Port 25: The Open Source Community at Microsoft : Server Center, Interop

Technical Analysis: OpenSSH on Linux using Windows/Kerberos for Authentication

jcannon — Fri, 06 Jun 2008 14:35:00 GMT

Abstract: Secure remote access to UNIX and Linux systems is generally accomplished through SSH. The most frequent implementation of that protocol is OpenSSH, originally written for the OpenBSD project but now ported to a wide variety of platforms. This paper will show how to use OpenSSH with the Kerberos portion of Active Directory to automate authentication.

Download OpenSSH on Linux using Windows/Kerberos for Authentication

Note: This paper represents testing and documentation in a lab environment. User Account Control (UAC) is an essential security component to Windows and Microsoft does not recommend turning off UAC in production environments.

Dominic Sartorio on SpikeSource and Open Source Interoperability

Community Contributor — Wed, 27 Feb 2008 23:33:00 GMT

First, many thanks to Microsoft’s Port 25 Team for the opportunity to post today!

Today SpikeSource announced the availability of five additional PHP-based applications on the Windows Server 2008 platform. Gallery, Mantis, Moodle, PhpBB and WebCalendar are available for free download from www.spikesource.com. We welcome you to take a look and to offer your feedback!

Similar to the previous applications we released on Windows Server (Drupal, Alfresco), SpikeSource delivered these as turnkey “SpikeIgnited” applications, with all components needed to run the application available in a single one-click-install distribution. We have also included a variant of our SpikeNet update service optimized for Windows Server 2008.

“That’s great”, you might say, “SpikeSource has ‘Ignited’ a few more apps, so what’s the big deal?” We believe the big deal is that these applications also run on a stack of other Microsoft products in addition to Windows, namely, IIS/Fast-CGI and SQL Server Express, with which many open source products have historically not interoperated well. Quite a bit of engineering went into assembling this “WISP” stack and building/testing these PHP applications, and this know-how is an important step towards improving the interoperability between the worlds of Microsoft and open source.

Why do this? Because customers want it. Throughout SpikeSource’s history, nearly 50% of our customer’s request Windows versions of our open source applications, and most of them also care about interoperating with IIS, SQLServer, Sharepoint, ActiveDirectory and so forth. Our experience is representative of the industry. Ask any commercial OSS ISV with a server-side application, and they’ll tell you the same thing, with similar numbers.

Also, last December, the Open Solutions Alliance (www.opensolutionsalliance.org) published a report (pdf) summarizing the results of its customer outreach efforts. One of the key findings was that customers want better open source and Microsoft interoperability, and moreover, they felt this was the issue that the industry has collectively done the least to address. While there has been a lot of unfortunate history that has gotten in the way of this, ultimately customers don’t care as much about grudges as they care about everything simply working. Together, SpikeSource and Microsoft’s open source lab are doing something about it.

The release of these five PHP applications is just a first step. By taking five commonly used PHP applications and making them run better on a Windows stack, we took a step towards better interoperability, and we also built some technical expertise that we intend to leverage more broadly and share with the community in the future.

So, stay tuned, and we welcome your input. What other types of open source applications are important to run well on Windows? What specific technical issues do you have that you would like to see us solve? What more can we do? Please send us your feedback!

Dominic Sartorio
Sr Director, Product Management, SpikeSource
President, Open Solutions Alliance

How open source has influenced Windows Server 2008

Sam Ramji — Wed, 27 Feb 2008 12:00:00 GMT

When I think about what works really well in open source development and technology, the following things stand out:

