0.1

Generic section

Generic criteria from QSOS version 1.6

Intrinsic durability
- Maturity
  - Age
    less than 3 months
    if between 3 months and 3 years
    after 3 years
    Not evaluated
  - Stability
    Unstable software with numerous releases or patches generating side effects
    Stabilized production release existing but old. Difficulties to stabilize development releases
    Stabilized software. Releases provide bug fixes corrections but mainly new functionalities
    Not evaluated
  - History, known problems
    Software knows several problems which can be prohibitive
    No know major problem or crisis
    History of good management of crisis situations
    Not evaluated
  - Fork probability, source of Forking
    Software is very likely to be forked in the future
    Software comes from a fork but has very few chances of being forked in the future
    Software has very little chance of being forked. It does not come from a fork either
    Not evaluated
- Adoption
  - Popularity (related to: general public, niche, ...)
    Very few users identified
    Detectable use on Internet
    Numerous users, numerous references
    Not evaluated
  - References
    None
    Few refences, non critical usages
    Often implemented for critical applications
    Not evaluated
  - Contributing Community
    No community or without real activity (forum, mailing list, ...)
    Existing community with a notable activity
    Strong community: big activity on forums, numerous contributors and advocates
    Not evaluated
  - books
    No book about the software
    Less than 5 books about the software are available
    More than 5 books about software are available, in several languages
    Not evaluated
- Development leadership
  - Leading team
    1 to 2 individuals involved, not clearly identified
    Between 2 and 5 independent people
    More than 5 people
    Not evaluated
  - Management style
    Complete dictatorship
    Enlightened despotism
    Council of architects with identified leader (e.g: KDE)
    Not evaluated
- Activity
  - Developers, identification, turnover
    Less than 3 developers, not clearly identified
    Between 4 and 7 developers, or more unidentified developers with important turnover
    More than 7 developers, very stable team
    Not evaluated
  - Activity on bugs
    Slow reactivity in forum or on mailing list, or nothing regarding bug fixes in releases note
    Detectable activity but without process clearly exposed, long reaction/resolution time
    Strong reactivity based on roles and tasks assignment
    Not evaluated
  - Activity on functionalities
    No or few new functionalities
    Evolution of the product driven by the core team or by user's request without any clearly explained process
    Tool(s) to manage feature requests, strong interaction with roadmap
    Not evaluated
  - Activity on releases
    Very weak activity on both production and development releases
    Activity on production and development releases. Frequent minor releases (bug fixes)
    Important activity with frequent minor releases (bugs fixes) and planned major releases relating to the roadmap forcast
    Not evaluated
Industrialized solution
- Independence of developments
  - Developments realized at 100% by employees of a single company
  - 60% maximum
  - 20% maximum
  Not evaluated
- Services
  - Training
    No offer of training identified
    Offer exists but is restricted geographically and to one language or is provided by a single contractor
    Rich offers provided by several contractors, in several languages and split into modules of gradual levels
    Not evaluated
  - Support
    No offer of support except via public forums and mailing lists
    Offer exists but is provided by a single contractor without strong commitment quality of services
    Multiple service providers with strong commitment (e.g: guaranteed resolution time)
    Not evaluated
  - Consulting
    No offer of consulting service
    Offer exists but is restricted geographically and to one language or is provided by a single contractor
    Consulting services provided by different contractors in several languages
    Not evaluated
- Documentation
  - No user documentation
  - Documentation exists but shifted in time, is restricted to one language or is poorly detailed
  - Documentation always up to date, translated and possibly adapted to different target readers (end user, sysadmin, manager, ...)
  Not evaluated
- Quality Assurance
  - Quality Assurance
    No QA process
    Identifies QA process but not much formalized and with no tool
    Automatic testing process included in code's life-cycle with publication of results
    Not evaluated
  - Tools
    No bug or feature request management tool
    Standard tools provided (for instance by a hosting forge) but poorly used
    Very active use of tools for roles/tasks allocation and progress monitoring
    Not evaluated
- Packaging
  - Source
    Software can't be installed from source without lot of work
    Installation from source is limited and depends on very strict conditions (OS, arch, lib, ...)
    Installation from source is easy
    Not evaluated
  - Debian
    The software is not packaged for Debian
    A Debian package exists but it has important issues or it doesn't have official support
    The software is packaged in the distribution
