Post on 11-Aug-2020
National Knowledge Network
2 November, 2012
National Knowledge Network Page 2
First Login
Application Integration Framework
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 3
First Login
Application Integration Framework
Fresh User (No Cookie)
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 4
First Login
Application Integration Framework
Check Cookie for Token Id.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 5
First Login
Application Integration Framework
No Cookie Found .. Redirect.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 6
First Login
Application Integration Framework
Request With Service Type Parameter.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 7
First Login
Application Integration Framework
Check Cookie and Service Type Parameter.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 8
First Login
Application Integration Framework
No Cookie Found.. Present Login Page.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 9
Application Integration Framework
National Knowledge Network Page 10
First Login
Application Integration Framework
Submit login.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 11
First Login
Application Integration Framework
Check Credentials.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 12
First Login
Application Integration Framework
Valid User Return Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 13
First Login
Application Integration Framework
Redirect to Service with Token Id as Parameter and Cookie Saved.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 14
Logged Out User
Application Integration Framework
Cookie – Token Id is Saved
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 15
First Login
Application Integration Framework
Go to Server With Token Id Parameter
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 16
First Login
Application Integration Framework
Validate Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 17
First Login
Application Integration Framework
Valid Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 18
Application Integration Framework
National Knowledge Network Page 19
Logged In User
Application Integration Framework
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 20
Logged In User
Application Integration Framework
Cookie – Token Id.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 21
Logged In User
Application Integration Framework
Validate Token From Cookie.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 22
Logged In User
Application Integration Framework
Valid Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 23
Application Integration Framework
National Knowledge Network Page 24
Logged Out User
Application Integration Framework
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 25
Logged Out User
Application Integration Framework
Cookie – Token Id.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 26
Logged Out User
Application Integration Framework
Validate Token From Cookie.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 27
Logged Out User
Application Integration Framework
Invalid Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 28
Logged Out User
Application Integration Framework
Invalid Token Redirect.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 29
Logged Out User
Application Integration Framework
Redirect to Server with Cookie.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 30
Logged Out User
Application Integration Framework
Validate Token From Cookie.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 31
Logged Out User
Application Integration Framework
Invalid Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 32
Logged Out User
Application Integration Framework
Invalid Token .. Present Login Page…
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 33
Application Integration Framework
National Knowledge Network Page 34
Logged Out User
Application Integration Framework
Submit login.
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 35
Logged Out User
Application Integration Framework
Check Credentials.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 36
Logged Out User
Application Integration Framework
Valid User Return Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 37
Logged Out User
Application Integration Framework
Redirect to Service . Set Cookie - Token Id..
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 38
Logged Out User
Application Integration Framework
Cookie – Token Id is Saved
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 39
Logged Out User
Application Integration Framework
Go to Server With Token Id Parameter
accounts.nkn.in exampleapp.nkn.in
National Knowledge Network Page 40
Logged Out User
Application Integration Framework
Validate Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 41
