19
WatIAM & uwldap
WatIAM & uwldap
WatIAM & uwldap
Presentation Overview: @uwaterloo.ca history Email Terminology How does email addressed to @uwaterloo.ca get to
a mailbox? WatIS WatIAM? How are uwldap, email and WatIAM connected? Q&A
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
A Short History Lesson
Required to deliver to @uwaterloo.caMX -> ego overloadedMailservices `cluster' createdAddress lookups into uwldapMailertable lookups into uwldap
=> Load sharing & redundancy
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
WatIS uwldap?
OpenLDAP implementation which:Directs campus emailStores data for Ocal
Public data is queryable: by email clients (Outlook, Thunderbird, etc.); WatIAM White Pages; Unix uwdir command; etc.Attributes values contain campus telephone number, email information, office number, Ocal attributes, etc.
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
WatIS mailservices?
mailservices is a University of Waterloo implementation for email handling and email storage.Services include:
greylistingblacklistingbotnet detectionscanning for SPAM and viruses
For this presentation we will refer to uwldap and mailboxes, and avoid mailservices.
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
uwldap to mailbox @uwaterloo.ca
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
Email addressed to [email protected]:1. Lookup mailLocalAddress = [email protected]
(because of the @uwaterloo.ca)2. return the mailRoutingAddress.3. pass the email to mailRoutingAddress
uwldap Attribute Attribute Value
dn uid=cvanoost, ou= people, dc=uwaterloo, dc=ca
mailLocalAddress [email protected]@uwaterloo.ca
mail [email protected]
mailRoutingAddress [email protected]
uwldap to mailbox @uwaterloo.ca
mailLocalmailLocal mailRoutingmailLocaluser@artsservices @uwaterloo.ca
But host MX points to mailservices, so internally:
Mailertable: host artsservices artsservices
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
User on admmail
User on artsservices
Mailservices
uwldap
Short Circuiting
User onadmmail
User onconnect
Mailservices
No short circuit
WatIS WatIAM?
Actors
Presentation Layer
Services Layer
Data Layer
Identity Manager Admin UI
Identity Manager Admin UI
Identity Manager User Interface
Identity Manager User Interface
IDM Data
Account Reconciliation
Account Reconciliation
HRMS
Quest
TelephoneServices
UWdir (bootstrapping,
email, web)
Administrators UW End Users(Employees, Students, Guests)
Identity Services (IdM)Identity Services (IdM)
Policy & ConfigurationPolicy & Configuration
ADS
User Self-Service
User Self-Service
Logging & ReportingLogging & ReportingProvisioningProvisioning
Extract File
Email Services LDAP
White PagesUser InterfaceWhite Pages
User Interface
Public End Users
AdministrationAdministration
Web Service
uwldap to mailbox @uwaterloo.ca
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
Email addressed to [email protected]:1. Lookup mailLocalAddress = [email protected]
(because of the @uwaterloo.ca)2. return the mailRoutingAddress.3. pass the email to mailRoutingAddress
uwldap Attribute Attribute Value
dn uid=cvanoost, ou= people, dc=uwaterloo, dc=ca
mailLocalAddress [email protected]@uwaterloo.ca
mail [email protected]
mailRoutingAddress [email protected]
WatIAM to uwldap
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
WatIAM Admin Interface
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
Long accountIds?
Example:cvanoostveenWatIAM stores a long value, but is not considered an account in WatIAM, ADS or in uwldap.WatIAM creates a long value for the extract file and for email.
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
Future Directions – Vanity email addresses
CTSC & UCISTmailLocalAddress
[email protected]@uwaterloo.ca
Present suggestionsAdmin management of mailLocalAddress(es)Uniqueness in uwaterloo.ca name spaceNeeds to work for connect and mailservicesRoll out to employees first
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
Future Directions – Vanity email addresses
Future Directions – Official Student Email Address
http://www.adm.uwaterloo.ca/infocist/emailuse.html (Exec Council, 2003)
The University, through its Faculties, provides an email address and account to all students for the receipt of official communications and their participation in an academic program at UW.
The University uses an email address like [email protected] in official correspondence with students.
Etc.
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
Future Directions – Student email
Centralizing mailboxes Consistency for user Reliability
Vanity email addressesUse [email protected] address
Would like to make our option more attractive –but encourage more use?
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
Questions?
WatITis | Strengthening Collaboration | December 8, 2009 | WatIAM & uwldap
