Search filters used within UM-LDAP comply with [RFC1558].
INTEROPERABILITY
The current implementation of the X.500-backended LDAP server (ldapd)
is known to work with ISODE-based DAP libraries and the QUIPU DSA.
PILOT CONNECTIVITY
DUA connectivity should be possible to all pilots.
BUGS
Bug reports should be sent to bug-ldap@umich.edu.
CAVEATS AND GENERAL LIMITATIONS
None, aside from those mentioned above under completeness.
INTERNETWORKING ENVIRONMENT
LDAP clients use TCP to communicate with the LDAP server. The LDAP
server normally uses [RFC1006] with TCP/IP to communicate with the
DSA, though any other transport mechanism for DSA communication
supported by ISODE should be possible.
HARDWARE PLATFORMS
The complete UM-LDAP package has been ported to a wide variety of
UNIX systems, including: Sun3 and SPARCs running SunOS 4.1.x or
Solaris 2.x, DECStations running Ultrix 4.3, HP 9000 series running
HP-UX 9.05, IBM RS6000 running AIX 3.2.5, PCs running SCO, FreeBSD,
NetBSD, or LINUX, DEC Alphas running OSF/1, and NeXTStatios running
NeXTSTEP 3.2. The complete package has also been ported to VMS. In
addition, the LDAP client libraries and some client programs have
been ported to Apple Macintosh and PCs running MSDOS or Windows.
SOFTWARE PLATFORMS
The complete UM-LDAP package has been ported to a wide variety of
UNIX systems, including: SunOS 4.1.x, Solaris 2.x, Ultrix 4.3, HP-UX
9.05, AIX 3.2.5, SCO, FreeBSD, NetBSD, LINUX, OSF/1, and NeXTSTEP
3.2. It has also been ported to VMS. In addition, the LDAP client
libraries and some clients have been ported to Macintosh (System 7),
MSDOS (some TCP/IP stacks), and Microsoft Windows 3.1, 95, and NT.
NUMBER OF IMPLEMENTATIONS IN THE FIELD
Unknown; used by almost all Internet X.500 sites.
AVAILABILITY
This software is openly available for all to use. It may be obtained
by anonymous FTP from terminator.rs.itd.umich.edu in the /ldap/
directory (URL: ftp://terminator.rs.itd.umich.edu/ldap/). The latest
information about LDAP can always be found on the LDAP Home Page at
this URL:
http://www.umich.edu/~rsug/ldap/
Send e-mail to ldap-support@umich.edu for additional assistance.
This software was developed at the University of Michigan by Tim
Howes with help from Mark Smith, Bryan Beecher, Gordon Good, Steve
Rothwell, Lance Sloan as well as many others around the Internet. It
is subject to the following copyright:
Copyright (c) 1992-1996 Regents of the University of Michigan.
All rights reserved. Redistribution and use in source and binary
forms are permitted provided that this notice is preserved and
that due credit is given to the University of Michigan at Ann
Arbor. The name of the University may not be used to endorse or
promote products derived from this software without specific prior
written permission. This software is provided ``as is'' without
express or implied warranty.
DATE LAST UPDATED or CHECKED
December 1995
ADDITIONAL INFORMATION and/or COMMENTS
[No Information Provided -- Ed.]
NAME
maX.500 :: Macintosh DUA Interface
University of Michigan
ABSTRACT
maX.500 is a Directory User Agent (client) for Apple Macintosh. It
is widely used within Paradise and other Internet X.500 pilots.
maX.500 supports searching, browsing, and modifying directory
entries. Display of textual information, playing of audio, and
viewing of both black-and-white (fax) and color (JPEG) images are
supported. Communication with directory servers is via the
Lightweight Directory Access Protocol (LDAP) over TCP/IP. maX.500
works both with standalone LDAP directory servers (such as slapd) and
with X.500-backended LDAP servers (such as ldapd).
maX.500 is a native Macintosh application, and has a friendly
interface. It requires System Software version 6.0.5 or later and
Apple's MacTCP or Open Transport TCP/IP networking. The current
version of maX.500 is 2.0.2, although version 2.1 is in beta test.
The latest information about maX.500 can always be found on the
maX.500 Home Page at this URL:
http://www.umich.edu/~rsug/ldap/max500/
COMPLIANCE with X.500-1988 (applicable only for DSAs and DUAs)
maX.500 works over LDAP, and is subject to LDAP's limitations. The
bind, search, compare, add, delete, abandon, modify, and modifyrdn
operations are all used by maX.500. Size and time limits may be
specified, as may alias dereferencing control.
COMPLIANCE with X.500-1993 (applicable only for DSAs and DUAs)
maX.500 currently uses LDAP as defined in [RFC1777], which does not
support any 1993-specific X.500 features.
CONFORMANCE WITH PROPOSED INTERNET STANDARDS
Believed to be compliant with:
[RFC1274], [RFC1777], [RFC1778], [RFC1779], [RFC1781]
CONSISTENCE WITH INFORMATIONAL AND EXPERIMENTAL RFCs
Search filters comply with [RFC1558].
Uses the LDAP API, as defined in [RFC1823].
INTEROPERABILITY
maX.500 is known to work with the U-M LDAP servers (ldapd and slapd).
It has also been tested with other commerical LDAP servers, such as
Control Data's server. maX.500 has been used with a wide variety of
DSAs (always through an LDAP server).