Modular architectures
You can find these wherever you see participation at scale – and often a rearchitecture to a more modular system precedes expanded participation. Great examples of this are Firefox, OpenOffice, and X11 – from both the historical rearchitecture and the increased participation that resulted. The Apache HTTP server and APR are good examples that have been modular for as long as I can recall.
Programming language agnostic
A given project uses a consistent language, but there are no rules on what languages are in scope or out of scope. Being open to more languages means opportunity to attract more developers – the diversity of PHP/Perl/Python/Java has been a core driver in the success of a number of projects including Linux.
Feedback-driven development
The “power user” as product manager is a powerful shift in how to build and tune software – and this class of users includes developers who are not committing code back, but instead submitting CRs and defects – resulting in a product that better fits its end users.
Built-for-purpose systems
Most frequently seen in applications of Linux, the ability to build a system that has just what is needed to fulfill its role and nothing else (think of highly customizable distributions like Gentoo or BusyBox, as well as fully custom deployments).
Sysadmins who write code
The ability of a skilled system administrator to write the “last mile” code means that they can make a technology work in their particular environment efficiently and often provide good feedback to developers. This is so fundamental to Unix and Linux environments that most sysadmins are competent programmers.
Standards-based communication
Whether the standard is something from the IETF or W3C, or simply the implementation code itself, where these are used projects are more successful (think of Asterisk and IAX2) and attract a larger ecosystem of software around them.

So where did we apply these ideas to the development of Windows Server 2008?

Modular architectures was applied in multiple areas, but the one that stands out most to me is Internet Information Server 7 (IIS7). IIS7 has been rearchitected for flexibility as 40 individual modules, enable more to be written by community developers or delivered as out-of-band releases. This has already enabled performance improvements and independent evolution, and I expect to see further enhancements.
Programming language agnostic is something we’ve delivered on with support for PHP on IIS7 and the enhancements to FastCGI (which can be used by any of the P* languages). We set a goal of having PHP certified on Windows Server 2008, and we’ve achieved that. We’ll continue to improve runtime, security, and manageability support for non-.NET languages and the applications that are built on them, as well as testing the full stacks of PHP-based applications running on Windows Server, IIS, and SQL Server.
Feedback-driven development based on developer and customer trials (RDPs, TAPs, and Betas in our process) led to a range of “feature completion” developments that connected different components – like connecting Windows Firewall with Active Directory central policy, and the end-to-end improvements in SMB 2.0. Features like the RODC (Read-Only Domain Controller) have become more and more solid through experience with early alpha and beta customer deployments, and requests to enforce things like BitLocker encryption of user disks from a central authority have achieved full support.
Built-for-purpose systems such as DNS, DHCP, file and web serving can be created through wizard-driven configuration thanks to Windows Server Core. The goal of having a minimum attack surface and a small hardware footprint, inspired by the capabilities mentioned above, yet achievable by a broad base of admins has been achieved. Additionally, this has created an opportunity for Windows admins to become much more knowledgeable about the low-level structure of the operating system.
Sysadmins who write code are first-class citizens in the PowerShell-driven infrastructure. We’ve increased Windows administrators’ opportunity to master the full surface area of WMI and demonstrate that mastery in reusable, low-level scripts. As we evolve this to support multiple language bindings and bash aliasing, this should become a comfortable home for highly skilled sysadmins.
Standards-based communication such as in CardSpace (with support for X.509, SAML, Kerberos tokens, and more) and the Web Services stack (not only are all 38 Web Services standard under the Open Specification promise, but our implementations have achieved a high level of interop with Apache’s Axis web services stack), and beta support for emerging standards like Xen virtualization represent a small subset of the standards built into Windows Server 2008.

Overall, we’ve learned and continue to learn from open source development principles. These are making their way into the mindset, development practices, and ultimately into the products we bring to market.

I’ve focused here on “what Microsoft has learned from Open Source” – and ironically, I’ve agreed to do a panel at OSBC on 3/25 with Jim Zemlin of the Linux Foundation on “what Open Source can learn from Microsoft”. As all of the different organizations in IT continue to evolve, we’ll learn from each others’ best practices and make increasingly better software. As in science, this incremental improvement will move all of us forward.

Technical Analysis: Installing Apache on Windows

jcannon — Tue, 12 Feb 2008 13:21:00 GMT

Abstract: By many estimates, Apache is the world's most popular web server software, hosting more than half of active domains according to Netcraft. Typically, Apache is run on Linux or UNIX, but it runs quite well on Windows. This paper provides an introduction to running this software on Windows and provides a framework for understanding how Apache on Windows is fundamentally different from Apache on Linux.

Download Installing Apache on Windows

Note:This paper represents testing and documentation in a lab environment. User Account Control (UAC) is an essential security component to Windows and Microsoft does not recommend turning off UAC in production environments.

