AAI at Unil. Home Organization Integration
|
|
|
- Laura Thompson
- 5 years ago
- Views:
Transcription
1 AAI at Unil Home Organization Integration
2 GESTU > Gestion des utilisateurs > Accès informatique (username/password) > Mailbox and address > Security groups > Students: automatic > Employees: web interface or paper formular > Gestu is integrated in RH and students database
3 GESTU GESTU LDAP auth LDAP annuaire Active Directory server
4 A LDAP auth user > dn: uid=uone,ou=unil-users,ou=gesu,dc=unil,dc=ch > objectclass: top > objectclass: person > objectclass: organizationalperson > objectclass: inetorgperson > objectclass: posixaccount > uid: uone > sn: One > cn:user One > givenname:user > mail: > uidnumber: > gidnumber: > loginshell: /bin/ksh > gecos: User One > homedirectory: /users/uone > userpassword:***************
5 A LDAP auth group > cn=ci-g, ou=unil-groups,ou=gesu,dc=unil,dc=ch > objectclass=top > objectclass=groupofuniquenames > objectclass=posixgroup > cn=ci-g > description=ci-g > gidnumber=20001 > uniquemember=uid=uone,ou=unil-users,ou=gesu,dc=unil,dc=ch > uniquemember=uid=utwo,ou=unil-users,ou=gesu,dc=unil,dc=ch > uniquemember=uid=uthree,ou=unil-users,ou=gesu,dc=unil,dc=ch > memberuid=uone > memberuid=utwo > memberuid=uthree
6 An other LDAP attr > A LDAP that contains AAI attributres: LDAP attr > adapt the LDAP schema > All students and staff: ~15000 entries > Same dn as LDAP auth > Implements the following attributes edupersonprincipalname swissedupersonuniqueid surname givenname preferredlanguage swissedupersondateofbirth swissedupersongender mail swissedupersonhomeorganization swissedupersonhomeorganizationtype edupersonaffiliation swissedupersonstudybranch3 swissedupersonstudylevel swissedupersonstaffcategory edupersonentitlement
7 AAI: Home integration GESTU LDAP auth LDAP annuaire daily transfer of an XML file Active Directory server daily update of each entry LDAP attr
8 XML entry (staff) <swisseduperson> <uid>arootti</uid> <unilpernum>485</unilpernum> <swissedupersonuniqueid></swissedupersonuniqueid> <surname>rootti</surname> <givenname>aregg</givenname> <swissedupersondateofbirth> </swissedupersondateofbirth> <swissedupersongender>1</swissedupersongender> <swissedupersonhomeorganization>unil.ch</swissedupersonhomeorganization> <swissedupersonhomeorganizationtype>university</swissedupersonhomeorganizationty pe> <swissedupersonhomeorganization>unil.ch</swissedupersonhomeorganization> <swissedupersonhomeorganizationtype>university</swissedupersonhomeorganizationty pe> <edupersonaffiliation>staff</edupersonaffiliation> <swissedupersonstaffcategory>300</swissedupersonstaffcategory> </swisseduperson>
9 <swisseduperson> <uid>ostudent</uid> XML entry (student) <unilpernum>58573</unilpernum> <swissedupersonuniqueid></swissedupersonuniqueid> <surname>student</surname> <givenname>one</givenname> <swissedupersondateofbirth> </swissedupersondateofbirth> <swissedupersongender>2</swissedupersongender> <mail>one. <swissedupersonhomeorganization>unil.ch</swissedupersonhomeorganization> <swissedupersonhomeorganizationtype>university</swissedupersonhomeorganizationtype> <edupersonaffiliation>student</edupersonaffiliation> <swissedupersonstudybranch3>1415</swissedupersonstudybranch3> <swissedupersonstudybranch3>1600</swissedupersonstudybranch3> <swissedupersonstudybranch3>1700</swissedupersonstudybranch3> <swissedupersonstudylevel> </swissedupersonstudylevel> <swissedupersonstudylevel> </swissedupersonstudylevel> <swissedupersonstudylevel> </swissedupersonstudylevel> </swisseduperson>