PILOT CONNECTIVITY
DUA connectivity should be possible to all pilots.
BUGS
Bug reports should be sent to max500-bugs@umich.edu.
CAVEATS AND GENERAL LIMITATIONS
maX.500 does not support modification of "photo" (fax), "jpegPhoto",
or "audio" attributes. Versions of maX.500 before 2.1 did not
support a fully functional browse facility.
INTERNETWORKING ENVIRONMENT
maX.500 is an LDAP client, and as such is uses TCP to communicate
with the LDAP server. Apple's MacTCP control panel or Open Transport
TCP/IP networking is required.
HARDWARE PLATFORMS
maX.500 runs on Apple Macintosh Plus or later Macintosh computers,
including PowerMacs. It requires 600K of free RAM.
SOFTWARE PLATFORMS
maX.500 requires Apple System Software 6.0.5 or later (System 7
preferred) and MacTCP 1.1 or later (2.0.6 preferred). maX.500 2.1,
which is currently in beta test, will run natively on the PowerMac
and use the native Open Transport networking interface if it is
installed.
NUMBER OF IMPLEMENTATIONS IN THE FIELD
[No information provided. -- Ed.]
AVAILABILITY
This software is openly available for all to use. It may be obtained
by anonymous FTP from terminator.rs.itd.umich.edu in the /ldap/max500
directory (URL: ftp://terminator.rs.itd.umich.edu/ldap/max500). The
latest information about maX.500 can always be found on the maX.500
Home Page at this URL:
http://www.umich.edu/~rsug/ldap/max500/
Send e-mail to max500@umich.edu for additional assistance.
This software was developed at the University of Michigan by Mark
Smith with help from Tim Howes and many others around the Internet.
It is subject to the following copyright:
Copyright (c) 1995 Regents of the University of Michigan. All
rights reserved. Redistribution and use in binary forms is
permitted provided that this notice is preserved and that due
credit is given to the University of Michigan at Ann Arbor. The
name of the University may not be used to endorse or promote
products derived from this] software without specific prior
written permission. This software is provided ``as is'' without
express or implied warranty.
DATE LAST UPDATED or CHECKED
December 1995
ADDITIONAL INFORMATION and/or COMMENTS
[No Information Provided -- Ed.]
NAME
Messageware DSA
NEXOR
ABSTRACT
Messageware DSA is a high performance X.500(93) DSA. Characteristics
of the DSA are:
* DAP access
* DISP for replication and shadowing information
* DSP access
* LDAP
* Full 1993 Basic and Simple Access Control
* Support for X.400, X.500, and [RFC1274] attributes and
object classes
* Approximate match based on Soundex.
* Flexible schema management
* Anti-trawling access control
* Knowledge management mapped onto DIT
* Attribute inheritance
* Remote management
COMPLIANCE with X.500-1988 (applicable only for DSAs and DUAs)
Messageware DSA is an X.500 1993 compliant DSA
XT-QUIPU is a X.500 1988 compliant DSA conforming to NIST SIA version
2.
COMPLIANCE with X.500-1993 (applicable only for DSAs and DUAs)
Messageware DSA isn X.500 1993 compliant DSA implementing standard
access control, replication and shadowing, X.509, for a full
conformance statement see the NEXOR web site(http://www.nexor.com).
CONFORMANCE WITH PROPOSED INTERNET STANDARDS
The following are supported: String DN format [RFC1485], [RFC1274],
[RFC1276], and [RFC1277].
CONSISTENCE WITH INFORMATIONAL AND EXPERIMENTAL RFCs
The following are supported: UFN [RFC1781], [RFC1278], and [RFC
1279].
INTEROPERABILITY
Messagware DSA has been extensively interoperability tested at
Eurosinet workshops and at the EEMA X.500 demonstration. Other
vendors DSAs/DUAs interoperated with include:
ICL, Control Data, Unisys, Digital, Isocor, DCL, SNI, Boldon James
It is also in operation with DSAs used in the PARADISE and other
pilot projects.
PILOT CONNECTIVITY
Messageware DSA is fully connected to the PARADISE and PSI White
Pages X.500 Pilots.
BUGS
No known bugs. Support is given via phone or email to
"support@nexor.co.uk"
CAVEATS AND GENERAL LIMITATIONS
None.
INTERNETWORKING ENVIRONMENT
OSI TP4 wtih CLNP
OSI TP0 with X.25 or CONS
[RFC1006] with TCP/IP
HARDWARE PLATFORMS
Sun: SunOS
Solaris
X86
IBM RS/6000: AIX
HP 9000
It is available on a number of other UNIX platforms
SOFTWARE PLATFORMS
SunOs 4.1.3 Solaris 2.4 AIX 3.2 DRS/NX 6000 HP-UX 9.01
Other software platforms are available.
NUMBER OF IMPLEMENTATIONS IN THE FIELD
[No information provided. -- Ed.]
AVAILABILITY
Messageware DSA is available from NEXOR and NEXOR partners. For more
details contact:
NEXOR
PO Box 132
Nottingham
NG7 2UU
UK
DN: c=GB@o=NEXOR Ltd
Telephone: +44 115 952 0510
Fax: +44 115 952 0519
E-Mail: info@nexor.co.uk
DATE LAST UPDATED or CHECKED
Dec 95
ADDITIONAL INFORMATION and/or COMMENTS
[No Information Provided--Ed.]
