OSS IDM System - Some Thoughts

Been a while since I’ve posted anything. My apologies if anyone is actually reading this stuff.

I’ve been thinking a lot more about that first question I ever posted.. “Wheres my opensource IDM solution”. And I certainly received some messages from a few people that pointed a few out to me - They all looked fairly promising.

But, I keep wondering if it would be possible to write a module that attaches itself to an openldap server (sort of like a persistent search on steroids) that could subscribe to changes that occur there. That way, you could use openLDAP as a “meta-directory”. From there, you could write connectors that connect to target systems.

This seems a lot like Novell’s IDM, only sort of the opensource brother to it.. without the XML/DirXML engine… (which i imagine is patented somehow anyways).

Any thoughts? Im just kind of rambling on here….

One Response to “OSS IDM System - Some Thoughts”

  1. Gavin Henry says:

    You could search against cn=accesslog using slapo-accesslog.

    Either way you’d need to write some code ;-)

    OpenLDAP already has meta directory capabilities (man slapd-meta)

Leave a Reply