Linux shop adds Solaris for performance boost Wow - "[...] it turned out that Solaris 10 had a throughput that was 50 times better." (tags: fedora linux solaris solaris10 sun t1000 t2000 ubuntu ) Open Source at Sun Microsystems, 2008 Gartner Analysis. Synopsis: Open source at Sun Microsystems is strong, and Gartner expects an increasing role for open source within its business strategies in coming years. (tags: analysis gartner opensource sun ) BigAdmin Feature Article: Using Kerberos to Authenticate

Today I learned about TrustBearer (thanks Berend). TrustBearer combines openid authentication with smartcard authentication. Setting this up is very easy. 1) sign up for an openid at http://openid.trustbearer.com/ 2) pair your cert with the new account You have to install a Firefox extension that does the certificate stuff. 3) logged in and ready to go 4) try it at a openid consumer 5) present your openid and smartcard 6) nice Still what I like most in this use case is that the certificate is on

Superpat postet here that there is now a new opensso extension that enables opensso to be an information card relying party. Patrick Petit (pictured) who wrote this extension uses the xmldap library to process the xmltoken. Great. Note to self: be carefull when changing the xmldap codebase. Don't break this opensso extension. Another (simpler) SUN access manager login module is described here . I am glad that Patrick improved my demo-grade login module to opensso quality. Thanks you.

I wrote an entry on Tuesday about CardSpace as a Password Manager . Kim responded with a request : "I’d like to hear Pat’s ideas about the user experience of bootstrapping the passwords into the Identity Provider." . Well, I see this happening at the relying party (RP) - if you already had an account there you would go to some 'change password' page containing the information card 'script' to invoke the identity selector and proceed as I detailed in the earlier post . When the identity provider (IP/STS)

You might have noticed the exchange between Ben and Kim over the past day or two... Ben made a point that CardSpace makes OpenID redundant - why not just send a password to the RP? Kim jumped all over him - somewhat misinterpreting what Ben later describes as one of my most diabolical hungover bits of prose ever . Ben goes on to clarify that maybe CardSpace can have a role in helping the user manage passwords; Kim says "Hmm... Food for thought" (okay, I'm paraphrasing); Ben admits he didn't explain

Marc Puverel at ActivIdentity emailed me today to point out that ActivIdentity provides an online service for 4TRESS evaluation. As Marc says, it's all in the docs : ActivIdentity provides an online service that you may use to evaluate the Sun OpenSSO integration with ActivIdentity 4TRESS Authentication Server. In such case make sure your platform has access to Internet, then you can use the following settings: 4Tress URL Endpoint: http://66.126.185.111:9090/4TRESSSoap/services/Authenticator-11 4Tress

Marina Sum (who must be just about the busiest tech author at Sun Developer Network these days!) has co-written an article with Michelle Cope, of Sun's ISV Engineering team, on integrating Sun Java System Access Manager with ActivIdentity 4TRESS Authentication Server . The article shows how you can use Access Manager's session upgrade feature to protect particularly sensitive resources with the one-time password (OTP) authentication schemes in 4TRESS. What is particularly interesting about this integration

Development Tools Snippet Compiler Live 2008 Ultimate Edition for Developers (Alpha) [via Mike ] NAnt 0.86 Beta 1 Release [via Mike ] BizTalk Composite Services using Oracle ESB Routing Services Dealing with cXML based messages in BizTalk WCF/ADFS/Authentication/WF Authenticate Users Across Organizations Using ADFS LINQ/ADO.NET Next LINQ to Active Directory (formerly known as LINQ to LDAP) is here Entity Providers Update ADO.NET Data Services and Idempotence Domain Driven Design Nice fundamentals

It's been a busy couple of weeks, what with a trip to Tokyo, a typhoon on the day I flew out, an earthquake at home and the usual backlog of 1000 emails that follows any trip away from the office, so please excuse the recent dearth of blog entries! On returning, I was pleased to see Sun Developer