NAME
MESSAGEWARE PC-DUA
NEXOR
ABSTRACT
PC-DUA provides a MS Windows based user interface to the X.500
Directory.
Features include:
o Modify - allows users and administrators alike to add, change or
delete directory entries
o Searching - powerful searching tool so specific information can
be quickly located. Also lists close matches
o Highly flexible - can be customised to suit an organisations
particular requirements
o Directory Browser - to enable user to identify directory entries
o History - allowing quick access to previously referenced parts
of the DIT.
o User Friendly Name (UFN) based searching
o Hypertext-like navigation.
o Friendly names for attribute labels.
o Intelligent choice of entries to display when moving to a new
location in the DIT.
o On-line hypertext help.
COMPLIANCE with X.500-1988 (applicable only for DSAs and DUAs)
Compliant with LDAP 3.
COMPLIANCE with X.500-1993 (applicable only for DSAs and DUAs)
Compliant with 1993 versions of ITU X.500/ISO 9594 services and
protocols
CONFORMANCE WITH PROPOSED INTERNET STANDARDS
The following are supported: [RFC1006]
[RFC1202]
[RFC1274]
[RFC1277]
[RFC1777]
CONSISTENCE WITH INFORMATIONAL AND EXPERIMENTAL RFCs
[No information provided--Ed.]
INTEROPERABILITY
PC-DUA has interoperated with LDAP 2.0 and 3.0 distributions.
Eurosinet Workshop:
SNI, CDS, AT&T, ICL, Digital, ISOCOR, UNISYS and QUIPU.
PILOT CONNECTIVITY
Full DUA connectivity to the NADF, PARADISE and PSI White Pages X.500
Pilots.
BUGS
No known bugs. Support is given via phone or email to
"support@nexor.co.uk"
CAVEATS AND GENERAL LIMITATIONS
None.
INTERNETWORKING ENVIRONMENT
WinSock based TCP/IP stacks
HARDWARE PLATFORMS
386 PC or greater WITH 4MGBYTES RAM
SOFTWARE PLATFORMS
MS WINDOWS 3.1
Windows NT
Windows95
NUMBER OF IMPLEMENTATIONS IN THE FIELD
[No information provided. -- Ed.]
AVAILABILITY
PC-DUA is commercial software. For more details contact:
NEXOR
PO Box 132
Nottingham
NG7 2UU
UK
DN: c=GB@o=NEXOR Ltd
Telephone: +44 (0) 115 952 0510
Fax: +44 (0) 115 952 0519
E-Mail: info@nexor.co.uk
DATE LAST UPDATED or CHECKED
Dec 95
ADDITIONAL INFORMATION and/or COMMENTS
[No Information Provided--Ed.]
NAME
NonStop Directory Services (NSDS)
Tandem Computers, Inc.
ABSTRACT
The Tandem NonStop Directory Services (NSDS) product provides a
distributed open directory service on Tandem platforms. It is an
industrial strength implementation incorporating the Tandem product
fundementals of resilience, linear extensibility, fault-tolerance, and
continuous availability. NSDS runs on the NonStop Kernel Guardian
Personality which includes support for Tandem system characteristics
such as data integrity, process persistence, and server classes. NSDS
supports access over X.25 WAN, LAN and TCP/IP networks.
NSDS is a port of OSF's DCE GDS Reference Implementation, with Tandem
enhancements including 1993 X.500 Simplified Access Control. Tandem
server class management provides fault events, tracing, accounting and
configuration services for NSDS. TM/MP (Transaction Management) is
used to protect all file operations that affect the integrity of the
directory entries in the DIB.
Major Features Include:
* X/Open Directory Services (XDS) API and X/Open Object
Management (XOM) interface in conformance with X/Open CAE
Specifications, and an additional Tandem extension package
* 1988 Edition X.500 Conformant DAP and DSP, capable of inter-
operating with 1993 Edition DUA or DSA implementations
* Simplified Access Control as specified in the 1993 edition of
the X.500 standard.
* Unprotected Simple Authentication (name and password in
clear)
* Character set support for T61 Printables, IA5 and Teletex
Strings
* The DSA-SC server class performs the functions of a DSA.
Multiple processes are used for fault tolerance and load
balancing.
* The DUA-ACCESS server class handles communications between
local applications and remote DSA's using DAP across an OSI
stack.
* The DSA-ACCESS server class handles communications from
remote DUAs or DSAs to the DSA-SC server class using the
Tandem OSI stack implementation which includes [RFC1006]
support for TCP/IP networks.
* The DSA-CHAIN server class handles chaining communications
between the DSA-SC server class and remote DSAs.
* NSDS GUI Viewer supports administration/management of an NSDS
DIB on a PC Windows workstation. The NSDS GUI Viewer is
supported by a persistent server process on the Tandem
NonStop Kernel. The GUI Viewer allows a directory entry and
a complete set of attributes and values to be inserted
anywhere in the directory tree (DIT), to be deleted or
changed, read or searched based on distinguished name
components, with or without wild-card.
* NSDS SCRIPTOR allows customers to explore features of the XDS
programmatic interface in advance of writing their XOM/XDS
application. NSDS SCRIPTOR is a menu-driven batch interface
to XDS functions.
