Australian Access Federation Shibboleth Workshop

21-22 April 2008 Canberra

This free workshop covers Federation (Shibboleth) technical deployment. Please register early to secure your place.

Note that the changes on requirements for the workshop as listed on Software/Hardware section. Basically you need wireless capable laptop with simple browser and SSH-client installed.

PDF of Slides

• Shibboleth slides

Agenda

Day 1 (21 April 2008)

• 8:30 Registration/Administration/Tea
• 9:00 Introduction, opening, AAF overview, setup environment
• 10:00 How to setup an Identity Provider*
• 10:30 Break
• 10:45 IdP Continue*
• 12:30 Lunch
• 1:30 How to set up a Service Provider* & How to "shibbolize" an application*
• 3.30 Break
• 3:45 Attributes Exchange
  • LDAP resolver back-end*
  • Attribute Release Policies (ARP) and Attribute Acceptance Policies (AAP)*
• 5:00 Finish

Day 2 (21 April 2008)

• 8:30 Registration/Administration/Tea
• 9:00 Review of the practical sessions & requirements for AAF
• 10:00 ShARPE/Autograph (including Service Description File, Attribute Mapping, eduPersonTargetedId, etc)*
• 10:30 Break
• 10:45 Common Problems/Troubleshooting
  • Log file explanation; SAML assertions examination
  • Certificates
  • Synchronizing time
• 11:45 Shibbolizing a second application
• 12:30 Lunch
• 1:30 Discussions
  • technical approaches to tackle minigrant
  • Common problems and possible solutions discussion for Minigrants
  • Typical scenarios: your institution, AAF, and others
  • What services do you want to provide across institution boundaries?
  • Applicability of SSO within your institution
  • What are the attributes that your application will need?
• 3:30 Break
• 3:45 Advanced Topics (raise issues you'd like to discuss, continue discussion above)
• 5:00 Finish

Location

The followings are maps that can help you:
Location overview: WE_ARE_HERE.png
Location overview: CSIRO_CSE_location_map.gif
Taking bus: Busroutes.png and timetable
Route from city: MapFromNorthbourneAveCanberraCity.png and directions_from_barton.pdf
Bike track for traffic avoidance: Suggested_route_avoids_crossing_Barton_Highway_at_bellenden_st.pdf
Google map: http://tinyurl.com/2qfzjf

Accommodation: http://tinyurl.com/34aq6e

Virtual Machine Settings

Throughout the workshop sessions, participants will be divided into groups of 2 or 3. Each group will work on their own virtual machine.

Pre-downloaded software required for the workshop resides in your virtual machine at:

• /usr/src

Domain for the workshop vmware will be mams.local, i.e. ws00.mams.local, ws01.mams.local to ws30.mams.local.

Some vmwares are already being preconfigured for the workshop:

• ws01.mams.local -- 192.168.123.31
• ws02.mams.local -- 192.168.123.32
• ws03.mams.local -- 192.168.123.33
• ws04.mams.local -- 192.168.123.34
• ws05.mams.local -- 192.168.123.35
• ws06.mams.local -- 192.168.123.36

If you would like to experience the workshop on your own laptop, you may do so by loading the provided DVD vmware image. Network configuration will be advised to enable your laptop for local network access.

Network Access

Login to your vmware:
username: root
password: m4m5t35t

Note: there won't be external internet access during the workshop.

Hardware:

• Delegate needs to bring your own laptop (or share with others)
• Wireless network with 802.11G.
• No wired Ethernet will be provided.
• minimum of 512MB of memory

Software:

• SSH Client (i.e. putty) + X windows (on windows you can install cygwin + X)
• Web browser

Misc

1. join http://www.federation.org.au/cgi-bin/mailman/listinfo/testbed-dev mailing list for follow up discussion on workshop and helping out in deploying shibboleth in your institution
2. questions and issues on ShARPE and Autograph can be redirected at http://www.federation.org.au/cgi-bin/mailman/listinfo/sharpe-users mailing list
3. general federation questions, feel free to direct them to support AT federation DOT org DOT au

Note

• you may redeploy vmware in your laptop to external public machine and join Level-1 Federation. Migration instruction will be provided.

