 |
|
|
|
||
|
||
|
||
| Building a Secured Corporate Web Application Infrastructure | ||
|
||
| May 2003 | ||
|
||
| DeveloperNet University Course | ||
|
|
||||||
|
||||||
|
||||||
|
Novell eDirectory
Novell eDirectory 8.7 is a powerful cross-platform directory service. eDirectory delivers the precise identity control and strong, scalable foundation you need to build a profitable secure identity-management solution.
Characteristics of a Directory
Directories are used to search for, retrieve and update information. Information can also be published or subscribed to DirXML.
When data or access needs to be controlled, directories provide various aspects of security. Authentication establishes "who you are". This can be done by something you know such as passwords, PIN numbers, pass phrases, etc. Authentication can also be by something you are such as biometrics, which are physical characteristics that are unique to you including fingerprints, voice, face, retinas, etc. Authentication can also be established by something you have such as a driver's license, passport, smart card, tokens, etc. All of these can be used separately or in combination to establish your identity.
Directories also provide levels of authorization of what you can or cannot see or do. Authorization should be granular enough to regulate authorization down to small elements of information and access.
Information can be stored in the directory. The information is segmented to better partition the information. The information is also distributed or replicated so the information has a "locality" to the user or application using the information.
A directory formulates a logical structure. This can be via containment hierarchy, collection groups, and links inferences.
How the rights flow from objects is a key element of a directory --such as a member of a group, container, or explicit relationship.
Policies can be created, stored and enforced by the directory --such as what is mandatory in creating, deleting, or modifying information; roles etc.
|
|||||||||||||||