* A BulkUnload/BulkLoad utility allows a branch of the DIB to
be dumped to an editable flat file and restored from that
file. The flat file can be modified before being bulk-loaded
into a DIB which may conform to a different schema
definition.
* Support for the LDAP protocol.
* Messaging-Based Directory Query (MDQ) provides a text-based
query interface to the directory from an X.400 messaging
system, such as Tandem OSI/MHS, via the XAPIA compliant GPI
interface.
COMPLIANCE with X.500-1988 (applicable only for DSAs and DUAs)
NSDS complies with the '88 CCITT X.500 and ISO 9594 standard, and
part of '93 X.500 standard.
NSDS DSA and DUA are compliant with OIW Agreements, with the
following features yet to be implemented:
* Strong Authentication (Sections 6.6.2 and 8.4e)
* Priority Service Control (Section 7.4)
* Digital Signature, Replication and Shadowing (Sections 8.8-
8.12)
* Authentication (Sections 9.1.7 and 14.1-
14.2)
* Directory Trace Information (Section 9.2.2)
* Abandon and ROSE operation class 2 (Section 10.1)
COMPLIANCE with X.500-1993 (applicable only for DSAs and DUAs)
* NSDS supports the directoryAccessAC (DAP) and directorySystemAC
(DSP) application contexts.
* The DSA is capable of acting as a first-level DSA.
* Chaining is supported.
* security levels of simple unprotected password and none are
supported.
* All attribute types defined in ISO/IEC 9594-6:1993 are supported
except for collective attributes and enhancedSearchGuide.
Customer defined attributes can also be added. UNIVERSAL STRING
is not supported.
* All object classes defined in ISO/IEC 9594-7:1993 are supported.
Customer defined object classes can be also be added.
* Name forms defined in ISO/IEC 9594-7:1993 are all supported.
Customer defined name forms can also be added.
* Simplified Access Control is supported.
* Support for collective attributes is not provided.
CONFORMANCE WITH PROPOSED INTERNET STANDARDS
[RFC1277], [RFC1777], [RFC1779], [RFC1778]
CONSISTENCE WITH INFORMATIONAL AND EXPERIMENTAL RFCs
[RFC1279]
INTEROPERABILITY
NSDS DSAs interoperate with various 1988 X.500 and 1993 X.500
conformant DUAs with unrecognized features of the incoming 1993-based
request ignored.
PILOT CONNECTIVITY None at the present time.
BUGS
Information is provided with the production installation guide.
CAVEATS AND GENERAL LIMITATIONS
The OSF/DCE "GDS Extension Package" is not supported by NSDS. A
Tandem "NDS Extension Package" is provided to support 1993 Simplified
Access Control.
INTERNETWORKING ENVIRONMENT
The underlying protocols carrying DAP and DSP protocols are provided
by OSI higher layer stack over X.25, LAN and/or TCP/IP via [RFC-
1006].
HARDWARE PLATFORMS
Tandem NonStop Himalaya Systems
SOFTWARE PLATFORMS
D30.02 NonStop Kernel. The operator's GUI runs under Microsoft
Windows 3.1 or later.
NUMBER OF IMPLEMENTATIONS IN THE FIELD
[No information provided. -- Ed.]
AVAILABILITY
The NSDS Rev 1.0 production version has been available since October
1995.
For more details, please contact:
Don S. Jones
NSDS Product Manager
Phone: (408) 285-6480
Fax: (408) 285-6004
e-mail: JONES_S_DON@TANDEM.COM
DATE LAST UPDATE or CHECKED
July 1996.
ADDITIONAL INFORMATION and/or COMMENTS
None.
NAME
ORG.D (tm) V2.0 / V2.1
Siemens Nixdorf Informationssysteme AG
ABSTRACT
ORG.D V2.0 is Siemens Nixdorf's administrative directory client
product. Through its file manager like user interface retrieval and
DIT administration operations are supported. ORG.D offers a DDE
interface and with ORG.D V2.1 additionally OLE / OCX / MAPI interfaces
are supported. ORG.D V2.1 is an MS-Windows application acting as an
LDAP client.
Among others, ORG.D has the following features:
* Comprehensive, simple-to-use search and positioning options
* complex searches, including approximate search
* Several databases visible at the same time in an interface
* Private address books: available on every desktop
* Optional use of distribution lists and private address book
* Support for MS-Word mail merge by means of special export
format
* adaptable print listings and comfortable list&label
functionality
* customizing tool in order to adapt to any directory schema
* Configurable user interface
* Automatic unbind after idle time
* Anonymous and simple unprotected bind
* Data transfer to Windows applications via file, Drag&Drop,
and DDE
* Central administration of distribution lists/groups
* "Domain administrators" with limited rights defined only for
home site/department
* Direct modification / creation of DIT entries from the user
interface
* Choice of a proposal list when new employee data is added
Tight integration in SNI4s X.400/SMTP-MIME mail service and CIT
products
* DDE connection and drag&drop data transfer to SNI's X.400
user agent MAIL.D and SNI4s CIT product ComfoPhone
* Setting up and administering mailboxes on remote mailbox
servers
* Central administration of server addresses and logon data
COMPLIANCE with X.500-1988 (applicable only for DSAs and DUAs)
ORG.D V2.1 is an LDAP client.
COMPLIANCE with X.500-1993 (applicable only for DSAs and DUAs)
ORG.D V2.1 is an LDAP client.
