# Presentation: 582163

## Directory ServicePreliminary Design ReviewLookup and Groups Service

- 2001-12-20

## Directory Service – URLs

**Relevant URLs**
- This presentation:
- 	  _http://eis/dir/dev/library/eisdir/presentations/_
- Phase 2 Preliminary Design Review (PPT)
- Specifications Document URL:
- 	 _http://eis/dir/dev/doccenter/docs/meta/_

- 2001-12-20

## Directory Service PDR Board Members

- Board Members:
- Larry Bergman, chair
- Laif Swanson
- DJ Byrne
- Tom Wolfe
- Paul Ottenfeld
- Steve Jenkins
- David Gilliam
- Jeanne Holm

- 2001-12-20

## Directory Service PDR Board Charter 

**Review Board Charter**
- This review addresses:
- Preliminary design specifications for evaluation of readiness.
- Compliance of the design with applicable requirements.
- Preliminary design and transition approach for JPL lookup services.
- Preliminary design of JPL Directory's LDAP groups features and functions.
- Preliminary design of JPL Directory's group administration features.
- Your Role as a Reviewer:
- Have we adequately captured all the key issues?
- Have we adequately captured all the user/stakeholder's requirements?
- Are there areas we should explore that may improve our current plans?

- 2001-12-20

## Directory Service - Introduction

- The JPL Directory contains "people" information.  This information includes, full name, phone numbers (voice and fax), addresses (e-mail, mailstop, and office location), organization, and other information. The majority of this information is provided by NBS, other providers are UCS, SPS and self (the person named in the directory).
- The current JPL directory is accessed using the Lightweight Directory Access Protocol (LDAP) as defined in RFC 2251. Some of the ways to access information in the directory include:
- Web Interface, JPL Phone Book
- Standard Browser LDAP interface
- UNIX Command Line

- 2001-12-20

## Directory Service – PDR Scope

- This PDR will introduce two new capabilities that will be provided by the DIR Service:
- Lookup Services (ph, finger and whois) to retrieve data in the JPL Directory
- JPL Directory Group and Delegation of Group Administration

- 2001-12-20

## Directory Service - Requirements

- 4.2.7- The JPL Directory Service's resources shall be accessible from standard client applications such as  finger, ph, e-mail and web browsers.
- 4.2.14 - The JPL Directory Service shall provide the capability to create and manage groups.
- 4.2.15 - The JPL Directory Service shall provide the capability to delegate administration of attributes and groups.

- 2001-12-20

## Directory Service – Architecture

- 2001-12-20

**Notes:**
Note where new services fit in – “User Web Interface” for groups, and group management,  finger and whois via “Direct Access Via Command Line” and ph via “Access Via Directory Enabled Apps” Eudora.

## Directory Service – Design

- 2001-12-20

## Directory ServiceLookup Services Design

- Design Considerations:
- The Lookup Services (ph, finger and whois) will be installed on both the master and replica directory servers
- Same output format, with few exceptions
- Incorporate x.500 manual entries that are not in NBS
- DSCC personnel will be put into “personnel” branch and updated on a regular basis
- Organization and service information, people and mailing lists will be put into a new temporary branch named “legacy”
- Coordinate DNS name cutover with Messaging and Networking Team
- (ph.jpl.nasa.gov, finger.jpl.nasa.gov and whois.jpl.nasa.gov)
- Port redirects of jpl.nasa.gov coordinated with Messaging and Networking Team
- Setup Tivoli functional monitors

- 2001-12-20

**Notes:**
Installed both on master and replica for failover and may in the future transfer lookup services function to the replica for load balancing
x.500 exceptions, DSCC personnel includes madrid and canberra, we plan on including goldstone in the future
Legacy branch is temporary, we plan on making a conscience effort to clean it up and put appropriate info into future nodes (branches) such as orgs and services

## Directory Service finger Format

_**Current X.500 Output**_
**% finger john.adams@finger**
- [gdsx500.JPL.NASA.GOV]*** ***
- Jet Propulsion Laboratory
- X.500 Information Service...
- To update e-mail address or aliases, e-mail help@eis.jpl.nasa.gov
- For all other updates, see http://eis.jpl.nasa.gov/msg/dir/changes.html
- One exact match found for “John.adams":
- John.F.Adams@jpl.nasa.gov, ***DSMS OPERATIONS PROGRAM OFFICE***
- Also known as:
- Jay Adams
- Jay F Adams Jr
- Jay F Adams-Jr
- John Adams
- John Adams-Jr
- John F Adams
- John F Adams-Jr
***Actual email mailbox:     jadams@jftl.jpl.nasa.gov ***
- Business phone:            +1 626 584-4479
- Fax number:                  +1 626 584-4561
- Location:                        Building: 507, Room: 108
- Business address:         4800 Oak Grove Drive
-                                        M/S: 507-120
-                                        Pasadena, CA 91109-8099
- Organization: 9300, Employer: HONEYWELL
**Note:**
**No section name displayed, currently not in JPL Directory**
**No actual email displayed.**

