90 likes | 230 Views
Access Control and the student career. Mark Norman, Systems Development and Support Team, OUCS. Sysdev @ OUCS. What do we do? Apart from authentication/authorisation services…. Email (Herald) Mailing lists system administration Web hosting sysadmin Linux shell service
E N D
Access Control and the student career Mark Norman,Systems Development and Support Team, OUCS
Sysdev @ OUCS • What do we do? • Apart from authentication/authorisation services… • Email (Herald) • Mailing lists system administration • Web hosting sysadmin • Linux shell service • Version control (support for web sites and coding projects) • Software mirror downloads • News services • Virtual learning environment (VLE – Weblearn) sysadmin • Wikis sysadmin (for OUCS) • Alumni e-mail forwarding service sysadmin • Lots of dull back-end stuff for resilience and backup etc.
Students and access control • How many usernames and passwords do students need? • Student Information Systems – self service • Email • Webmail • College services • Departmental services • Athens (for external library resources) • Desktop management systems • HFS Backup password (graduates) • Help centre username/password • Weblearn • Library resources/OXAM (VPN for) • Personal web space • Accounts for downloading software (e.g. Sophos, VPN clients) • And Facebook, itunes, myspace etc. etc….
Kerberos is the answer • (Yes, the 3 headed dog!) • Kerberos (and Webauth) has meant that the following all work from one username/password pair • Student Information Systems – self service • Email • Webmail • College services • Departmental services • Athens (for external library resources) • Desktop management systems • HFS Backup password (graduates) • Help centre username/password • Weblearn • Library resources/OXAM (VPN for) • Personal web space • Accounts for downloading software (e.g. Sophos, VPN clients) • And Facebook, itunes, myspace etc. etc….
Kerberos is the answer • Not the complete answer (still need some other accounts) • The following are all managed using the SSO system • Password management is done via Webauth • Student Information Systems – self service • Email • Webmail • College services • Departmental services • Athens (for external library resources) • Desktop management systems • HFS Backup password (graduates) • Help centre username/password • Weblearn • Library resources/OXAM (VPN for) • Personal web space • Accounts for downloading software (e.g. Sophos, VPN clients) • And Facebook, itunes, myspace etc. etc….
Kerberos is the answer • Athens is being superseded by Shibboleth (uses Kerberos/Webauth) • Student Information Systems – self service • Email • Webmail • College services • Departmental services • Athens (for external library resources) • Desktop management systems • Student Information Systems – self service • Email • Webmail • College services • Departmental services • Athens (for external library resources) • Desktop management systems • HFS Backup password (graduates) • Help centre username/password • Weblearn • Library resources/OXAM (VPN for) • Personal web space • Accounts for downloading software (e.g. Sophos, VPN clients) • And Facebook, itunes, myspace etc. etc….
Kerberos is the answer • A lot more web based services are now using Webauth • Student Information Systems – self service • Email • Webmail • College services • Departmental services • Athens (for external library resources) • Desktop management systems • HFS Backup password (graduates) • Help centre username/password • Weblearn • Library resources/OXAM (VPN for) • Personal web space • Accounts for downloading software (e.g. Sophos, VPN clients) • And Facebook, itunes, myspace etc. etc….
Kerberos is the answer • Some desktop systems can use kerberos cross-realm trust (e.g. Active Directory) • Student Information Systems – self service • Email • Webmail • College services • Departmental services • Athens (for external library resources) • Desktop management systems • HFS Backup password (graduates) • Help centre username/password • Weblearn • Library resources/OXAM (VPN for) • Personal web space • Accounts for downloading software (e.g. Sophos, VPN clients) • And Facebook, itunes, myspace etc. etc….
Kerberos is the answer • And we have high hopes for Oracle too! • Student Information Systems – self service • Email • Webmail • College services • Departmental services • Athens (for external library resources) • Desktop management systems • HFS Backup password (graduates) • Help centre username/password • Weblearn • Library resources/OXAM (VPN for) • Personal web space • Accounts for downloading software (e.g. Sophos, VPN clients) • And Facebook, itunes, myspace etc. etc….