Corendal Directory - Open source web-based Active Directory management tool

[Thierry]

Corendal Directory has been released. This is the third major version
of this web-based application.

This open source application is typically used by help desk analysts
and active directory administrators as part of their daily account,
contact and group management tasks.

It is a good alternative to the Active Directory console for daily
uses and acts as well as an enterprise directory for your intranet.

All users have access to the following features:

- view their own account, including picture
- edit "alternative phone number", "fax number" and "home phone
number" attributes of their own account
- change their own password
- view their direct reports
- view the groups they own
- view the groups they are member of
- search for other accounts/contacts
- view other accounts/contacts, including picture
- view the direct reports of other accounts/contacts
- search for groups
- view members of any group
- view the groups owned by other accounts
- view the memberships of other accounts

In addition to the features accessible to all users, help desk
analysts and active directory administrators have access to the
following features:

- create new accounts/contacts (based upon account/contact templates)
- edit many account/contact attributes (including expiration date,
description, employee id, employee type)
- upload pictures
- change passwords (passwords can be generated randomly)
- unlock accounts, expire passwords, disable accounts
- move accounts/contacts from one organizational unit to another
- edit Microsoft Exchange attributes
- edit Microsoft Communicator attributes

- create new groups (based upon group templates)
- view group details, including sub group and parent group hierarchies
- edit group attributes (including description and owner)
- add members to groups, remove members from groups
- delete groups

- export account/contact attributes
- perform mass account/contact updates

Updates to accounts, contacts and groups are logged. Access rights are
fined-grained.

The layout of the application uses Velocity templates and can be
adapted to your graphic standards without any modification to the
code.

This is a real-world application that is used every day to manage
thousands of accounts, contacts and groups. It is implemented in Java,
and can be backed by a MySQL database or an Oracle database.

Corendal Directory can be downloaded today from sourceforge.net:
http://sourceforge.net/projects/corendaldiry/. Corendal's site for all
Corendal open source products is accessible from this address:
http://www.corendal.com.

[Garry Starck - MCITP]

Hi Thierry

Sounds good, just one question. Does it offer auto
provisioning/de-provisioning of objects such as Identity Lifcycle Management
streams
--
Garry Starck
MCITP, MCTS AD, MCSE 2003 Messaging, MCDBA

Post by Thierry
Corendal Directory has been released. This is the third major version
of this web-based application.
This open source application is typically used by help desk analysts
and active directory administrators as part of their daily account,
contact and group management tasks.
It is a good alternative to the Active Directory console for daily
uses and acts as well as an enterprise directory for your intranet.
- view their own account, including picture
- edit "alternative phone number", "fax number" and "home phone
number" attributes of their own account
- change their own password
- view their direct reports
- view the groups they own
- view the groups they are member of
- search for other accounts/contacts
- view other accounts/contacts, including picture
- view the direct reports of other accounts/contacts
- search for groups
- view members of any group
- view the groups owned by other accounts
- view the memberships of other accounts
In addition to the features accessible to all users, help desk
analysts and active directory administrators have access to the
- create new accounts/contacts (based upon account/contact templates)
- edit many account/contact attributes (including expiration date,
description, employee id, employee type)
- upload pictures
- change passwords (passwords can be generated randomly)
- unlock accounts, expire passwords, disable accounts
- move accounts/contacts from one organizational unit to another
- edit Microsoft Exchange attributes
- edit Microsoft Communicator attributes
- create new groups (based upon group templates)
- view group details, including sub group and parent group hierarchies
- edit group attributes (including description and owner)
- add members to groups, remove members from groups
- delete groups
- export account/contact attributes
- perform mass account/contact updates
Updates to accounts, contacts and groups are logged. Access rights are
fined-grained.
The layout of the application uses Velocity templates and can be
adapted to your graphic standards without any modification to the
code.
This is a real-world application that is used every day to manage
thousands of accounts, contacts and groups. It is implemented in Java,
and can be backed by a MySQL database or an Oracle database.
http://sourceforge.net/projects/corendaldiry/. Corendal's site for all
http://www.corendal.com.

[Thierry]

Corendal Directory does have features that belong to the identify life
cycle sphere:

1/ a "Personnel File Import" scren allows the reconciliation of
account and HR data, including the automatic discovery of new accounts
2/ an "Account File import wizard" screen allow mass updates of many
account attributes, through three simple export to Excel/edit in Excel/
import back into AD steps. For example, using this method, you can
disable numerous accounts at once.
3/ all updates are logged, with the type of update, date, IP address
and login of the person performing the update. These logs are
accessible from the Admin > Entry Logs menu.The person performing a
mass update through the "Personnel File Import" or "Account File
import wizard" screens also receives a log of each modification made
through that import, with "before" and "after" values specified
4/ Modifications that have a security impact (create an account,
disable an account, unlock an account, remove an account, change an
email address, modify group memberships, etc) can also be logged in
the form of emails sent to the recipient of your choice, such as an
archived mailing list for external auditing purposes.