Software Design 2010ǯ9·î¹æ¼¹É®

Software Design 2010ǯ9·î¹æ ¤Ë Åý¹çǧ¾Ú¤Ë´Ø¤¹¤ëµ­»ö¤ò½ñ¤­¤Þ¤·¤¿¡£

Âè1Æý¸
¥¯¥é¥¦¥ÉÂкö¤â¤³¤ì¤ÇOK¡ª
Åý¹çǧ¾Ú¥·¥¹¥Æ¥à¹½ÃÛ½Ñ
OpenAM¡¿SAML¡¿OpenLDAP¡¿Active Directory


=Ìܼ¡ =

Âè1¾Ï¡§¥¯¥é¥¦¥É»þÂå¤ËÂбþ¤¹¤ë¤¿¤á¤Î
Åý¹çǧ¾Ú¡õ¥·¥ó¥°¥ë¥µ¥¤¥ó¥ª¥óÆþÌç¡Ä¡Ä¾®ÅÄÀÚ ¹Ì»Ê

Âè2¾Ï¡§IDÏ¢·È¡õIDÅý¹ç¤Ë¤è¤ë
Åý¹çǧ¾Ú¥·¥¹¥Æ¥à¹½ÃÛ¥¬¥¤¥É¡Ä¡Ä¾®ÅÄÀÚ ¹Ì»Ê

Âè3¾Ï¡§OpenAM¡õSAML¤òÀµ¤·¤¯Íý²ò¤¹¤ë¡ª
¥·¥ó¥°¥ë¥µ¥¤¥ó¥ª¥ó¤ÎÊý¼°¤È¹½Ãۥѥ¿¡¼¥ó¡Ä¡Ä´äÊÒ Ì÷¡¤Ìî¼ ·òÂÀϺ

Âè4¾Ï¡§OpenAM¤ÎƳÆþ¤È½é´üÀßÄê¡Ä¡Ä´äÊÒ Ì÷¡¤Ìî¼ ·òÂÀϺ

Âè5¾Ï¡§Google Apps¤ò¤µ¤é¤Ë»È¤¤¤³¤Ê¤¹¤¿¤á¤Î
SAML¤Ë¤è¤ë¥·¥ó¥°¥ë¥µ¥¤¥ó¥ª¥ó¤ÎÀßÄê¡Ä¡Ä´äÊÒ Ì÷¡¤Ìî¼ ·òÂÀϺ

Âè6¾Ï¡§¡Á¿Í×ÁÇǧ¾Ú¤È¤½¤Î¶ñÂÎÎã¡Á
OpenAM¤Îǧ¾ÚÊý¼°¡Ä¡Ä´äÊÒ Ì÷¡¤Ìî¼ ·òÂÀϺ

·ë¹½¤Ê¥Ú¡¼¥¸¤Ï½ñ¤¤¤¿¤Î¤Ç¤¹¤¬¡¢¤â¤Ã¤È¾ðÊó¤¬Íߤ·¤¤¿Í¤Ë¤Ï ¡¢Â­¤ê¤Ê¤¤¤«¤â¤·¤ì¤Þ¤»¤ó¡£

£²¡Á£³²ó¤ÎÏ¢ºÜ¤Ë¤Ç¤­¤ì¤ÐÎɤ«¤Ã¤¿¤Î¤Ç¤¹¤¬...

¥æ¥Ë¥³¡¼¥óID¥Þ¥Í¡¼¥¸¥ã¡¼

¥×¥ì¥¹È¯É½¤Î¥Í¥¿¤Ï¤¤¤¯¤Ä¤«¤¢¤Ã¤Æ¤ä¤é¤Ê¤¯¤Á¤ã¤Ê¤¡
¤È»×¤¤¤Ä¤Ä¤â°Æ·ïÂбþ¤ä¸«ÀѤâ¤êºîÀ®¤¬Ë»¤·¤¯¤Æ¤Ç¤­¤Æ¤¤¤Þ¤»¤ó¤Ç¤·¤¿¡£

¤·¤«¤·¤Ê¤¬¤é¤µ¤¹¤¬¤Ëº£Æü¤Ï¥»¥ß¥Ê¡¼¤Ç¿·À½ÉʤÎÏäò¤¹¤ë¤³¤È¤Ë¤Ê¤Ã¤Æ¤¤¤ë¤Î¤Ç»ä¤ÎÃÂÀ¸Æü¤Ç¤â¤¢¤ë£±£°¡¿£²£±¤Ëȯɽ¤·¤Þ¤·¤¿¡£
¡ÊUnicorn IDM¤È»ä¤ÎÃÂÀ¸Æü¤Ï°ì½ï¤È¤¤¤¦¤³¤È¤Ë¤·¤è¤¦¡Ë

