Skip to content

IAM plan V16: Active Directory emulation (mirror, cloud read, read-only LDAP) - #342

Merged
AdaWorldAPI merged 1 commit into
mainfrom
ccr-0455e606-wmtsor
Oct 10, 2026
Merged

AdaWorldAPI merged 1 commit into
mainfrom
ccr-0455e606-wmtsor

Conversation

@AdaWorldAPI

Copy link
Copy Markdown
Owner

Adds V16 to docs/DIRECTORY-SIMULATION-POC.md. It plans dir-sim as an AD mirror for emulation and as an AD-shaped view of a tenant read from the cloud, presented as an IAM-managed directory.

Decisions

  • Placement:
    • A synchronized user is mirrored at the OU path of onPremisesDistinguishedName.
    • A cloud-only user goes under the marked container Cloud Only (emulated).
    • A real OU inside that container is refused. So is a DN that did not encode; such a user is never demoted to the synthetic container.
  • Surfaces:
    • In-process API, LDIF, and a read-only LDAP server (bind, search, rootDSE).
    • Every result is filtered by the caller's IAM rights.
    • The server never writes; a change goes through simulate → validate → plan.
  • Marking: every emitted object says whether it was observed in AD, mirrored from the cloud, or placed synthetically.

Phases

  1. Cloud ingest: observe::from_graph, implemented in lance-graph (companion PR).
  2. AD-entry projection and LDIF.
  3. Read-only LDAP.

Docs only.

🤖 Generated with Claude Code

https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg


Generated by Claude Code

…ly LDAP)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G22yT6htkcdyXsihxxXdrg
@coderabbitai

coderabbitai Bot commented Oct 10, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Essentials
  • Run ID: 20b00e58-6723-45a9-afd2-3d50cc10ef80

📥 Commits

Reviewing files that changed from the base of the PR and between d402cf7 and a02ae12.


📒 Files selected for processing (1)
  • docs/DIRECTORY-SIMULATION-POC.md

 _________________________________________
< Make it work, make it right, make it 🥕. >
 -----------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       /   づ
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Billing warning: we have not been able to collect payment for this subscription for more than 72 hours. Please update the payment method or pay any pending invoices in Billing to avoid service interruption.


Comment @coderabbitai help to get the list of available commands.

@AdaWorldAPI
AdaWorldAPI marked this pull request as ready for review October 10, 2026 14:08
@AdaWorldAPI
AdaWorldAPI merged commit 8e2a180 into main Oct 10, 2026
4 checks passed
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 10, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-10T14:09:33.990372Z a02ae12 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants