920 likes | 1.05k Views
CLEMSON. U N I V E R S I T Y. CLE Technical Design. David S. Condrey LAN Systems - DCIT Presented at: Technology Transfer Partners (TTP) 1998 Salt Lake City, Utah. July 7, 1998. Agenda. Short Clemson Review 97-98 Recap CLE Overview User’s View Instructor Course Management
E N D
CLEMSON U N I V E R S I T Y CLE Technical Design David S. Condrey LAN Systems - DCIT Presented at: Technology Transfer Partners (TTP) 1998 Salt Lake City, Utah July 7, 1998
Agenda • Short Clemson Review • 97-98 Recap • CLE Overview • User’s View • Instructor Course Management • The Design • The Implementation • The Future
Introduction/Background • Clemson University-Upstate SC • 37,000 users in NDS with home directories since 1995. • NDS is centerpiece of security and authentication. • Big Development Shop • ~130 Netware 4.x servers • Automated account creation and maintenance.
Personnel Other Admissions Automatic Userid System (AUS) AUS NDS MVS Other UNIX
Tree Design ClemsonU Users Organizations
A A to to Z Z Every Person Has a Place ClemsonU Students Misc. Employee Organizations A to Z
Every Group Has a Place ClemsonU Athletics DCIT CAFLS CES Users Forestry Research Dean's office
Personal Storage (User Data Servers) Office, lab, or dial-in Any faculty or staff member EmployeDn Dorm, lab, or dial-in Any student StudentDn
Collaborative Storage (Faculty & Students) EmployeD App server Group server1 StudentD
Authentication Server Mail authC UNIX authC Web authC Sun authC Oracle† authC Windows NT authC NetWare authC mainframe authC
VTAM Onlines intraNetWare server A intraNetWare server B intraNetWare server C AUTHSERV.NLM AUTHSERV.NLM AUTHSERV.NLM N D S Mainframe (MVS) NT Server OpenLinux MAIL (Solaris) AuthClient AuthClient AuthClient AuthClient POPd RACF WebApp WebApp Apache Web site TN3270 Netscape† LOGIN.EXE Eudora User workstation (Windows 95/Windows NT and Mac workstation)
Server Auth Client Using NDS Security Across the Intranet Authentication Server NDS Authenticated Client NT 4.0 AUTHSERV .NLM NDS Netscape IIS 32-bit DLL Page request CheckEquiv Check Security Equivalence Locate user object and run equivalence list
AUTHSERV Client Functions • Password check • Password change • Resolve to fully distinguished name • Check security equivalence • Return group membership • Miscellaneous administrative functions • Get Effective Rights
Caldera OpenLinux and Apache • Web gateway to NetWare file system File Server File Server Browser Caldera OpenLinux Browser File Server AuthC Browser File Server File Server Browser AuthServer
Using NDS to Secure Web Pages NovellAuth on AuthName Novell Tree AuthType Basic <Limit GET POST> require user gmcochr require user kellen require group .resadmin.groups.employee.clemsonu </Limit>
What We’ve Been Doing Over the Past Year • Site License from Novell • StudentD/EmployeD split • Upgrade Everything to 4.11 • Convert Public Labs to ‘95 • Brainshare • Appnotes and Developer Notes • Netware 5/ZEN Testing
More of What We’ve Been Doing • PAM Development for Authentication Server • Cisco PIX Firewall • Collaborative Learning Environment
Description • Collaborative Learning Environment (CLE) • Provide a framework for collaborative works between faculty and students as well as between students themselves. • This means managed and structured disk space that is easily accessible by both students and faculty.
Collaborative Learning Environment (CLE) • Faculty member wants to put data on the network that students can use • Student submission of work to faculty • Students collaborate on team projects with assistance from faculty member • Students and faculty collaborate on projects or assignments • Publish web pages as a team or class • ~6000 class sections per semester
Project Goals • Automate as much as possible. • Limit required knowledge of the instructor. • Limit required knowledge of the student. • Limit required CSG/SSG involvement. • Limit required TSP involvement • K.I.S.S.
Maxims • A class is an interaction of people not necessarily enrolled in a common course (CPSC 423/423H/623) • CLE is analogous to a classroom. • The customer is the Instructor and the Student. • The harder this is to explain to users, the harder it is to implement and use. • We don't have to get everything perfect the first time.
Technology • Novell Directory Services (NDS) • Student Databases on OS/390 • Netware File System • Netware Application Launcher (NAL) • Caldera NDS interface for Linux • Apache Web server for Linux • Authentication Server • Lots of code for Management Automation
Development Technology • Borland C/C++ Version 5 • Netware SDK 15 • EXE2NLM • NDSSNOOP • Phoenix Document • GNU C • Perl • HTML,JavaScript
NAL as a Door to Direct File Access • List of enrolled courses. • Icons for each course abbreviation submitted by departments. • Not “applications” in the traditional sense. • Really runs “Explorer” and maps a drive. • Introduces the concept of NAL to instructors.
What a Class Folder Looks Like to the Student (Windows Explorer)
Instructor Course Management