directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject Re: [Vote] Accept Scim contribution
Date Sun, 26 Jun 2016 17:02:06 GMT
Hi Kai, 

All fair questions. Our initial efforts in the SCIM spectrum was an offshoot of eSCIMo, with
the primary work being done by Steve Moyer. Once the spec was finalized we did a first principles
redesign in an attempt to make a fully compliant library implementation. This effort was to
support an identity system that we've built and are running. The identity system is built
out from many Apache directory components; Fortress for RBAC/ABAC, and the LDAP API to be
specific. We're watching the Kerby work anxiously because it will allow me to retire a C++
shim service I wrote for doing Kerberos administrative tasks. 

I think the Directory project has all of the tools to build out a first class identity solution
and I'm hoping our SCIM implementation will be a natural fit to the existing tool set. 

Thanks again for the consideration. 


"The programmer … works only slightly removed from pure thought-stuff. 
He builds his castles in the air, from air, creating by exertion of the imagination." 
— Fred Brooks 

Shawn Smith 
Director of Software Engineering 
Administrative Information Services 
Penn State University 

From: "Zheng, Kai" <> 
To: "Apache Directory Developers List" <> 
Sent: Saturday, June 25, 2016 1:21:21 PM 
Subject: RE: [Vote] Accept Scim contribution 

I would love to see the eSCIMo component being revived and the two similar projects being
consolidated. Considering the place holder is ready there, we could probably trust the party
and give them the space to develop in the direction, without too much overhead incurred to
the left of us I guess. 

However, I have some questions to have to ask. Why is Apache Directory a natural place for
the guys to consider contributing the project to? How is it linked with the other components?
What’s the rational? Sorry I may have missed some discussions before. 

+1 on the vote once above questions are addressed. Thanks. 



From: Kiran Ayyagari [] 
Sent: Saturday, June 25, 2016 3:30 PM 
To: Apache Directory Developers List <> 
Subject: Re: [Vote] Accept Scim contribution 

On Sat, Jun 25, 2016 at 5:14 AM, Emmanuel Lécharny < > wrote: 

Hi guys, 

two months ago, Shawn Smith wrote us to inform the Apache Directory 
project that he wanted to contribute the project he is working on with 
Steve Moyer, Christopher Harm and Alex Haskell. 

We have discussed about this proposal one month ago, but due to some 
highly busy agenda on my side, I sadly forgot to start a vote (and I 
have to be frank : would have I started the vote, I would not have had 
teh time to deal with the consequences of a positive vote). Now that I'm 
done with teh API and ApacheDS releae, and my work on the API branch, my 
agenda has cleared up. 

So here is a formal vote for the integration of this project in the 
apache Directory project, as a sub project. My opinion is that this 
would replace eSCIMo that has never been released, unless Kiran decide 
otherwise. We would naturally use the existing eSCIMo project web-site 
as a plcae-holder. One idea would also be that we could keep the eSCIMo 
name, or use SCIMple-Identity, but it would be really up to the people 
to decide. 

I am fine with using eSCIMo name and site 


If we get a positive vote, we will then have to vote the 4 people who 
participated to the code as committer - if they want to pursue their 
work, of course ! -. But first, let's vote 

[ ] +1, accept the SCIMple-Identity project as a subproject of Apache 

+1, however I may not be able to spend time on this cause of the work I am 

doing on another SCIM server (written in Go) and other paid work. 


[ ] +/-0 No opinion 

[ ] -1 : don't accept the SCIMple-Identity project. 

For the record, the code base is available at , and it's already under a 
AL 2.0 license 
( ) 

Many thanks, and trully sorry fo rthe delayed vote ! 

Thank you 

Kiran Ayyagari 

View raw message