#LDAPCon is the international Conference on #LDAP, that acts as meeting place for directory experts and experts on #Identity and #AccessManagement. You use LDAP in interesting projects? You do LDAP client or server development? You have used LDAP in a new way? You do identity and access management (IAM) on top of LDAP? 💡Why not share your ideas and experiences with others? We’re looking forward to your ideas and can’t wait to see the contributions from the community! For mor

Ever since we released LMDB, our advice to software designers has been "don't do application level caching. Let the kernel handle it for...

Jan 17, 2022 Introduction Symas OpenLDAP configured with LMDB has been extensively tested and its performance characteristics are well...

Please note that the certificates must be in a pem format (.pem or .crt). You will need three certificates: Root CA certificate, server...

Slides from yesterday’s lightning talk describing how Apache Fortress fixes the so-called ‘Role Explosion’ problem in RBAC by applying...

Many LDAP Directories have several servers handling requests from many clients. The load on each server varies. Redirecting traffic when...

Just back from Gartner’s IAM Summit in Vegas where I learned about industry trends surrounding Identity and Access Management, its...

Apache Fortress and OpenLDAP configuration for HA

In July I saw this article on The Register about the lack of account security in the enterprise. From the article: “Few companies bother...

AVAILABLE WITH SYMAS OPENLDAP GOLD 2.4.46.1 Passwords, everyone loves to hate them and still, in the era of digital certificates,...

Readers know that Attribute-based Access Control (ABAC) is a bit of an obsession with me. It stems from the want to have something like...

[Link to the Apache Fortress RBAC-ABAC-SAMPLE project on Github] We’ve all heard the complaint, RBAC doesn’t work. It leads to Role...

Watching application teams struggle implementing access control systems brings me to a talk I gave at ApacheCon a couple of years ago....

Very soon we’ll have a release of py-fortress that works with just the file system. This is to lower complexity of testing and developing...

The Command Line Interpreter (CLI) may be used to drive the RBAC System APIs, to test, verify and understand a particular RBAC policy....

The Command Line Interpreter (CLI) drives the admin and review APIs, allowing ad-hoc RBAC setup and interrogation. More info in the...

py-fortress is a Python API implementing Role-Based Access Control level 0 – Core. It’s still pretty new so there’s going to be some...

EQUIFAX BREACH Recently there’s been a buzz over the Equifax breach — rightly so. It’s a transformative event and its effects will...

How to Govern and Maintain Compliance Using Open Source Identity Management Components - Katarina Valalikova, Evolveum & Shawn McKinney,...