DESIRE II LDAP Indexing System 45 IETF, Oslo LDAP Service - - PowerPoint PPT Presentation

desire ii ldap indexing system
SMART_READER_LITE
LIVE PREVIEW

DESIRE II LDAP Indexing System 45 IETF, Oslo LDAP Service - - PowerPoint PPT Presentation

DESIRE DESIRE II LDAP Indexing System 45 IETF, Oslo LDAP Service Deployment - Take 2 BoF 15. July 1999 Peter Gietz, University of Tbingen Peter.Gietz@directory.dfn.de DESIRE LDAP Index system


slide-1
SLIDE 1

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

DESIRE II LDAP Indexing System

45 IETF, Oslo LDAP Service Deployment - Take 2 BoF

  • 15. July 1999

Peter Gietz, University of Tübingen

Peter.Gietz@directory.dfn.de

slide-2
SLIDE 2

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Table of contents

  • DESIRE II
  • Distributed Indexing System
  • Gathering of Index Objects
  • Distribution
  • Query Routing
  • Architecture of the Referral Server
  • Security Considerations
slide-3
SLIDE 3

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

DESIRE II

  • Distributed Index system part of DESIRE II project
  • Development of a European Service for Information
  • n Research and Education
  • European Union’s Telematics Applications Programme
  • 10 European Partners
  • Information discovery, integrated in a Web-centered

model

  • Integration of other distributed information services
  • Metadata management
slide-4
SLIDE 4

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Distributed Index system

  • Hierarchical topology
  • LDAP v3 technology
  • Managed by the server side
  • Index server registration
  • Subset of CIP
  • Dataset Identifier (DSI)
  • Base URI for generating referrals
  • Usage of the Tagged Index Object (TIO)
  • Tag identifies common attributes of an entry
slide-5
SLIDE 5

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

The LDAP Indexing System

LDAPv3 Client LDAPv3 Indexserver

virtual db backend

LDAP Crawler HTTP

TIO

TIO Server

TIO TIO TIO TIO TIO TIO TIO TIO TIO TIO TIO

GET <url> accept text/ldif

Referral as ldif file

LDAP Server LDAP Server LDAP Server LDAP Server LDAP Server LDAP

Search request LDAP referral

slide-6
SLIDE 6

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Index Gathering

root C=GB C=SE C=NL O=X O=Z O=Y

  • TIO generated by crawlers
  • Transport encrypted via HTTP
  • TIOs will not be aggregated
slide-7
SLIDE 7

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Index Distribution

root C=GB C=SE C=NL O=X O=Z O=Y

  • Global TIO collection

distributed to country level

  • Country index can be

distributed downwards

  • Transport encrypted

via HTTP

slide-8
SLIDE 8

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Query Routing

C=GB O=X O=Z O=Y client global index

1 2 3

  • 1. Client searches local server
  • 2. Client searches country level

server (CLS)

  • 3. CLS looks up the referral

index

slide-9
SLIDE 9

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Referral Server Architecture

native protocol (LDAP) server

HTTP backend

HTTP server TIO query daemon TIO index

H T T P

TIO gatherer TIO LDAP client Http request: GET ldap://hostport/c=nl??sub?(cn=*pers*) Accept:text/ldif Http response: Content-Type:text/ldif dn:ref=ldap://host/o=abc,c=nl

slide-10
SLIDE 10

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Security Requirements

  • Personal Data are subject to privacy legislation
  • Public data have different status in collections
  • We don’t want to serve spammers
  • Participating applications should be known
slide-11
SLIDE 11

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Security Solutions

  • All Index objects will be encrypted while on the net
  • PGP encrypted S/MIME RFC 2015
  • Transport protocol independent
  • Data server registration
  • Crawler policy stored in the data server
  • Crawler registration
  • Referral Server will give back a limited amount of referrals
slide-12
SLIDE 12

DESIRE

DESIRE LDAP Index system Peter Gietz, University Tübingen

Partners / More Info

  • Partners
  • SURFnet
  • DANTE, Cambridge
  • University of Brunel
  • More Info:
  • http://www.desire.org
  • Peter.Gietz@directory.dfn.de
  • draft-gietz-ldapindex-00.txt
  • http://www.directory.dfn.de