Page Comparison

Table of Contents

Summary

AAF Components are all Java(tm) HTTP/S based RESTful services, with the following exceptions:

...

• Build your own Certificate Authority for Bootstrapping and/or Certificate Manager component.
  • openssl
  • bash

Data Definitions

AAF Data Definitions

AAF is Data Driven, and therefore, needs to have some structure around the Initial Data so that it can function.  You will need to define:

• Your Organization:
  • Example:  Are you a company?  Do you already have a well known internet URL?
    • If so, you should set up AAF Namespaces with this in mind.  Example:
      
      for "Kumquat Industries, LTD", with internet presence "kumquats4you.com" (currently, a fictitious name), you would want all your AAF Namespaces to start with:
      
      "com.kumquats4you" 
  • The examples all use
    
    "org.osaaf"
    
    However it is recommended that you change this once you figure out your organizations' structure.
• Your AAF Root Namespace
  • This can be within your company namespace, i.e. 
    
    "com.kumquats4you.aaf"
    
    but you might consider putting it under different root structure.
  • Again, the bootstrapping examples use:
    
    "org.osaaf.aaf" 
     
• While creating these, recognize that 
  • 2nd position of the Namespace indicates company/organization
  • 3rd+ position are applications within that company/organization
    
    "com.kumquats4you.dmaap"
    
    Following this "positional" structure is required for expected Authorization behavior.

ILM (Identity Lifecycle Management)

Neither Authentication nor Authorization make any sense outside the context of Identity within your Organization.

...

• Each line represents an identity in the organization, including essential contact information, and reporting structure 
• This file can be updated by bringing in the entire file via ftp or other file transfer protocol, HOWEVER
  
  • Provide a process that
    • Validates no corruption has occurred
    • Pulls the ENTIRE file down before moving into the place where AAF Components will see it.
    • Take advantage of UNIX File System behaviors, by MOVING the file into place (mv), rather than copying while AAF is Active
• Note: This file-based methodology has been shown to be extremely effective for a 1 million+ Organization
  
  

Initializing Default Implementation

Setting this initial Data can be done directly onto Cassadra using "cqlsh" using the following "cql" files:

...