10 LDAP attr : a user (staff) > dn: uid=uone,ou=unil-users,ou=gesu,dc=unil,dc=ch > objectclass: swisseduperson > cn: User One > edupersonprincipalname: uone > swissedupersonhomeorganizationtype: university > swissedupersongender: 1 > uid: uone > swissedupersonhomeorganization: unil.ch > swissedupersondateofbirth: > swissedupersonuniqueid: @unil.ch > swissedupersonstaffcategory: 300 > edupersonaffiliation: staff > sn: One > edupersonentitlement: Pat-unil@unil.ch > edupersonentitlement: Gesu@unil.ch > edupersonentitlement: Ci@unil.ch > edupersonentitlement: Argos-users@unil.ch > edupersonentitlement: Acces-soft@unil.ch > edupersonentitlement: Rect-da-services@unil.ch > edupersonentitlement: Switch-oper@unil.ch > mail: User.One@ci.unil.ch > givenname: User
11 LDAP attr : a user (student) > dn: uid=sone,ou=unil-users,ou=gesu,dc=unil,dc=ch > objectclass: top > objectclass: person > objectclass: organizationalperson > objectclass: inetorgperson > objectclass: swisseduperson > cn: Student One > edupersonprincipalname: sone > swissedupersonhomeorganizationtype: university > swissedupersongender: 1 > uid: sone > swissedupersonhomeorganization: unil.ch > swissedupersondateofbirth: > swissedupersonuniqueid: @unil.ch > edupersonaffiliation: student > sn: one > edupersonentitlement: All-etu@unil.ch > edupersonentitlement: Etu-lett-geographie@unil.ch > swissedupersonstudylevel: > swissedupersonstudylevel: > swissedupersonstudylevel: > mail: Student.One@etu.unil.ch > swissedupersonstudybranch3: 1600 > swissedupersonstudybranch3: 1415 > swissedupersonstudybranch3: 4905 > givenname: Student
12 Shibboleth User s Home Org 3 Credentials 2 1 Resource Owner Shibboleth Authentication User Dir 3 5 HS AA WAYF Handle 2 5 Resource Attributes 5 Authentication = OK
13 Shibboleth: origin site Unil Login Server AA Url: username password PubCookie module HS Url: Tomcat + Apache LDAP attr Linux
14 Pubcookie login server LDAP auth username password cookie 4 username password User 1 8 cookie PubCookie server Apache Linux 2 redirect PubCookie module Apache Linux
15 Origin site: httpd.conf Authentication > <IfModule mod_jk.c> > Include /etc/httpd/conf/mod_jk.conf > </IfModule> > # Pubcookie Configuration > PubcookieAuthTypeNames EGNetID > PubcookieInactiveExpire -1 > PubcookieLogin > > <Location /shibboleth/hs> > AuthType EGNetID > AuthName "shibboleth/hs" > require valid-user > </Location>
16 Origin site: resolver.xml Attributes > <SimpleAttributeDefinition id="urn:mace:switch.ch:attributedef:swissedupersonuniqueid" > <DataConnectorDependency requires="directory"/> </SimpleAttributeDefinition>. > <JNDIDirectoryDataConnector id="directory"> <Search filter="uid=%principal%"> <Controls searchscope="subtree_scope" returningobjects="false" /></Search> <Property name="java.naming.factory.initial" value="com.sun.jndi.ldap.ldapctxfactory" /> <Property name="java.naming.provider.url" value="ldap://cati.unil.ch:390/ou=unilusers,ou=gesu,dc=unil,dc=ch" /> <Property name="java.naming.security.principal" value="uid=xxxxxx,dc=unil,dc=ch" /> <Property name="java.naming.security.credentials" value="xxxxx" /> > </JNDIDirectoryDataConnector>
17 Demo > Shib Secure page on lita (valid user) > Shib Secure page on lita (staff) > Shib Secure page on lita (student) > Secure page on exptest (staff only)
18
19 Conclusion > Installation of Shibboleth-Origin -> No problem on Linux (RedHat, Debian) > Two LDAP > LDAP for authentication > LDAP for attributes > Extracting data (XML file) -> easy in our case > GESTU integrated in RH and Students databases > A single IT team at Unil -> cooperation
The Evolution of an Integrated User Directory
Informatikdienste / IT-Services The Evolution of an Integrated User Directory, Informatikdienste ETH Zurich The Evolution of an Integrated User Directory Creation of many databases The need for integration
eduperson & family Ajay Daryanani Middleware Engineer, RedIRIS / Red.es Kopaonik, 13th March 2007
eduperson & family Ajay Daryanani (ajay.daryanani@rediris.es) Middleware Engineer, RedIRIS / Red.es Kopaonik, 13th March 2007 1 1 Outline 1. eduperson Background Attributes 2. Extending eduperson Example:
Authenticating and Importing Users with Active Directory and LDAP
Purpose This document describes how to integrate Nagios with Active Directory (AD) or Lightweight Directory Access Protocol (LDAP) to allow user authentication and validation with an AD or LDAP infrastructure
Authenticating and Importing Users with AD and LDAP
Purpose This document describes how to integrate with Active Directory (AD) or Lightweight Directory Access Protocol (LDAP). This allows user authentication and validation through the interface. This is
Authenticating and Importing Users with AD and LDAP
Purpose This document describes how to integrate with Active Directory (AD) or Lightweight Directory Access Protocol (LDAP). This allows user authentication and validation through the interface. This is
Simple Guide to Configuration Files
Simple Guide to Configuration Files Christopher Simpson Swansea College - 1 - Table of Contents Table of Contents...2 Configuration Files...3 Generic Information...3 IdPConfig...4 Logging...4 Credentials...4
Using an LDAP With ActiveWorkflow
Table of contents 1 Groups...2 2 People...2 3 Authentication...3 4 Directory Service... 4 4.1 Connection Properties... 5 4.2 User Retrieval Properties...6 4.3 User Attribute Properties...7 4.4 Group Retrieval
LDAP. Lightweight Directory Access Protocol
LDAP Lightweight Directory Access Protocol Outline What is LDAP? Introduction Purpose NIS (Network Information Service) How does it look like? Structure Install & Setup Server & Client nss_ldap & pam_ldap
LDAP Quick Start Manual
Version: 1.1 LDAP Quick Start Manual Release date: 2014-02-22 2011-2014 Fanvil Co., Ltd. This document contains information that is proprietary to Fanvil Co., Ltd (Abbreviated as Fanvil hereafter). Specifications
ASA AnyConnect Double Authentication with Certificate Validation, Mapping, and Pre Fill Configuration Guide
ASA AnyConnect Double Authentication with Certificate Validation, Mapping, and Pre Fill Configuration Guide Document ID: 116111 Contributed by Michal Garcarz, Cisco TAC Engineer. Jun 13, 2013 Contents
Technical Background Information
Technical Background Information Ueli Kienholz, SWITCH Rolf Gartmann, SWITCH Claude Lecommandeur, EPFL December 2, 2002 2002 SWITCH PAPI Rolf Gartmann, SWITCH Security Group December 2, 2002 2002 SWITCH
SWANSEA COLLEGE. Christopher Simpson. Executive Summary. College Background. Table of Contents
Christopher Simpson Table of Contents Executive Summary 1 College Background 1 Current Access Management Implementation 1 Aims and Objectives 2 Current Shibboleth Situation 3 Implementation 4 Swansea College
AAI - Authentication and Authorization Infrastructure
AAI - Authentication and Authorization Infrastructure Attribute Specification 11 April 2017 Version 1.6 Table of Contents 1. Introduction... 4 1.1. Privacy and data protection... 4 1.2. Security... 4 2.
fanvil file, forbidden to steal!
Version: 1.1 LDAP Quick Start Manual Release date: 2014-02-22 2011-2014 Fanvil Co., Ltd. This document contains information that is proprietary to Fanvil Co., Ltd (Abbreviated as Fanvil hereafter). Unauthorized
Finding Information in an LDAP Directory. Info. Tech. Svcs. University of Hawaii Russell Tokuyama 05/02/01
Finding Information in an LDAP Directory Info. Tech. Svcs. University of Hawaii Russell Tokuyama 05/02/01 University of Hawaii 2001 What s the phone number? A scenario: You just left a meeting and forgot
IBM DB2 and Transparent LDAP Authentication
IBM DB2 and Transparent LDAP Authentication IBM Deutschland Research & Development GmbH SAP DB2 Development Team 08/2009 Author: Co-Author: Hinnerk Gildhoff - hinnerk@de.ibm.com Marcel Csonka marcel.csonka@de.ibm.com
First thing is to examine the valid switches for ldapmodify command, ie on my machine with the Fedora Direcotory Server Installed.
