Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos [email protected].

10
Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos [email protected]

Transcript of Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos [email protected].

Page 1: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

Napster Shibboleth Target

PSU/Napster Technical Integration

R. Ramos

[email protected]

Page 2: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

2

Discussion Outline

Napster University Program

PSU Basic Requirements

Napster Authorization/Authentication

PSU Shibboleth Authorization/Authentication

PSU/Napster Music Subscription Registration

PSU/Napster Music Service Usage

PSU/Napster Music Subscription Renewal

Napster Target Hardware

Page 3: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

3

Napster University Program

Provide a legal online music service to Universities

Optional installation of local cache to help save on bandwidth costs

Universities Participating so far include:

– PSU, the first University to participate in the program

– U of R, second University to participate

Page 4: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

4

PSU Basic Requirements

Restricted access to special university music subscription

Keep user identities private

Each user is allowed to sign up for a single account

Required use of Shibboleth

Page 5: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

5

NapsterAuthorization/Authentication

Authorization

– Valid credit required

– Monthly verification of credit card

Authentication

– Username and password captured during registration is used for login

Page 6: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

6

PSU Shibboleth Authorization/Authentication

Authorization

– PSU administered and maintained which users were allowed to use the music service each semester

– No credit card required

Authentication

– Shibboleth username and password

Page 7: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

7

PSU/NapsterMusic Subscription Registration

PSU Shibboleth authentication used to access Napster registration

PSU Shibboleth used to authorize access to special university music subscription

Users are uniquely identified with opaque handle from PSU Origin

Custom built Napster registration for shibboleth

Page 8: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

8

PSU/NapsterMusic Service Usage

Restricted access to special university music subscription already handled by registration using Shibboleth

Shibboleth no longer needed to use music service for the duration of the semester

Napster authentication is all that is required to access the music service on or off campus

Page 9: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

9

PSU/NapsterMusic Subscription Renewal

Music subscription expires at end of each semester

PSU Shibboleth used for authentication and authorization to reactivate special university music subscription

User are uniquely identified with opaque handle from PSU Origin

Subscription is automatically renewed without having to go through another registration

Page 10: Napster Shibboleth Target PSU/Napster Technical Integration R. Ramos Rodney.Ramos@napster.com.

10

NapsterProduction Target Platform

Apache 1.3.27 w/mod_perl

Linux Red Hat 7.3

BigIP Load Balancer

Server Cluster

– 2 Servers - Dual 2GHz PIIIs w/1GB RAM