Are you using the Metaview of SUN Identity Manager?

Are you? If your answer is a NO, then it is suggested that you better stick with it. This feature currently has few bugs, which are yet to be corrected in the SUN Identity Manager release 8.0. It really plays with your attributes in such a way, that you hardly have an idea of what is happening.

I was using this feature recently and only landed in horrible times. When I referred to my seniors at SUN, they said they never use it as it has problems.

So to my suggestion to all SUN IdM folks out there is ... do not use Metaview please.

MetaView of SIM vs MIIS

Metaview feature of Sun Identity Manager, I don't know how many of the Identity professionals use it. However I wanted to take you through the architecture of it. It would be great for people who know MIIS.

The features are ...

Identity Attributes:
This feature allows you to configure the incoming and outgoing attributes. You will be able to create a new attribute, choose whether it should be stored in the identity manager, choose its source and destinations (resource). This is a feature that is exactly available in MIIS. You can also set the precedence for the source, like you may choose the first source and then the next which would be able to populate this attribute, again a feature of MIIS.

Identity Events:
Have you been into the third tab of Microsoft Identity Integration Server, where you can configure the delete rule? Yes, its the same way here. You will be able to configure the events like DELETE, DISABLE, ENABLE etc. You need to create a new event type, specify a rule on how it should be recognized and then actions to be performed.

These features are very specific to active sync because that is what a Synchronization engine works for.

Recently I have been working with these features and every moment I was feeling the MIIS features.

Bulk Loading

This may look novice to experienced professionals.

Have you ever did a bulk load of users into Sun Identity Manager? The findings I have are ...

Every attribute that comes under the waveset should be represented in the global namespace and the other attributes should be addressed as accounts[RESOURCE].attrName.

ex:
command,user,global.firstname,global.lastname,password.password,password.confirmPassword,waveset.resources
create,henryea,Earl,Henry,P@ssw0rd,P@ssw0rd,AD

Hope this should be useful to someone.

Using "lh console" when your SUN Identity Manager Application is down

I have just encountered a different kind of a problem. I have set the trace parameters in my Sun Identity manager. I have configured it to trace few adapters and finally gave a large number for the file size. Restarted the server and it failed saying ...

java.lang.NumberFormatException: For input string: "9999999999

So to correct this error I have got two options

1. Changing the System Configuration file using the lh console command

go to wshome\bin
Execute the following commands:
./lh console and press enter
You'll get to the configurator> prompt
Atthe promt, type
export -v c:\syscon.xml CONFIGURATION
now open the file c:\syscon.xml and scroll down till you find the required attribute to change.

Sun Positioned in Leaders Quadrant for Web Access Management

Image Source: Gartner's Website

The picture does the talking. SUN's Access Manager is listed in the leaders quadrant in the Gartner's magic quadrant for Web Access management. Sun Access Manager is a key product in the SUN Identity Management Suite.

Give a read on what experts have to say ...

1. Gartner

2. SUN

3. News Link

com.mysql.jdbc.packetTooBigException

Did you ever get this? I got it when I was working with Sun Identity Manager. The best solution is to edit the the mysql file, my.ini (windows) to add max_allowed_packet parameter under [mysqld] section and restart the MySql server.

# SERVER SECTION
# ----------------------------------------------------------------------
#
# The following options will be read by the MySQL Server. Make sure that
# you have installed the server correctly (see above) so it reads this
# file.
#
[mysqld]

max_allowed_packet=32M

SUN's strength in Role Mining just got bigger and better - acquired Vaau

SUN just acquired VAAU.

Vaau's solution is very good at Role Mining and Role Classification, the RBACx product suite is very robust in this respect. However Vaau's solution is always dependent on some Identity management solution like SUN Identity Manager.

As I wrote in previous blog about the strength of SIM 8.0, which would be very strong in Role mining, role engineering etc.

The acquisition of Vaau really completes Sun's story around Enterprise Identity Management and Role-Compliance and will keep Sun in the forefront of Enterprise Identity Management.

Read More

What is org.apache.jasper.JasperException?

I have been successfully running an instance of the SUN Java Identity Manager 7.1 since long. Suddenly one day after I reboot my machine I see this error.


I am very curious to know why exactly this happens with something which was working perfectly.