LDAP Command via the command line This document is on about the use of LDAP via the command line instead of the GUI. The reason for this is the command lines for LDAP are more powerful and adapt especially
Novell OpenLDAP Configuration
Novell OpenLDAP Configuration To access the GoPrint Novell e-directory LDAP Connector configuration screen navigate to: Accounts Authentication Connectors GoPrint provides two connector options, Standard
Moulinette Documentation
Moulinette Documentation Release 2.6.1 YunoHost Collective May 02, 2018 Contents: 1 Role and syntax of the actionsmap 3 1.1 Principle................................................. 3 1.2 Format of the
CHUV CHUV. Vincent Bex Systems Engineer Patrick Zosso Infrastructure Project Manager
AAI @ Vincent Bex Systems Engineer Vincent.Bex@chuv.ch Patrick Zosso Infrastructure Project Manager Patrick.Zosso@chuv.ch Agenda Presentation of the Security concepts at The challenge AAI implementation
Enable the following two lines in /etc/ldap/ldap.conf, creating the file if necessary:
Installation The package will be installed from the official Debian repositories. apt-get install slapd ldap-utils Add an entry in /etc/hosts to define an address to the directory: 127.0.0.1 ldap.localdomain
After extracting the zip file a ldap-jetty directory is created, from now on this directory will be referred as <ldap_home>.
Configuring LDAP Geronimo uses the Apache Directory Server for its directory service, this is part of the Apache Directory Project. Geronimo implements the following two projects from the ApacheDS project.
Configure the ISE for Integration with an LDAP Server
Configure the ISE for Integration with an LDAP Server Document ID: 119149 Contributed by Piotr Borowiec, Cisco TAC Engineer. Jul 10, 2015 Contents Introduction Prerequisites Requirements Components Used
Integrating YuJa Enterprise Video Platform with LDAP / Active Directory
Integrating YuJa Enterprise Video Platform with LDAP / Active Directory 1. Overview This document is intended to guide users on how to integrate Single Sign-On (SSO) capabilities using LDAP/Active Directory
Metadirectory tool UDS/MD. Roland Hedberg
Metadirectory tool UDS/MD Roland Hedberg Metadirectory according to wikipedia A metadirectory system provides for the flow of data between one or more directory services and
Troubleshooting WebSphere Process Server: Integration with LDAP systems for authentication and authorization
Troubleshooting WebSphere Process Server: Integration with LDAP systems for authentication and authorization Dr. Stephan Volz (stephan.volz@de.ibm.com) Technical Teamlead BPC L2 support (EMEA) 24 August
Install Kopano Core on Debian or Ubuntu with OpenLDAP
Install Kopano Core on Debian or Ubuntu with OpenLDAP s Introduction Tested Installation Install mysql and apache / php Install OpenLDAP Create the placeholder for our users. Download and install kopano
LDAP Configuration Guide
LDAP Configuration Guide Publication date: 11/8/2017 www.xcalar.com Copyright 2017 Xcalar, Inc. All rights reserved. Table of Contents About this guide 3 Configuring LDAP 4 Before you start 5 Configuring
BELNET R&E federation Technical policy
BELNET R&E federation Technical policy Version 1.0 Version Date 0.1 11/03/09 First draft for advisory committee 0.2 11/05/09 Added attribute schema; changes after 1st meeting 0.3 01/07/10 Changed metadata
OIG 11G R2 Field Enablement Training
OIG 11G R2 Field Enablement Training Lab 21 - Reports Lab Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are responsible for
Integration of Web Applications
Integration of Web Applications The AAI Team, aai@switch.ch 2007 SWITCH Integration of Web Applications! Introduction! PHP and Java Integration! Application and Database Integration! AAIportal! WAYF Integration
Introduction of Identity & Access Management Federation. Motonori Nakamura, NII Japan
Introduction of Identity & Access Management Federation Motonori Nakamura, NII Japan } IP networking } The network enables a variety type of attractive applications } Communication E-mail Video conferencing