_**New JPL Directory Output**_
**% finger john.adams@finger**
- JPL Directory Information Service..._**DIR1**_
_**To update, go to “Change Directory Listing” at http://eis/dir/jpldir**_
- One exact match found for "john.adams"
- John.F.Adams@jpl.nasa.gov
_**Jpl Username:**_          _**jadamsjr**_
- Also known as:          John F Adams
-                                   Jay Adams
-                                   Jay F Adams Jr
-                                   Jay F Adams-Jr
-                                   John Adams
-                                   John Adams-Jr
-                                   John F Adams-Jr
- Business phone:       +1 626 584-4479
- Fax number:             +1 626 584-4561
- Location:                   Building: 507, Room: 108
- Business Address:    4800 Oak Grove Drive
-                                   M/S 507-120
-                                   Pasadena, CA 91109-8099
- Organization:            9300, Employer: Honeywell
**Note:**
**One location to request changes.**
**JPL Username added.**

- 2001-12-20

**Notes:**
Note the differences: uid now displayed, don’t need to go to big bro for this info
No section name (tbd, JPL Directory currently does not import from NBS)
No actual email, conscience decision.
No “To update” value message, I believe we will put a link to the “Change User Listiing” web page

## Directory Service whois Format

_**Current X.500 Output**_
**% whois -h whois john.adams**
- Jet Propulsion Laboratory
- X.500 Whois Service...
- name: John F Adams-Jr
-           John F Adams
-           John Adams-Jr
-           Jay Adams
-           John Adams
-           Jay F Adams-Jr
-           Jay F Adams Jr
- fax: +1 626 584-4561
- Internet mailbox: John.F.Adams@jpl.nasa.gov
- postal address: 4800 Oak Grove Drive
-                          M/S: 507-120
-                          Pasadena, CA 91109-8099
- preferredRfc822Originator: John.F.Adams@jpl.nasa.gov
***preferredRfc822Recipient: jadams@jftl.jpl.nasa.gov***
- room number: Building: 507, Room: 108
- surname: Adams***-Jr***
- telephone: +1 626 584-4479
- userClass: Organization: 9300, Employer: HONEYWELL
** **
**Note:**
**No actual email displayed.**

_**New JPL Directory Output**_
**% whois -h whois  john.adams**
- Jet Propulsion Laboratory
- JPL DIR Whois Service...
- name: John F Adams
-            Jay Adams
-            Jay F Adams Jr
-            Jay F Adams-Jr
-            John Adams
-            John Adams-Jr
-            John F Adams-Jr
**JPL Username: **_**jadamsjr**_
_**telephone: +1 626 584-4479**_
- fax: +1 626 584-4561
- Internet mailbox: John.F.Adams@jpl.nasa.gov
- postal address: 4800 Oak Grove Drive
-                           M/S: 507-120
-                           Pasadena, CA 91109-8099
- preferredRfc822Originator: John.F.Adams@jpl.nasa.gov
- room number: Building: 507, Room: 108
- surname: Adams
- userClass: Organization: 9300, Employer: Honeywell
**Note:**
**Added JPL Username**
**Moved telephone number before fax number.**
**Suffix (Jr) not included in surname.**

- 2001-12-20

**Notes:**
Note the differences:
No preferredRfc822Recipient (actual email), conscience decision.
No –Jr in surname

## Directory Service ph Format

** **

- Current x.500 Output

- New JPL Directory Output

- 2001-12-20

**Notes:**
Note the differences:
Phone number appears before fax (was at the bottom).

## Directory Service Directory Information Tree

- 2001-12-20

## Directory ServiceGroups Design

- Design Implementation
- Placement of new groups into InstGroup branch (but not limited to)
- Set ACIs on newly created groups and provide web interfaces and command line functions for the following operations:
- Allow anonymous users to list groups and group members
- Allow authenticated users to create groups
- Make creator of group an administrator automatically
- Allow Group Admins/EIS OPs to add/remove members
- Allow Group Admins/EIS OPs to make group members admins
- Allow Group Admins/EIS OPs to delete groups

- 2001-12-20

**Notes:**

These are static groups, mostly used by services using the JPL DIR for authentication
Are we limiting the creation of groups to just the “inst group” branch?  What will KM use?
No naming conventions, tbd once we get project info? 
More capabilities later, dynamic group creation based on attribute, mailing lists?

## Directory ServiceGroups Web Interface Example

- _[ ](http://eis/dir/dev/doccenter/docs/meta/spreadsheets/propSchema.htm)_

- 2001-12-20

## Directory ServiceGroup ACI Design

- Legend:

- 2001-12-20

## Directory Service Requirements Matrix

- 2001-12-20