CONFORMANCE WITH PROPOSED INTERNET STANDARDS
ORG.D V2.1 is compliant with the following RFCs: [RFC1777], [RFC
1778], [RFC1779].
CONSISTENCE WITH INFORMATIONAL AND EXPERIMENTAL RFCs
ORG.D V2.1 is compliant with the following RFCs: [RFC1278], [RFC
1558].
INTEROPERABILITY
ORG.D V2.1 is based on University of Michigan's LDAP implementation
V3.0. It can interoperate with any LDAP server.
PILOT CONNECTIVITY
In future ORG.D will be used to browse in the European NameFLOW-
PARADISE pilot network. Currently SNI's directory client product DIR.D
V2.6 is used to browse in the European NameFLOW-PARADISE pilot
network.
BUGS
To report bugs and/or to retrieve additional information on SNI's
directory products please send mail to infoline-
com@s41.mch1.x400scn.sni.de.
CAVEATS AND GENERAL LIMITATIONS
[No information provided. -- Ed.]
INTERNETWORKING ENVIRONMENT
LDAP with TCP/IP
HARDWARE PLATFORMS
PC (Intel)
SOFTWARE PLATFORMS
Windows 3.1 + Winsockets
Windows for Workgroups 3.11 + Winsockets
Windows 95
Windows NT 3.5
OS/2 3.0 + Windows for OS/2 + Winsockets
NUMBER OF IMPLEMENTATIONS IN THE FIELD
Field testing is to be started in Spring 1996.
AVAILABILITY
ORG.D V2.0 / V2.1 can be delivered as a binary product. It is
commercially available from:
Siemens Nixdorf Informationssysteme AG
ASW BA COM 1
D-81730 Munich
Germany
Please contact
Giovanni Rabaioli
Voice: +49/89-636-41095
Fax: +49/89-636-42552
Mail: Giovanni.Rabaioli@mch.sni.de
DATE LAST UPDATED or CHECKED
April 1996
ADDITIONAL INFORMATION and/or COMMENTS
DIR.X V4.0 1993 X.500 Directory Service
DIR.X V3.1 1988 X.500 Directory Service
DIR.D V2.6 LDAP browser for information retrieval
DIR.X-SYNC V2.0 Directory synchronization
NAME
OSIAM X.500-88
MARBEN
ABSTRACT
OSIAM X.500-88 is Marben's 1988 compliant directory product. It
provides:
* DUA, offering X/Open XOM and XDS APIs
* Pocket DUA, providing Microsoft MAPI(tm)
* DSA and C-ISAM based DIB
* LDAP Server
OSIAM DUA is a portable Directory User Agent implement, which
implements DAP engine. It provides X/Open XOM and XDS APIs. It works
on multiple lower layer stacks (OSI Transport or TCP/IP). An LDAP
Server may be provided with the DUA.
Pocket DUA is a light DUA implement which offers full DAP access, but
light in terms of code size and memory occupation, and is mainly
designed for PC environments. It provides MAPI(tm) interface, as an
address book provider. It provides multiple network connectivities:
X.25, [RFC1006] over TCP/IP, and APS.
OSIAM X.500 DSA provides full X.500 1988 functionality. Main features
include: chaining/multicasting, extensible schema, proprietary access
control list, comprehensive administration facilities.
MARBEN is currently developing a new generation of directory product,
providing X.500 1993 functionality. Main targets are:
* high performance
* robustness and administration facility with DIB on commercial
RDBMS
* replication
* access control
* extended information models
Please contact MARBEN for more information on '93 product.
COMPLIANCE with X.500-1988 (applicable only for DSAs and DUAs)
OSIAM X.500-88 DUA and DSA implement CCITT X.500 (1988) an ISO 9594
standards.
Compliant with EWOS and NIST OIW Stable Implementor's Agreement.
COMPLIANCE with X.500-1993 (applicable only for DSAs and DUAs)
1993 product is under development.
Please contact MARBEN for more information on '93 product.
CONFORMANCE WITH PROPOSED INTERNET STANDARDS
Compliant with the following Internet Standards:
* [RFC1274]: the COSINE and Internet X.500 Schema (partially
supported)
* [RFC1277]: encoding of network addresses
* [RFC1778], [RFC1777], [RFC1779]: LDAP and related
standards
CONSISTENCE WITH INFORMATIONAL AND EXPERIMENTAL RFCs
None is supported at the present time.
INTEROPERABILITY
Have successfully interoperated, both on DAP and DSP, with QUIPU, E3X
and other implementations involved in Paradise pilot project.
PILOT CONNECTIVITY
Connected to Paradise pilot project.
BUGS
[No Information Provided--Ed.]
CAVEATS AND GENERAL LIMITATIONS
[No Information Provided--Ed.]
INTERNETWORKING ENVIRONMENT
[RFC1006] with TCP/IP, TP0 with X.25, TP4 with CLNS
HARDWARE PLATFORMS
OSIAM X.500-88 is highly portable, and has been ported to a wide
range of platforms, including:
* HP9000 series
* SUN SPARC Stations
* SCO UNIX
* Tandem
* MARK III, etc.
MARBEN Pocket DUA runs on PC/Windows and NT.
SOFTWARE PLATFORMS
See HARDWARE PLATFORMS.