    Not evaluated
  - FreeBSD
    The software is not packaged for FreeBSD
    A port exists but it has important issues or it doesn't have official support
    A official port exists in FreeBSD
    Not evaluated
  - HP-UX
    The software is not packaged for HP-UX
    A package exists but it has important issues or it doesn't have official support
    A stable package is provided for HP-UX
    Not evaluated
  - MacOSX
    The software is not packaged for MacOSX
    A package exists but it has important issues or it doesn't have official support
    The software is packaged in the distribution
    Not evaluated
  - Mandriva
    The software is not packaged for Mandriva
    A package exists but it has important issues or it doesn't have official support
    The software is packaged in the distribution
    Not evaluated
  - NetBSD
    The software is not packaged for NetBSD
    A port exists but it has important issues or it doesn't have official support
    A official port exists in NetBSD
    Not evaluated
  - OpenBSD
    The software is not packaged for OpenBSD
    A port exists but it has important issues or it doesn't have official support
    A official port exists in OpenBSD
    Not evaluated
  - RedHat
    The software is not packaged for RedHat/Fedora
    A package exists but it has important issues or it doesn't have official support
    The software is packaged in the distribution
    Not evaluated
  - Solaris
    The software is not packaged for Solaris
    A package exists but it has important issues or it doesn't have official support (e.g: SunFreeware.com )
    The software is supported by Sun for Solaris
    Not evaluated
  - SuSE
    The software is not packaged for SuSE
    A package exists but it has important issues or it doesn't have official support
    The software is packaged in the distribution
    Not evaluated
  - Windows
    The project can't be installed on Windows
    A package exists but it is limited or has important issues or just cover some specific Windows release (e.g: Windows2000 and WindowsXP)
    Windows is full supported and a package is provided
    Not evaluated
Exploitability
- Ease of use, ergonomics
  - Difficult to use, requires an in depth knowledge of the software functionality
  - Austere and very technical ergonomics
  - GUI including help functions and elaborated ergonomics
  Not evaluated
- Administration / Monitoring
  - No administrative or monitoring functionalities
  - Existing, functionalities but incomplete and or need improvement
  - Complete and easy-to-use administration and monitoring functionalities. Possible integration with external tools (e.g: SNMP, syslog, ...)
  Not evaluated
Technical adaptability
- Modularity
  - Monolithic software
  - Presence of hight level modules allowing a first level of software adaptation
  - Modular conception, allowing easy adaptation of the software by selecting or creating modules
  Not evaluated
- Code modification
  - Everything by hand
  - Recompilation possible but complex without any tools or documentation
  - Recompilation with tools (e.g: make, ANT, ...) and documentation provided
  Not evaluated
- Code extension
  - Any modification requires code recompilation
  - Architecture designed for static extension but requires recompilation
  - Principle of plugin, architecture designed for dynamic extension without recompilation
  Not evaluated
Strategy
- License
  - Permissiveness (only if user wants to become owner of code)
    Very strict license, like GPL
    Moderate permissive license located between both extremes (GPL and BSD) dual-licensing depending on the type of user (person, company, ...) or their activities
    Very permissive like BSD or Apache licenses
    Not evaluated
  - Protection against proprietary forks
    Very permissive like BSD or Apache licenses
    Moderate permissive license located between both extremes (GPL and BSD), dual-licensing depending on the type of user (person, company, ...) or their activies
    Very strict license, like GPL
    Not evaluated
- Copyright owners
  - Rights held by a few individuals or entities, making it easier to change the license
  - Rights held by numerous individuals owning the code in a homogeneous way, making relicense very difficult
  - Rights held by a legal entity in whom the community trusts (e.g: FSF or ASF)
  Not evaluated
- Modification of source code
  - No practical way to propose code modification
  - Tools provided to access and modify code (like CVS or SVN) but not really used to develop the software
  - The code modification process is well defined, exposed and respected, based on roles assignment
  Not evaluated
- Roadmap
  - No published roadmap
  - Existing roadmap without planning
  - Versionned roadmap, with planning and measure of delays
  Not evaluated
- Sponsor
  - Software has no sponsor, the core team is not paid
  - Software has an unique sponsor who might determine its strategy
  - Software is sponsored by industry
  Not evaluated
- Strategic independence
  - No detectable strategy or strong dependency on one unique actor(person, company,sponsor)
  - Strategic vision shared with several other free and open source projects but without strong commitment from copyrights owners
  - Strong independence of the code team, legal entity holding rights, strong involvement in the standardization process
  Not evaluated

