Project: Staff Support for the UCSB Directory
Sponsor: Auth/Dir Subcommittee of ITPG and IS&C
Summary
One FTE Computer & Network Technologist is requested to provide ongoing support for six hardware platforms, LDAP and IDAR directory software and related data feed programs and web screen interfaces.
The UCSB Directory is available 24 hours a day, 7 days a week. It has been constructed with redundancies required to support non-stop operation. Infrastructure includes mirrored NT LDAP servers front-ended by a pair of AIX Internet Directory Access Routers and a switching network router. Thus, failures of individual components will not be noticeable and maintenance may be performed without taking the service down.
The UCSB Directory contains records for all faculty, staff, and students as well as some emeriti and others currently affiliated with UCSB. Records are updated nightly from the Payroll/Personnel System and from the Registrar’s files. Records are also removed from the directory when an individual’s affiliation with UCSB terminates. Those who have acknowledged their entries and registered through an available web application may modify certain fields in their records.
How This Project Supports the Academic Mission
The UCSB Directory functions as an enterprise “white pages” and as a client email directory target. It may be searched and viewed by anyone using a web browser or appropriate email client. Some fields are available to the general public while others require additional authentication or authorization to access. In the future, the printed Campus Directory will use the electronic UCSB Directory as a source for telephone numbers, email addresses and other data items related to individuals. In addition, the directory provides an authentication source to other campus servers. That is, it provides a robust source of verification of user ID/password combinations to those computer services choosing to access it. Currently, CorporateTime, the Library’s Web Proxy and the @ucsb.edu email rewrite server use this function. The servers using the UCSB Directory for authentication all present the user with the identical ID/password combination. When the password changes for one of these applications, it changes for all of them, making passwords easier to change and to remember. This feature improves both ease-of-use and security. It is envisioned that many campus computer services will use the UCSB Directory as an authentication source, simplifying both user access and system maintenance for these services.
Funding Source
The initial implementation of the hardware and software supporting the UCSB Directory has been provided by IS&C. Individual projects were assigned to IS&C staff members according to their areas of specialization. Over the past four years, IS&C has dedicated an aggregate of about three FTE in staff support provided by at least seven different individuals. IS&C estimates that about $400K has been invested in the project to date.
The iPlanet LDAP software used by the UCSB Directory is licensed based on the number of individuals whose records are contained in the directory. These costs are currently shared by Student Affairs, the Office of Information Technology and IS&C.
A source of funding for the one FTE requested for ongoing support has not yet been identified.
Costs
About $61K per year, escalating appropriately to cover merit, equity and range adjustments.
Matching Opportunities
IS&C will continue to provide sporadic support from the same group of individuals who originally implemented the directory and developed the data cleaning and feeding programs that support it. It is planned, however, that this group focus their attention on developing the authorization service described in a companion proposal. (Each of these people also has responsibility for certain other components of the mainframe, Unix, NT and network services supported by IS&C.) The hardware and software required to support the directory will be provided from core funds provided to IS&C.
Staff Support Required
One additional FTE.
Existing Resources to Be Used
The existing UCSB Directory hardware, software and licenses.
Project Timeline
The UCSB Directory is currently in production.
Life Cycle of Result
The UCSB Directory is a permanent component of the campus network architecture.
Back to Proposals Index