http://www.osstech.co.jp/pr/2009-10-20
http://www.osstech.co.jp/product/unicorn

¤¦¤Á¤ÎÀ½Éʤϥ­¥á¥é¤È¤«¥æ¥Ë¥³¡¼¥ó¤È¤«²Í¶õ¤ÎÀ¸¤­Êª¥·¥ê¡¼¥º¤Ç¤¹¡£

¥×¥ì¥¹¤¬Ã٤줿¤¿¤á¤Ë¿·À½ÉʤȤ¤¤¤¤Ä¤Ä¡¢¤¹¤Ç¤Ë¤¤¤¯¤Ä¤âƳÆþ»öÎã¤Ï¤¢¤ë¤·¡¢£³·î¤Ë¸þ¤±¤ÆƳÆþͽÄê¤â¤¤¤Ã¤Ñ¤¤¤Ç¤¹¡£

¤ß¤Ê¤µ¤ó¤â¤¼¤ÒƳÆþ¸¡Æ¤¤¯¤À¤µ¤¤¡£

LDAP¤ÈX.500¤Î°ã¤¤

¥»¥ß¥Ê¡¼¤Ç¤¤¤Ä¤â¡ÖLDAP¤ÏX.500¤ÎDAP¤ò·ÚÎ̲½¤·¤¿¤â¤Î¡×¤È¤«¡ÖX.500¤Î£¹£°¡ó¤Îµ¡Ç½¤ò£±£°¡ó¤Î¥³¥¹¥È¤Ç¼Â¸½¡×¤Ê¤É¤ÈÏ䷤Ƥ¤¤ë¤Î¤Ç¤¹¤¬¡¢ÀèÆü Ë¿»¨»ïµ­¼Ô¤ÎÊý¤«¤éLDAP¤ÈX.500¤Î¾ÜºÙ¤Ê°ã¤¤¤Ë¤Ä¤¤¤Æʹ¤«¤ì¤Æ¤·¤Þ¤¤¤Þ¤·¤¿¡£

¤½¤³¤Ç£±£°Ç¯°Ê¾å¤âÁ°¤Î»ñÎÁ¤òËÜê¤Î±ü¤«¤éõ¤·¤Æ¤­¤Æ´Êñ¤Ë¤Þ¤È¤á¤Þ¤·¤¿¡£¡ÊÁ°¡¹¿¦¤ÇOSF/DCE¤È¤«¤ä¤Ã¤Æ¤¤¤¿¤Î¤Ç¤·¤¿¡Ë

---------------------------------------------------
¡ýLDAP¤ÈX.500¤Î°ã¤¤

LDAP¤ÏX.500¤ÎDAP¤ò·ÚÎ̲½¤·¤¿¤â¤Î
¤·¤«¤·¡¢X.500¤Ç¤ÏDAP°Ê³°¤ËDSP,DOP,DISP¤È¤¤¤Ã¤¿¥×¥í¥È¥³¥ë¤¬µ¬Äꤵ¤ì¤Æ¤¤¤ë¡£
¤Ä¤Þ¤êLDAP¤Ë¤Ï¤³¤Î£³¤Ä¤Î¥×¥í¥È¥³¥ë¤¬Â¸ºß¤·¤Ê¤¤¤³¤È¤Ë¤Ê¤ë¡£

¢¨»²¹Í»ñÎÁ¡§X.500 Active Directory¤Ç¤Ï¼ÂÁõ¤µ¤ì¤Æ¤¤¤Ê¤¤µ¡Ç½

¡¦DUA(Directory User Agent):¥Ç¥£¥ì¥¯¥È¥ê¤ÎÍøÍѼԤËÂå¤ï¤Ã¤Æ¥Ç¥£¥ì¥¯¥È¥ê¤Ø¥¢¥¯¥»¥¹¤¹¤ëµ¡Ç½¡Ê¥×¥í¥°¥é¥à¤ä¥³¥Þ¥ó¥É¡¢¥é¥¤¥Ö¥é¥ê¡Ë

¡¦DSA(Directory Service Agent):¥Ç¥£¥ì¥¯¥È¥ê¾ðÊó¤ò´ÉÍý¤¹¤ë¸Ä¡¹¤Î¥·¥¹¥Æ¥à¡£¥Ç¥£¥ì¥¯¥È¥ê¤ÏDSA¤Î½¸¹çÂΤȤ·¤Æ¹½À®¤µ¤ì¤ë¡£

¡¦DAP(Directory Access Protocol):DSA¤¬DUA¤ËÂФ·¤Æ¥Ç¥£¥ì¥¯¥È¥ê¥µ¡¼¥Ó¥¹¤òÄ󶡤¹¤ë¤¿¤á¤Î¥×¥í¥È¥³¥ë

