Ash asked me to comment on a couple of responses to his blog. This post is in response to the post made by the Identity Data Delivery blog. First off, while it’s true there are times when cache makes no...
Ash gave me a heads up that there were some interesting comments on his blog in regards to caching and asked if I would give my thoughts. Todd Clayton gave an example which I can summarize as follows: A company...
Ash Motiwala has some follow-up questions to my previous responses to him. After seeing my posted results he asks: "If so, then why does anyone use a persistent cache? Anyone?" Ash - this question has perplexed me as well :)....
Over the holiday break someone sent me a comment asking to update the Virtual MemberOf plug-in to support the condition where a person's member group was actually a member of another group. But I also encountered a customer requirement that...
Since a number of Oracle sales folks and partners read this blog - I wanted to help get the word out. Oracle maintains a system that allows you to demo live software from a hosted service called TDS. We have...
Over at Ash's Identity Management Rantings - Ash had a post asking questions about a topic that never seems to go away - "virtual directories and persistent cache". This seems to be Ash's response to an earlier post by Clayton....
I took most of December off and being a football junkie - spent my non-work hours watching football, not writing blog posts. [edit - I realized I initially posted without tying the headline to anything I had written. That's what...
I have added new sample OVD Java plug-ins to our sample code page. These include a "virtual memberof" attribute and one that uses Oracle Coherence for cache storage. The memberof plug-in satisfies a common request - which is to allow...
I have posted a set of viewlets designed in particular to help make it easier to understand configuring OVD when OVD is being used with Oracle Database to centralize user and role management (aka Enterprise User Security or EUS). There...
It was a slow week for links, so a little delay. Also trying out a new layout. "Top 10 Security Developments of the Last Decade" This is an interesting article outlining some of the items that have really helped improve...
Why traditional security doesn't work for SOA -- This is a good article on security challenges in Service Oriented Architecture (SOA). Oracle does provide an excellent security product in the SOA Suite (Oracle Web Services Security Manager or OWSM aka...
Greg Kelly has written a nice overview of the various ways PeopleSoft can leverage LDAP - including dynamic role creation. I would like to add two additional points to his post in relation to PeopleSoft and OVD. 1 - While...
I know it's a bit of a late notice but if you will be in the Silicon Valley area and want to spend a weekend learning about a variety of coding topics (and not just Oracle) this looks to be...
Now when James McGovern repeats his question of "when will Oracle show how to write secure code" we can point him to this post :). First - make sure to read and check-back with Oracle Secure Technology Center.This is basically...
Posting early since I'm taking Friday off. Crisis Begets accountability and transparency -- While not directly about software code it is an article that can be used as a "teachable moment" across many disciplines. From a programming perspective, the lesson...
This post is inspired by a conversation I had with one of our customers. They have a team responsible for customer facing revenue applications and of course that team is trying to make sure they have strong security. On the...
James was nice enough to ask more questions - though I'm still curious as to how he thinks we specifically trail Microsoft in open-source contributions. So here for the enjoyment of the readers is my response: Maybe you could share...
Matt Flynn posted a paraphrased quote from Divya Sundaram of Motorola: If you front-end data (or a data store) that you don't own (or don't have control of), then you need to replicate/sync data (instead of virtualizing the view). And...
5 Password Utilities That Will Make Your Life Simpler -- Not really any coding tips but since passwords will be with us for a long time - these might be helpful for you and your users. Interesting they mentioned OpenID...
When you map a user in Enterprise User Security (EUS) - I found that you can indeed avoid mapping the user in Enterprise Security Manager (ESM) if you provide the complete syntax when creating/altering the user. So for example: alter...
If you use an RSS reader, you can subscribe to a feed of all future entries tagged 'OVD'.