Info.eagle.current.status (... or “where we've got to with Raven”) Jon Warbrick University of Cambridge Computing Service Raven!

Slides:

Advertisements

Similar presentations

Open-source Single Sign-On with CAS (Central Authentication Service) Pascal Aubry, Vincent Mathieu & Julien Marchal Copyright © 2004 – ESUP-Portail consortium.

Advertisements

EIONET Training Beginners Zope Course Miruna Bădescu Finsiel Romania Copenhagen, 27 October 2003.

Single Sign-On with GRID Certificates Ernest Artiaga (CERN – IT) GridPP 7 th Collaboration Meeting July 2003 July 2003.

1 ROADS to ATHENS Manjula Patel UKOLN University of Bath Bath, BA2 7AY UKOLN is funded by the British Library Research and Innovation.

Types of Servers. Client/Server systems are mostly used for commercial applications such as: · Online transaction processing · Decision support systems.

Shibboleth at Newcastle Caleb Racey Webteam ISS Shibboleth experiences Program  Background  What shib has enabled  Benefits of shib  How to do shib.

Software Freedom Day th September 2007 Asia Pacific Institute of Information Technology Colombo, Sri Lanka. Nazly Ahmed Scripting The Web.

Unicode: The Right Tools, but How to Use Them? Presentation to the Digital Library Federation Fall Forum November 18, 2003 Elizabeth A.S. Beaudin, OACIS.

Apache Access Controls. Ways to control Allow/Deny access control –By IP –By domain name Password –Apache managed passwords –Realms.

Case Study: Newcastle University

Web Authentication with Shibboleth A view from the Flat East Jon Warbrick Computing Service University of Cambridge

How Clients and Servers Work Together. Objectives Learn about the interaction of clients and servers Explore the features and functions of Web servers.

Search Engine Developments Jon Warbrick University of Cambridge Computing Service

IST346:  Web Services. Today’s Agenda  Learn the basics of how the Web works  Understand various web service architectures  Address scaling, security,

Maintain and Modify By: Sahar Aftab (1253 ) and Mehboob Nazim (1085) Central Library.

WHAT IS PHP PHP is an HTML-embedded scripting language primarily used for dynamic Web applications.

1 Open Source Programming. -Introduction to PHP -PHP installation /wamp server installation for PHP environment -PHP syntax -PHP variables -PHP Strings.

A crash course in njit’s Afs

TOPIC 1 – SERVER SIDE APPLICATIONS IFS 234 – SERVER SIDE APPLICATION DEVELOPMENT.

srcf student-run computing facility Web hosting Personal hosting Society hosting.

COMP An Introduction to Computer Programming : University of the West Indies COMP6015 An Introduction to Computer Programming Lecture 03.

IOTA Improved Design and Implementation of a Modular and Extensible Website Framework Andrew Hamilton – TJHSST Computer Systems Lab Abstract.

Class 8Intro to Databases Authentication and Security Note: What we discuss in class today covers moderate to low security. Before you involve yourself.

The Central Authentication Service (CAS) Shawn Bayern Research programmer, Yale University Author, JSTL in Action, Web Development with JavaServer Pages.

True or False? Programming languages can be used to update databases and communicate with other systems. True.

An introduction to Apache. Different Types of Web Servers Apache is the default web server for may Unix servers. IIS is Microsoft’s default web server.

What makes web pages look like web pages LS 560 Spring 2012, section 901.

Apache, PHP, MySQL Installation and configuration Web Programming with PHP,TITAS PROJECTIICT,BUET.

USCGrid A (Very Quick) Introduction To PubCookie

User authentication, passwords

National Center for Supercomputing Applications NCSA OPIE Presentation November 2000.

Presentation On Apache BSIT 6th1 Apache server Building Your Very Own Web Server.

Berlin 04 Open Access - From Promise to Practice 31. March 2006 Based on Open Journal Systems  since summer 2005  the service is offered.

Web Site Access Control with Apache Fort Collins, CO Copyright © XTR Systems, LLC Web Site Access Control Using the Apache Web Server Instructor: Joseph.

2001 IT Conference RenoPage: 1 PHP 101 PHP – You can DO IT! Greg Lawler Brooks Institute of Photography February IT Conference Reno.

Oxford University Computing Services IT Support Tracking with Request Tracker (RT) Katherine Craddock Oxford University Computing Services.

Apache Security Travis Jeffries. Introduction Authentication and Authorization Strict Access Methods Defending against Attacks Bad CGI Programs Apache.

CS 4720 Dynamic Web Applications CS 4720 – Web & Mobile Systems.

University of Cambridge Faculty of Law and Squire Law Library Legal IT Resources at the Faculty of Law 29 September 2006 Document Number: 2626.

Putting it all together Dynamic Data Base Access and Authentication Norman White Stern School of Business.

