Directories for the REST of Us: REST to LDAP in OpenDJ 2.6
0 likes1,900 views
The document discusses the challenges and developments in integrating RESTful APIs with LDAP, highlighting a lack of educational resources for developers on LDAP and directory services. It presents the introduction of REST to LDAP, enabling CRUD operations and configurations through JSON, which aims to simplify interactions with directory services. The OpenDJ server provides two options for accessing data: as an embedded solution for enhanced security or as a standalone web application for scalability.
![Open Identity Summit
GET /users/user.0
{!
"_rev" : "000000003a46b19d",!
"schemas" : [ "urn:scim:schemas:core:1.0" ],!
"contactInformation" : {!
"telephoneNumber" : "+1 685 622 6202",!
"emailAddress" : "user.0@maildomain.net"!
},!
"_id" : "user.0",!
"name" : {!
"familyName" : "Amar",!
"givenName" : "Aaccf"!
},!
"userName" : "user.0@maildomain.net",!
"displayName" : "Aaccf Amar"!
}!](https://image.slidesharecdn.com/forgerocksummitrestdirectory-130617155518-phpapp01/85/Directories-for-the-REST-of-Us-REST-to-LDAP-in-OpenDJ-2-6-6-320.jpg)
Directories for the REST of Us: REST to LDAP in OpenDJ 2.6
- 1. Open Identity Summit Directories for the REST of us Ludovic Poitou Product Manager Matthew Swift Architect ForgeRock
- 2. Open Identity Summit LDAP ? ! Good protocol ! Great products and services ! Main problem : Where are the developers ? ! No one learns LDAP or directory services at University ! Poor and complex client development kits ! Protocol from another era : ASN1, BER… (cc) http://www.flickr.com/photos/bloodlessr/
- 3. Open Identity Summit DSMLv2 ? ! Heavyweight ! Too close to LDAP ! Few tools ! Incomplete
- 4. Open Identity Summit So what else ? ! HTTP for transport ! JSON for data representation ! Loosely coupled ! Fueling the API economy ⇒ RESTfull APIs (cc) http://www.flickr.com/photos/iain/
- 5. Open Identity Summit Introducing REST to LDAP ! /users ! /groups ! But also any object or collection can be configured ! /hosts ! /networks … ! All CRUD operations: ! Queries, with filters and returned attributes ! Put / Post / Delete / Patch… ! Directory specific operations: Modify password…
- 6. Open Identity Summit GET /users/user.0 {! "_rev" : "000000003a46b19d",! "schemas" : [ "urn:scim:schemas:core:1.0" ],! "contactInformation" : {! "telephoneNumber" : "+1 685 622 6202",! "emailAddress" : "[email protected]"! },! "_id" : "user.0",! "name" : {! "familyName" : "Amar",! "givenName" : "Aaccf"! },! "userName" : "[email protected]",! "displayName" : "Aaccf Amar"! }!
- 7. Open Identity Summit 2 Options ! In OpenDJ server ! Embedded ! Direct access to the data and services ! More secure ! As a standalone web application ! Gateway between HTTP and LDAP ! Works with any LDAP server ! Can be scaled like any other web application ! Network latency
- 8. Open Identity Summit Embedded REST to LDAP ! Delivered part of OpenDJ 2.6 by default. ! Just needs to be enabled ! As well as http logs (for auditing and troubleshooting) ! Configuration as a json file ! LDAP based configuration is coming
- 10. Open Identity Summit REST to LDAP vs SCIM ! OpenDJ REST to LDAP is inspired by SCIM ! Filters ! Queries ! Identifiers ! Json representation ! SCIM is still a moving target ! SCIM is Identity centric vs REST to LDAP is generic ! SCIM support will be a strip down, hardwired configuration of REST to LDAP
- 11. Open Identity Summit Take the ride to REST !
- 12. Q & A Logo of Presenter Company HERE