Directory Services http://directoryservices.scribo.harvard.edu Mon, 23 Nov 2009 18:45:09 +0000 http://wordpress.org/?v=2.7 en hourly 1 Database Replacement Project - Production Release Details http://directoryservices.scribo.harvard.edu/2009/11/05/database-replacement-project-production-release-details/ http://directoryservices.scribo.harvard.edu/2009/11/05/database-replacement-project-production-release-details/#comments Thu, 05 Nov 2009 18:38:38 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=134

The weekend of December 4th we will be replacing our production database server hardware in conjunction with our Fall 09 IdM maintenance release.

The replacement will begin at 5:00pm on Friday, December 4th and continue though to approx. 5:00pm on Sunday, December 6th.

Please review below for impact to given IdM applications / processes.

The following Applications & Services will be unavailable during the release window:

  • MIDAS
  • PIN Self Service
  • PIN Helpdesk
  • IDCard Disable Self Service
  • Image Download Self Service
  • XID Manager
  • XID Self Service
  • XID Authentication
  • IDGen Services
  • IDAssign
  • IDResolve
  • Image Capture
  • UMailer

Imports / exports / data synchs / IDGen Batch:

We will be cancelling the schedule for all inbound imports, outbound exports as well as the IDGen batch processing.  We will be suspending our schedule for both Saturday and Sunday, resuming the schedule Monday morning.  Files that are dropped over the weekend will be processed on Monday morning.

Important: A ‘zeroday’ file will be delivered to Export Customers on Monday.  Please be sure to set your expected sequence number to ‘00000′.

Synching of data from IdDB to database synch customers will be suspended.

LDAP:

LDAP loads are canceled for Saturday and Sunday, resuming Monday.

Web services:

Directory data update web services will also be down during this time.

Standby Database Customers:

You will not need to re-point / connect to a new server as your service name (idm-images.cadm.harvard.edu) and user accounts will remain the same.  We will ensure network connectivity is maintained.  If you have not done so, we encourage you connect to the new test environment and confirm access to the data.

Please check back here during the release for status updates.  We will be posting as applications / services become available.

Have a problem after services have been restored? If you plan to health check on Sunday please contact directory_services@harvard.edu to make arrangements.  On Monday, please call the UIS Helpdesk (6-2001) and open a ticket for the ITIS-TECH queue as this will ensure the most prompt response.  We appreciate you not emailing or calling specific individuals on our team.

As always, if you have any questions or concerns, please email us at directory_services@harvard.edu.

]]> http://directoryservices.scribo.harvard.edu/2009/11/05/database-replacement-project-production-release-details/feed/ PIN 3.0 Upgrade Project http://directoryservices.scribo.harvard.edu/2009/11/23/pin-30-upgrade-project/ http://directoryservices.scribo.harvard.edu/2009/11/23/pin-30-upgrade-project/#comments Mon, 23 Nov 2009 18:45:09 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=150 The PIN 3.0 Upgrade project is underway!  Please check back here for updates on the project.  Full project detail and documentation can be found on our project iSite. 

Project Goals

  • Improve application security
  • Enhancements to the authentication process, including 2-factor authentication
  • Client-side authentication control
  • Improve self-service password management experience
  • Support for COTS applications (MOSS, etc.)
  • Vendor support for industry federation protocols

The current PIN Systems will support the existing applications functionality throughout the project.  After the successful platform implementation the migration of customer applications will run through the end of FY12.  The schedule will be based on customers’ needs and our team will support your ongoing release timetable.  At the end of migration “legacy” PIN functionality will be retired. 

If you have any questions please feel free to contact our project manager, Glenn King (glenn_king@harvard.edu).

]]> http://directoryservices.scribo.harvard.edu/2009/11/23/pin-30-upgrade-project/feed/ Encryption Key Renewals http://directoryservices.scribo.harvard.edu/2009/09/03/encryption-key-renewals/ http://directoryservices.scribo.harvard.edu/2009/09/03/encryption-key-renewals/#comments Thu, 03 Sep 2009 15:15:22 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=100 The encryption keys’ expiration dates are quickly approaching!

You can find revised documentation, detailing the process for renewals on our iSite (http://isites.harvard.edu/icb/icb.do?keyword=k236&pageid=icb.page302) in the Encryption Keys and Documentation folder within the shared files section.

The upcoming expiration’s vary for all of us.  We are offering 3 dates for customers to switch over their key.  There will be one cut over day for all feeds to be using the new IdM key.  The below schedule will accommodate all of our varied expiration dates in both the Stage and Production environments (if you are unsure of your expiration date let me know):

W 9/23 - Stage key & detached signature file are published to the Directory Services iSite for customers to pick up (2 weeks prior to cut over)
T 10/6 11:00am - deadline for customers to have dropped new stage key & detached signature file
W 10/7 - Stage keys are converted - all customers / all file types - customers begin testing out new stage key
W 10/14 - Production key & detached signature file are published to the Directory Services iSite for customers to pick up (2 weeks prior to first export customer cut over)
Th 10/15 - Deadline for customers to provide Directory Services with preferred cutover date for production (Tuesday, October 20; Thursday, October 22 or Wednesday, October 28)
M 10/19 11:00am - Deadline for customers in cut over date #1 to drop production key & detached signature file
T 10/20 - Customer cut over date #1
W 10/21 11:00am - Deadline for customers in cut over date #2 to drop production key & detached signature file
Th 10/22 - Customer cut over date #2
T 10/27 11:00am - Deadline for customers in cut over date #3 to drop production key & detached signature file
W 10/28 - Customer cut over date #3
W 10/28 - Switch to new IdM public key