The HTTP is a standard that all Web browsers and Web servers must speak in order for the Web portion of the Internet to work.

UMBC’s WebAuth Robert Banz – UMBC

XAMPP Introduction to Web Programming Kirkwood Community College Fred McClurg © Copyright 2015, Fred McClurg, All Rights Reserved Web Server Software Distribution.

Campus Experience: Pubcookie University of Alabama at Birmingham Academic Computing Zach Garner.

UNIT-3 1.Web server software and Tools 1IT2031 UNIT-3.

Authentication Names and Passwords Names and Passwords Also can use Groups Also can use Groups Webmaster can “require” authentication Webmaster can “require”

Interactive Web Tehcnologies Teppo Räisänen LIIKE/OAMK 2011.

PHP Introduction PHP is a server-side scripting language.

Perl – Cookie Setting #!/usr/bin/perl use CGI qw( :standard ); $cookie1 = cookie( -name=>'colour', -value=>'green', -path=>'/' ); print header( -cookie=>$cookie1.

Web Technology – Web Server Setup : Chris Uriarte Meeting 4: Advanced Topics, Continued: Securing the Apache Server and Apache Performance Tuning Rutgers.

THE WEB CALENDAR PROJECT Presented by: Jasmine Thomas Supervisor: John Ebden.

Data analysis Now I have data. What can I do with them? Old way: Export it to a text file, import it back to SAS, SPSS or some stat package Drawbacks:

(ITI310) By Eng. BASSEM ALSAID SESSIONS 10: Internet Information Services (IIS)

MGRID Architecture Andy Adamson Center for Information Technology Integration University of Michigan, USA.

Web Page Designing With Dreamweaver MX\Session 1\1 of 9 Session 1 Introduction to PHP Hypertext Preprocessor - PHP.

ASP.NET WEB Applications. ASP.NET  Web application framework developed by Microsoft  Build dynamic data driven web applications and web services  Subset.

Outline  XAMPP  XAMPP Install  Put php and HTML documents  Windows and Mac Version  Security.

Office of Information Technology GT Identity and Access Management JA-SIG CAS project (introducing login.gatech.edu) April 29th,

Server Performance, Scaling, Reliability and Configuration Norman White.

Web Programming Building Dynamic Web Pages Adrian Shaw (ais) – 80% Jonathan Roscoe (jjr6) - 20%

Web Server Management: Securing Access to Web Servers Jon Warbrick University of Cambridge Computing Service.

LCA Feb.Bob Edwards - School of Computer Science, ANU 1 Beyond the LAMP - Moving authentication and access control into the database LCA 2009.

Chapter 13 Web Application Infrastructure

University of Cambridge Faculty of Law and Squire Law Library

Scripting Languages Info derived largely from Programming Language Pragmatics, by Michael Scott.

See: under Projects and Planning

Database Project: MySQL

PHP / MySQL Introduction

Use same User ID and password as computer login

Digital Ox Canada Designing a website

Presentation transcript:

info.eagle.current.status (... or “where we've got to with Raven”) Jon Warbrick University of Cambridge Computing Service Raven!

Remind me, what it is? ● A centrally-managed, password-based authentication system for web-based services ● Consisting of – Centrally-managed user ids and passwords – Central authentication server – 'Application Agents' (AAs) for web servers and web applications

Where we are today ● User ids and passwords issued to everyone ● Central server running ● CS supported AAs for Apache 1 and 2 under Unix (Solaris, Linux, MacOSX); Perl CGI ● Contributed AAs (of varying quality) for Tomcat, Ruby CGI, PHP

Who's using it? ● extending 'cam-only' ● The mail redirection service ● CS for internal Wiki access ● University Library, Computer Laboratory, Geography, Genetics,... ● Clare, Downing, Trinity Hall, Jesus,... ● Union Society, SRCF,...

What you can do with it ● A replacement for 'cam-only': AddModule mod_ucam_webauth.c AACookieKey "some random string" AuthType Ucam-WebAuth Require valid-user

What you can do with it (2) ● An extension of 'cam-only': AddModule mod_ucam_webauth.c AACookieKey "some random string" Order allow,deny Allow from.cam.ac.uk AuthType Ucam-WebAuth Require valid-user Satisfy any

What you can do with it (3) ● Group access AddModule mod_ucam_webauth.c AACookieKey "some random string" AuthType Ucam-WebAuth AuthGroupFile web-groups Require group staff

Where next? ● Apache module built for Windows and Novell? ● Better AAs: Java/Tomcat, PHP,...? ● More AAs: IIS?...? ● Extension to non-University people? ● Example 'Ravenization' of existing web applications? ● Links with Kerberos, Athens, Shiboleth,...?

For more information... ● See ● Mailing list at

Questions so far?