Hi Kai, All fair questions. Our initial efforts in the SCIM spectrum was an offshoot of eSCIMo, with the primary work being done by Steve Moyer. Once the spec was finalized we did a first principles redesign in an attempt to make a fully compliant library implementation. This effort was to support an identity system that we've built and are running. The identity system is built out from many Apache directory components; Fortress for RBAC/ABAC, and the LDAP API to be specific. We're watching the Kerby work anxiously because it will allow me to retire a C++ shim service I wrote for doing Kerberos administrative tasks.
I think the Directory project has all of the tools to build out a first class identity solution and I'm hoping our SCIM implementation will be a natural fit to the existing tool set. Thanks again for the consideration. Shawn "The programmer … works only slightly removed from pure thought-stuff. He builds his castles in the air, from air, creating by exertion of the imagination." — Fred Brooks Shawn Smith Director of Software Engineering Administrative Information Services Penn State University 814-321-5227 se...@psu.edu https://keybase.io/ussmith From: "Zheng, Kai" <kai.zh...@intel.com> To: "Apache Directory Developers List" <dev@directory.apache.org> Sent: Saturday, June 25, 2016 1:21:21 PM Subject: RE: [Vote] Accept Scim contribution I would love to see the eSCIMo component being revived and the two similar projects being consolidated. Considering the place holder is ready there, we could probably trust the party and give them the space to develop in the direction, without too much overhead incurred to the left of us I guess. However, I have some questions to have to ask. Why is Apache Directory a natural place for the guys to consider contributing the project to? How is it linked with the other components? What’s the rational? Sorry I may have missed some discussions before. +1 on the vote once above questions are addressed. Thanks. Regards, Kai From: Kiran Ayyagari [mailto:kayyag...@apache.org] Sent: Saturday, June 25, 2016 3:30 PM To: Apache Directory Developers List <dev@directory.apache.org> Subject: Re: [Vote] Accept Scim contribution On Sat, Jun 25, 2016 at 5:14 AM, Emmanuel Lécharny < elecha...@gmail.com > wrote: Hi guys, two months ago, Shawn Smith wrote us to inform the Apache Directory project that he wanted to contribute the project he is working on with Steve Moyer, Christopher Harm and Alex Haskell. We have discussed about this proposal one month ago, but due to some highly busy agenda on my side, I sadly forgot to start a vote (and I have to be frank : would have I started the vote, I would not have had teh time to deal with the consequences of a positive vote). Now that I'm done with teh API and ApacheDS releae, and my work on the API branch, my agenda has cleared up. So here is a formal vote for the integration of this project in the apache Directory project, as a sub project. My opinion is that this would replace eSCIMo that has never been released, unless Kiran decide otherwise. We would naturally use the existing eSCIMo project web-site as a plcae-holder. One idea would also be that we could keep the eSCIMo name, or use SCIMple-Identity, but it would be really up to the people to decide. I am fine with using eSCIMo name and site BQ_BEGIN If we get a positive vote, we will then have to vote the 4 people who participated to the code as committer - if they want to pursue their work, of course ! -. But first, let's vote [ ] +1, accept the SCIMple-Identity project as a subproject of Apache Directory BQ_END +1, however I may not be able to spend time on this cause of the work I am doing on another SCIM server (written in Go) and other paid work. BQ_BEGIN [ ] +/-0 No opinion [ ] -1 : don't accept the SCIMple-Identity project. For the record, the code base is available at https://github.com/PennState/SCIMple-Identity , and it's already under a AL 2.0 license ( https://github.com/PennState/SCIMple-Identity/blob/develop/LICENSE ) Many thanks, and trully sorry fo rthe delayed vote ! BQ_END Thank you Kiran Ayyagari http://keydap.com