Identity and Access Management Infrastructure for Oxford University
Identity and Access Management Infrastructure for Oxford University John Ireland Systems Development and Support Section Manager Oxford University Computing Services Identity and Access Management Digital
OpenLDAP Everywhere Revisited
1 of 11 6/18/2006 8:24 PM OpenLDAP Everywhere Revisited Craig Swanson Matt Lung Abstract Samba 3 offers new capabilites for a unified directory for all clients. Get mail, file sharing and more all working
Polycom Corporate Directory
Polycom Corporate Directory About Polycom offers configuration of a "corporate directory", which fetches entries from an LDAP-Server. This page describes how to set up a minimal OpenLDAP-based contacts
OIG 11G R2 Field Enablement Training
OIG 11G R2 Field Enablement Training Lab 14 - Reconciliation Lab Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are responsible
FreeIPA - Control your identity
FreeIPA - Control your identity LinuxAlt 2012 Martin Košek, Sr. Software Engineer, Red Hat Nov 3 rd, 2012 This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike
Configuring a Virtual-Domain Server with LDAP
This document provides a recipe for configuring a Mirapoint server to perform LDAP authentication, message routing, and email access proxying. Configuration requires two activities: LDAP Database User
AA Enabling applications Why and how to make web applications AAI ready. Lukas Hämmerle
AA Enabling applications Why and how to make web applications AAI ready Lukas Hämmerle lukas.haemmerle@switch.ch Presentation Overview 1 Why adapting web applications to an AAI? 2 3 4 5 Do I have to care
eduperson 1.0 Specification
eduperson 1.0 Specification Internet2/Educause eduperson Working Group 12-Feb-2001 edupersonaffiliation (defined in eduperson); OID: 1.3.6.1.4.1.5923.1.1.1.1 Application utility class: standard; # of values:
Finding Information in an LDAP Directory
Finding Information in an LDAP Directory Info. Tech. Svcs. University of Hawaii Russell Tokuyama 05/02/01 University of Hawaii 2001 What s the phone number? $ VFHQDULR
Implementing Single-Sign-On(SSO) for APM UI
Implementing Single-Sign-On(SSO) for APM UI 1.Introduction...2 2.Overview of SSO with LTPA...3 3.Installing and configuring TDS...5 3.1.Installing TDS 6.3...5 3.2.Changing the administrator password (Optional)...7
SmartPatch. Configuration Reference Version 6.x
SmartPatch Configuration Reference Version 6.x Copyright Copyright 2017 Brand-Rex Ltd. All rights reserved. No part of this publication or of the SmartPatch software, in source code or object code form,
by Adam Stokes draft 1 Purpose? This document is a rough draft intended on integrating Samba 3 with Red Hat Directory Server 7.1 (RHDS).
Samba & Red Hat Directory Server Integration by Adam Stokes draft 1 Purpose? This document is a rough draft intended on integrating Samba 3 with Red Hat Directory Server 7.1 (RHDS). What will you gain
openssh-ldap-pubkey Documentation
openssh-ldap-pubkey Documentation Release 0.1.2 Kouhei Maeda Nov 25, 2017 Contents 1 openssh-ldap-pubkey 3 1.1 Status................................................... 3 1.2 Requirements...............................................
User Registry Configuration in WebSphere Application Server(WAS)
2012 User Registry Configuration in WebSphere Application Server(WAS) By Geetha Kanra, Sanjay Singh, and Yogendra Srivastava [Abstract: This article provides step by step procedure to configure various
Active Directory eduperson
Active Directory eduperson =========================================================================================================== =========================== File: eduperson.ldf Version: 20131020170503
pumpkin Documentation
pumpkin Documentation Release 0.1-dev Łukasz Mierzwa January 02, 2014 Contents 1 Working with models 3 1.1 Philosophy................................................ 3 1.2 Model definiton.............................................
