Linux Value Proposition

Download Report

Transcript Linux Value Proposition

Novell in Academia
Mark McManus – [email protected]
Academic Landscape
Collaboration
•
•
•
Commoditization
Resources across institutions
New Business Models
Students
Anywhere, Anytime Access
Greater demand
Why attend your institution?
•
•
•
Disruptions
•
•
•
Unforeseen Disturbance
New Technologies
Student Behavior Shifts
Regulations
•
•
•
2
Reduce Complexity
Government
Industry
Security
© July 17, 2015 Novell Inc.
•
•
•
Easier to register
Strengthen Offering
Change Direction
Globalization
•
•
•
Students overseas
Expanding Markets
Border-mania
UCISA Top Concerns - The top nine
1
Data network access from devices owned and / or controlled by end-users.
Network access for mobile users.
2
Security management of network attached systems
2
User authentication and resource control
4
5
Ensuring that IT is being fully considered in the development and planning of our
institutions.
Strategic approach to developing, maintaining and upgrading the IT
infrastructure needed to deliver strategic IT-based academic and business
services.
5
Enterprise portals, web-based services
7
Ongoing costs of VLE / MLE systems
8
Business continuity planning
Risks to services and computing service personnel from inadequate funding
8
3
© July 17, 2015 Novell Inc.
one Net
A world without information boundaries where
information systems of all types work well together,
connecting the right people to the right information
at the right time to make the right decisions.
4
© July 17, 2015 Novell Inc.
Solution Groups
:
Novell Nsure
Novell Nterprise
Opening the door to
Web Services
Securely getting the
right information to
the right people
The best foundation
for your mixed
environment
Novell Ngage
:
:
:
5
Novell exteNd
© July 17, 2015 Novell Inc.
The experience to
solve your business
problems
Novell exteNd
™
®
exteNd
:
:
:
:
6
© July 17, 2015 Novell Inc.
> Interaction
Opening the door to
Web services
> Web solutions
> Integration
Novell Nsure
™
®
:
:
:
:
7
© July 17, 2015 Novell Inc.
Nsure
Securely getting the
right Information to
the right people
> Identity access
> Security solutions
> Integration
Novell Nterprise
™
®
:
:
:
:
Nterprise
8
© July 17, 2015 Novell Inc.
The best foundation
for your mixed
environment
> Interface
> Cross-platform solutions
> Integration
Novell Ngage
™
®
:
:
:
:
9
© July 17, 2015 Novell Inc.
Ngage
The experience to
solve your
business problems
> ROI
> Global services
> Consulting & Support
Students
Staff
Institution to
Institution
File and Print
eMail
LOCAL ACCESS
Students
View of all
resources
VLE
Packaged
Applications
Library/Resource
services
Staff
INTERNET
ACCESS
Finance
HR
Payroll
Student Records
IDENTITY
MANAGEMENT
Partners
iChain
Single
point of
secure access
10
© July 17, 2015 Novell Inc.
Web
Services
Identity
Seamless Manager
access to 2
Extend
Common
and
authorised services
Director/Composer
personalised
view
regardless of location
of all resources
Single point of
secure access
iChain
INTERNET
ACCESS
IDENTITY
MANAGEMENT
11
© July 17, 2015 Novell Inc.
What are the Customer Problems?
Firewall
Web Servers and
Applications
Internet
SECURITY
Customer
Extranet
Partner
12
SECURITY
Employee
SECURITY
Intranet
© July 17, 2015 Novell Inc.
Linux/
Apache
Issues when creating a
Secure Web
infrastructure:
• Direct Access to Web Servers
(increase possibility of
hacking)
• Multiple User Identities (no
single sign on)
Solaris/
Netscape
• Need to install SSL services
on each web server
• Need to change links in HTML
content from HTTP to HTTPS
• Many different Web Server
Technologies
NT IIS
Competitors Solution
Agent Based Solutions
Firewall
Web Servers and
Applications
• Provides Access Control
• Personalization
Internet
SECURITY
Customer
SECURITY
Employee
SECURITY
Intranet
Extranet
Partner
13
• Provide Single Sign-On
© July 17, 2015 Novell Inc.
