consigna 1 federated filesharing
play

Consigna 1 : federated filesharing federation as an afterthought - PowerPoint PPT Presentation

Consigna 1 : federated filesharing federation as an afterthought Victoriano Giralt 1 Luis Melendez 2 1 Central Computing Facility University of Malaga 2 Central Computing Facility University of Cordoba TERENA EuroCAMP Dubrovnik November 14th


  1. Consigna 1 : federated filesharing federation as an afterthought Victoriano Giralt 1 Luis Melendez 2 1 Central Computing Facility University of Malaga 2 Central Computing Facility University of Cordoba TERENA EuroCAMP Dubrovnik November 14th 2007 1 1 Consigna is Spanish for left luggage

  2. Motivation Development Demo Implementation Summary Outline Motivation 1 Victoriano Giralt, Luis Melendez Federated applications

  3. Motivation Development Demo Implementation Summary Outline Motivation 1 Development 2 Victoriano Giralt, Luis Melendez Federated applications

  4. Motivation Development Demo Implementation Summary Outline Motivation 1 Development 2 Demo 3 Victoriano Giralt, Luis Melendez Federated applications

  5. Motivation Development Demo Implementation Summary Outline Motivation 1 Development 2 Demo 3 Implementation 4 Victoriano Giralt, Luis Melendez Federated applications

  6. Motivation Development Demo Implementation Summary Why a file sharing application? e-mail is not the best method for exchanging files Our users need a simple method for file exchange Victoriano Giralt, Luis Melendez Federated applications

  7. Motivation Development Demo Implementation Summary Why a file sharing application? e-mail is not the best method for exchanging files Our users need a simple method for file exchange It should be useable by members and non members Victoriano Giralt, Luis Melendez Federated applications

  8. Motivation Development Demo Implementation Summary Why a file sharing application? e-mail is not the best method for exchanging files Our users need a simple method for file exchange It should be useable by members and non members It should not be a “black hole” Victoriano Giralt, Luis Melendez Federated applications

  9. Motivation Development Demo Implementation Summary Why a file sharing application? e-mail is not the best method for exchanging files Our users need a simple method for file exchange It should be useable by members and non members It should not be a “black hole” It should be easy and unobstrusive Victoriano Giralt, Luis Melendez Federated applications

  10. Motivation Development Demo Implementation Summary Why a file sharing application? e-mail is not the best method for exchanging files Our users need a simple method for file exchange It should be useable by members and non members It should not be a “black hole” It should be easy and unobstrusive The browser is THE interface Victoriano Giralt, Luis Melendez Federated applications

  11. Motivation Development Demo Implementation Summary The way to a federated application from local users to federation We have evolved the application through several access control methods Victoriano Giralt, Luis Melendez Federated applications

  12. Motivation Development Demo Implementation Summary The way to a federated application from local users to federation We have evolved the application through several access control methods User/password AuthN/AuthR at the application level - Heavy administration - Impedes usage by non members + May be used from any location Victoriano Giralt, Luis Melendez Federated applications

  13. Motivation Development Demo Implementation Summary The way to a federated application from local users to federation We have evolved the application through several access control methods User/password Location based AuthR IP based It has the concepts of Inside (organization’s IP space) may upload and download Outside (rest of the Internet) may upload or download Files are password protected Victoriano Giralt, Luis Melendez Federated applications

  14. Motivation Development Demo Implementation Summary The way to a federated application from local users to federation We have evolved the application through several access control methods User/password Location based AuthR IP based + Low administtative burden + Easy for non members - Unuseable for roaming members Victoriano Giralt, Luis Melendez Federated applications

  15. Motivation Development Demo Implementation Summary The way to a federated application from local users to federation We have evolved the application through several access control methods User/password Centralized AuthN/AuthR IP based + Maybe added to IP based control WebSSO + roaming members location become inside Victoriano Giralt, Luis Melendez Federated applications

  16. Motivation Development Demo Implementation Summary The way to a federated application from local users to federation We have evolved the application through several access control methods User/password Shibboleth based AuthN/AuthR IP based + Lazy sessions allow old behaviour WebSSO + Collaborating members from Federated other institutions can be treated like local members. + Abuse can be traced + Richer AuthR posibilities Victoriano Giralt, Luis Melendez Federated applications

  17. Motivation Development Demo Implementation Summary Best seen than told or one image is worth a thousand words Let’s see it working Victoriano Giralt, Luis Melendez Federated applications

  18. Motivation Development Demo Implementation Summary The gory details adding code to connect to the federation We have based our development on QuiXplorer altering several parts, though not many: Victoriano Giralt, Luis Melendez Federated applications

  19. Motivation Development Demo Implementation Summary The gory details adding code to connect to the federation We have based our development on QuiXplorer altering several parts, though not many: IP control added by the University of Basque Country Victoriano Giralt, Luis Melendez Federated applications

  20. Motivation Development Demo Implementation Summary The gory details adding code to connect to the federation We have based our development on QuiXplorer altering several parts, though not many: IP control added by the University of Basque Country Interface hints: the green and red dots Victoriano Giralt, Luis Melendez Federated applications

  21. Motivation Development Demo Implementation Summary The gory details adding code to connect to the federation We have based our development on QuiXplorer altering several parts, though not many: IP control added by the University of Basque Country Interface hints: the green and red dots Login links Victoriano Giralt, Luis Melendez Federated applications

  22. Motivation Development Demo Implementation Summary The gory details adding code to connect to the federation We have based our development on QuiXplorer altering several parts, though not many: IP control added by the University of Basque Country Interface hints: the green and red dots Login links Session info for authenticated access Victoriano Giralt, Luis Melendez Federated applications

  23. Motivation Development Demo Implementation Summary The gory details Apache configuration We have used Shibboleth lazy sessions in order to allow for unauthenticated access Victoriano Giralt, Luis Melendez Federated applications

  24. Motivation Development Demo Implementation Summary The gory details Apache configuration We have used Shibboleth lazy sessions in order to allow for unauthenticated access <Location /consigna> AuthType shibboleth ShibRequireSession Off require shibboleth </Location> Victoriano Giralt, Luis Melendez Federated applications

  25. Motivation Development Demo Implementation Summary The gory details Attribute release We require minimal identity information Victoriano Giralt, Luis Melendez Federated applications

  26. Motivation Development Demo Implementation Summary The gory details Attribute release We require minimal identity information Whatever is in REMOTE_USER, as user ID Victoriano Giralt, Luis Melendez Federated applications

  27. Motivation Development Demo Implementation Summary The gory details Attribute release We require minimal identity information Whatever is in REMOTE_USER, as user ID If common name is available, we show it Victoriano Giralt, Luis Melendez Federated applications

  28. Motivation Development Demo Implementation Summary The gory details Code changes and additions We have modified several files Victoriano Giralt, Luis Melendez Federated applications

  29. Motivation Development Demo Implementation Summary The gory details Code changes and additions We have modified several files index.php Inclusion of our function definitions Call of our access control funcion New action definitions for launching login Victoriano Giralt, Luis Melendez Federated applications

  30. Motivation Development Demo Implementation Summary The gory details Code changes and additions We have modified several files .include/init.php Added code for session initialization Added code for loading session data into global array Victoriano Giralt, Luis Melendez Federated applications

  31. Motivation Development Demo Implementation Summary The gory details Code changes and additions We have modified several files .include/header.php Added code for checking credentials Added code for showing user information Added code for displaying login links Victoriano Giralt, Luis Melendez Federated applications

Recommend


More recommend