Realms and Identity Policies
The following topics describe realms and identity policies: About, page 1 Create a Realm, page 8 Create an Identity Policy, page 14 Create an Identity Rule, page 15 Manage a Realm, page 17 Manage an Identity
Configure Pass-Through Authentication on IBM Tivoli Directory Server
Configure Pass-Through Authentication on IBM Tivoli Directory Server Amit Aherao (amit_aherao@in.ibm.com), Staff Software Engineer, IBM India Software Labs. Mayur Boob (mayurboo@in.ibm.com), Software Engineer,
How we implemented an LDAP directory for Laboratories
How we implemented an directory for Laboratories A Case Study at Hong Kong Institute of Vocational Education (Tsing Yi), Department of ICT Nick Urbanik This work is licensed under the
Deposited on: 7 September 2009
Watt, J. and Sinnott, R.O. and Jiang, J. (2007) The GLASS project: supporting secure shibboleth-based single sign-on to campus resources. In: Cox, S.J. (ed.) Proceedings of the UK e-science All Hands Meeting
Realms and Identity Policies
The following topics describe realms and identity policies: About, page 1 Create a Realm, page 8 Create an Identity Policy, page 15 Create an Identity Rule, page 15 Manage a Realm, page 20 Manage an Identity
Using Your Own Authentication System with ArcGIS Online. Cameron Kroeker and Gary Lee
Using Your Own Authentication System with ArcGIS Online Cameron Kroeker and Gary Lee Agenda ArcGIS Platform Structure What is SAML? Meet the Players Relationships Are All About Trust What Happens During
Two factor authentication for Apache using mod_auth_xradius
Two factor authentication for Apache using mod_auth_xradius sandbox-logintc.com/docs/connectors/apache_alt.html Introduction LoginTC makes it easy for administrators to add multi-factor to Apache. This
Oracle Fusion Middleware
Oracle Fusion Middleware Tutorial for Oracle Identity Management 11g Release 1 (11.1.1) E10276-01 May 2009 Oracle Fusion Middleware Tutorial for Oracle Identity Management, 11g Release 1 (11.1.1) E10276-01
Setting up a Shibboleth SP
Setting up a Shibboleth SP Overview Install the SP (shibd) Install with yum Install manually Make Sure shibd Runs at Startup Configuration Configure shib.conf Configure httpd.conf Configure attribute-map.xml
Porting Google App Engine Applications to IBM Middleware
Porting Google App Engine Applications IBM Middleware Author: Animesh Singh, John Reif Abstract: Google App Engine is a cloud computing platform that hosts third party Web applications. Application authors
Hortonworks DataFlow
Administration () docs.hortonworks.com : Administration Copyright 2012-2018 Hortonworks, Inc. Some rights reserved. Except where otherwise noted, this document is licensed under Creative Commons Attribution
AAI Attributes Thomas Lenggenhager,
AAI Attributes Thomas Lenggenhager, 2004 SWITCH Directories within a AAI Home Organization AAI-enabled Home Organization Authentication System Authentication System any Apache
Contents Overview... 5 Downloading Primavera Gateway... 5 Primavera Gateway On-Premises Installation Prerequisites... 6
Gateway Installation and Configuration Guide for On-Premises Version 17 September 2017 Contents Overview... 5 Downloading Primavera Gateway... 5 Primavera Gateway On-Premises Installation Prerequisites...
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES (POP)
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES (POP) GALLAUDET UNIVERSITY Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant")
aueduperson Definition and Attribute Vocabulary 2 Sep 2009
aueduperson Definition and Attribute Vocabulary 2 Sep 2009 Table of contents 1 - INTRODUCTION... 4 1.1 - ONGOING INPUT AND REVIEW... 4 1.2 - CONSIDERATIONS IN EXCHANGING IDENTITY ATTRIBUTES... 4 1.3 -
CN Assignment I. 1. With an example explain how cookies are used in e-commerce application to improve the performance.
CN Assignment I 1. With an example explain how cookies are used in e-commerce application to improve the performance. In an e-commerce application, when the user sends a login form to the server, the server
AAI-SSO with Active Directory. Kerberos Login Handler