Linux/
Apache
Solaris/
Netscape
NT IIS
Previous Issues Still Exist
• Direct Access to Web Servers
(increase possibility of hacking)
• Need to install SSL services on
each web server
• Often, need to change links in
HTML content from HTTP to
HTTPS
• Often need to modify
applications authentication
process
• Many different Web Server
Technologies
The Novell Solution
Benefits of iChain:
Firewall
Employee
Customer
SECURITY INFRASTRUCTURE
One Net
Web Servers and
Applications
iChain®
Linux/
Apache
Citrix
Solaris/
Netscape
• Single Authentication Point
• Provides Web Single Sign On (headers and
Form Fill) – (can also simulate Netegrity
SiteMinder)
• Sends Personalized content to
applications
• Rewrites HTML data (completely hide
internal DNS infrastructure)
• Dynamically encrypts content as it passes
through proxy
• Single SSL Certificate can be used for all
internal web sites (proxy based)
• No change to HTML content
NT IIS
Partner
• No change to applications authentication
process
• Remove Direct Access to Web Servers
eDirectory™
14
© July 17, 2015 Novell Inc.
• Provides additional security to Citrix
Servers
Novell iChain - How does it work?
Web
servers
User=xx Password=xx
Browser
ACL
1. Authentication- Who are you?
2. Access Control- What do you
have access to?
3. Single Sign On
4. OLAC (Personalization)
5. Data Confidentiality
15
© July 17, 2015 Novell Inc.
ACL
iChain
Authorization
Server
Securit
y
Proxy Server
SAML
SAML – Security Assertions Markup Language
•
•
•
•
XML-based security specification for exchanging authentication
and authorization information
Developed by the OASIS standards organisation
Uses include Single Sign-On for B2B services
Designed to addresses the complexities of establishing Businessto-Business communication between differing systems.
Over 100 Members, including:
– Novell
– IBM®
– Microsoft®
16
© July 17, 2015 Novell Inc.
•
•
•
Sun®
Netegrity®
RSA Security®
View of all
resources
File and Print
eMail
VLE
Packaged
Applications
Library/Resource
services
Finance
HR
Payroll
Student Records
IDENTITY
MANAGEMENT
17
© July 17, 2015 Novell Inc.
Web
Services
Reducing Business Complexity
With Service-Oriented Architectures
Users consume
Web Service Information
Assembled into
streamlined processes
Systems abstracted
as Web Services
18
© July 17, 2015 Novell Inc.
Novell exteNd
Integrated Services-Oriented Application Development
• Comprehensive SOA suite
•
Interaction
Combines integration, portal and identity Services to
securely deliver business information to the users that
need it
• Reduced time to market with end-to-end visual tools
•
Orchestration
Plethora of visual tools and wizards that speed service
oriented application assembly and deployment
• Standard and Open
•
•
Integration
Supports the latest industry standards
Only SOA offering that supports deployments to leading
J2EE Applications Servers
• Security
•
19
© July 17, 2015 Novell Inc.
The only SOA suite supported by industry leading Identity
Management solution
Novell exteNd
Integrated Services-Oriented Application Development
Interaction and Portal
Process Orchestration
Business Integration
20
© July 17, 2015 Novell Inc.
Novell exteNd
Integrated Services-Oriented Application Development
Interaction and Portal
Process Orchestration
Business Integration
21
© July 17, 2015 Novell Inc.
Novell exteNd Business Integration
Abstracting existing systems into Web Services
•Broad range of non-invasive connectivity
•
Hides underlying technology
•
Uses standard protocols
•Leverages existing skills and technologies
•
Drag-and-drop data transformation
•Easy to use
•
Wizard driven connection and deployment
•
“Action-model” paradigm
Request
Web
services
XML
22
© July 17, 2015 Novell Inc.
XML
Response
Novell exteNd Business Integration
Abstracting existing systems into Web Services
Broad range of non-invasive connectivity
3270
CICS
5250
Informix
Microsoft .NET
Java
MS SQL Server
Email
CORBA
Siebel
Web/HTML
ODBC/JDBC
Flat File
Oracle
SAP R/3
MQ Series
ANSI X.12/EDIFACT
DB2
PeopleSoft
JMS
XML
Sybase
Data General
HP/3000
Tandem
23
© July 17, 2015 Novell Inc.
SDK
3270
5250
JAVA
Telnet
Data
General
XML
HP/
3000
EDI
Tandem
JDBC
SAP
JMS,
MQ
Series
HTML
CICS
RPC
Novell exteNd Business Integration
Abstracting existing systems into Web Services
1.
Leverage existing skills
and technologies
2.
Drag-and-drop data
mapping and
Transformation
Specialized wizards and
Controls
24
© July 17, 2015 Novell Inc.
3.
Record events using
“Action Model” paradigm
4.
Test with “End-to-end”
animation
5.
Deploy completed services
Novell exteNd
Integrated Services-Oriented Application Development
Interaction and Portal
Process Orchestration
Business Integration
25
© July 17, 2015 Novell Inc.