Technical section

RFC Implementation
- LDAP Requests
  - RFC 4510 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4511 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4512 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4513 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4514 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4515 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4516 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4517 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4518 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4519 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
- LDAP Best Practices
  - RFC 4520 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4521 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
- LDAP Extensions
  - RFC 2247 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 2307 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 2589 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 2798 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 2849 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3062 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3296 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3671 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3672 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3687 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3698 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3829 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3909 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 3928 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4370 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4522 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4523 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4524 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4525 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4526 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 2247 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4527 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4533 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4422 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - RFC 4752 implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
  - Draft Behera ldap password policy implementation
    Not implemented
    Partially implemented
    Fully implemented
    Not evaluated
Performance
- Thread pooling
  - No thread pooling support
  - Thread pooling is partial or doesn't work correctly
  - Thread pooling is performing
  Not evaluated
- Proxy cache support
  - No proxy cache support
  - Proxy cache is partial or doesn't work correctly
  - Proxy cache is performing
  Not evaluated
Application Server integration
- WebSphere integration
  - WebSphere is not supported
  - WebSphere support documented but not tested
  - Fully WebSphere support
  Not evaluated
- Tomcat integration
  - Tomcat is not supported
  - Tomcat support documented but not tested
  - Fully Tomcat support
  Not evaluated
- JBoss integration
  - JBoss is not supported
  - JBoss support documented but not tested
  - Fully JBoss support
  Not evaluated
- Weblogic integration
  - Weblogic is not supported
  - Weblogic support documented but not tested
  - Fully Weblogic support
  Not evaluated
- Geronimo integration
  - Geronimo is not supported
  - Geronimo support documented but not tested
  - Fully Geronimo support
  Not evaluated
- JOnas integration
  - JOnas is not supported
  - JOnas support documented but not tested
  - Fully JOnas support
  Not evaluated
Architecture
- Load balancing / Failover
  - No Load balancing/Failover support
  - Load balancing/Failover is partial or doesn't work correctly
  - Load balancing/Failover is performing
  Not evaluated
- SSL Support
  - No SSL support
  - Partial SSL support
  - Fully SSL support and integration
  Not evaluated
- Transaction management
  - No transactional support
  - Partial transactional support
  - Full transactional support
  Not evaluated
- Simple Authentification and Security Layer
  - No SASL support
  - Partial SASL support
  - Full SASL support
  Not evaluated
- Database support
  - No database support
  - Default database support
  - Database can be changed
  Not evaluated
OS Support
- Linux-RedHat
  - The software is not packaged for RedHat
  - A package exists but it has important issues or it doesn't have official support
  - The software is packaged in the distribution
  Not evaluated

Functional section

Administration console
- No console of administration is available
- Limited and incomplete administration console
- Complete administration console
Not evaluated
Administration scripts
- No available script to administrate the server
- Some scripts are available (start, stop, update, import/export...)
- Available language to write powerful scripts
Not evaluated
Attributes management
- Password management
  - Encrypted password management
    No encrypted password option
    Encrypted password option is documented but not tested
    Encrypted password option is available
    Not evaluated
  - Password history
    No Management of 11 previous passwords option
    Management of 11 previous passwords option is documented but not tested
    Management of 25 previous passwords is available
    Not evaluated
  - Wrong password counter
    No Wrong password counter option
    Wrong password counter option is documented but not tested
    Wrong password counter option is available
    Not evaluated
  - Template password management
    No configuration of the password template
    Some rules are implemented
    All rules are implemented
    Not evaluated
- Account management
  - Locked attribute
    No Locked attribute option
    Locked attribute option is documented but not tested
    Locked attribute option is available
    Not evaluated
  - First connection attribute
    No First connection option
    First connection option is documented but not tested
    First connection option is available
    Not evaluated
Monitoring system
- Don't generate any monitoring file
- Monitoring file generation doesn't work correctly
- Many options are available to define monitoring
Not evaluated
Integration Development Environment
- No IDE supported
- Limited IDE integration
- An IDE is delivered with LDAP server
Not evaluated
Integrated in a SSO solution
- No Identity management solution available with this LDAP server
- Possible integration with external Identity management solution
- LDAP Server is delivered with an identity management solution
Not evaluated
Slice model
- Port management
  - No port management
  - Some ports are configurable
  - All ports are configurable
  Not evaluated
- Partition management
  - Standard installation available
  - Configurable installation available
  - Powerful installation and architecture available
  Not evaluated

0.1

Information

Generic section

Technical section

Functional section