AAI-SSO with Active Directory Kerberos Login Handler Project Overview One of FHNW s AAA projects Use case: SSO for AAI Applications with Active Directory domain logins Project goal: Development of a Kerberos
Shibboleth User Verification Customer Implementation Guide Version 4.3
Shibboleth User Verification Customer Implementation Guide 2017-12-12 Version 4.3 TABLE OF CONTENTS Introduction... 1 Purpose and Target Audience... 1 Commonly Used Terms... 1 Overview of Shibboleth User
Lecture no. 2 Shibboleth SP: installation and basic configuration for Single Sign On (SSO) second part. Andrea Biancini Consortium GARR
Lecture no. 2 Shibboleth SP: installation and basic configuration for Single Sign On (SSO) second part Andrea Biancini Consortium GARR Outline Description of user session: attributes How to read session
Digital Identity Management and RNP
Digital Identity Management and RNP Noemi Rodriguez RNP, PUC-Rio RNP RNP (Rede Nacional de Ensino e Pesquisa): non-profit private organization under contract by Brazilian government to manage national
AAI Tutorial. SWITCHaai Team
AAI Tutorial SWITCHaai Team aai@switch.ch Berne, 5. May 2009 Agenda 1 What is AAI? 2 Demo 3 The SWITCHaai federation 4 5 Technical details behind AAI Summary and Q&A 2 AAI - Key to access them all AAI
How to Configure Authentication and Access Control (AAA)
How to Configure Authentication and Access Control (AAA) Overview The Barracuda Web Application Firewall provides features to implement user authentication and access control. You can create a virtual
AAI Attributes Thomas Lenggenhager,
AAI Attributes Thomas Lenggenhager, 2004 Directories within a AAI Home Organization AAI-enabled Home Organization Authentication System User Directory AAI Authentication System
eduperson Object Class Specification (200806)
Document: internet2-mace-direduperson-200806 Home: http://www.educause.edu/eduperson/ Internet2 Middleware Architecture Committee for Education, Directory Working Group (MACE-Dir) Released: June 30, 2008
Authorizing Access to SPs. SWITCHaai Team
Authorizing Access to SPs SWITCHaai Team aai@switch.ch Berne, 13 August 2014 Require valid-user "Considered harmful!" 2 Don't accept just any valid user The single access rule Require valid-user is usually
Integration of the platform. Technical specifications
Introduction This document is meant as a reference and specification guide to carry out the integration between Gamelearn s platform and the different Learning Management System platforms of the client,
EGI-InSPIRE. GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies. Sergio Maffioletti
EGI-InSPIRE GridCertLib Shibboleth authentication for X.509 certificates and Grid proxies Sergio Maffioletti Grid Computing Competence Centre, University of Zurich http://www.gc3.uzh.ch/
Configuring Applications to Exploit LDAP
BY BOB PETTI Configuring Email Applications to Exploit LDAP Email applications such as Microsoft Outlook Express, Pegasus Mail, Netscape Communicator, Lotus Notes and Eudora can be configured to retrieve
VMware Identity Manager Administration
VMware Identity Manager Administration VMware Identity Manager 2.4 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new
Perceptive Data Transfer
Perceptive Data Transfer Installation and Setup Guide Version: 6.5.x Written by: Product Knowledge, R&D Date: May 2017 2017 Lexmark. All rights reserved. Lexmark is a trademark of Lexmark International,
Isode. Directory Server Evaluation Guide. Getting started with M-Vault, Isode s X.500/LDAP Directory Server.
Directory Server Evaluation Guide Getting started with M-Vault, Isode s X.500/LDAP Directory Server. Contents Objectives... 3 Using Isode Support... 3 Preparation... 4 Isode Products... 4 Evaluation License
Novell Identity Manager Driver for Linux* and UNIX* Settings
AUTHORIZED DOCUMENTATION Implementation Guide Novell Identity Manager Driver for Linux* and UNIX* Settings 4.0.1 April 15, 2011 www.novell.com Legal Notices Novell, Inc. and Omnibond Systems, LLC. make
Canadian Access Federation: Trust Assertion Document (TAD)
Participant Name: University of Toronto Canadian Access Federation: Trust Assertion Document (TAD) 1. Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert
Obtaining the LDAP Search string (Distinguished Name)?