Technical Analysis: Installing Apache with SSL on Windows

jcannon — Fri, 04 Jan 2008 17:02:00 GMT

Abstract:
Often SSL or TLS is required to secure data from web applications. Sometimes this is just prudent to prevent confidential or sensitive data from being confiscated. Sometimes this is required by regulations like HIPAA or industry bodies, such as the Payment Card Industry. This guide will show how to install Apache with SSL on Windows.

Download Report Installing Apache on Windows

Technical Analysis: Active Directory and Linux Identity Management

jcannon — Tue, 11 Dec 2007 19:22:00 GMT

Abstract: This paper is written for a somewhat technical audience and covers how the identity management expectations differ between the Windows Server platform and Linux - and how Windows Server can be used to manage both. This paper assume that the reader is familiar with general Windows administration tasks, such as user management.

Note: This paper represents testing and documentation in a lab environment. User Account Control (UAC) is an essential security component to Windows and Microsoft does not recommend turning off UAC in production environments.

Virtual Machine Additions for Linux 2.0

jcannon — Tue, 23 Oct 2007 15:41:00 GMT

A quick note to let our community know that Virtual Machine Additions for Linux 2.0 has been released - bringing the version number up to 2.0. For those unfamiliar with Virtual Machine Additions for Linux, it is technology layer designed to improve the usability and interoperability of running Linux operating systems as guests or virtual machines inside of Virtual Server. From the release notes, it looks like this version adds support for SuSE Linux Enterprise Server 10. You can find additional information on running Linux as a guest operating system with Virtual Server on TechNet.

Qualified distributions now include:

Red Hat Enterprise Linux 2.1 (update 6)
Red Hat Enterprise Linux 3 (update 6)
Red Hat Enterprise Linux 4
SuSE Linux Enterprise Server 9
SuSE Linux Enterprise Server 10
Red Hat Linux 7.3
Red Hat Linux 9.0
SuSE Linux 9.2
SuSE Linux 9.3
SuSE Linux 10.0

Check out download details here.

[PostIcon:3352]

Linux and Windows Interoperability: On the Metal and On the Wire

MichaelF — Mon, 13 Aug 2007 17:10:00 GMT

I had the opportunity to present at both OSCON in Portland and at LinuxWorld in San Francisco in the last three weeks – both O’Reilly and IDG were gracious enough to grant me a session on the work that Microsoft is doing with Novell, XenSource, and others on Linux and Windows interoperability.

Overall our focus is on three critical technology areas for the next-generation datacenter: virtualization, systems management, and identity. Identity in particular spans enterprise datacenters and web user experiences, so it’s critical that everyone shares a strong commitment to cross-platform cooperation.

Here are the slides as I presented them, with some words about each to give context, but few enough to make this post readable overall. I skipped the intro slides about the Open Source Software Lab since most Port 25 readers know who we are and what we do.

Why interoperability?

The market for heterogeneous solutions is growing rapidly. One visible sign of this is virtualization, an “indicator technology,” which by its nature promotes heterogeneity. Virtualization has become one of the most important trends in the computing industry today. According to leading analysts, enterprise spending on virtualization will reach $15B worldwide by 2009, at which point more than 50% of all servers sold will include virtualization-enabled processors. Most of this investment will manifest itself on production servers running business critical workloads.

Given the ever improving x86 economics, companies are continuing to migrate off UNIX and specialty hardware down to Windows and Linux on commodity processors.

So, why now?

First, customers are insisting on support for interoperable, heterogeneous solutions. At Microsoft, we run a customer-led product business. One year ago, we established our Interoperability Executive Customer Council, a group of Global CIOs from 30 top global companies and governments – from Goldman Sachs to Aetna to NATO to the UN. On the Microsoft side, this council is run by Bob Muglia, the senior vice president of our server software and developer tools division. The purpose of this is to get consistent input on where customers need us to improve interoperability between our platforms and others – like Linux, Eclipse, and Java. They gave us clear direction: “we are picking both Windows and Linux for our datacenters, and will continue to do so. We need you to make them work better together.”

Second, MS and Novell have established a technical collaboration agreement that allows us to combine our engineering resources to address specific interoperability issues.