Process Orchestration
Assemble services into streamlined processes
•
•
Automates and simplifies complex transactions
Manages long-running business processes
XML
XML
XML
Web
Services
Web
Services
Web
Services
26
Web
Services
Web
Services
© July 17, 2015 Novell Inc.
XML
Web
Services
XML
XML
Process Orchestration
Portlet Development
Business Process Management
•Composite Service
•Model user interaction
•Model long-running
Oriented Applications
sequences i.e. document
workflow
complex business processes
•Smart Links
•Exception Handling
•Checkpoint Activity
•Wizards generate forms
that render legacy systems
data
27
Workflow
© July 17, 2015 Novell Inc.
•Route documents through
complex workflows based
on groups and users
•Call form sequences from
within workflows
•Process Versioning
•Monitor, manage and
report on business
processes at every step of
execution
Novell exteNd
Integrated Services-Oriented Application Development
Interaction and Portal
Process Orchestration
Business Integration
28
© July 17, 2015 Novell Inc.
Novell exteNd Interaction and Portal
Consuming Interactive Web Services
Response
Student request
XML
Web
services
XML
Request
29
© July 17, 2015 Novell Inc.
Novell exteNd Interaction and Portal
Consuming Interactive Web Services
Powerful personalized
portal
User interaction logic
& personalization
Integrated component
applications
Support any user
device
30
© July 17, 2015 Novell Inc.
Search
Content Management
eDirectory ID
Container
Group
User
Attribute
Administrator
End-User
Developer
Pre-packaged Portal - Express Portal
•Pre-configured and installed
•24 ready to use portlets
•Browser based portal
administration
•Multiple configuration options
•
Container pages control site
wide portal look and feel
•
Shared pages control users
and group look and feel
•
User pages control personal
preference
•Drag-and-drop layout
31
© July 17, 2015 Novell Inc.
Novell exteNd Summary
Integrated Services-Oriented Application Development
• Comprehensive SOA suite
•
Interaction
Combines integration, portal and identity Services to
securely deliver business information to the users that
need it
• Reduced time to market with visual end-to-end tools
•
Orchestration
Plethora of visual tools and wizards that speed service
oriented application assembly and deployment
• Standard and Open
•
•
Integration
Supports the latest industry standards
Only SOA offering that supports deployments to leading
J2EE Applications Servers
• Security
•
32
© July 17, 2015 Novell Inc.
The only SOA suite supported by industry leading Identity
Management solution
File and Print
eMail
VLE
Packaged
Applications
Identity Manager 2
Library/Resource
services
Finance
HR
Payroll
Student Records
IDENTITY
MANAGEMENT
33
© July 17, 2015 Novell Inc.
Web
Services
Isolated Identities
HR
Student records
Operating
System
Database
Mail
Directory
PBX
34
© July 17, 2015 Novell Inc.
Foundation: Integrated Identities
HR
Database
Student records
Nsure Identity
Manager
Mail
Directory
PBX
35
© July 17, 2015 Novell Inc.
Operating
System
Addressing Identity Management
Capabilities:
• Metadirectory – Identity Synchronization (Foundation)
• User Lifecycle Management
• Provisioning/Deprovisioning
• Password Management
• User self-service – passwords and profile information
• Role-based administration
• Corporate white pages (address book)
• Auditing and Reporting
36
© July 17, 2015 Novell Inc.
Password Management
A suite of password-related security functions:
•
•
•
•
37
System-wide password policy
– Establish password policy that will be used for and
enforced on connected systems
Password self-service
– Empower users to help themselves with forgotten
passwords, password resets, changing passwords
Password distribution
– Specify connected systems that will receive the
organization’s common password, as defined in
password policy
Bi-directional password synchronization
– Manage the native password management activities in
connected systems, ensuring consistency
© July 17, 2015 Novell Inc.
Password Management
Password Distribution
•
•
•
•
38
User sets a new common password
using the self-service password
interface
New password is checked against
password policy
New password is set on user
object within the Nsure Identity
Manager 2 identity vault
Password is distributed to
associated user objects on
connected systems
© July 17, 2015 Novell Inc.
Connected Systems
•
•
•
•
•
•
•
•
•
•
eDirectory
Legacy NDS
Active Directory/Exchange 2000
Windows NT Domains
Network Information Service
(NIS)
• Linux
• Solaris
• other UNIX
GroupWise
Lotus Notes
SunOne
SAP User Management
Relational databases
• Oracle
• DB2
• Sybase
Password Scenario:
Using Self-service portal to change password
1- Self-service gadget is used
to enter a new password.