¡¦DSP(Directory System Protocol):DSA´Ö¤Çʬ»¶¶¨Ä´Æ°ºî¡ÊÏ¢º¿¤ä¾Ò²ð¡Ë¤ò¹Ô¤¦¤¿¤á¤Î¥×¥í¥È¥³¥ë

¡¦DOP(Directory Operational binding management Protocol):¥Ç¥£¥ì¥¯¥È¥ê±¿ÍÑ·ë¹ç´ÉÍý¥×¥í¥È¥³¥ë¡£DSA´Ö¤Î±¿ÍÑ·ë¹ç¤Îµ¬ÄêÆâÍƤä¾õÂ֤θò´¹¤ËÍѤ¤¤é¤ì¤ë¥×¥í¥È¥³¥ë

¡¦DISP(Directory Information Shadowing Protocol):DSA´Ö¤ÇÊ£À½¾ðÊó¤ò¸ò´¹¤¹¤ë¤¿¤á¤Î¥×¥í¥È¥³¥ë


X.500¤ÎDAP¤ÏOSI³ÆÁؤÎɸ½à¥×¥í¥È¥³¥ë¤ò»ÈÍѤ¹¤ë¡£
LDAP¤ÏTCP/IP¤Î¾å¤Ë¼ÂÁõ¤µ¤ì¤ë¤¿¤á¡¢DAP¤Ë¤¢¤ëROSE,RTSE,ACSE¤ò¼ÂÁõ¤·¤Æ¤¤¤Ê¤¤¡£
¡Ê¤³¤ì¤é¤Îµ¡Ç½¤ÏTCP/IP¤ÎÃæ¤Ç¼ÂÁõ¤µ¤ì¤Æ¤¤¤ë¤Î¤ÇLDAP¤Ç¤ÏÉÔÍסË

¡¦ROSE(Remote Operation Service Element):±ó³ÖÁàºî¥µ¡¼¥Ó¥¹Í×ÁÇ¡¢½èÍý¤Î°ÍÍê¤È·ë²Ì¤ÎÄÌÃΤȤ¤¤¦ÄÌ¿®¥á¥«¥Ë¥º¥à¤ò¼Â¸½¤¹¤ë¥×¥í¥È¥³¥ëÍ×ÁÇ

¡¦RTSE(Reliable Transfer Service Element):¹â¿®ÍêžÁ÷¥µ¡¼¥Ó¥¹Í×ÁÇ¡¢ÄÌ¿®·ÐÏ©¾ã³²¤Ê¤É¤Ë¤è¤Ã¤Æ¾ðÊó¤Î·çÍî¤ä½ÅÊ£¤¬µ¯¤­¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¥×¥í¥È¥³¥ëÍ×ÁÇ

¡¦ACSE(Association Control Service Element):¥¢¥½¥·¥¨¡¼¥·¥ç¥óÀ©¸æ¥µ¡¼¥Ó¥¹Í×ÁÇ¡¢¥³¥Í¥¯¥·¥ç¥ó¤Î³ÎΩ¡¢Àµ¾ï³«Êü¡¢°Û¾ï²òÊü¤ò¹Ô¤¦¥µ¡¼¥Ó¥¹Í×ÁÇ

