Shibboleth Use in the Open Source Community Keith Hazelton for Steven Carmody

1
Shibboleth Use in the Open Source Community
Keith Hazelton for Steven Carmody
2
Agenda

• Completed Projects
• Current Projects
• Future Projects
• Issues
• Note Related session will explore the how
  question this is about what

3
Completed Projects

• http//shibboleth.internet2.edu/seas.html

4
Apple QuickTime Streaming Server

• Described by Gary Chapman

5
Completed Projects

• Twiki
• http//pluto.services.brown.edu/twiki/
• Already had some security concepts
• Names vs login Ids
• Guest access (read) vs Login access (write)
• Access Control (can only see what youre
  authorized to see)
• Written in Perl, runs as cgi

6
Completed Projects

• Sympa Mailing List Manager
• http//www.sympa.org/
• https//mail.internet2.edu/wws/
• Exports both email and web interfaces
• Already had some security concepts
• Login ID is email address
• Access Control (can only see what youre
  authorized to see)

7
Completed Projects

• Blogs
• MoveAble Type
• http//pluto.services.brown.edu/cgi-bin/MT-shib/mt
  .cgi
• PSU
• http//rygar.et-test.psu.edu/
• Already had some security concepts
• Login Ids
• Guest access (read) vs Login access (write)
• Access Control (can only see what youre
  authorized to see)

8
Current Projects

• Grid Shibboleth
• Flows, Security Model Defined
• Argonne has submitted proposal to latest NMI
  round,asking for support to implement

9
Current Projects

• LionShare
• Desktop Searching Tool
• Integrated GUI
• Will search using Variety of Protocols
• secure P2P
• Modules exporting the OKI DR OSID interface
• ECL (implementation of IMS DRI specification)
• Fedora
• SRW?
• ?

10
LionShare - P2P

• Built from LimeWire/gnutella (the RIAAs
  favorite)
• Supports searching, retrieval, publishing in the
  P2P world
• Supports both open publishing (anyone can
  download) and access control
• V1.x will leverage Shibboleth infrastructure
• Requesters will send signed SAML attribute
  assertions
• Publishers will enforce attribute-based access
  control before allowing download

11
LionShare - ECL

• Implementation of IMS DRI specification
• Typically used to search repositories of Learning
  Objects (eg MERLOT http//www.merlot.org/Home.po
  )
• SOAP based
• Evaluating use of (not yet completed) WS-Security
  family of specifications
• May use some Liberty concepts to fill holes
• understand that this is all political quicksand

12
Current Projects

• Other SOAP-based Protocols
• Fedora (not the Linux distro) The Flexible
  Extensible Digital Object Repository Architecture

13
Current Projects

• Barry's video

14
Future Projects

• uPortal
• Sakai

15
Current Projects

• Zope - Content management System
• Project Zope4Edu Zope and Duke
• Build Zope CMS to meet educational needs
• Use Shib for easy integration
• Not yet ready to show
• 3 more weeks
• Shib Mojo
• Kenexa

16
(No Transcript)