2- Password is checked for
conformance to policies
Identity Manager 2
Web Server
3- Password is set on user
object in the Identity Vault
Identity Manager 2
Server with
associated Identity
Vault
39
4- Password is distributed to
associated user objects on
connected systems that
support subscription to the
password attribute
© July 17, 2015 Novell Inc.
Connected Systems
• eDirectory
• Legacy NDS
• Active Directory/Exchange 2000
• Windows NT Domains
• SAP User Management
• Network Information Service (NIS)
• Linux
• Solaris
• other UNIX (HP-UX, AIX)
• GroupWise
• Lotus Notes
• SunOne
• Relational databases
• Oracle
• DB2
• Sybase
Password Scenario:
Bi-directional password sync
User sets password on a
participating system
Password is captured, and
sent securely to the Identity
Manager 2 Server.
Failure notice sent
via email
Reset password on
participating
system to last
“good” password
No
Conforms
Conforms
Conforms
tototo
the
the
the
policy?
policy?
policy?
Yes
Password is set on the user
object in the Identity Vault.
Password is distributed to
associated user objects on
connected systems that
support subscription to the
password attribute
40
© July 17, 2015 Novell Inc.
Participating Systems
• Active Directory
• NT Domains
• NIS (Unix)
• eDirectory
Linux: a critical element of one Net
:
:
:
Novell exteNd
:
41
© July 17, 2015 Novell Inc.
Novell Nsure
Novell Nterprise
LINUX
Novell Ngage
Committed to open source
May 2004
Announcements:
Novell announces that all customers
April
03existing
May NetWare
03
Aug
03
Sept 03
Jan 04
with
maintenance/
UK Academic
License agreement
upgrade/support
protectionSite
agreements
Novell Nterprise
All services
Novell
Ximian
SUSE
are
able
to
use
SUSE
Linux
Enterprise
Linux Services —
will run on
Acquisition—
Certified
Acquisition—
Networking
NetWare
Undercost.
the
above
this meansindustry
that
Linux
Linux
desktoplicense
server
at
no
extra
services
for
Linux
and Linux
leading Linux.
Engineer
management
any
Academic
institution
can
deploy
SUSE
environment
eg.
Novell
(CLE) program
solutions and
File, print,
Linux Enterprise
site wide with
announces
open source Server,
collaboration,
Indemnification
projects
messaging
and support
updates and
maintenance
AND
so
program
directory services
long as they have an existing NetWare
agreement
42
© July 17, 2015 Novell Inc.
Continuing the open source direction
Novell Forge
Contributions
Review Board
Support
A technology
collaboration site
that allows
incremental
involvement in the
OSS development
community.
Provide contributions
to the OSS community
Open Source Review
Board – Internal OSS
education/advocacy and
legal control.
Provide guidance, tools,
and training to facilitate
the support of Linux
across Novell solution
suites.
http://forge.novell.com
43
• Identify products or
API’s to open source
• Provide code and
support it for and
with the community
(Structural Bazaar)
© July 17, 2015 Novell Inc.
Desktop to the Server
Desktop
Ximian
Desktop
SUSE LINUX
Desktop
Office
Productivity
OpenOffice.org
iFolder
iPrint
Collaboration
Ximian
Evolution
GroupWise
Management
ZENworks
Ximian Red
Carpet
eDirectory
iManager
Novell Nterprise Linux Services
Consulting Services for Linux offerings
Security Services for the Linux environment
44
© July 17, 2015 Novell Inc.
Development
exteNd
Director
exteNd
Composer
Mono
Server
SUSE LINUX
NetWare
Why choose Novell for a Linux-based
solution?
45
Requires
world-class
ecosystem
Must be
reliable, secure
and manageable
Staff must be
educated on
Linux
Existing major
platform suppliers
must interoperate
seamlessly with
Linux
© July 17, 2015 Novell Inc.
Novell Premium Services
Customers look to Novell for…
• Proven technical expertise
•
•
• Consistent methodologies
• World wide delivery
•
• Strategic partnerships
• High customer satisfaction
46
© July 17, 2015 Novell Inc.
Stable and reliable – 24x7x365
access to Linux experts
Safe and secure – remote
monitoring services, managed
services, proactive health
checks, preventative
maintenance service and business
continuity services
Optimized and efficient –
proactive planning services
establish a support plan,
dedicated and onsite resources,
and ongoing relationship
management
Novell delivering
Extensive global programs
•
•
Novell, Ximian and SUSE relationships with IBM,
Dell, HP and others
Promoting adoption of Linux around the world
Commitment to open source
•
GNOME
•
MONO
•
Nforge
•
Ifolder
Strong financial position
•
47
© July 17, 2015 Novell Inc.
Only $1 billion software company with a Linux
distribution and the worldwide ecosystem to
support it.