OOW13: Next Generation Optimized Directory (CON9024)

Next-Generation Optimized Directory: Oracle Unified DirectoryEtienne RemillonSr. Principal Product Manager - OracleNahil Khan Sr. Member Technical StaffSys-Engineering - Verizon Wireless


The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.


Oracle Fusion MiddlewareBusiness Innovation Platform for the Enterprise and Cloud

Complete and Integrated

Best-in-class

Open standards

On-premise and Cloud Foundation for Oracle Fusion

Applications and Oracle Cloud

User Engagement

Identity Management

Business Process

Management

Content Management

Business Intelligence

Service Integration Data Integration

Development Tools

Cloud Application Foundation

Enterprise Management

Web Social Mobile


Program Agenda

Directory Drivers and Trends

Introduction to Oracle Unified Directory

Unleash your Potential with OUD 11gR2

Customer Deployments


Directory Drivers and Trends


Identity Core to Business Transformation

Growing number of connected devices

Location based new applications

Users expecting environment customization

On premise, private, public apps

Identity for SaaS apps

Fragments identity

Protect Identity and Personal data

Interaction with many users

Maintain relational links to many users

Increased traffic

Increased customization

Millions, billions of devices connecting

Generate massive data

Billions of credentials

Simplification, defragmentation

Address full identity lifecycle

Reduce Total Cost of Ownership

Remove latency & integration errors

Simplify upgrades

Mobile Cloud Social Internet of Things Platform


Insert Picture Here

SOCIAL MEDIA MERGES WORK & PLAY

Plan to social enable applications in the near future 44%

Source: Enterprise strategy group 2012

Of the world reached by social media sites82%ComScore Datamine Jan 2012

Market Trends – Social Media


• Smart devices increasing

• Bring Your Own Device(BYOD)

• Cars, Fridges, TV’s• Smart Meters

Market Trends – Internet of Things


Point Solutions Platform Intelligence

SocialSites

Hybrid Cloud

Mobile

BehaviorMonitoring

Market Trends – Clear Upgrade Path


Complex customizations required to meet individual requirements

Accelerate configuration/deployment cycles and simplify maintenance

Multi-vendor gaps, performance issues, integration challenges, upgrade cycle timing

Higher Total Cost of Ownership (TCO) with “integrated best of breed”

Market Trends – Infrastructure Consolidation


Oracle Unified Directory


Introducing Oracle Unified Directory

• Scale to 10’s of Billions• Convergence of Directories• Integrated with ODSM for

configuration and Enterprise manager for monitoring

• Inter-operable with all certified ODSEE ISV software

• Integrated with ODS+Optimized for cloud, mobile

and social

Next Generation

Integrated and Interoperable

Extreme scale


Extreme Scale

3X ReadPerformance

5X WritePerformance

Compared to ODSEE

• Directory Server• Proxy / Distribution Server • Replication Server• Replication Gateway

Core Components

Proxy

Storage

Oracle Unified

Directory

Synch

Built on OpenDS

Convergence of directories

Advanced Replication

Flexible Deployment

Horizontal data vs. Monolithic data scale approach

Will continue to enhance and

maintain existing directory

offerings


Ready for Drop-In: Interoperable and Compatible OUD Replication GTW for DSEE

OUD

Replication

Topology

ODSEE

Replication

Topology

OUD Directory Server 1

OUD Directory Server 2

ODSEE Directory Server 1

ODSEE Directory Server 2

OUD Replication Gateway

OUD Replication Gateway

• Fully Compatible With ODSEE

• Bi-directional replication with ODSEE

• Run mixed OUD and DSEE environment

Simplified Deployment


Bi-directional synchronization with OUD / OID / ODSEE / AD, IBM TDS, Novell eDir, Oracle DB and LDIF filesExtensibility Framework for other synchronization connectorsSynchronization mapping rules (dn, attribute level, custom mappings)Oracle Password Filter DLL to sync Password with AD

Interoperable and CompatibleDirectory Integration Platform for other Directories and DB


Complete Reliability, Complete Service Assurance

Performance bottleneck controlled at all levels

Security assured at all levels

High Volume proved at all levels

Availability and reliability committed at all levels

Oracle is the only vendor with a complete modern directory solution

Identity is Core to All Computing

Directory Server

Database

JVM

File System

Operating System

Hardware


Unleash your potential with latest version of Oracle Unified Directory 11gR2 (11.1.2.1.0)


OUD 11gR2

Optimized OUD for T4/T5 SPARC and Solaris

– Seeing 3x-5x the performance compared with DSEE

• OUD and OVD convergence• Coverage of OVD routing features

• Proximity/location based LDAP search for SN

• Oracle Database EUS support• Modern platforms

• Solaris 11, Oracle Linux 6.x, AIX 6.1/7.10 10 20 30 40 50 60 70 80 90

DSEE 6.3.1

ODSEE 11g

OUD 11g

1X

4X

20X

Se

arc

h o

ps

/se

c.

