation of LDAP Search Filters

• RFC 2247 - Using Domains in LDAP/X.500 Distinguished Names

For more information on the status of the meta-directory deployment see the project plan.