[OpenID] help needed on walled garden XRI server

[Peter Williams]

Excellent! Thanks for the hint.

http://sourceforge.net/project/showfiles.php?group_id=132761 for openxri
http://sourceforge.net/project/showfiles.php?group_id=98922 for winstone

"java -jar winstone-0.9.10.jar openxri-admin-1.2.0.war" to start the name server.

Was simple to then use "http://localhost:8080" to rapidly be managing a root namespace, minting authorities and aliases, and creating subspaces.

Now, I'll concentrate on trying to meet the goal I outlined, learning to now configure all the elements in a walled garden type enviornment. Ill do this on the openxri mailing lists, tho. I dont think this level of detail belongs here.

________________________________________
From: Drummond Reed [drummond.reed at cordance.net]
Sent: Wednesday, June 17, 2009 6:25 PM
To: Peter Williams; general at openid.net
Cc: 'Markus Sabadello'
Subject: RE: [OpenID] help needed on walled garden XRI server

Peter,

This sounds like exactly what XRI was designed to do. Many folks look at XRI
and only see the i-names/i-number public XRI space, and don't realize that
XRI is a language for identifiers and a resolution protocol (which includes
a synonym mapping service) that can be used in either the public or private
spaces. This synonym mapping can be done today under XRI 2.0, and will
become even more robust under XRI 3.0.

I'm not an expert in the OpenXRI project (which is Java based), but I'm
cc'ing Markus Sabadello, who is, and he can confirm whether it will do what
you need.

Best,

=Drummond

> -----Original Message-----
> From: general-bounces at openid.net [mailto:general-bounces at openid.net] On
> Behalf Of Peter Williams
> Sent: Wednesday, June 17, 2009 4:56 PM
> To: general at openid.net
> Subject: [OpenID] help needed on walled garden XRI server
>
> I may have the terms not quite right, but I think we want to run without
> our private network a standalone, "freeid server", provisioning and
> resolving XRIs. Much like an ldap client can point to active directory and
> can only resolve those names in the domain to which the ldap server is
> authoritative (despite the domain being part of a wider federation of
> domains and trusts), so I want xri resolution to only resolve for its
> nonpublic/local "community" root. That is: it need not (and I dont want)
> it to connect to, be governed by, or resolve for the i-names/number public
> system.
>
> To support the openid mission in general, what we want to do is run an XRI
> name server, of the above type. As each new google/yahoo style identifier
> is released to us as RP, we want to create a (walled garden) community
> child, whose user authority has a forwarding i-service that locates that
> very same google/yahoo pseudonymous URL. As each such URL from different
> OPs map onto a given RP-provisioned number - a local id which ideally
> would be XRI canonical-id rather than a GUID -  we would provision a new
> XRI with XRI refs - identifying itself as synonym to all its peers
>
> is there a way to do this?
>
> if this was active directory DC, there would be a rid server that hands
> out blocks of unique local-identfiers, so multi-mastering and renaming all
> works. Without joining the i-services world, formally, is there a way to
> run a XRI name server now, autonomously and in walled garden mode, that
> COULD (one day) join up with other naming regions...to participate in
> public resolution?
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general