I shall post the solution once I find it, however if someone can throw some light on this it would be great. Thanks

Happy Diwali

Happy Diwali to one and all.

May this festival of lights bring prosperity, peace, love success for everyone.

About Diwali: The very reason why we celebrate this festival is to mark the victory of God/Good over evil. Two different stories that we hear are ...

1. Few people say, its the day when Lord Krishna along with Lordess Satyabhama fought and killed Narakasura.

2. Few others say, that Lord Rama killed Ravana and liberated Lordess Sita this day.

That is the piece of information I know :-)

Anyway have a great festival.

HP Security Handbook

Was just reading some blogs and suddenly found this.

This handbook contains a chapter on Identity management. I should say, its lucid and wonderful. To read the other contents ...

Happy Andhra Formation Day - November 1st

Every time we get holiday on November 1st, sure everyone born in Andhra Pradesh remembers Sri Potti Sriramulu garu.

Is remembering him enough? Does enjoying a holiday alone, makes us a proud and responsible Andhrite?? I am sure we all dont think so. This person gave up his life just to bring this state to us. He gave up food, water, shelter comforts everything for us. Today the state proudly boasts of big time IT parks, huge growth in infrastructure and many other goodies. However, to the very truth, today there are many Potti Sriramulus out there who dont have water to drink and food to eat.

All of these people (freedom fighters) brought us freedom which we couldn't handle properly. Who ponders about this? I am sure all of us do, in our offices, at cubicles at social gatherings etc. Then why dont we have the right results? Because actions are pending.

The first best action which we all should implement is ... I think, we should vote. Every time there is election, wherever we are in India, we should make a point that we go back and vote, because we are educated enough to choose the right leaders.

The second best thing we can do is to save the natural resources like Water, Food, Vegetables etc.

I thought to mention my thoughts this way about a great day.

JAI TELUGU TALLI

Puzzling???

I have been to Visakhapatnam recently. I took a pic at the airport. Can you see the picture clearly and make out whats wrong there?

Ok, chance 2.

Got it? The emergency exit door in the airport was locked with a big size steel lock. I just wonder how did they get the idea of locking the emergency exit. This is how things are.

Is it really necessary to show verbal aggressiveness?

I think Indian cricketers are putting up a bad show. Why should somebody show facial aggressiveness or be aggressive verbally? Actions of the game are the ones which are supposed to be spoken, rather than shouting or using abusive language on the other team.

Phlegmatism should be practised by our team. When they are on the international stage they need to follow the law and rules. If the other team resorts to verbal aggressiveness and uses abusive language the team is expected to lodge a compliant with the authorities. Or, if the example of Arjuna Ranatunga be taken, he has asked his entire team to leave the field quietly when Muttiah muralitharan was given no-ball thrice mentioning his action wasn't right.

Similarly our countrymen can simply walk away from the field saying they used abusive language rather than retaliating in the same fashion. If done so, what difference exists between them and us.

My fellow countrymen, we are professionals and lets be so.

What is BSI according to Germany?

What is BSI according to Germany?

BSI is a kind of organization in Germany which is equivalent to NSA in USA. It is trying to provide standards and guidelines to all the government organizations as well as private organizations in their country. The countrymen who designed Enigma now have an organization something like NSA. Does that mean we are going to see new algorithms replacing Triple-DES etc?

Also there is a new framework coming up from SOx especially for Europe called the EuroSOx. People argue it would be similar, however.

CEC - SIM v7.x?

Are you hanging with any version other than 7_1_1???? If you are then get ready to be completely outdated soon. Yes you got it right ... it Sun Identity Manager 8.0 set to release very soon.

I have written the new features of 7.1 after it got released. This time I have the privilege of writing about 8.0 even before its release. The top best feature of this version would be Role Management.

Features:

Flexible Role Modelling
Bi - Level RBAC
Business Roles
IT Roles
Also provision for Multilevel RBAC
Offers Role Subtypes, defaults being Business, IT, Application and Asset
New Sub-Types can be created
Extended attributes on Role Subtypes

Now you will also be able to search on Role Subtypes, for example "all application roles" etc.

New Role Features ...