# of cores


OUD 11gR2PS1 Update (1/2)

Further enable upgrades from DSEE:Macro ACI

Extensibility framework

Enable EUS with 3rd party directories:Support for proxy mode to AD, OUD, ODSEE, eDirectory

Support for additional DB versions: 10.2, 11.1, 11.2

Kerberos and Certificate based authentications

Support of LDAP in TNSnames

Enable ODSM deployments on IBM WebSphere


OUD 11gR2PS1 Update (2/2)

More secure:SHA-2 password encryption by default

Pass Through Authentication with Kerberos

Increased performance:Export and import / ACI evaluation / BIND operation

Out of the box tuning for DB caches and entry cache for groups operation

Smaller footprint: Reduced database size

Improved maintainability: “logger” for admin connector


ODSEE 11.1.1.7.0 (T4) OUD 11.1.2.1 (T4) OUD 11.1.2.1 (T5-2*)0

20,000

40,000

60,000

80,000

100,000

120,000

140,000

160,000

180,000

Search Ops/s

ODSEE 11.1.1.7.0 (T4) OUD 11.1.2.1 (T4) OUD 11.1.2.1 (T5-2*)0

2,000

4,000

6,000

8,000

10,000

12,000

Modify Ops/s

OUD 11gR2PS1 vs. ODSEE 11gR1PS2 on T5-2* SPARC

– Do Not Distribute

10M entries @ 4.4KB (120+ attributes)


Oracle Optimized Solution for Oracle Unified Directory

3x SPARC T4-1 servers3x storage array Sun Storage 2500-M21x Integrated Load Balancer (ILB)10GbE Switching among all servers (optimally)

Download Technical White Paper from http://www.oracle.com/optimizedsolutions

Optimized Solution pre-tuned to get the best performance

10x higher scalability than previous DS products

Scalable to the highest levels, 5 Billion+ operations per day

5x Faster than previous Directory Server products

Fully tested implementation guide speeds deployment by 3x

http://www.oracle.com/optimizedsolutions


OUD Customer Adoption Momentum

In live production In pre-production In UAT In testing

Mature and Proven

Large US University

Computer Manufacturer

Retail Brazil

Global Insurance

Spanish Insurance

Global Food Company

European Car ManufacturerAsian Mobile Operator

US Mobile Operator

Industrial Gases Manufacturer

Governmental Health Service

Agency for Health and Pensions

Pharmaceutical

Banking Card Industry

Semiconductor Company

Communication and Media

Australian Finance Company

Software ProviderUS Bank

Oracle IT

Canadian Telecommunication

European Telecom Operator


Modernize Sun DSEE 6.3 to achieve better performance and longer support time frames

2 OUD servers + 1 isolated master for DR, 200+ apps; 2M entries and expected to grow

“Dump and Load” upgrade approach:

– Temp ODSEE 11g replica in staging area

– Run OUD tools (ds2oud) to migrate schema, config and diagnose user data

– Project handled in 4 months, zero downtime

Customer Upgraded from Sun DSEE 6.3

Solutions

Download white paper from Oracle.com

Large US University

http://www.oracle.com/us/products/middleware/identity-management/directory-services/oud-university-case-study-1842846.pdf


Upgrade from OpenLDAP for superior Scalability

Get Strong support vs. open source

Auth/profiles for public end user portal for a global couponing program

27 M users

Accommodating 50K/day new users

2 OUD servers + 2 OUD in standby for DR

Customer Switched from Open Source LDAP

Solutions Global US Food Company

+


Customer Upgraded from Sun DS 5.2

Solutions

Asian largest Mobile Telco in the country

Directory used to manage 36M users and mobile devices with over 200M ops/s

Upgrade includes co-existence with Sun DS 5.2 for smooth transition

OUD selected because of performances on read/writes and import/export

Large Asian Mobile Operator


200M: Real World Large Scale Access and Directory Deployment at Verizon

Solutions

Validated how to move from Sun DSEE 6.3 to “directory” leveraging Oracle BDB

Validate scalability and performance for very large number of users

Deployment includes six ways multi-master setup in 3 data-centers


Join the Oracle Community

Oracle.com/Identity

Twittertwitter.com/OracleIDM

Facebookfacebook.com/OracleIDM

Oracle Blogs

blogs.oracle.com/OracleIDM

blogs.oracle.com/directoryservices


Graphic Section Divider

OOW13: Next Generation Optimized Directory (CON9024)

Technology

Transcript of OOW13: Next Generation Optimized Directory (CON9024)