Federation Workshop 27-28 July 2006

---

Agenda

Note: Items marked with * indicates hands-on session

Day 1

• Session 1 (09.00 - 10.45)
  • Registration
  • Introduction
  • Shibboleth Overview
  • Setting up environment

• Coffee Break (10.45 - 11.00)

• Session 2 (11.00 - 12.30)
  • How to setup an Identity Provider*

• LunchMenu (12.30 - 14.00)

• Session 3 (14.00 - 15.45)
  • How to set up a Service Provider*

• Session 4 (16.00 - 17.30)
  • Technical discussion

Day 2

• Session 1 (09.00 - 10.45)
  • 11:00-11:45 MAMS IAM Suite
    • Virtual Librarian
    • Repositories
    • Virtual Organizations
    • MyProxy and GRID services authentication via Shibboleth

• Coffee Break (10.45 - 11.00)

• Session 2 (11.00 - 12.30)
  • Presentation on Attribute Release Policies
  • Autograph and Sharpe
    • Installation*
    • Testing*

• • 11:45-12:30 Brainstorming solutions to minigrant projects (in groups of 3 or 4)
    • Consider common set of questions about project objectives
    • What services do you want to provide across institution boundaries?
    • What are the attributes that your application will need?

• LunchMenu (12.30 - 14.00)

• Session 3 (14.00 - 15.45)
  • Brief presentation on each mini-grant project
    • discussion resulting from pre-lunch session
  • Common challenges for projects
  • Development recommendations

• Break (15.45 - 16.00)

• Session 4 (16.00 - 17.30)
  • In-depth discussions on Grid Services and MyProxy^? and Virtual Organizations

---

Location

Macquarie University, Sydney, Yerbury & Whitely room – SAM Building (C10A) Campus Map

Virtual Machine Settings

During the practical hands-on sessions, participants will have access to their own virtual machine to do their work on. It is recommended that participants work in groups of 2 so that you can help each other.

There will be 33 machines from vm1.mams.org.au to vm32.mams.org.au. They are only accessible via ssh; telnet is disabled.

On each virtual machine, pre-downloaded software required for the workshop resides in:

• /root/software

Please check in the above directory before you download any software to your machine to save time.

Required Preparation

During next week's workshop, time will be devoted on day 2 to discussing your specific projects and identifying common areas of uncertainly. It is anticipated that common problems will emerge which will be discussed during the workshop.

The following are the questions that will be asked, and every participant is expected to know the answers before coming to the meeting. The goal of these questions is to help you create a stub implementation of your SP(s) during the workshop:

• Which IdPs will be established?
• For each of those IdPs, what is the authentication mechanism and source(s) of attributes?
• Will there be local 'political' issues in accessing the relevant directory/directories? And will it contain all users, or only a subset of your institution?
• What SPs will be established, and where will these services be hosted?
• What are the current authentication mechanisms used by the services to be Shibbolized?
• And finally, some authorization-related questions: What user attributes will be required/used by the service (e.g. full name, eduPersonScopedAffiliation, email, targetedID)?
• Will services have different service levels (functionality requiring different attributes, e.g. upload vs. download, or read/write/manage, etc)?
• What users will have access to each service level (internal users only, or also Federation users)?

We request that mini-grant project participants please endeavour to talk to project stakeholders and prepare answers to these questions.

We also request that a member from each mini-grant funded institution prepare a brief (< 5 min!) presentation to the workshop on the technical aspects of the project, based around diagrams identifying the current solution (if relevant) and shibboleth-based solution resulting from the project.

Finally, about half of the participants will be directly related to one of the mini-grant projects that we have funded. If you are not affiliated with a mini-grant project, you have three options to maximize your learning:

• Go to http://www.federation.org.au/twiki/bin/view/Federation/MiniGrantsRnd2 and look at the funded projects. Study one that is attractive to you, and prepare yourself as if you would be doing that project.
• If you want to Shibbolize something else (another service, perhaps), prepare yourself for that
• Don’t bother with preparing anything, and just listen in on the conversations (please don’t snore when you fall asleep)

Hardware and Software Requirements

Participants will bring their own laptops, which require:

Hardware:

• Wireless network with 802.11G (eduroam will be enabled too).
• No wired Ethernet will be provided.
• Optional: If they want a copy of their vmware image, they also need to have approx 6GB free on their HD.

Software:

• SSH Client + X windows (on windows you can install cygwin + X)

-- ChiNguyen - 18 Jul 2006

to top