{"id":"https://openalex.org/W7225464211","doi":"https://doi.org/10.5281/zenodo.24043076","title":"Transitioning Enterprise Linux Authentication at Scale: Migrating from Commercial VAS to Native SSSD Architecture with Near-Zero Disruption","display_name":"Transitioning Enterprise Linux Authentication at Scale: Migrating from Commercial VAS to Native SSSD Architecture with Near-Zero Disruption","publication_year":2026,"publication_date":"2026-11-07","ids":{"openalex":"https://openalex.org/W7225464211","doi":"https://doi.org/10.5281/zenodo.24043076"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24043076","doi":"https://doi.org/10.5281/zenodo.24043076","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24043076","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24043076","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5161236682","display_name":"BALARAMAKRISHNA ALTI","orcid":"https://orcid.org/0009-0003-1961-4782","observed_orcids":["https://orcid.org/0009-0003-1961-4782"]},"institutions":[{"id":"https://openalex.org/I4210121127","display_name":"Moody's Corporation (United States)","ror":"https://ror.org/02g1cyr24","country_code":"US","type":"company","lineage":["https://openalex.org/I4210121127"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"ALTI, BALARAMAKRISHNA","raw_affiliation_strings":["Moody's Corporation (United States)"],"raw_orcid":"https://orcid.org/0009-0003-1961-4782","affiliations":[{"raw_affiliation_string":"Moody's Corporation (United States)","institution_ids":["https://openalex.org/I4210121127"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5161236682"],"corresponding_institution_ids":["https://openalex.org/I4210121127"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.34279999136924744,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.34279999136924744,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.2460000067949295,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.1429000049829483,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/red-hat-enterprise-linux","display_name":"Red Hat Enterprise Linux","score":0.7639999985694885},{"id":"https://openalex.org/keywords/identity-preservation","display_name":"identity preservation","score":0.7120000123977661},{"id":"https://openalex.org/keywords/cutover","display_name":"cutover","score":0.5059999823570251},{"id":"https://openalex.org/keywords/ansible-roles","display_name":"Ansible roles","score":0.7229999899864197},{"id":"https://openalex.org/keywords/fastapi","display_name":"FastAPI","score":0.7689999938011169},{"id":"https://openalex.org/keywords/identity-drift","display_name":"identity drift","score":0.5360000133514404},{"id":"https://openalex.org/keywords/vendor-lock-in","display_name":"vendor lock-in","score":0.8130000233650208},{"id":"https://openalex.org/keywords/licensing-fees","display_name":"licensing fees","score":0.6389999985694885}],"concepts":[{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.676800012588501},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5964000225067139},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5418999791145325},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.4675999879837036},{"id":"https://openalex.org/C112968700","wikidata":"https://www.wikidata.org/wiki/Q11368","display_name":"Unix","level":3,"score":0.4449000060558319},{"id":"https://openalex.org/C105446022","wikidata":"https://www.wikidata.org/wiki/Q445962","display_name":"Legacy system","level":3,"score":0.44269999861717224},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4334000051021576},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40369999408721924},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.3077999949455261},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.3052000105381012},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3025999963283539},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.30239999294281006},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2912999987602234},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.28929999470710754},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C164554305","wikidata":"https://www.wikidata.org/wiki/Q71550","display_name":"Application server","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C2777331311","wikidata":"https://www.wikidata.org/wiki/Q784561","display_name":"Authentication server","level":3,"score":0.2678999900817871},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.26589998602867126},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C2777253204","wikidata":"https://www.wikidata.org/wiki/Q308980","display_name":"Daemon","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2606000006198883},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.2563000023365021}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.5281/zenodo.24043076","doi":"https://doi.org/10.5281/zenodo.24043076","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24043076","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.24043077","doi":"https://doi.org/10.5281/zenodo.24043077","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24043077","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.24043275","doi":"https://doi.org/10.5281/zenodo.24043275","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24043275","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24043076","doi":"https://doi.org/10.5281/zenodo.24043076","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24043076","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7135301907","https://openalex.org/W4284961148","https://openalex.org/W7162023003","https://openalex.org/W3137544677","https://openalex.org/W4389471692","https://openalex.org/W4327916710","https://openalex.org/W2274290418","https://openalex.org/W2954883506","https://openalex.org/W6930742306","https://openalex.org/W7136602414"],"abstract_inverted_index":{"Enterprises":[0],"that":[1,88],"rely":[2],"on":[3,64],"legacy":[4],"commercial":[5],"Unix":[6],"authentication":[7,139],"agents":[8],"face":[9],"rising":[10],"licensing":[11,162],"costs,":[12],"vendor":[13],"lock-in,":[14],"and":[15,66,71,80,96,106,109,121,148,153,175,183],"integration":[16],"friction":[17],"during":[18,141],"Linux":[19,38],"major-version":[20],"upgrades.":[21],"This":[22,179],"paper":[23],"presents":[24],"a":[25,30,72,165,181],"systematic":[26],"framework":[27,57],"for":[28,164],"migrating":[29],"production":[31],"fleet":[32],"of":[33,169],"8,000":[34,113],"Red":[35],"Hat":[36],"Enterprise":[37],"(RHEL)":[39],"servers":[40,114],"from":[41],"One":[42],"Identity":[43],"Authentication":[44],"Services":[45,53],"(VAS)":[46],"to":[47,99,135,146],"the":[48,100,124,127],"native,":[49],"open-source":[50],"System":[51],"Security":[52],"Daemon":[54],"(SSSD).":[55],"The":[56],"combines":[58],"an":[59],"asynchronous":[60],"control":[61],"plane":[62],"built":[63],"Python":[65],"FastAPI,":[67],"idempotent":[68],"Ansible":[69],"roles,":[70],"per-node":[73],"state":[74],"machine":[75],"with":[76],"automated":[77],"pre-flight,":[78],"validation,":[79],"rollback":[81],"gates.":[82],"Its":[83],"central":[84],"design":[85],"rule":[86],"is":[87,180],"identity":[89,151],"must":[90],"be":[91],"preserved":[92],"bit-for-bit:":[93],"every":[94],"user":[95],"group":[97],"resolves":[98],"same":[101],"UID,":[102],"GID,":[103],"home":[104],"directory,":[105],"shell":[107],"before":[108],"after":[110],"cutover.":[111],"Across":[112],"migrated":[115],"in":[116,160],"four":[117],"waves":[118],"between":[119],"February":[120],"October":[122],"2023,":[123],"approach":[125],"cut":[126],"median":[128],"per-host":[129],"maintenance":[130],"window":[131],"by":[132,143],"82%":[133],"(45":[134],"8":[136],"minutes),":[137],"reduced":[138],"dropouts":[140],"cutover":[142],"97%":[144],"(126":[145],"4),":[147],"recorded":[149],"zero":[150,154],"drift":[152],"rollbacks.":[155],"It":[156],"removed":[157],"$1.216":[158],"million":[159],"annual":[161],"fees":[163],"one-off":[166],"engineering":[167],"cost":[168],"$46,000.":[170],"Reference":[171],"implementation":[172],"(Ansible":[173],"roles":[174],"control-plane":[176],"API):":[177],"https://github.com/balaramaa/enterprise-linux-vasd-to-sssd-migration":[178],"preprint":[182],"has":[184],"not":[185],"been":[186],"peer":[187],"reviewed.":[188]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-11-08T00:00:00"}