How to Configure LDAP Sync with the Altium Vault Old Content - see latest equivalent Modified by Jason Howie on 31-May-2017 An LDAP Sync allows the administrator of an Altium Vault to leverage the network
The Shibboleth-enabled WebDAV server used in ESUP-Portail and ORI-OAI projects
The Shibboleth-enabled WebDAV server used in ESUP-Portail and ORI-OAI projects Raymond Bourges TERENA EuroCAMP 14-15 November 2007 Dubrovnik, Croatia Shibboleth-enabled WebDAV server 1) Context Demo (if
BLUEPRINT REQUIREMENTS CENTER 2010 BLUEPRINT TEAM REPOSITORY VERSION 2. Administrator s Guide
BLUEPRINT REQUIREMENTS CENTER 2010 BLUEPRINT TEAM REPOSITORY VERSION 2 September 2010 Contents Introduction... 2 Repository Configuration Files... 3 User Administration... 5 Appendix A. Instructions for
$'0,1,675$7,21*8,'( ZZZQRYHOOFRP
1RYHOO H*XLGH $'0,1,675$7,21*8,'( ZZZQRYHOOFRP Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any
Ubuntu Documentation > Ubuntu 8.10 > Ubuntu Server Guide > Network Authentication > OpenLDAP Server
Page 1 of 10 Official Documentation Ubuntu Documentation > Ubuntu 8.10 > Ubuntu Server Guide > Network Authentication > OpenLDAP Server OpenLDAP Server Search LDAP is an acronym for Lightweight Directory
Greek Research and Technology Network. Authentication & Authorization Infrastructure. Faidon Liambotis. grnet
Greek Research and Technology Network Authentication & Authorization Infrastructure Faidon Liambotis faidon@.gr Networking Research and Education February 22 nd, 2011 1 Who am I? Servers & Services Engineer,
Account Checking on a SP
Account Checking on a SP Based on SAML AttributeQuery Berne, 13 August 2014 SWITCHaai Team aai@switch.ch Why do account checking? Organization A Organization B User Accounts Identity Provider SP SWITCH
[Outlook Configuration Guide]
![[Outlook Configuration Guide]](/thumbs/76/74367649.jpg "[Outlook Configuration Guide]")
Prepared By: Sandeep Das Approved By: Effective From: October, 03, 2011 REVISION HISTORY S. N. Release Date Description Author Highlights 1 3 rd October 2011 First Release Sandeep Das First Release Copyright
Mario Iseli
LUGS-Treff @ 24.08.2006 What is a directory? (Where did i put that damn username?) Your business partners, friends, coworkers. Do you know all their E-Mail addresses? How many lines does your /etc/hosts
Active Directory Integration. Documentation. v1.00. making your facilities work for you!
Documentation http://mid.as/ldap v1.00 making your facilities work for you! Table of Contents Table of Contents... 1 Overview... 2 Pre-Requisites... 2 MIDAS... 2 Server... 2 End Users... 3 Configuration...
IBM Security Identity Manager Version 6.0. IBM Security Access Manager Adapter Installation and Configuration Guide IBM
IBM Security Identity Manager Version 6.0 IBM Security Access Manager Adapter Installation and Configuration Guide IBM IBM Security Identity Manager Version 6.0 IBM Security Access Manager Adapter Installation
New trends in Identity Management
New trends in Identity Management Peter Gietz, DAASI International GmbH peter.gietz@daasi.de Track on Research and Education Networking in South East Europe, Yu Info 2007, Kopaionik, Serbia 14 March 2007
IBM Tivoli Directory Server Replication
IBM Tivoli Software IBM Tivoli Directory Server 6.0 - Replication April 24, 2007 Troubleshooting replica failures Support Technical Exchange Web site http://www-306.ibm.com/software/sysmgmt/products/support/supp_tech_exch.html
Authentication for Web Services. Ray Miller Systems Development and Support Computing Services, University of Oxford
Authentication for Web Services Ray Miller Systems Development and Support Computing Services, University of Oxford Overview Password-based authentication Cookie-based authentication
How to install LDAP. # yum install openldap-servers openldap nss_ldap python-ldap openldap-clients -y
How to install LDAP 1. First Check LDAP Components # rpm -qa grep ldap 2. You should reach to following files. If they are not present then you need to install them from yum or rpm openldap-servers-2.3.27-8.el5_2.4
Informatica Cloud Spring LDAP Connector Guide
Informatica Cloud Spring 2017 LDAP Connector Guide Informatica Cloud LDAP Connector Guide Spring 2017 January 2018 Copyright Informatica LLC 2015, 2018 This software and documentation are provided only
MIDDLEWARE: SINGLE SIGN ON AUTHENTICATION AND AUTHORIZATION FOR GROUPS
MIDDLEWARE: SINGLE SIGN ON AUTHENTICATION AND AUTHORIZATION FOR GROUPS Ramesh Puljala Computer and Information Sciences, ramesh@uab.edu Rajani S. Sadasivam Electrical and Computer Engineering, University
maxecurity Product Suite
maxecurity Product Suite Domain Administrator s Manual Firmware v2.2 ii Table of Contents BASICS... 1 Understanding how maxecurity products work in your company... 1 Getting started as a Domain Administrator...
Proxy POP3S. then authentication occurs. POP3S is for a receiving . IMAP4S. and then authentication occurs. SMTPS is for sending .
Email proxies extend remote email capability to users of Clientless SSL VPN. When users attempt an email session via email proxy, the email client establishes a tunnel using the SSL protocol. The email