NUMBER OF IMPLEMENTATIONS IN THE FIELD
[No information provided. -- Ed.]
AVAILABILITY
Commercially available from:
MARBEN
11 Rue Curie
92150 Suresnes, France
Contact Person: Karim Jammal or Shaofeng Li
Phone: (33 - 1) 41 38 10 00
Fax: (33 - 1) 41 38 10 01
X.400: C=FR;A=Atlas;P=Marben;O=Suresnes;OU1=MxMs;S=KJammal
E-Mail:sli@wtk.suresnes.marben.fr
Also available from:
MARBEN Products Inc.
2105 Hamilton Avenue, Suite 320
San Jose, CA95125, USA
Contact Person: Jean-Francois Chapuis
Phone: (408) 879 4000
Fax: (408) 879 4001
E-Mail: jfchapuis@marben.com
DATE LAST UPDATED or CHECKED
October 1995
ADDITIONAL INFORMATION and/or COMMENTS
[No Information Provided--Ed.]
NAME
OSIAM X.500-93
MARBEN
ABSTRACT
OSIAM X.500-93 is Marben's 1993 compliant directory product.
Open Directory
* OSIAM X.500-93 provides both DAP and LDAP access
* Support for distribution using the DSP protocol
* Support for replication using the DISP protocol
* Pocket DUA, providing Microsoft MAPI0(tm) and MAPI1(tm)
interface to MS-Mail(tm) or Exchange(tm)
* WEB gateway to access Directory information from WEB browsers
* X/Open XOM/XDS API
* High performance direct API
High Capacity
* Mapped on a RDBMS
* Over 1.000.000 entries
* Use of transaction, to ensure robustness
* Can run on high-available hardware systems
* Isolated interface, to be customized for various RDBMS
High Performance
* Use of cache at DUA level
* Use of cache at DSA level
* Use of replication. Can act as shadow supplier, shadow
consumer or secondary shadow supplier. Support for total or
incremental refresh. Support for both scheduled update and
"on change" update.
* Based on an indexed database, to ensure high-performance
elaborated search.
Security
* Anonymous bind, simple and simple protected authentication
* X.509 certificates storage
* Access control
Ease of administration
* Extensible schema
* Backup-recovery
* Event logging
* Statistics information about Directory use
* Billing dockets generation
Ease of integration
* Provided as binary product or as portable source code
* MARBEN services: training, consulting, system integration,
hot-line support, maintenance.
COMPLIANCE with X.500-1988 (applicable only for DSAs and DUAs)
OSIAM X.500-93 DUA and DSA implement CCITT X.500 (1988) and ISO 9594
standards.
Compliant with EWOS and NIST OIW Stable Implementor's Agreement.
COMPLIANCE with X.500-1993 (applicable only for DSAs and DUAs)
OSIAM X.500-93 DUA and DSA implement CCITT X.500 (1993) and ISO 9594
standards.
CONFORMANCE WITH PROPOSED INTERNET STANDARDS
Compliant with the following Internet Standards:
* [RFC1274]: the COSINE and Internet X.500 Schema (partially
supported)
* [RFC1277]: encoding of network addresses
* [RFC1778], [RFC1777], [RFC1779]: LDAP and related
standards
CONSISTENCE WITH INFORMATIONAL AND EXPERIMENTAL RFCs
None is supported at the present time.
INTEROPERABILITY
Have successfully interoperated, both on DAP and DSP, with QUIPU, E3X
and other implementations involved in Paradise pilot project.
PILOT CONNECTIVITY
Connected to Paradise pilot project.
BUGS
[No Information Provided--Ed.]
CAVEATS AND GENERAL LIMITATIONS
[No Information Provided--Ed.]
INTERNETWORKING ENVIRONMENT
[RFC1006] with TCP/IP, TP0 with X.25, TP4 with CLNS
HARDWARE PLATFORMS
OSIAM X.500-93 is highly portable, and has been ported to a wide
range of platforms, including:
* Windows NT
* HP-UX
* IBM AIX
* SUN Solaris
* SCO UNIX
* IBM MVS
MARBEN Pocket DUA runs on PC/Windows and NT.
SOFTWARE PLATFORMS
See HARDWARE PLATFORMS.
NUMBER OF IMPLEMENTATIONS IN THE FIELD
[No information provided. -- Ed.]
AVAILABILITY
Commercially available from:
MARBEN
11 Rue Curie
92150 Suresnes, France
Contact Person: Marc Chauvin or Olivier Gatine
Phone: (33 - 1) 41 38 10 00
Fax: (33 - 1) 41 38 10 01
E-Mail:sales@suresnes.marben.fr
Also available from:
MARBEN Products Inc.
2105 Hamilton Avenue, Suite 320
San Jose, CA95125, USA
Contact Person: Jean-Francois Chapuis
Phone: (408) 879 4000
Fax: (408) 879 4001
E-Mail: jfchapuis@marben.com
DATE LAST UPDATED or CHECKED
July 1996
ADDITIONAL INFORMATION and/or COMMENTS
[No Information Provided--Ed.]
