Transcript Access Control and the student career

Access Control and the
student career
Mark Norman,
Systems Development and
Support Team, OUCS
1
Sysdev @ OUCS
• What do we do?
• Apart from authentication/authorisation
services…
• Email (Herald)
• Mailing lists system
administration
• Web hosting sysadmin
• Linux shell service
• Version control (support for web
sites and coding projects)
• Software mirror downloads
• News services
• Virtual learning environment (VLE
– Weblearn) sysadmin
• Wikis sysadmin (for OUCS)
• Alumni e-mail forwarding service
sysadmin
• Lots of dull back-end stuff for
resilience and backup etc.
2
Students and access control
• How many usernames and passwords do
students need?
• Student Information Systems –
self service
• Email
• Webmail
• College services
• Departmental services
• Athens (for external library
resources)
• Desktop management systems
•
•
•
•
•
•
HFS Backup password (graduates)
Help centre username/password
Weblearn
Library resources/OXAM (VPN for)
Personal web space
Accounts for downloading software
(e.g. Sophos, VPN clients)
• And Facebook, itunes, myspace etc.
etc….
3
Kerberos is the answer
• (Yes, the 3 headed dog!)
• Kerberos (and Webauth) has meant that the following all
work from one username/password pair
• Student Information Systems –
self service
• Email
• Webmail
• College services
• Departmental services
• Athens (for external library
resources)
• Desktop management systems
•
•
•
•
•
•
HFS Backup password (graduates)
Help centre username/password
Weblearn
Library resources/OXAM (VPN for)
Personal web space
Accounts for downloading software
(e.g. Sophos, VPN clients)
• And Facebook, itunes, myspace etc.
etc….
4
Kerberos is the answer
○ Not the complete answer (still need some other
accounts) ◦ The following are all managed using the SSO system
◦ Password management is done via Webauth
• Student Information Systems –
self service
• Email
• Webmail
• College services
• Departmental services
• Athens (for external library
resources)
• Desktop management systems
•
•
•
•
•
•
HFS Backup password (graduates)
Help centre username/password
Weblearn
Library resources/OXAM (VPN for)
Personal web space
Accounts for downloading software
(e.g. Sophos, VPN clients)
• And Facebook, itunes, myspace etc.
etc….
5
Kerberos is the answer
○ Athens is being superseded by Shibboleth (uses
Kerberos/Webauth)
• Student Information Systems –
self service
• Email
• Webmail
• College services
• Departmental services
• Athens (for external library
resources)
• Desktop management systems
•
•
•
•
•
•
HFS Backup password (graduates)
Help centre username/password
Weblearn
Library resources/OXAM (VPN for)
Personal web space
Accounts for downloading software
(e.g. Sophos, VPN clients)
• And Facebook, itunes, myspace etc.
etc….
6
Kerberos is the answer
○ A lot more web based services are now using
Webauth
• Student Information Systems –
self service
• Email
• Webmail
• College services
• Departmental services
• Athens (for external library
resources)
• Desktop management systems
•
•
•
•
•
•
HFS Backup password (graduates)
Help centre username/password
Weblearn
Library resources/OXAM (VPN for)
Personal web space
Accounts for downloading software
(e.g. Sophos, VPN clients)
• And Facebook, itunes, myspace etc.
etc….
7
Kerberos is the answer
○ Some desktop systems can use kerberos cross-realm
trust (e.g. Active Directory)
• Student Information Systems –
self service
• Email
• Webmail
• College services
• Departmental services
• Athens (for external library
resources)
• Desktop management systems
•
•
•
•
•
•
HFS Backup password (graduates)
Help centre username/password
Weblearn
Library resources/OXAM (VPN for)
Personal web space
Accounts for downloading software
(e.g. Sophos, VPN clients)
• And Facebook, itunes, myspace etc.
etc….
8
Kerberos is the answer
○ And we have high hopes for Oracle too!
• Student Information Systems –
self service
• Email
• Webmail
• College services
• Departmental services
• Athens (for external library
resources)
• Desktop management systems
•
•
•
•
•
•
HFS Backup password (graduates)
Help centre username/password
Weblearn
Library resources/OXAM (VPN for)
Personal web space
Accounts for downloading software
(e.g. Sophos, VPN clients)
• And Facebook, itunes, myspace etc.
etc….
9