id management in university id management in university kenzi watanabe saga university, japan...

国立大学法人　 SAGA UNIVERSITY

佐賀大学

ID Management in University

Kenzi WatanabeSaga University, Japan

watanabe@is.saga-u.ac.jp

佐賀大学16/02/2012 The 33rd APAN Meeting

5 FacultiesApprox.7,000Students2,000 Faculty Members

佐賀大学

ID Management History ofSaga University

• 1998, ID for all students• 2001, ID for all faculty members

• 1998, ID Integration for Windows and UNIX• 2002, Integrated authentication system• 2010, Shibboleth

16/02/2012 The 33rd APAN Meeting

佐賀大学

Backgrounds

• Information Literacy Education (1990 〜 )• Deployments of Self-maintained Online

Systems with Web (2000 〜 )

佐賀大学

Contents

• What is ID ?• Backgrounds of ID Management History• ID Management Systems in Saga University• Issues in Implementations• Conclusion

佐賀大学

What is ID ?

• ID is an identifier for each user– A symbol of yourself in

ICT world– Known as “User ID”

• ID is used in authentication procedure with a password– Login

佐賀大学

佐賀大学The 33rd APAN Meeting

Backgrounds of ID Management History

• Information Literacy Education (1990 〜 )• Deployments of Self-maintained Online

Systems with Web (2000 〜 )

16/02/2012

佐賀大学

PC Room History in Saga University

1990 〜 1994 1994 〜 1998

Windows & UNIX dual boot system (1998 – 2002)

佐賀大学

ID Management Technologies

• UNIX– /etc/passwd– NIS (Network Information Service)

• Microsoft Windows– DC (Domain Controller)– AD (Active Directory)

The 33rd APAN Meeting

For small system

For networked system

For novel system

For stand-alone system

16/02/2012

佐賀大学

Different IDs and passwords

sato1pw1

sato2pw2

Inconvenient !!

Windows

16/02/2012

佐賀大学

Same ID and passwordwithout Synchronization

satopw1

Inconvenient !!Not changed

Windows

satopw2Change!

16/02/2012

佐賀大学

Same ID and passwordwith Synchronization

Convenient !!

Windows

Directory Server

authentication

Password change

16/02/2012

佐賀大学

Deployments of Self-maintained Online Systems with Web

• Online Systems– E-mail– Educational affairs

• Syllabus, Evaluation, Registration

– Digital Library• Teachers’ DB

• What ware changed ?– More personalized– Self-maintained

佐賀大学

e.g. Teachers’ DB

• Teachers’ directory– Gathering activities of all professors– Research, Education, Social activities, etc..

• These outcomes become basics and evidences for the evaluation of university

• Who inputs data ?– By themselves

佐賀大学

Unified User DB(PostgreSQL)

Operation(Add, Remove, Modify)

LDAP (Replica)NIS/NIS+ AD

General

WindowsLinux

IMAP4S

FTPPOP3S

Other Servers(e.g. PHP based)

Saga Univ. @ 2002

16/02/2012

佐賀大学

Unified User DB

• Master database for user attributes– User ID– Initial password– Full name– Affiliation– Title– Position– etc …

• Authentication InfrastructureThe 33rd APAN Meeting16/02/2012

LDAP (Replica)NIS/NIS+ AD

General

WindowsLinux

IMAP4S

FTPPOP3S

Saga Univ. @ 2002

16/02/2012

佐賀大学The 33rd APAN Meeting16/02/2012

佐賀大学

Shibboleth

• Increasing Web-based systems• Inconvenience

– Entering User ID and Password many times– More secure way

• Opengate– A captive portal type network user authentication

system

LDAP (Replica)IdP AD

General

WindowsSolaris

IMAP4S

FTPPOP3S

Saga Univ. @ 2010

16/02/2012

佐賀大学

Issues in Implementations

• Consolidation of multiple accounts to a single entry– Identification– Clear scheme definitions of ID– ID naming rules

• Cooperation with various sections– What section has authority ?– Data Transfer method

• Decision making16/02/2012 The 33rd APAN Meeting

Research associatePhD course student

Case 1 2 IDs

Case 2 1 ID has 2 attributes

user1 user2

Research associatePhD course student

佐賀大学

ID Naming Rules

• Random based ? Name based ?• Same family and personal name ?• Same with Student ID ?

佐賀大学

General

WindowsSolaris

IMAP4S

FTPPOP3S

Saga Univ. @ 2010

16/02/2012

佐賀大学

Data Transfer Method

• Online ?– Data format

• CSV ? XML ?

– Real-time transactions or Batch jobs ?• Both ?

• Offline ?– Data format ?– Media type

• DVD ? MO ?

General

WindowsSolaris

IMAP4S

FTPPOP3S

Saga Univ. @ 2010

16/02/2012

佐賀大学

Conclusion

• What is ID ?• Backgrounds of ID Management History• ID Management Systems in Saga University• Issues in Implementations

佐賀大学

Acknowledgements

• NTT DATA KYUSHU Corporation

• Net One Systems CO. LTD.

佐賀大学

ID Management Technologies

• LDAP （ Lightweight Directory Access Protocol ）– Directory services

• Active Directory has LDAP functions– Windows 2003 server and later versions

Windows

User authentication

Userauthentication

16/02/2012

id management in university id management in university kenzi watanabe saga university, japan...

user id id

apan meeting slide

id integration

university id management

apan meeting convenient

saga university issues

evaluation of university

unix windows sato pw2

Documents

project 4 xiaochang li masaki watanabe purdue university

allyson watanabe

lifehack vol3 watanabe

crazy caraïbe and circus kenzi

os imortais lua azul - alyson noël [livros kenzi]

maya watanabe

jose watanabe - antígona

will & ma kenzi pr2

kenzi productions

47(1) 2008 7 watanabe - arizona state university · title:...

estrela da noite alyson noel - [livros kenzi]

kenzi syria basic catalog 2012

ryo watanabe

motoka watanabe works

kenzi syria fall catalog 2011-2012

hasan kenzi - tdv İslam ansiklopedisi

rs watanabe eightspoke a cast mg 10x6 5.1 2.3 rs watanabe...

pengaruh merokok terhadap kesehatan (kenzi)

the “e” elements in nagoya university y. watanabe

chapter 15: monopoly - university of minnesota...