As part of this broader interoperability collaboration, Microsoft and Novell technical experts are architecting and testing cross-platform virtualization for Linux and Windows and developing the tools and infrastructure necessary to manage and secure these heterogeneous environments.

I am often asked, “Why is the agreement so long?” as well as “Why is the agreement so short?” The Novell-Microsoft TCA is 5 years mutual commitment. To put this in context, 5 years from now (2012) is two full releases of Windows Server and 20 Linux kernel updates (given the 2.5 month cycle we’ve seen for the last few years). This is an eternity in technology. What’s important to me is that it’s a multi-product commitment to building and improving interoperability between the flagship products of two major technology companies. This means we can build the practices to sustain great interoperable software over the long term as our industry and customer needs continue to evolve.

This talk covers two major components of the future of Linux and Windows interoperability: Virtualization and Web Services protocols.

On the Metal focuses on the virtualization interoperability work being done between Windows Server 2008 and Windows Server virtualization, and SUSE Linux Enterprise Server and Xen.

On the Wire covers the details and challenges of implementing standards specifications, such as WS-Federation and WS-Management; and how protocol interoperability will enable effective and secure virtualization deployment and management.

These are the key components required for the next-generation datacenter. We know the datacenters of today are mixtures of Windows, Linux, and Unix, x86, x64 and RISC architectures, and a range of storage and networking gear. Virtualization is required to enable server consolidation and dynamic IT; it must be cross-platform. Once applications from multiple platforms are running on a single server, they need to be managed – ideally from a single console. Finally, they must still meet the demands of security and auditability, so regardless of OS they must be accessible by the right users at the right levels of privilege. Hence, cross-platform virtualization demands cross-platform management and identity.

In non-virtualized environments, a single operating system is in direct control of the hardware. In a virtualized environment a Virtual Machine Monitor manages one or more guest operating systems that are in “virtual” control of the hardware, each independent of the other.

A hypervisor is a special implementation of a Virtual Machine Monitor. It is software that provides a level of abstraction between a system’s hardware and one or more operating systems running on the platform.

Virtualization optimizations enable better performance by taking advantage of “knowing” when an OS is a host running on HW or a guest running on a virtual machine.

Paravirtualization , as it applies to Xen and Linux, is an open API between a hypervisor and Linux and a set of optimizations that together, in keeping with the open source philosophy, encourage development of open-source hypervisors and device drivers.

Enlightenment is an API and a set of optimizations designed specifically to enhance the performance of Windows Server in a Windows virtualized environment.

Hardware manfuacturers are interested in virtualization as well. Intel and AMD have independently developed virtualization extensions to the x86 architecture. They are not directly compatible with each other, but serve largely the same functions. Either will allow a hypervisor to run an unmodified guest operating system without incurring significant performance penalties.

Intel's virtualization extension for 32-bit and 64-bit x86 architecture is named IVT (short for Intel Virtualization Technology). The 32-bit or IA-32 IVT extensions are referred to as VT-x. Intel has also published specifications for IVT for the IA-64 (Itanium) processors which are referred to as VT-i; .

AMD's virtualization extensions to the 64-bit x86 architecture is named AMD Virtualization, abbreviated AMD-V.

There are three Virtual Machine Monitor models.

A type 2 Virtual Machine Monitor runs within a host operating system. It operates at a level above the host OS and all guest environments operate at a level above that. Examples of these guest environments include the Java Virtual Machine and Microsoft’s Common Language Runtime, which runs as part of the .NET environment and is a “managed execution environment” that allows object-oriented classes to be shared among applications.

The hybrid model, shown in the middle of the diagram has been used to implement Virtual PC, Virtual Server and VMWare GSX. These rely on a host operating system that shares control of the hardware with the virtual machine monitor.

A type 1 Virtual Machine Monitor employs a hypervisor to control the hardware with all operating systems run at a level above it. Windows Server virtualization (WSv) and Xen are examples of type 1 hypervisor implementations.

Development of Xen and the Linux hypervisor API paravirt_ops began prior to release of Intel and AMD’s virtualized hardware and were designed, in part, to solve the problems inherent in running a virtualized environment on non-virtualization-assisted hardware. They continue to support both virtualization-assisted and non-virtualization-assisted hardware. These approaches are distinct from KVM, or the Kernel-based Virtual Machine, supports only virtualization-assisted hardware; this approach uses the Linux kernel as the hypervisor and QEMU to set up virtual environments for Linux guest OS partitions.

