sml -- I reformatted Catherine's notes into concrete requirements and tasks for the team. Some of these will copy to the Product backlog or into specific Sprint documentation.

Important Dates

June 15: Clearspace environment setup, tentative experiments connecting to an existing LDAP directory operated by NIST, determination of "least amount of work" path, recommendations
Clearspace to QA: July 15
Clearspace production date: August 1.

Questions to Answer for ISDA Lead Architects

  • Carter and Dave Tanner (at least) to schedule discussion with Jive on LDAP vs. web services based integration
  • Do all or some of our target products insist on using LDAP for authentication if they are configured to use LDAP for access control?
    • The MIT Way is that we cannot use LDAP for authentication.
    • If we can decouple access control from authentication, is that really less work than customizing the product to work with our ID web services?
    • Since we have to customize to integrate with Touchstone, are we really saving any work? 
    • Paul will schedule further LDAP discussions with OIS, to include members of the Teamspaces team.

New Requirements

  • Target products cannot use LDAP for authentication and they must use Touchstone.
  • The LDAP connector cannot front for another authentication mechanism, it cannot receive passwords from an end user.
  • ISDA Mgmt makes the assumption that we should use ldap.mit.edu
    • We must test using ldap.mit.edu or the Active Directory LDAP before we attempt to use the penrose facade.
    • We likely will not be allowed to use any new ldap service/protocol, even if it is a facade or abstacted interface like penrose
  • The two key requirements to which this project must play are:
    • real time updates of users and ACL
    • Incorporation of external users (touchstone)

Impediments: Product Owner Tasks (Steve Landry and Possibly Derek Jaeger)

  • Delta the LDAP requirements for Clearspace, Confluence, AlFresco, and Stellar
  • Hand these off to Michael Gettes and Paul Hill to negotiate with NIST
  • Work with Qing Dong to collect AlFresco documentation on LDAP connectivity.
  • See if other higher-ed is using Clearspace and put forth some queries
  • No labels