Australian Access Federation Workshop 18-19 Feb 2008 Sydney

This free workshop covers Federation (Shibboleth) technical deployment. Please register early to secure your place.

Second day involves discussion of some AAF Minigrant topics to get better ideas of the problems and possible solutions.

PDF of Slides

• Shibboleth slides

Agenda

Day 1 (18 Feb 2008)

• 8:30 Registration/Administration/Tea
• 9:00 Introduction, opening, AAF overview, setup environment
• 10:00 How to setup an Identity Provider*
• 10:30 Break
• 10:45 IdP Continue*
• 12:30 Lunch
• 1:30 How to set up a Service Provider* & How to "shibbolize" an application*
• 3.30 Break
• 3:45 Attributes Exchange
  • LDAP resolver back-end*
  • Attribute Release Policies (ARP) and Attribute Acceptance Policies (AAP)*
• 5:00 Finish
• 6:30 Dinner @ The Ranch

Day 2 (19 Feb 2008)

• 8:30 Registration/Administration/Tea
• 9:00 Review of the practical sessions & requirements for AAF
• 10:00 ShARPE/Autograph (including Service Description File, Attribute Mapping, eduPersonTargetedId, etc)*
• 10:30 Break
• 10:45 Common Problems/Troubleshooting
  • Log file explanation; SAML assertions examination
  • Certificates
  • Synchronizing time
• 11:45 Shibbolizing a second application
• 12:30 Lunch
• 1:30 Discussions
  • technical approaches to tackle minigrant
  • Common problems and possible solutions discussion for Minigrants
  • Typical scenarios: your institution, AAF, and others
  • What services do you want to provide across institution boundaries?
  • Applicability of SSO within your institution
  • What are the attributes that your application will need?
• 3:30 Break
• 3:45 Advanced Topics (raise issues you'd like to discuss, continue discussion above)
• 5:00 Finish

Location

Whiteley room, Level 3, SAM Building (C10A),
Macquarie University, Balaclava Road, North Ryde,
New South Wales, 2109

Campus Map

Virtual Machine Settings

Throughout the workshop sessions, participants will be divided into groups of 2 or 3. Each group will work on their own virtual machine.

Pre-downloaded software required for the workshop resides in your virtual machine at:

• /usr/src

Domain for the workshop vmware will be mams.local, i.e. ws00.mams.local, ws01.mams.local to ws30.mams.local.

Some vmwares are already being preconfigured for the workshop:

• ws01.mams.local -- 192.168.123.31
• ws02.mams.local -- 192.168.123.32
• ws03.mams.local -- 192.168.123.33
• ws04.mams.local -- 192.168.123.34
• ws05.mams.local -- 192.168.123.35
• ws06.mams.local -- 192.168.123.36

If you would like to experience the workshop on your own laptop, you may do so by loading the provided DVD vmware image. Network configuration will be advised to enable your laptop for local network access.

Network Access

Login to your vmware:
username: root
password: m4m5t35t

Note: there won't be external internet access during the workshop.

Hardware:

• Delegate needs to bring your own laptop (or share with others)
• Wireless network with 802.11G.
• No wired Ethernet will be provided.
• minimum of 512MB of memory
• minimum of 2GB of free space

Software:

• vmware server (http://www.vmware.com/products/server/) needs to be installed on your laptop if you'd like to have the image installed on your laptop
• SSH Client (i.e. putty) + X windows (on windows you can install cygwin + X)
• Web browser

Misc

1. join http://www.federation.org.au/cgi-bin/mailman/listinfo/testbed-dev mailing list for follow up discussion on workshop and helping out in deploying shibboleth in your institution
2. questions and issues on ShARPE and Autograph can be redirected at http://www.federation.org.au/cgi-bin/mailman/listinfo/sharpe-users mailing list
3. general federation questions, feel free to direct them to support AT federation DOT org DOT au

Note

• you may redeploy vmware in your laptop to external public machine and join Level-1 Federation. Migration instruction will be provided.