In keeping with the open source community’s philosophy of encouraging development of open source code, the paravirt_ops API is designed to support open-source hypervisors. Earlier this year VMware’s VMI was added to the kernel as was Xen. Paravirt_ops is in effect a function table that enables different hypervisors – Xen, VMware, WSv – to provide implementation of a standard hypercall interface, including a default set of functions that write to the hardware normally.

Windows Server 2008 enlightenments have been designed to allow WS 2008 to run in either a virtualized or non-virtualized environment *unmodified*. WS 2008 recognizes when it is running as a guest on top of WSv and dynamically applies the enlightenment optimizations in such instances.

In addition to a hypercall interface and a synthethic device model, memory management and the WS 2008 scheduler are designed with optimizations for when the OS runs as a virtual machine.

The WSv architecture is designed so that a parent partition provides services to the child partitions that run as guests in the virtual environment. From left to right:

Native WSv Components:

VMBus – Virtual Machine Bus – Serves as a synthetic bus for the system, enabling child partitions to access native drivers.
VSP – Virtual Service Provider – Serves as an interface between the VMBus and a physical device
HCL Drivers – “Hardware Compatibility List” Drivers (standard native Windows drivers that have passed WHQL certification)
VSC – Virtual Service Consumer – Functions as a synthetic device. For example, a filesystem will talk to the VSC controller instead of an IDE controller. This in turn communicates with the VSP to dispatch requests through the native driver.

Interoperability Components:

Linux VSC – Interoperability component that serves as a synthetic Linux driver. Functions like the VSC in a Windows partition. Developed by XenSource and published under a BSD-style license.
Hypercall Adapter – Adapts Linux paravirt_ops hypercalls to WSv

Like the WSv architecture, the Xen architecture is designed so that a special partition, in this case Dom 0, provides services to guest partitions that run in a virtual environment.

Native Xen Components:

paravirt_ops is a Linux-kernel-internal function table that is designed to support hypervisor-specific function calls. The default function pointers from paravirt_ops support running as a host on bare metal. Xen provides its own set of functions that implement paravirtualization.
Native Drivers – standard set of drivers in the Linux kernel
Xen/Linux ABI – having a consistent ABI enables long-term compatibility between guest operating systems and the Xen hypervisor

Interoperability Components:

Xen Virtualized Drivers – Windows synthetic device drivers must be converted to Xen-virtualized drivers. These are developed using the Windows DDK and will be distributed as binary only per the DDK license.
Xen/Windows ABI – The binary interface that integrates Windows with Xen, enabling Windows hypercalls to be executed through Xen instead of WSv. This will be licensed under the GPL and made available when the WSv top-level functional specification is made public.

The slide says it all… I couldn’t figure out a way to put this one in a graphic. ;)

Virtualization interoperability testing is very challenging. While the architecture may look similar at a high level, the devil is in the details – down at the API and ABI level, the technologies are quite different.

From a personnel standpoint, the expertise required to debug OS kernels is hard to find, let alone software engineers with these skills who are focused on writing test code. Microsoft has established a role known as “Software Design Engineer in Test” or “SDE/T” which describes the combination of skills and attitude required to test large-scale complex software rigorously through automated white-box test development.

The problem of testing Linux and Windows OSes across WSv and Xen requires these kernel-level skills, but on both operating systems. It’s a non-trivial challenge.

Next is the technical issue of the test matrix:

Two full operating systems to test (Windows Server 2008 and SUSE Linux Enterprise Server 10)
Single-core, dual-core, and quad-core CPUs
Single-processor, dual-processor, and quad-processor boards
Intel-VT and AMD-V chips
Basic device configuration (NIC, HD, etc.)

To put this in context, we need a minimum of 40 server chassis to test this matrix – for each operating system.

On top of this, the software components that must be tested include:

Linux VSC
Windows PV hardware drivers
Xen/Windows ABI
Linux/WSv hypercall adapter

Since Windows and Linux are general-purpose operating systems, these components must be tested across a range of workloads which will guarantee consistent, high-performance operation regardless of usage (file serving, web serving, compute-intensive operations, networking, etc.).

