Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What is the difference between OpenDS, OpenDJ and OpenAM?

Hie Please explain which to use when, OpenDS OpenDJ OpenAM. Thanks.

like image 609
Santosh Mondal Avatar asked Jan 25 '15 08:01

Santosh Mondal


People also ask

What is OpenDJ?

OpenDJ is a directory server which implements a wide range of Lightweight Directory Access Protocol and related standards, including full compliance with LDAPv3 but also support for Directory Service Markup Language (DSMLv2). [2] Written in Java, OpenDJ offers multi-master replication, access control, and many extensions.

What is the difference between OpenAM and OpenDJ password lockouts?

But while configuring Account Lockout in OpenAM may recognize invalid password attempts in your SSO environment, configuring it in OpenDJ will recognize invalid attempts for any application that is using OpenDJ as an authentication database. This is more of a centralized approach and can recognize attacks from several vectors.

Does OpenDJ support LDAP Transactions?

OpenDJ 3.0 is expected to include directory proxy services, but the support for LDAP Transactions that was originally planned was dropped due to the incompatibility with the loose consistency model of LDAP. OpenDJ 3.1 and 3.2 are slated to include enhanced directory proxy services.

What is a scrambled password in OpenDJ?

A scrambled password in OpenDJ, for instance, simply displays as an Authentication failed error message in the OpenAM login screen. By default, all users in OpenDJ are automatically assigned a generic (rather lenient) password policy that is aptly named: Default Password Policy.


2 Answers

OpenDJ is an open source project building LDAP and REST base Directory Services. OpenDJ is continuing in open source the development of OpenDS, a project that was started by Sun Microsystems, but abandoned by Oracle.

OpenAM is an open source Authentication, Authorization, Web Single Sign On, Federation solution that is flexible, extensible and highly scalable. For its configuration management, OpenAM embeds OpenDJ. For its user stores, it relies on LDAP directory servers, and is very well integrated with OpenDJ.

[Disclosure: I am product manager at ForgeRock, the company that supports and commercializes OpenDJ and OpenAM]

like image 73
Ludovic Poitou Avatar answered Nov 23 '22 13:11

Ludovic Poitou


OpenAM is entirely different from that of OpenDJ or OpenDS. Let me clear all your doubts:

OpenAM is an open source access management and federation server platform, backed by ForgeRock. It was sponsored by ForgeRock until 2016.Now it is supported by Open Identity Platform Community.

What exactly OpenAM is ?

OpenAM provides a service called access management, which manages access to resources, such as a web page, an application, or web service, available over the network. Once it is set up, OpenAM provides an infrastructure for managing users, roles, and access to resources.

It centralizes access control by handling both authentication (Confirming the identity) and authorization (Determining whether to grant access to someone who has authenticated).

When you dive deep inside this beautiful service you will find,You can secure your resources and customize it through Open Access Policy and can implement social authentication, Multi-Factor Authentication ,Account Lockout, Single Sign-On etc. and can define Authorization policies in no time .
Moving on to OpenDJ ..

OpenDJ is a directory server which implements a wide range of “Lightweight Directory Access Protocol” (LDAP) and also have support for “Directory Service Markup Language” (DSML). OpenDJ is written in Java language.

It was an internal project started by Sun Microsystems, which is now maintained by ForgeRock.


Let me help you with those big terms like LDAP and Directory :

Lightweight Directory Access Protocol (also known as LDAP) is an application protocol. This protocol is used specifically for querying data as well as modifying said data.This is performed by using directory services –that is, a software system that stores, organises, and provides access to the information that is in a directory.

Conclusion:

OpenAM regulates who can access what resource ,when and under what condition while OpenDJ is the high-performance,Highly-available and secure store for identities managed by the organization.

.

like image 30
sameer Avatar answered Nov 23 '22 11:11

sameer