michael ströderdate: 19.09.00slide 1 datei:...

Michael Ströder Date: 19.09.00 Slide 1 Datei: /home/michael/Bizness/SURFnet/web2ldap_presentation_TF-LSD.sdd

web2ldap

Personal info Michael Ströder Freelancer Focus on PKI / LDAP

Presentation of PKI features in http://web2ldap.de


Overview

Intro Features Limitations Enhancements Demo / Discussion


Intro

Started in diploma thesis Simple search and download tool for

certificates stored on LDAP server Add / modify entries


Features (1)

Stand-alone or through CGI of web server on Unix and Windows

Best viewed with any browser (CSS for formatting)

Handling of NON-ASCII character sets


Features (2)

Many output formats for exports (LDIF, vCard, DSML)

Customization possible but reasonable defaults


Features (3) - PKI

Many different standards for storing certificates in directory

Directory server itself is not trustworthy

Display and handle certificates directly instead storing many certificate-related attributes


Limitations

Uses python-ldap module built with OpenLDAP 1.2.x libs limited to LDAPv2

WWW-Interface (stateless HTTP)


Road Map

Web session managment(passwords, re-use LDAP connections)

LDAPv3 (Referrals, Schema) Improve exports (DSML, vCard) Advanced Authentication Schemes

(Kerberos, SASL)


Ideas

Complete certificate validation DSML engine Windowing GUI with wxWindows

(Windows and Unix)


Discussion

Required features?Referrals, GUI

Authentication Schemes (Kerberos, vs. SASL), Encryption (LDAPS vs. STARTTLS)

Let's browse your favourite LDAP server! (preferrably with certs ;-)

michael ströderdate: 19.09.00slide 1 datei:...

Documents