Finally – and no less a challenge than the skills and technology aspects – is that of building a shared culture between two very different and mature engineering culture. What is the definition of a “Severity 1” or “Priority 1” designation for a defect? How do these defects compete for the core product engineering teams’ attention? How are defects tracked, escalated, processed, and closed across two different test organizations’ software tools? Most importantly, what is the quality of the professional relationships between engineers and engineering management of the two organizations? These are the critical issues to make the work happen at high quality and with consistency over the long term.

WS-Management is an industry standard protocol managed by the DMTF (Distributed Management Taskforce), whose working group members include HP, IBM, Sun, BEA, CA, Intel, and Microsoft among others. The purpose is to bring a unified cross-platform management backplane to the industry, enabling customers to implement heterogeneous datacenters without having separate management systems for each platform.

All Microsoft server products ship with extensive instrumentation, known as WMI. A great way to see the breadth of this management surface is to download Hyperic (an open source management tool) and attach it to a Windows server – all of the different events and instrumentation will show up in the interface, typically several screen pages long.

It is not surprising that the management tools vendors are collaborating on this work – and it’s essential to have not just hardware, OS, and management providers but application layer vendors like BEA as well – but to me the most important aspect of the work is the open source interoperability.

In the Microsoft-Novell Joint Interoperability Lab, we are testing the Microsoft implementation of WS-Management (WinRM) against the openwsman and wiseman open source stacks. This matters because the availability of proven, interoperable open source implementations will make it relatively easy for all types of providers of both management software and managed endpoints to adopt a technology that works together with existing systems out of the box. Regardless of development or licensing model, commercial and community software will be able to connect and be well-managed in customer environments.

So what does this all mean? We’ll see end-to-end interoperability, where any compliant console can manage any conforming infrastructure – and since the specification and the code are open, the barriers to entry are very low. It’s important that this capability extends to virtualized environments (which is non-trivial) so that customers can get the full potential of the benefits of virtualization – not just reducing servers at the cost of increased management effort.

Sometimes people challenge me with the statement “if you would just build software to the specification, you wouldn’t need to all this interoperability engineering!” This is in fact a mistaken understanding of interoperability engineering. Once you’ve read through a specification – tens to hundreds of pages of technical detail – and written an implementation that matches the specification, then the real work begins. Real-world interoperability is not about matching what’s on paper, but what’s on the wire. This is why it’s essential to have dedicated engineering, comprehensive automated testing, and multiple products and projects working together. A good example of this is the engineering process for Microsoft’s Web Services stack. The specifications (all 36 of them) are open, and licensed under the OSP (Open Specification Promise). In the engineering process, Microsoft tests the Windows Web Services implementation against the IBM and the Apache Axis implementations according to the WS-I Basic profile. A successful pass against all these tests is “ship criteria” for Microsoft, meaning we won’t ship our implementation unless it passes.

In the messy world of systems management, where multiple generations of technologies at a wide range of ontological levels (devices, motherboards, networking gear, operating systems, databases, middleware, applications, event aggregators, and so on) testing is complex. Adding virtualization into this mix adds another layer of complexity, necessitating methodical and disciplined testing.

Open ID is a distributed single sign-on system, primarily for websites. It’s supported by a range of technology providers including AOL, LiveJournal, and Microsoft.

WS-Federation is the identity federation web services standard which allows different identity providers to work together to exchange or negotiate information about user identity. It is layered on top of other Web Services specifications including WS-Trust, WS-Security, and WS-SecurityPolicy – many of which are lacking an open source implementation today.

ADFS is Active Directory Federation Services, a mechanism for identity federation built into Microsoft Active Directory.

Cardspace is an identity metasystem, used to secure user information and unify identity management across any internet site.

Project Higgins is an Eclipse project intended to develop open source implementations of the WS-Federation protocol stack as well as other identity technologies including OpenID and SAML.

Samba is a Linux/Unix implementation of Microsoft’s SMB/CIFS protocols for file sharing and access control information. It is widely deployed in Linux-based appliances and devices, and ships in every popular distribution of Linux as well as with Apple’s OS X.

