LDAP 产品家族介绍.ppt

《LDAP 产品家族介绍.ppt》由会员分享，可在线阅读，更多相关《LDAP 产品家族介绍.ppt（13页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、Rocket Software,Inc.Rocket LDAP Bridge Product FamilyMarch 2004George A.BoitanoOutlineRocket LDAP Bridge BackgroundProduct Family ArchitectureBase Product:Rocket LDAP Bridge v3.2racf2ldapldap2racfracfPticketldap2db2ldap2imsldap2vsamSummaryRocket LDAP Bridge V1.2Initial Availability:Nov-2000Running i

2、n production at large RACF,CA-ACF2,CA-TopSecret sitesProvides Web Access Control with high-function interface mainframe security repositories(z/OS and RACF)LDAP v2SSL/TLS SupportAuthenticationExpired password notificationUser password self-changeAuthorizationGroup membershipAny other user or group a

3、ttributesIntegrated into Web Access Control 5.0 and aboveEnd-of-Distribution:Nov-2003End-of-Support:Jan-2005Rocket LDAP Bridge V3.2Initial Availability:Sept-2003Running in production at large,high-volume reference accountsBase for numerous plug-in back-endsLDAP v3&SSL/TLS supportAuthenticationExpire

4、d password notificationUser password self-changeReal-time RACF DataReal-time synchronization with remote LDAP directoriesShipping nowProduct FamilyRocket LDAP Bridge V3.2LDAP V3RACF,CA-ACF2,CA-TopSecretAccess to all RACF security data and violationsRead-only,except for password changeFor Web Access

5、Control,Auditingldap2racfFor Provisioning,AdminRACF write access in real-timeracfPticketFor SSOGenerates RACF passtickets via LDAPldap2db2For Web Access ControlReal-timeLegacy tables,views,procsldap2vsamFor Web Access ControlReal-time Legacy files Indicates prerequisite relationshipRACF Admin Optimi

6、zerDeep RACF administrationGUI and ISPF clientMultiple database supportMany featuresldap2imsFor Web Access Controlreal-timeLegacy databasesracf2ldapFor identity management,provisioningSynchronizes remote,local directories w/RACFracf2ldapSupports any provisioning and identity management applicationsS

7、ynchronizes RACF changes with:Local LDAP servers,including Rocket LDAP BridgeRemote LDAP servers,including:MS-Active DirectoryNovell eDirectorySunONE Directory ServerAny LDAP-compliant directoryFully customizable:Flexible attribute mappingAttribute data transformationsFlexible entry disambiguationRe

8、quired to support RAO productCurrently running in production at large clientsldap2racfSupports any provisioning enterprise applicationEnables full write-access to RACF via LDAPIntegrates with provisioning engines:Replication approachReal-time synchronization approachRequired to support RAO product,o

9、r any other deep administration product that uses LDAPBeta in progress GA June,concurrent with RAOracfPticketSupports Enterprise Single-Sign-On Generates RACF passtickets via LDAPRACF Passtickets:8 characters,alphanumericValid for 10 minutesValid for one-time sign-on to a specified applicationMuch m

10、ore secure,and easier,than storing RACF passwordsReturns passtickets to authorized LDAP clients as operational attributes for user entries.Beta in progressGA early Mayldap2db2Supports Web Access Control AuthenticationAuthorizationGeneration of SAML assertionsLDAP encapsulation of any legacy DB2 tabl

11、e or viewNon-replication assures support for large size,very high volume databases.Read-only(in this release)Uses either:Direct DB2 API(for data stored locally)ODBC Driver(for data stored remotely,also non-DB2)Easily extensible to other remote or local RDBMS:OracleInformixldap2imsSupports Web Access

12、 Control:AuthenticationAuthorizationGeneration of SAML assertionsLDAP encapsulation of any legacy IMS database and/or transactionNon-replication assures support for large size,very high volume databasesRead-only(in this release)Uses:Direct IMS DLI API ldap2vsamSupports Web Access Control Authenticat

13、ionAuthorizationGeneration of SAML assertionsLDAP encapsulation of any legacy VSAM fileNon-replication assures support for large size,very high volume filesRead-only(in this release)Search filters limited to LDAP attributes corresponding to VSAM keysVSAM files must accessible to LPAR running serverR

14、ACF Administration Optimizer(RAO)Deep RACF Administration:Directory-CentricIntuitiveFeature-richDesktop ClientJava Graphical User Interface for MS-Windows NT/2000/XPLeverages existing management skills for new RACF administratorsSimplifies delegated administration,help-deskISPF ClientCanned,customiz

15、able views of all RACF database entriesImproves productivity for seasoned RACF administratorsKey FeaturesReal-time read-write access to entire RACF databaseSophisticated,granular controls to support delegated administrationMultiple database supportCopy/merge/clone profiles within database or from on

16、e database to anotherPrereqs:z/OS 1.2,Rocket LDAP Bridge v3.2,racf2ldap,ldap2racfSummaryRocket LDAP Bridge family provides enterprise identity management products with LDAP access to legacy mainframe dataWeb Access Control Authentication,Authorization,Auditing:Rocket LDAP Bridge V3.2ldap2db2ldap2imsldap2vsamProvisioning&Identity Management:ldap2racfracf2ldapEnterprise Single-Sign-On:racfPticketFuture Directions:Solaris platform supportRACF web services interfaceProvisioning support for DB2,IMS,VSAM