= Areas of Responsibility =
    Original author:  Beth Mercer - 20081031                

Support for the University of Alaska Enterprise Directory and Authentication Service is comprised of the following (responsible department and general areas of support):

== Project Management, Oversight, and Approvals ==

		Nathan Zierfuss

== servers (directory/gateway hosts) ==

		TS

		Solaris O/S install and maintenance
		iPlanet software install and maintenance
		ISW software install and maintenance


== iPlanet Directories (EDIR directory) ==

		TS

		manage log related space
		monthly job archiving directory related extract and log files
			Appworx: EDIR_ARCHIVE
		create and populate directory instances on new hardware
		configure and monitor replication
		create indexes and maintain plugins
		apply schema changes as needed
		apply ACI changes as needed
		create iPlanet roles as needed
		create and maintain password profiles
		schedule and monitor daily exports and backups and other 
			Appworx: LDAP_SUNONE_BACKUPS_* LDAP_SUNONE_DUMP_* LDAP_STATIC_FILES_*
		configure/monitor ISW
		directory SSL certificate maintenance


	Oracle Databases (EDIR "registry")

== EAS ==

		monitor daily dump and compare of registry and directory
			Registry Scripts: dump_all.ksh and compare_dumps.ksh
		resolve out of sync conditions
		daily EDIR Banner extract and feed to EDIR
			Appworx: EDIR_EXT_<yyyytt>
		daily email feeds from Banner to EDIR
			Appworx: EDIR_UA?MAIL
		monthly EDIR unit maintenance following BOR structure table updates
			process documented at:
				https://donnelly.alaska.edu/docs/LDAP/UPDATE_monthly_unit_changes
		periodic data validation and cleanup
			(primarily cleanup of admin contacts and unit heads/delegates 
			that are no longer employed)
		annual directory purge (of inactive records)	
		annual review/renew/revoke of sponsored accounts


== Web Gateways ==

		Core Apps: EDIR Self Service Pages and AUTHSERV UI

		respond to approved requests for interface changes/enhancements
		monitor batch jobs generating static data files used by interface
			Appworx: LDAPGW_STATIC_FILES
		monitor batch job synchronizing EDIR interface related files between servers
			crontab: rsync*.ksh
	
		EAS: UPDATE

		respond to approved requests for interface changes/enhancements
		monitor batch jobs generating static data files used by interface
			Appworx: LDAP_STATIC_FILES_*

			
== Equalizer ==

		TS

		respond to requests for changes to the load balancing mixes for directory related clusters


**NOTE:** Kerberos legacy documentation has been removed as it no longer implemented for authentication.  See [[ALL__architecture | Overview of Enterprise Directory Architecture]] for an historical description of functionality.

########################################################[[br]]
LEGACY CHANGE HISTORY - NOTE: All subsequent changes are recorded in TracWiki[[br]]
########################################################[[br]]
20081027 elm	corrected typo (hardware, not hardware); added reference to David Bantz for 
		oversite/approvals; added additional items of support/responsibility
20081031 elm	corrected typos

# eof