Logged Out User
Application Integration Framework
Valid Token.
accounts.nkn.in exampleapp.nkn.in
openam.nkn.in
National Knowledge Network Page 42
Application Integration Framework
LDAP Design and Authentication Process
National Knowledge Network Page 44
LDAP Design and Authentication Process
res.in
Nic.nkn.in
VM 1
iitd.res.in
iib.res.in iitkgp.ac.in
nkn.in
MASTER
MASTER MASTER MASTER
MASTER MASTER
VM VM VM
VM VM VM
Master Enclosure Custom script Nkn.in
VM 3 VM 2
Slave Enclosure
res.in
Nic.nkn.in
iitd.res.in
iib.res.in
nkn.in
iitkgp.ac.in
Proxy Enclosure
VM 1 VM 2 VM 3
National Knowledge Network Page 45
LDAP Design and Authentication Process
res.in
Nic.nkn.in
VM 1
iitd.res.in
iib.res.in iitkgp.ac.in
nkn.in
MASTER
MASTER MASTER MASTER
MASTER MASTER
VM VM VM
VM VM VM
Master Enclosure Custom script Nkn.in
VM 3 VM 2
Slave Enclosure
res.in
Nic.nkn.in
iitd.res.in
iib.res.in
nkn.in
iitkgp.ac.in
Proxy Enclosure
VM 1 VM 2 VM 3
ADD
/UPDATE/MODIFY
res.in
National Knowledge Network Page 46
LDAP Design and Authentication Process
res.in
Nic.nkn.in
VM 1
iitd.res.in
iib.res.in iitkgp.ac.in
nkn.in
MASTER
MASTER MASTER MASTER
MASTER MASTER
VM VM VM
VM VM VM
Master Enclosure Custom script Nkn.in
VM 3 VM 2
Slave Enclosure
res.in
Nic.nkn.in
iitd.res.in
iib.res.in
nkn.in
iitkgp.ac.in
Proxy Enclosure
VM 1 VM 2 VM 3
UPDATE MASTER
FROM PROXY
National Knowledge Network Page 47
LDAP Design and Authentication Process
res.in
Nic.nkn.in
VM 1
iitd.res.in
iib.res.in iitkgp.ac.in
nkn.in
MASTER
MASTER MASTER MASTER
MASTER MASTER
VM VM VM
VM VM VM
Master Enclosure Custom script Nkn.in
VM 3 VM 2
Slave Enclosure
res.in
Nic.nkn.in
iitd.res.in
iib.res.in
nkn.in
iitkgp.ac.in
Proxy Enclosure
VM 1 VM 2 VM 3 SLAVE
UPDATE
National Knowledge Network Page 48
LDAP Design and Authentication Process
res.in
Nic.nkn.in
VM 1
iitd.res.in
iib.res.in iitkgp.ac.in
nkn.in
MASTER
MASTER MASTER MASTER
MASTER MASTER
VM VM VM
VM VM VM
Master Enclosure Custom script nkn.in
VM 3 VM 2
Slave Enclosure
res.in
Nic.nkn.in
iitd.res.in
iib.res.in
nkn.in
iitkgp.ac.in
Proxy Enclosure
VM 1 VM 2 VM 3
UPDATE
INSTITUTE
MASTER
National Knowledge Network Page 49
LDAP Design and Authentication Process
res.in
Nic.nkn.in
VM 1
iitd.res.in
iib.res.in iitkgp.ac.in
nkn.in
MASTER
MASTER MASTER MASTER
MASTER MASTER
VM VM VM
VM VM VM
Master Enclosure Custom script Nkn.in
VM 3 VM 2
Slave Enclosure
res.in
Nic.nkn.in
iitd.res.in
iib.res.in
nkn.in
iitkgp.ac.in
Proxy Enclosure
VM 1 VM 2 VM 3 SLAVE
UPDATE
National Knowledge Network Page 50
LDAP Design and Authentication Process
Slave Enclosure
iitd.res.in iitb.res.in
VM1 VM 2
APPLICATION
abc@iitd.res.in
National Knowledge Network Page 51
LDAP Design and Authentication Process
Slave Enclosure
iitd.res.in iitb.res.in
VM1 VM 2
APPLICATION
abc@iitd.res.i
n abc@iitb.res.in
National Knowledge Network Page 52
LDAP Design and Authentication Process
Slave Enclosure
iitd.res.in iitb.res.in
VM1 VM 2
APPLICATION
Bind to
iitd.res.in
National Knowledge Network Page 53
LDAP Design and Authentication Process
Slave Enclosure
iitd.res.in iitb.res.in
VM1 VM 2
APPLICATION abc@iitb.res.i
n
National Knowledge Network Page 54
LDAP Design and Authentication Process
Slave Enclosure
iitd.res.in iitb.res.in
VM1 VM 2
APPLICATION
abc@iitd.res.i
n abc@iitb.res.in
National Knowledge Network Page 55
LDAP Design and Authentication Process
Slave Enclosure
iitd.res.in iitb.res.in
VM1 VM 2
APPLICATION
Bind to
iitd.res.in
The Storage Cluster
National Knowledge Network Page 57
The Storage Cluster
P1 P2 P1 P2
NKN DELHI NKN HYD
National Knowledge Network Page 58
The Storage Cluster
P1 P2 P1 P2
NKN DELHI NKN HYD
save
National Knowledge Network Page 59
The Storage Cluster
P1 P2 P1 P2
NKN DELHI NKN HYD
National Knowledge Network Page 60
The Storage Cluster
P1 P2 P1 P2
4
3
2
1
National Knowledge Network Page 61
The Storage Cluster
P1 P2 P1 P2
1
2 3
4
National Knowledge Network Page 62
The Storage Cluster
P1 P2 P1 P2
1
2
3
4
National Knowledge Network Page 63
The Storage Cluster
P1 P2 P1 P2
1
2 3
4
Authentication Framework Failure Scenarios and
Recovery
National Knowledge Network Page 65
HYD Mumba
i
NKN Network
NKN DELHI
WSGI
middle work
NKN HYD
WSGI
middle work
NKN MUM
WSGI
middle work
Storage Cluster
Application Manger
AM AM AM
Token ID
1 6
4 5
2/3
Authentication Framework Failure Scenarios and Recovery
National Knowledge Network Page 66
Authentication Framework Failure Scenarios and Recovery
NKN Network
NKN DELHI
WSGI
middle work
NKN HYD
WSGI
middle work
NKN MUM
WSGI
middle work
Storage Cluster
Application Manger
AM AM AM
1
2 3
4 5 6
7
National Knowledge Network Page 67
Authentication Framework Failure Scenarios and Recovery
HYD Mumba
i
NKN Network
NKN DELHI
WSGI
middle work
NKN HYD
WSGI
middle work
NKN MUM
WSGI
middle work
Storage Cluster
Application Manger
AM AM AM
1
2 3
4 5
6
Thank You