NAME
PMDF-X500
from:
Innosoft International, Inc. 1050 East Garvey Ave. South West
Covina, California 91790
Phone: +1 818-919-3600 email: sales@innosoft.com
ABSTRACT
PMDF-X500 is Innosoft's implementation of the X.500 standards for
Directory Services. PMDF-X500 is based upon the ISODE Consortium
code-base. The core of PMDF-X500 is the Directory System Agent (DSA)
server. This server provides directory information to Directory User
Agents (DUA) using either OSI or TCP/IP networking protocols. Since
PMDF-X500 is based on a widely used implementation, it interoperates
particularly well with a whole host of X.500-based products from other
sources.
In order to facilitate initial loading of directory data as well as
ongoing coordination with other directory services, PMDF-X500 includes
tools to import from and export directory information to Entry
Description File (EDF) files. EDF files are flat text files.
PMDF-X500 provides directory coordination functions using EDF files
for the following directories:
* X.500 DSAs supporting LDAP access
* cc:Mail
* Digital's DDS
* GroupWise
* Microsoft Mail
* PMDF generic databases
COMPLIANCE with X.500-1988 (applicable only for DSAs and DUAs)
OSI directory services as specified in CCITT X.500 Recommendations
and ISO 9594 use the Directory Access Protocol (DAP) and the
Directory System Protocol (DSP).
COMPLIANCE with X.500-1993 (applicable only for DSAs and DUAs)
PMDF-X500 does not yet support the 1993 changes to the X.500
standard. Support for the 1993 X.500 recommendations is planned for
a future release of PMDF-X500.
CONFORMANCE WITH PROPOSED INTERNET STANDARDS
PMDF-X500 supports DAP and DSP accesses using Internet protocols as
specified in [RFC1006]. In addition, the Internet community has
proposed two lightweight alternatives to DAP called Lightweight
Directory Access Protocol (LDAP), which is specified in [RFC1777],
and Connectionless Lightweight Directory Access Protocol (CLDAP),
which is specified in [RFC1798]. LDAP and CLDAP, which are currently
specified to run over TCP/IP, are much simpler protocols than DAP and
were designed to reduce the cost of entry associated with using X.500
protocols in client applications. PMDF-X500 includes both LDAP and
CLDAP servers.
The LDAP server accesses X.500 directory information using DAP to
communicate with X.500 DSAs. PMDF-X500 provides an LDAP server which
translates LDAP requests into DAP requests to communicate with X.500
DSAs. CLDAP defines a very low overhead method for accessing X.500
directory information. CLDAP is suitable for providing access to
information that does not require access controls.
CONSISTENCE WITH INFORMATIONAL AND EXPERIMENTAL RFCs
[No information provided. -- Ed.]
INTEROPERABILITY
PMDF-X500 interoperates with a large number of DUAs and DSAs. This is
demonstated by the fact that PMDF-X500 is DSA used by several Internet
White Pages Project participants. PMDF-X500 DSA interoperability
includes at least all of the DSA that are used in the White Pages
Project.
PMDF-X500 is delivered with several DUAs and in addition is know to
support the DUAs from Unisys and Digital Equipment Corporation as well
as the publically available DUAs MaX500, Cello, Swix, and the NASA
DUA.
PILOT CONNECTIVITY
PMDF-X500 is used by several sites that are participants of the
Internet White Pages Project include the Innosoft DSA.
BUGS
[No information provided. -- Ed.]
CAVEATS AND GENERAL LIMITATIONS
[No information provided. -- Ed.]
INTERNETWORKING ENVIRONMENT
DAP and DSP are layered on top of the OSI protocol suite. PMDF-X500
supports this protocol suite over multiple network transports. For a
pure OSI protocol stack, DECnet/OSI can be used to provide the lower
layers of the stack. In addition, PMDF-X500 supports running OSI upper
layer protocols over a TCP/IP transport in accordance with [RFC1006].
It is important to note that while [RFC1006] specifies TCP/IP as a
transport, all of the OSI upper layer protocols are always used with
DAP and DSP.
HARDWARE PLATFORMS
Digital VAX systems
Digital Alpha/AXP systems
SOFTWARE PLATFORMS
OpenVMS/VAX
OpenVMS/AXP
Digital UNIX
NUMBER OF IMPLEMENTATIONS IN THE FIELD
[No information provided. -- Ed.]
AVAILABILITY
PMDF-X500 is a commerical product that is part of the PMDF family of
eMail Interconnect products. PMDF-X500 requires the presence of
PMDF-MTA, Innosoft's SMTP/MIME mailer. PMDF-X500 and PMDF-MTA can be
obtained from:
Innosoft International, Inc.
1050 East Garvey Ave. South
West Covina, California 91790
Phone: +1 818-919-3600
FAX: +1 818-919-3614
email: sales@innosoft.com
DATE LAST UPDATED or CHECKED
December 1995
ADDITIONAL INFORMATION and/or COMMENTS
No information provided. -- Ed.]
NAME
TransIT 500 Unisys Corporation
ABSTRACT
TransIT 500 is a commercial-grade implementation of the 1993 X.500
directory standards (ITU X.500 Directory Services and ISO 9594)
including replication, extensible schemas and access control.