We invite you to talk thru this plan on Wednesday, September 9th at 11:00AM.
1033 Mass Ave, 4th floor ITIS conference room (out of the elevator take a right, ring the bell for the door on the right).
Or dial in: 866-890-3820.
participant password is 221 841 33

]]> http://directoryservices.scribo.harvard.edu/2009/09/03/encryption-key-renewals/feed/ Database Server Replacement Project http://directoryservices.scribo.harvard.edu/2009/09/03/database-server-replacement-project/ http://directoryservices.scribo.harvard.edu/2009/09/03/database-server-replacement-project/#comments Thu, 03 Sep 2009 13:56:12 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=90 The following is information for existing IdM Data Services Customers

 

We are planning to replace database server hardware in early December in conjunction with our Fall 09 IdM maintenance release.

Our new staging database instances are being deployed to the new test server starting October 14, 2009. The cutover in production is scheduled to start after close of business on Friday, December 4, 2009 and will extend into the weekend. After the Stage deployment we will have a better understanding of how long the outage will be for production deployment.

Date

Activity

Customer Info: TEST Environments

9/28

Refresh of existing IDDB Stage with Production Data begins
  • Exports, Imports suspended
  • Data synchs suspended
  • IDGEN suspended
  • Stage application instances, views, services unavailable

10/2

Refresh of Stage completed
  • Exports, Imports, synchs resume
  • Applications and services resume including IDGEN

10/3

 
  • Export zero day files are delivered for incremental export customers

10/14

Cutover to new Stage Server begins
  • Exports, Imports suspended
  • Data synchs suspended
  • Stage application instances, views, services unavailable

10/19

Cutover complete; health checks begin
  • Exports, imports, synchs resume on new hardware
  • All applications and services resume including IDGEN

10/23

Customer deadline to report issues
  • Email directory_services@harvard.edu

12/4-6

Production deployment

http://directoryservices.scribo.harvard.edu/2009/11/05/database-replacement-project-production-release-details/

 

We ask for your assistance with health checks in Stage to make sure we identify any potential issues.

 Other Testing Information

 For Import Customers:

There will be a new version of the code deployed to address a bug related to the privacy evaluation process. We will move files from production to the stage environment to test. If you want to coordinate with us to generate specific test files please contact us.

 For Export Customers:

After the hardware transition in Stage, exports will be running on the usual schedule.

 For Data Synch Customers:

After the hardware transition in Stage, synchs will be running on the usual schedule.

 For Standby Database Customers:

You will not need to re-point / connect to a new server as your service name (idm-images.cadm.harvard.edu) and user accounts will remain the same. We will ensure network connectivity is maintained. Customers are particularly encouraged to connect to the new test environment and confirm access to the data.

 For IDGEN Customers:

After the hardware transition in Stage, services will be restored, and the applications will be up and running. We will move files from production to the stage environment to test. If you want to coordinate with us to generate specific test files please contact us.

]]> http://directoryservices.scribo.harvard.edu/2009/09/03/database-server-replacement-project/feed/ What mobile devices work well with PIN? http://directoryservices.scribo.harvard.edu/2009/05/28/what-mobile-devices-work-well-with-pin/ http://directoryservices.scribo.harvard.edu/2009/05/28/what-mobile-devices-work-well-with-pin/#comments Thu, 28 May 2009 18:21:58 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=61 New mobile devices are coming on the market almost daily.  The following devices we know work well with PIN:

  • iPhone
  • BlackBerry Storm
  • BlackBerry Curve
  • Samsung Saga
  • Android
]]> http://directoryservices.scribo.harvard.edu/2009/05/28/what-mobile-devices-work-well-with-pin/feed/ How do I logout of the Harvard PIN System? http://directoryservices.scribo.harvard.edu/2009/05/28/how-do-i-logout-of-the-harvard-pin-system/ http://directoryservices.scribo.harvard.edu/2009/05/28/how-do-i-logout-of-the-harvard-pin-system/#comments Thu, 28 May 2009 18:06:59 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=50 You can end your logout of the Harvard PIN System through the Logout menu option located on any Harvard PIN System page, or by clicking on this link . It is recommended that you bookmark the logout page so that you can easily end your login session at any time.
When you go to the PIN logout page, you are simply ending your login session with the Harvard PIN System. However, other sites that you have recently accessed may still consider you to be logged in. You may want to close this browser window and see those applications’ Help pages for information on how to logout.
The next time that you visit a website or application that requires you to login through the PIN System, you will have to reenter your login ID and PIN/password. At this point you will again be able to access websites without having to reenter your credentials, and you can reenable “Remember Me”.

