1. Connect. Communicate. Collaborate Place organisation and project logos in this area AAIEye – A Monitoring Tool For AAI’s Mika Suvanto, CSC TNC 2008, Bruges 21.5.2008

2. Connect. Communicate. Collaborate Place organisation and project logos in this area What is it all about? A software developed as part of GN2/JRA5 Aim is to provide a tool which can monitor national AAI’s, Kalmar union, eduGAIN by answering these questions: –Are the end users getting access to the services? –How much the services are used, and where did the users came from? Support for different AAI software is needed –Now works with Shibboleth 1.3 –Shibboleth 2.0 and simpleSAMLphp are being tested

3. Connect. Communicate. Collaborate Place organisation and project logos in this area Statistics ViewAAI Components Connect. Communicate. Collaborate Federated login is build on many different components: which are typically hosted by different organizations which makes diagnostics harder interfederations/confederations will make the picture even more complex

4. Connect. Communicate. Collaborate Place organisation and project logos in this area Monitoring with AAIEye Monitoring the availability of AAI services is difficult: the service consists from independent components hosted by different organizations which all need to work together –So it is impossible to make sure that end users are getting the service just by monitoring that single components work AAIEye offers end user’s point of view – it simulates the user’s login process to the services –The status of the connection is determined by searching the specified string from the page where the login process ends up AAIEye monitoring can be integrated with Nagios to provide additional functionality, like e-mail alerts

5. Connect. Communicate. Collaborate Place organisation and project logos in this area Statistics ViewMonitoring Status (1/3) Connect. Communicate. Collaborate The login process is configured in AAIEye server AAIEye then performes the login same way as human user would do, making it quite independent on AAI software used This requires an user account on the Identity Providers that are used in monitoring All components needed for the login will get tested

6. Connect. Communicate. Collaborate Place organisation and project logos in this area Statistics View Monitoring Status (2/3) - Configuration Connect. Communicate. Collaborate 90

7. Connect. Communicate. Collaborate Place organisation and project logos in this area Statistics ViewMonitoring Status (3/3) Connect. Communicate. Collaborate

8. Place organisation and project logos in this area Statistics ViewNagios Integration Connect. Communicate. Collaborate

9. Place organisation and project logos in this area Usage Statistics The problem: in a distributed service like AAI its hard to find out the whole picture of service usage AAIEye’s approach: collect the information on usage from the log files (using AAIEye Probe software) –then send the information to central server (AAIEye Server) The server offers visualization of the statistics as well as other diagnostic options No personal information about the users is transferred – just time of the event and the Service Provider and Identity Provider involved Statistics are transferred as XML over HTTPS to the AAIEye server

10. Connect. Communicate. Collaborate Place organisation and project logos in this area Statistics View Connect. Communicate. Collaborate

11. Place organisation and project logos in this area Statistics View Statistics View – diagnosing errors (1/2) Connect. Communicate. Collaborate

12. Place organisation and project logos in this area Statistics View Statistics View – diagnosing errors (2/2) Connect. Communicate. Collaborate

13. Place organisation and project logos in this area So can I give it a try? Available for download: http://www.csc.fi/english/institutions/haka/technology/aaieye http://www.csc.fi/english/institutions/haka/technology/aaieye GPL license Requires: –Java 1.5 / 1.6 –Apache Ant 2.6 or later For the server, also following components are needed: –PHP 4.3 or later –MySQL 4 or later

14. Connect. Communicate. Collaborate Place organisation and project logos in this area Feedback? Please contact mika.suvanto@csc.fimika.suvanto@csc.fi –Support questions –Feature requests –Bug reports –etc