TransIT 500 is designed for performance, scalability, conformance and
interoperability for enterprise-wide usage and is available for
Microsoft Windows NT, Hewlett Packard HP/UX, Unisys U6000 and as
portable source code. TransIT 500 is comprised of the following:
TransIT 500 Directory Services
TransIT 500 Directory Services is a high-performance, 1993 standards
based Directory System Agent (DSA). TransIT 500 includes many
features required by today's enterprise for global access and
mission-critical applications:
* Adheres to the 1993 ITU & ISO 9594 X.500 Directory Services
standards
* Full support for Replication (X.525/DISP)
* Access controls and extensible schemas
* Support of all X.520 attribute types & syntaxes, all X.521
object classes & attribute sets
* Automated loading of directory entries
* Support for Basic Access Control and Simplified Access
Control
* High performance, commercial-grade operations
* Integration with popular databases such as Microsoft SQL
Server, Informix, and Oracle
* Multi-platform availability
* Authentication services
* Support of industry standard APIs, including LDAP, DAP, DSP,
DISP, XDS/DOM and XAP
* High-capacity network integration with both TCP/IP (RFC1006)
and OSI networks.
TransIT 500 Administrator
TransIT 500 Administrator is an extremely powerful tool designed to
assist administrators in all directory administration, maintenance
and security functions. Available for Microsoft Windows NT, Windows
95 and Windows 3.1.1 based systems, TransIT 500 Graphical
Administration is the first tool of its kind to provide fully
graphical X.500 directory management. All functions are provided and
multiple DSAs can be managed simultaneously from a single
administrative console:
* Directory Service Operations
* Directory Controls Management
* Access Control Management
* Schema Management & Maintenance
* Directory Information Tree Management
* Knowledge References & Information
* Replication Agreements & Information
* Logging, Tracing and System Logs
* Directory System Configuration
* Data Import & Export
* Directory Backup & Restore Operations
TransIT 500 Browser
TransIT Browser is a powerful, graphical information retrieval tool
designed to make navigating directories as simple as possible. The
Browser interface makes detailed directory searches and retrievals
easy while the unique Directory Lookup interface provides extra
ease-of-use for simple lookups. TransIT Browser is available for
Microsoft Windows 3.1, Windows 95 and Windows NT systems.
* Browse multiple directories from a single console
* Two interfaces to directories:
* Tree-oriented Browser
* Tabular Directory Lookup
* Object classes mapped to icons to enhance object recognition
* Extensive attribute search capabilities
* Save/Load scratchpad for search criteria & prefix criteria
* LDAP support
* Configurable cache to speed data delivery
TransIT 500 Developer
TransIT 500 Developer is a development toolkit which provides
programming interfaces, utilities and documentation for the
development of directory enabled applications. The Directory
Information Tree (DIT) can be extended and re-compiled for the
addition of application-specific information to the directory. The
Administration application provides for the verification and
installation of new schemas and the maintenance of directory tree
items. Utilities are provided for the bulk importation or exportation
or directory information from and to external sources.
TransIT 500 also supports user-written programs using the X/Open
Directory Services Application Program Interface (XDS API).
COMPLIANCE with X.500- 1988
The TransIT 500 implementation conforms to the specifications
outlined in the ISO/IEC 9594-1 to ISO 9594-9, CCITT X.500 standards.
COMPLIANCE with X.500- 1993
TransIT 500 makes the following claims of conformance as outlined in
ISO/IEC 9594-5:
Conformance by DUAs:
Statement Requirements
Conformance is claimed for the following operations:
* DirectoryBind
* DirectoryUnbind
* Read
* Compare
* Abandon
* List
* Search
* AddEntry
* RemoveEntry
* ModifyEntry
* ModifyDN
Conformance is claimed for the following security-levels:
* None
* Simple
Conformance is claimed for the following extensions:
* subentries
* copyShallDo
* extra attributes
* useAliasOnUpdate
* newSuperior
Static Requirements
The DUA supports the application contexts directoryAccessAC and
directorySystemAC.
The DUA conforms to the following extensions for which the DUA
is capable of initiating:
* subentries
* copyShallDo
* extra attributes
* useAliasOnUpdate
* newSuperior
Dynamic Requirements
The DUA conforms to the mapping of the DAP services (i.e.,
DirectoryBind, DirectoryUnBind) onto the used services of the
ACSE.
The DUA conforms to the versions and rules of extensibility as
outlined in clause 7.5.1 of X.519.
Conformance by DSAs:
Statement Requirements
The DSA supports the application contexts directoryAccessAC and
directorySystemAC.
The DSA does not make any claims for operational binding types.
The DSA is capable of acting as a first-level DSA as defined in
ITU-T Rec. X.518 ISO/IEC 9594-4.
The DSA supports the application context directorySystemAC and
the chained mode of operation.
Conformance is claimed for the following security-levels:
* None
* Simple
Conformance is claimed for all attribute types defined in ITU-T
Rec. X.520 ISO/IEC 9594-6.
Conformance is claimed for all object classes defined in ITU-T
Rec. X.521 ISO/IEC 9594-7.
Conformance is claimed for the following extensions:
* subentries
* copyShallDo
* extra attributes
* useAliasOnUpdate
* newSuperior
Conformance is not claimed for collective attributes as defined
in X.501 and X.511.
Conformance is not claimed for hierarchical attributes as
defined in X.511.
Conformance is claimed for the following operational attribute
types defined in X.501:
* createTimestamp
* modifyTimestamp
* creatorsName
* modifiersName
* administrativeRole
* subtreeSpecification
* collectiveExclusions
* accessControlScheme
* prescriptiveACI
* entryACI
* subentryACI
* dseType
* myAccessPoint
* superiorKnowledge