---------------------------------------------------

ÍîÍë¤Î¤»¤¤¤ÇÅ쳤ƻÀþ»ß¤Þ¤êµ¢Âð¤Ë2»þ´Ö¤«¤«¤Ã¤¿

ÆüËܸìÈÇWindows Active Directory¤ÇÆ°ºî¤·¤Ê¤«¤Ã¤¿PWDUMP¤âÉðÅÄ·¯¤¬¤¢¤Ã¤È¤¤¤¦´Ö¤ËÆ°¤«¤·¤Æ¤¯¤ì¡¢Active Directory¤«¤éSamba¤Ø¤Î°Ü¹Ô¤Ë¸÷¤¬¸«¤¨¤Æ¤­¤Þ¤·¤¿¡£
¤¢¤È¤ÏAD¤Î¥Ä¥ê¡¼¤òOpenLDAP¤Ë°Ü¹Ô¤¹¤ë»þ¤ËLDIF¤¬¤¢¤ë¤ÈÊØÍø¤Ê¤Î¤Ç¤¹¤¬¡¢Windows¤Î¾å¤Ç´Êñ¤ËLDIF¤ò¼è¤ê½Ð¤»¤ë¥Ä¡¼¥ë¤¬¤¢¤ê¤Þ¤»¤ó¡£
Linux¤Î¾å¤Ê¤éPerl¤äldapsearch¥³¥Þ¥ó¥É¤Ç¼è¤ê½Ð¤»¤ë¤Î¤Ç¤¹¤¬¡¢¥æ¡¼¥¶¤¬Linux¤ò»ý¤Ã¤Æ¤¤¤Ê¤¤¥±¡¼¥¹¤â¤¢¤ë¤Î¤ÇWindows Only¤Ç¼è¤ê½Ð¤»¤Ê¤¤¤«¤Ê¤¡¤Èõ¤·¤Æ¤¤¤Þ¤¹¡£
Java¤ÇÆ°¤¯LDAP Editor¤ÇAD¤ò¸¡º÷¤·¤ÆEXPORT¤¹¤ë¤³¤È¤â¤Ç¤­¤½¤¦¤Ê¤Î¤Ç¤¹¤¬¡¢CN=Users¤äGroups¤ÏEXPORT¤Ç¤­¤ë¤â¤Î¤ÎÆüì¤Ê¥Ä¥ê¡¼Éôʬ¤¬EXPORT¤Ç¤­¤º»ß¤Þ¤Ã¤Æ¤·¤Þ¤¤¤Þ¤¹¡£
VB¥¹¥¯¥ê¥×¥È¤ÇɬÍפÊ°À­¤À¤±¤Ê¤é¼è¤ê½Ð¤¹¤³¤È¤Ï¤Ç¤­¤¿¤Î¤Ç¤¹¤¬¡¢LDIF¤Ç¼è¤ê½Ð¤¹¤¿¤á¤ËWindowsÈÇOpenLDAP 2.3¤Ë¤Ä¤¤¤Æ¤¤¤ëldapsearch¥³¥Þ¥ó¥É¤ò»È¤Ã¤Æ¤ß¤Þ¤·¤¿¡£
¤È¤³¤í¤¬Linux¤«¤é¼è¤ê½Ð¤·¤Æ¤âƱ¤¸¤Ê¤Î¤Ç¤¹¤¬¡¢AD¤Ï°ìÅÙ¤ËÀé·ï¤·¤«LDIF¤òGET¤Ç¤­¤Þ¤»¤ó¡£

[Read more of this post]

Mac OS X¤Îǧ¾Ú¤òLinux¤ÎOpenLDAP¤Ç

»î¤µ¤Ê¤­¤ã¤È»×¤Ã¤Æ˺¤ì¤Æ¤¤¤¿¤Î¤Ç¤¹¤¬¡¢º£ÆüɬÍפËÇ÷¤é¤ì¤Æ¸¡¾Ú¤·¤Þ¤·¤¿¡£
Mac OS X¦¤ÎÀßÄê¤Ï´Êñ¤Ê¤Î¤Ç¤¹¤¬¡¢¤¦¤Þ¤¯Æ°¤­¤Þ¤»¤ó¡£
¤É¤¦¤ä¤éSASLÀßÄ꤬ɬÍפʤ褦¤À¡£
¥°¥°¤Ã¤Æ¤â¤Û¤È¤ó¤É»ñÎÁ̵¤¯¡¢OpenLDAP¤Î¥É¥­¥å¥á¥ó¥È¤ò¸«¤Ê¤¬¤é´ª¤È·Ð¸³¤ÇSASL GSSAPIµ¡¹½¤òÀßÄꤷ¤¿¤é¤¦¤Þ¤¯Ç§¾Ú¤Ç¤­¤Þ¤·¤¿¡£
¤³¤ó¤Ê¤á¤ó¤É¤¯¤µ¤¤Kerberos V¤ÎÀßÄê¤Ï¤¤¤ë¤Î¤À¤í¤¦¤«¡©¤È»×¤Ã¤¿¤Î¤Ç¤¹¤¬¡¢Google¤·¤Æ¤â»ñÎÁ¤¬¤Û¤È¤ó¤É¤Ê¤¤¡£
¤ß¤Ê¤µ¤ó¤ÏMac OS X¤ÎÅý¹çǧ¾Ú¤É¤¦¤ä¤Ã¤Æ¤ë¤Î¤«¤·¤é¡©
OS X¥µ¡¼¥Ð¤ÎOpen Directory¤ò»È¤Ã¤Æ¤ë¤Î¤Ç¤·¤ç¤¦¤«¡©
Mac OS X¤ÇLinux¤Îpam_mkhome_dir¤ß¤¿¤¤¤Ê¤Î¤ò»È¤¤¤¿¤¤¤±¤É¤É¤¦¤ä¤Ã¤Æ¤¤¤¤¤â¤Î¤ä¤é...
¤¤¤í¤¤¤í¤Þ¤ÀÄ´¤Ù¤ë¤³¤È¤¬¤¢¤ê¤½¤¦¤Ç¤¹¡£