]]> http://directoryservices.scribo.harvard.edu/2009/05/28/how-do-i-logout-of-the-harvard-pin-system/feed/ Will I be prompted to enter my credentials if I’ve asked PIN to “Remember Me”? http://directoryservices.scribo.harvard.edu/2009/05/28/will-i-be-prompted-to-enter-my-credentials-if-ive-asked-pin-to-remember-me/ http://directoryservices.scribo.harvard.edu/2009/05/28/will-i-be-prompted-to-enter-my-credentials-if-ive-asked-pin-to-remember-me/#comments Thu, 28 May 2009 18:06:13 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=48 Yes, it is possible.  This can happen for the following reasons:
·    The website or application you wish to access requires you to login whenever you close and then restart your browser.
·    The website or application you wish to use has a set a short time limit for the login record that PIN maintains.
When a site registers with the PIN System, it specifies the amount of time that can elapse before PIN requires a user to manually login again. If you are required to login again manually, it could be because the site requires such a login more frequently. Some sites require a manual login for every visit.
·    The type of browser (IE, Firefox, etc.) with which you logged in and the type of browser you are currently using are different.
·    Your browser may not have cookies enabled.
Cookies are used by websites to save bits of information within your web browser. Most web browsers come with default settings that allow any kind of cookie to be used. Modifying the default settings may impact how this feature works.
Your browser must be set up to allow cookies from the PIN URL, www.pin1.harvard.edu. Every browser supports cookies differently. Check your browser’s help file for information about setting up your cookie preferences.
·    Your computer’s network address has changed since you last logged in and selected “Remember Me”.
Each computer connected to the Internet has a network address, similar to a phone number that allows other computers to communicate with it. Many computers, especially laptop computers, computers with wireless or dial-up connections, or computers on a VPN (Virtual Private Network) have addresses that can change frequently, often without your knowledge. If your network address has changed since the last time you logged in and selected “Remember Me”, you will be asked to manually reenter your login ID and PIN/password. This ensures that no one duplicates your login on another computer and impersonates you.

]]> http://directoryservices.scribo.harvard.edu/2009/05/28/will-i-be-prompted-to-enter-my-credentials-if-ive-asked-pin-to-remember-me/feed/ What is the benefit of the (Single Sign-On) PIN feature? http://directoryservices.scribo.harvard.edu/2009/05/28/what-is-the-benefit-of-the-single-sign-on-pin-feature/ http://directoryservices.scribo.harvard.edu/2009/05/28/what-is-the-benefit-of-the-single-sign-on-pin-feature/#comments Thu, 28 May 2009 18:05:36 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=46 Remembering your login state makes switching from one PIN-protected website to another more convenient. Furthermore, some applications display information from multiple websites at the same time. If those applications are PIN-protected, a user may need to login several times to make that application work in the absence of Single Sign-On.
PIN saves your login ID so you do not have to reenter this information each time you want to access a website. This feature only works for sites that allow it. When you logout of the PIN System, you will no longer be automatically logged in.

]]> http://directoryservices.scribo.harvard.edu/2009/05/28/what-is-the-benefit-of-the-single-sign-on-pin-feature/feed/ How am I logged into multiple websites even though I only logged in once? http://directoryservices.scribo.harvard.edu/2009/05/28/how-am-i-logged-into-multiple-websites-even-though-i-only-logged-in-once/ http://directoryservices.scribo.harvard.edu/2009/05/28/how-am-i-logged-into-multiple-websites-even-though-i-only-logged-in-once/#comments Thu, 28 May 2009 18:04:33 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=44 By default, PIN creates a record of your login asserting that you have authenticated, which only lives as long as the browser with which you logged in is open. The PIN System is able to maintain your record for longer periods of time if you choose “Remember Me” when you login. It is an optional feature that you may select when you log in and only works on the computers where you enable it.
Websites typically opt to only allow a login to last for as long as you have your browser open, i.e. they are fine accepting an authentication, even though you logged into another application, as long as it happened within the same browser session. A few websites may require you to log in every time you go there. Some sites work when the “Remember Me” option is selected and allow authentications from previous browser sessions, irrespective of the site you accessed then, but typically have a time limit after which you will still need to login again.
When you logout of PIN, the record of your login is deleted.

]]> http://directoryservices.scribo.harvard.edu/2009/05/28/how-am-i-logged-into-multiple-websites-even-though-i-only-logged-in-once/feed/ Can I ask the Harvard PIN System not to “Remember Me”? http://directoryservices.scribo.harvard.edu/2009/05/28/can-i-ask-the-harvard-pin-system-not-to-remember-me/ http://directoryservices.scribo.harvard.edu/2009/05/28/can-i-ask-the-harvard-pin-system-not-to-remember-me/#comments Thu, 28 May 2009 18:03:57 +0000 hopejoslyn http://directoryservices.scribo.harvard.edu/?p=42 Yes, you can sign out of PIN at any time by clicking the Logout link on the PIN pages or on the Logout button/link that a website may provide.

]]> http://directoryservices.scribo.harvard.edu/2009/05/28/can-i-ask-the-harvard-pin-system-not-to-remember-me/feed/