uscgrid a (very quick) introduction to pubcookie

28
USCGrid USCGrid A (Very Quick) A (Very Quick) Introduction Introduction To PubCookie To PubCookie http://www.usc.edu/isd/services/uscgrid

Upload: brianna-cathleen-little

Post on 29-Dec-2015

214 views

Category:

Documents


0 download

TRANSCRIPT

USCGridUSCGridA (Very Quick) IntroductionA (Very Quick) Introduction

To PubCookieTo PubCookie

http://www.usc.edu/isd/services/uscgrid

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 22

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

WebISOWebISO ComponentsComponents How it WorksHow it Works

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 33

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

WebISOWebISO ComponentsComponents How it WorksHow it Works

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 44

WebISOWebISO

What is WebISO?Q:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 55

WebISOWebISO

What is WebISO? And why should I care?Q:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 66

WebISOWebISO

WebISO is ‘web-based initial sign-on’. A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 77

WebISOWebISO

WebISO is ‘web-based initial sign-on’. It means that your users authenticate once to your enterprise website,

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 88

WebISOWebISO

WebISO is ‘web-based initial sign-on’. It means that your users authenticate once to your enterprise website, then are free to move about within the website without authenticating again for any of the services within that website.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 99

WebISOWebISO

WebISO is the web-based flavor of ‘single sign-on’.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1010

WebISOWebISO

WebISO is the web-based flavor of ‘single sign-on’. Single sign-on makes happy users.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1111

WebISOWebISO

WebISO is the web-based flavor of ‘single sign-on’. Single sign-on makes happy users. Happy users make life easier all the way around.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1212

WebISOWebISO

Pubcookie also allows an enterprise to leverage existing authentication services,

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1313

WebISOWebISO

Pubcookie also allows an enterprise to leverage existing authentication services, and ensures that user passwords are seen only by trusted, secure servers.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1414

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

WebISOWebISO ComponentsComponents How it WorksHow it Works

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1515

ComponentsComponents

What are the components of PubCookie?Q:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1616

ComponentsComponents

PubCookie is comprised of a login server component, plus modules for Apache and MS IIS.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1717

ComponentsComponents

PubCookie is comprised of a login server component, plus modules for Apache and MS IIS.

The login server component runs on a trusted, secure server.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1818

ComponentsComponents

PubCookie is comprised of a login server component, plus modules for Apache and MS IIS.

The Apache and MS IIS modules are used on servers that host content and applications, and that need to authenticate users.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 1919

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

WebISOWebISO ComponentsComponents How it WorksHow it Works

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2020

How it WorksHow it Works

What are the roles of the PubCookie components? How does it all work?

Q:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2121

How it WorksHow it Works

When a user points his web browser at a PubCookie-enabled application server page that requires authentication,

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2222

How it WorksHow it Works

When a user points his web browser at a PubCookie-enabled application server page that requires authentication, the web browser is redirected to the PubCookie login module on a trusted, secure server.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2323

How it WorksHow it Works

The PubCookie login server authenticates against an existing enterprise authentication service

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2424

How it WorksHow it Works

The PubCookie login server authenticates against an existing enterprise authentication service – such as kerberos

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2525

How it WorksHow it Works

The PubCookie login server authenticates against an existing enterprise authentication service – such as kerberos – and returns a cookie to the user’s computer.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2626

How it WorksHow it Works

The PubCookie login server authenticates against an existing enterprise authentication service – such as kerberos – and returns a cookie to the user’s computer. Then the user’s browser is redirected back to the application server.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2727

How it WorksHow it Works

As the user subsequently visits different servers within the enterprise,

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie

April 2003April 2003 USCGrid at Internet2USCGrid at Internet2 2828

How it WorksHow it Works

As the user subsequently visits different servers within the enterprise, the cookie will serve as acceptable authentication until the cookie expires.

A:

USCGrid: USCGrid: A (Very Quick) Intro to PubCookieA (Very Quick) Intro to PubCookie