Alba Coll September 2008

Alba Coll September 2008

Research and development approach on the enhancement of e-Catalunya platform Master’s Degree in Information Technology Project Director: Rosa Mª Martín Santiago Co-Director: Hector Puente Tutor: Jose María Barceló Ordinas Alba Coll September 2008 Research and development approach on the enhancement of e-Catalunya platform 2 Research and development approach on the enhancement of e-Catalunya platform To Rosa Mª Martín and Hector Puente for their support and their never ending patience. To the e-Catalunya team for making me go to work every morning with a smile and for helping me every time the text processor revolted against me. To my flat mates for forgiving my last two weeks cleaning tasks skipping To Ada, Carles and Laura for being there. To Ada for making our sleepless-, working-sessions nights a hilarious time. To my parents for putting up with me in my most hysterical moments and for helping me with everything they can. 3 Research and development approach on the enhancement of e-Catalunya platform 4 Research and development approach on the enhancement of e-Catalunya platform Index 1. Introduction....................................................................................... 11 1.1. Background ....................................................................................11 1.2. Project objectives............................................................................12 1.3. Motivations.....................................................................................12 1.4. Work environment...........................................................................14 1.5. Document organization ....................................................................15 2. The e-Catalunya Project..................................................................... 17 2.1. Introduction ...................................................................................17 2.2. Portals and groups ..........................................................................18 2.3. User Roles......................................................................................19 2.4. Infrastructure Software....................................................................19 2.4.1. Jakarta Tomcat ........................................................................19 2.4.2. Apache and PHP .......................................................................20 2.4.3. Apache Tomcat Connector .........................................................20 2.4.4. MySQL ....................................................................................20 2.4.5. OpenLDAP ...............................................................................20 2.4.6. Sympa ....................................................................................21 2.4.7. Postfix.....................................................................................21 2.5. e-Catalunya Authentication...............................................................21 2.6. Tools .............................................................................................22 2.6.1. Wiki ........................................................................................22 2.6.2. Blog........................................................................................23 2.6.3. Calendar..................................................................................24 2.6.4. Repository ...............................................................................25 2.6.5. Photo Album ............................................................................26 2.6.6. Mailroom .................................................................................26 2.6.7. Mailing list ...............................................................................27 2.6.8. Forum .....................................................................................28 2.6.9. eBugTracker ............................................................................28 2.7. Social and Knowledge Network .........................................................29 2.8. Administration Panel........................................................................31 2.9. ECAT Platform.................................................................................32 3. Federation system ............................................................................. 33 3.1. Technological Concepts ....................................................................33 3.1.1. Digital Identity .........................................................................33 5 Research and development approach on the enhancement of e-Catalunya platform 3.1.2. Digital Certificate......................................................................33 3.1.3. HTTP.......................................................................................34 3.1.4. HTTPS.....................................................................................35 3.1.5. SOAP ......................................................................................36 3.2. Federation Fundamentals .................................................................37 3.2.1. Single Sign-On .........................................................................37 3.2.2. Single Sign-Out........................................................................37 3.2.3. Federations..............................................................................37 3.2.3.1. Federation motivation.........................................................39 3.2.4. Attributes ................................................................................40 3.2.5. Account linking.........................................................................41 4. Federation Specifications................................................................... 43 4.1. SAML .............................................................................................43 4.2. Liberty Phase 1 ...............................................................................44 4.3. Liberty Phase 2 ...............................................................................45 4.4. SAML 2.0 .......................................................................................45 4.5. WS-Federation................................................................................45 4.6. OpenID ..........................................................................................45 4.7. Comparison ....................................................................................46 4.7.1. Single Sign-On control flows ......................................................47 4.7.2. Single Logout...........................................................................47 4.7.3. Account federation / Linkage......................................................47 4.7.4. Client profiles...........................................................................47 4.7.5. Security Tokens/Security Assertions ...........................................48 4.7.6. Security ..................................................................................48 4.7.7. User Privacy Controls ................................................................48 4.7.8. Developer Organization .............................................................49 4.7.9. Implementation Cost.................................................................49 4.7.10. IdP Discovery .......................................................................49 4.7.11. Metadata..............................................................................49 4.7.12. Protocol bindings...................................................................50 4.7.13. User Identifier Treatment .......................................................50 5. Federation specifications in depth ..................................................... 53 5.1. SAML 1 ..........................................................................................53 5.1.1. SAML 1 Assertions ....................................................................54 5.1.2. SAML 1 Protocols......................................................................54 5.1.3. SAML 1 Bindings.......................................................................55 5.1.4. SAML 1 Profiles ........................................................................56 6 Research and development approach on the enhancement of e-Catalunya platform 5.1.4.1. Browser/Artifact Profile.......................................................56 5.1.4.2. Browser/Post Profile ...........................................................58 5.2. Liberty Alliance Specifications ...........................................................59 5.2.1. Liberty Phase 1 ........................................................................59 5.2.1.1. Liberty Authentication contexts............................................60 5.2.1.2. Liberty Protocols ................................................................61 5.2.1.3. Liberty Binding ..................................................................62 5.2.1.4. Liberty Profiles ..................................................................63 5.2.1.4.1. Single Sign-On and Federation.........................................63 5.2.1.4.2. Register Name Identifier .................................................64 5.2.1.4.3. Identity Termination Notification ......................................65 5.2.1.4.4. Single Logout ................................................................67 5.2.1.4.5.

View Full Text

Details

  • File Type
    pdf
  • Upload Time
    -
  • Content Languages
    English
  • Upload User
    Anonymous/Not logged-in
  • File Pages
    193 Page
  • File Size
    -

Download

Channel Download Status
Express Download Enable

Copyright

We respect the copyrights and intellectual property rights of all users. All uploaded documents are either original works of the uploader or authorized works of the rightful owners.

  • Not to be reproduced or distributed without explicit permission.
  • Not used for commercial purposes outside of approved use cases.
  • Not used to infringe on the rights of the original creators.
  • If you believe any content infringes your copyright, please contact us immediately.

Support

For help with questions, suggestions, or problems, please contact us