This work is still in early phases, and you can expect more details here in the future. Mike Milinkovich of Eclipse has been a champion for improving the interoperability of Eclipse and Microsoft technologies, especially Higgins. Separately the Bandit Project has made significant progress in building technologies which support CardSpace. I appreciate the work of these teams and look forward to more progress here.

The slide says it all here. We’re committed to long term development and delivery of customer-grade interoperability solutions for Windows and Linux, and we’ll do it in a transparent manner. Tom Hanrahan, the Director of the Microsoft-Novell Joint Interoperability Lab, brings many years of experience in running projects where the open source community is a primary participant. I and my colleagues at Microsoft are excited to learn from him as he puts his experiences at the OSDL/Linux Foundation and at IBM’s Linux Technology Center into practice guiding the work of the lab.

You can expect regular updates from us on the progress and plans for our technical work, and I expect you to hold me and Tom accountable for this promise.

I hope you found the presentation valuable. I felt it was important to get this material out broadly since it will impact many people and essential to be clear about what we are building together with Novell, XenSource, and the open source community.

Windows Vista Beta/Linux IPsec Interop Testing

MichaelF — Wed, 09 May 2007 21:27:00 GMT

In addition to technical tips, blogs and video interviews, the Open Source Software Lab at Microsoft conducts a number of technical analysis and research projects throughout the year to help inform and solve key interoperability challenges between Microsoft and open source technologies. This particular research was conducted after reviewing data from our VPN research which was previously posted to Port 25.

Abstract:

This document provides an overview of Linux IPsec solutions as well as detailed discussions on configuring IPsec-Tools for interoperability scenarios between Red Hat Linux Enterprise 4 and Windows Vista Ultimate Beta.

Windows Unified Data Storage Server

MichaelF — Wed, 06 Dec 2006 00:36:00 GMT

Today Microsoft announced the availability of the Windows Unified Data Storage Server 2003 (WUDSS). Built for mixed environments this solution is highly interoperable, without loss of performance in both NFS and CIFS environments. Remote administration is also provided both through Active X RDP and Java RDP Client Support.

This sounded interesting so we sent Hank to talk with Tres Hill, Sr Product Manager, to find out why this announcement is significant for IT professionals running heterogeneous environments.

Video: Tres Hill on Windows Unified Data Storage Server

SendMail, Sender ID and 25 Years of EMail: Sam Interviews Eric Allman

MichaelF — Fri, 17 Nov 2006 18:20:00 GMT

In the wake of the announcement that Sender ID will be included in the list of technologies covered by the OSP (Open Standards Promise) we spent some time talking with Eric Allman to get his thoughts.

Eric is a pioneer in internet communications and is the co-founder/CSO (Chief SCIENCE Officer) of Sendmail. In this interview Sam and Eric discuss the announcement, Sendmail's history, the recent 25th anniversary of email and more...

Centrify's Paul Moore Fields Questions from the Community

jcannon — Thu, 19 Oct 2006 18:40:00 GMT

Paul Moore sits down with Sam in this podcast, our second go around with Centrify. For those who don't know, Centrify builds software that provides access control and centralized identity management in mixed networks (Yes, this can include Windows, Linux, UNIX, Mac, J2EE and web platforms with Active Directory). This interview is a bit different as Sam runs through questions submitted to Port 25 from the first Centrify interview and Paul takes the opportunity to directly answer the community.

Centrify is also a sponsor of TechX, a roadshow being sponsored by IBM, Linux.com, Slashdot, Microsoft and others to help customers better enable interoperabiliy between operating systems, directories, applications (headed to DC, Chicago, Dallas & San Fran - check it out).

Windows and Linux Integration: Printer Sharing between Windows and Linux

MichaelF — Mon, 16 Oct 2006 22:13:00 GMT

Last Thursday we posted an interview with Jeremy Moskowitz in which we mentioned the book he authored: Windows and Linux Integration.

As promised, today we have posted a complete chapter from his book dealing with: Printer Sharing between Windows and Linux

Please respond with any questions or comments, we'll see if we can get Jeremy back on to answer your feedback.