Activation:

• Required: Get activated directly
• Conditional: Rule based, i.e. if the user object is getting an update and it requires few other privileges then it is allocated
• Manual: Implicit
  

Role start date and End date: What other granularity can one ask for?

Role Change Approval Process: If the actual Role definition itself is set to change then it should go through an approval process.

These are very few of the amazing features of 8.0. Keep waiting for it to release.

SUN Identity Manager rocks.

LasVegas - Interesting facts

The casinos ...

1. Flamingo
2. Rio
3. Paris
4. Ballys
5. Ceasers
6. Harrahs

belong to One person. All these six are connected one to another via all modes, escalators, lifts etc and is called the LasVegas Strip.

The big three in Vegas are MGM, Ceasers, Bellagio. The musical fountain that shows up every evening at intervals of 10 mins is a feast to eyes. This is the only show that comes for free :-)

All remaining (Comedy, classic, nude) shows have a minimum entrance fee of $40.

CEC - The Professional Services Party

Wow ...

All these days it used to be like only me and harini working for SUN IdM PS-India and few interactions with people in the same in US. Only know by name.

Today Arun Shresta, my practice head threw a party to all the PS folks. I met, Rene Ugarte, Mark, Steve Hulme, Chris Timmerman - the geek, Tiffany Ryan, Greg Buchanan, Sharif, Manish Chopra and many other.

It was kind of home after meeting all these senior guys and having the tech talks with them.

The party went well, however being a vegetarian I dont think I had any much options. In a wonderful situation like this food was the only concern. Unimaginably bad. Well thats how the life of a Veggie would be in USA rather anywhere outside India.

CEC - Identity Management

Monday evening I attended the session on Identity managment. Johnny cope was there taking the session. It was supposed to be a deep dive session, however everyone started asking/discussing solutions to their client problems. However their team is currently, I was informed, are making a team which only takes care of preparing images and deploying on public access servers. Thus the presales guy who visits the client can directly login with his id and give them a demo. Also licenses to try the product online for a week or couple are being to be sold so that the clients can check the product for a while before taking the decision.

SUN Identity Manager rocks.

NetBEANS Plugin:

Many of us know the BPE will be scrapped off, phase wise and finally everyone is expected to use NetBeans to create all custom objects in Sun Identity Manager. Every version of NetBeans vs IdM war file there is a .nbm file that needs to be imported into the Netbeans. I got my hands dirty using the NetBeans 5.5 and SUN Identity Manager war file for 7.1.1. Its awesome to use Netbeans instead of BPE, except the heavy memory requirement NetBeans has.

Tuesday I would be attending wonderful sessions like RBAC, VIDT, Security Considerations for IDM etc. Will post it soon.

CEC - Indian Telecom scenario.

I attended a session on the telecom scenario in India with Vodafone being the case study. There are few amazing statistics that I would like to mention which I came to know.

1. Vodafone has presence in 62+ countries
2. 1.2 Billion population of India is almost greater than the population of both USA and UK combined
3. Only 20% of Indians use mobile phones. (There may be a scenario that one person may have multiple connections too)
4. 87.9% of the Mobile users in India use only Prepaid
5. Indian operators are providing the cheapest call rates compared to the entire world
6. The target by 2010 is that there would be 500Mn Mobile users in India
7. Vodafone just by acquiring Hutch got 30Mn subscribers which is almost 13% of its worldwide subscription

Aren't there facts amazing.

Will keep posting.

First updates of CEC??? Nope Vegas First

Vegas ........ ah what a place?

The first thing one needs to know is .... "whatever happens in Vegas, stays in Vegas" is the quote here. Its a different world altogether a fantasy world. You never know when its night and when its a day. At night the city just looks like gold spread all over. If there is money flowing anywhere then it is here. People just spend money like anything. The description of Vegas can be given better by a poet or a story writer, for a person like me, its simply speechless.

SUN has organized the conference in Hotels Paris and Bally's. I stay in the later. This is just in front of the Ballagio where the eleven stand and watch the fountains after walking away with the 16 million dollars. I was just watching the same today.


Everyone I met, during my journey to Vegas asked me only one thing, "Conference at Vegas???". And I didn't know what to say. Whatever may be it, the place is a wonderful one to visit in one's lifetime.

Will keep posting.