Centeris was Here

MichaelF — Thu, 12 Oct 2006 16:30:00 GMT

Capturing the sentiment from my colleagues, Anandeep, Hank and Sam – I LOVE THIS JOB !!! Last week I had a chance to meet w/ Mozilla, watch Sam interview Steve Wozniak and the wonder of it never ceases to amaze me. This week, we had a chance to have lunch w/ Barry Crist, the CEO of Centeris, Krishna Ganugapati their VP of Development and Chuck Mount, the VP of Marketing. Centeris is a company based out of Bellevue, WA that makes the Likewise product which allows Linux Servers to be manages within a Windows centric environment. We all got off to a great start in our discussion because one of the core and common goal that ties us together to the charter of partners like Centeris is “Interop”. Yes, Interop, and finding more and better ways for Microsoft and non-Microsoft platforms or products to co-exist and thrive. This is a really important charter for not only the Microsoft Open Source Software Lab but for also all of Microsoft. After brief introductions to the Program Managers of the Team and our beloved Penguins, we got down to discussing what Centeris as a company was all about and more importantly, what is it that “Likewise” did. Barry and Chuck gave us a very good insight into what the overall focus of Centeris was about and why there is a prominent need for providing this functionality in a heterogeneous environment.

If you’re an ITPro managing a small, medium or an enterprise-wide shop, you know how diverse and today’s implementations are and/or can be. This translates to greater complexity while managing your environment, which as the market data will tell you, is rarely single-platform centric. Thus, making accommodations for manageability of the diverse platform-portfolio is a skill that we all much acquire sooner than later. This is where Centeris fits in perfectly for several reasons because it is extending Windows-based manageability and windows-based tools towards day-to-day management of Linux servers and improve interop. This also means that organizations that have tight budgets can continue to manage their environment with existing skill-sets under tight budgets.

The way Likwise works is where the console is installed on the Admin’s machine, the agent (which is an open source product) is installed on the Linux Server/s and using the console, these servers are managed using the Microsoft Management Console (MMC). Likewise Open Agent includes server-side components (that work w/ Samba) and client-side components (that work w/ MMC) The functionality that is extended to the Linux systems is possible through RPC’s and SOAP (Simple Object Access Protocol). Likewise open agent is available on sourceforge.net and has been released under the CDDL (common development and distribution license). We found the approach that Centeris took towards Linux manageability to be very simple and ITPro centric.

The highlight of our discussion yesterday was getting to know more about Krishna Ganugapati. Krishna spent 10 years at Microsoft from 1993 to 2003 most of it in Windows development team. After we got into deep discussions, we found out that Krishna was the inventor of ADSI (Active Directory Services Interfaces), the preferred means for accessing Active Directory. Krishna also led the development teams for Windows IPSec and Window wireless security through the Windows 2000 and XP releases. The interaction that followed between all of us, penguins, PM’s and Krishna was very rewarding. Krishna got into the guts of how manageability is being approached as a concept by Centeris. The big takeway after we saw the Centeris demo, for me was that there doesn’t always have to be a steep learning curve every time new technology is introduced into the environment. Sometimes, its easier to manage new technology with familiar tools and that was a very novel concept that I walked away with yesterday. It also affirmed my faith as to why “Interop” is as prominent, as important and as critical as it is to us and to the success of Microsoft.

Thanks Centeris !!

Linux in a Windows World: An interview with author Rod Smith and an excerpt from the book!

MichaelF — Wed, 20 Sep 2006 20:54:00 GMT

Sam interviews Rod Smith Author of the O'Reilly Book: Linux in a Windows World, a required read for OSSL staff. In this interview Sam and Rod discuss the impetus for writing the book and what readers can expect as well as Rod's background and challenges faced in penning this useful resource.

Along with the interview, O'Reilly Publications has given us permission to repost an excerpt from the book that provides useful information on configuring a Samba Server.

Big Thanks to O'Reilly for allowing us to make this portion of the book publicly available through Port 25!

Click the cover for the excerpt: (Download PDF)

Title: Linux in a Windows World
First Edition: February 2005
ISBN: 0-596-00758-2
Pages: 494
URL: http://www.oreilly.com/catalog/linuxwinworld/index.html