1 / 16

User-administration system (BAS) at the University of Oslo

User-administration system (BAS) at the University of Oslo. Creating of a single user-administration system for University of Oslo By Bård Henry Moum Jakobsen. University of Oslo (UoO), Norway. 32 000 students 6 000 fac. & staff 4 000 other!

Renfred
Télécharger la présentation

User-administration system (BAS) at the University of Oslo

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. User-administration system (BAS) at the University of Oslo Creating of a single user-administration system for University of Oslo By Bård Henry Moum Jakobsen

  2. University of Oslo (UoO), Norway • 32 000 students • 6 000 fac. & staff • 4 000 other! • 35 431 users in one user-management system UREG2000 • Ca 1 600 computers for students • Win*, MacOS, Linux, mm • almost 9 000 computers…

  3. What is an User administration system (BAS) Student registry BAS Persons Users Personal registery

  4. FEIDE

  5. BAS BAS AT (LDAP) SR (FS/MSTAS) Other HR

  6. User administration system (BAS) • Person • unique ID • Name • Address • Affiliation • User • Username (UID) • Password • Mail address • Home dir • Group • Group ID (GID) • Comment • Members • - users • - other Groups

  7. UoOs BAS, UREG2000 • A SQL (Oracle) database • API in Perl5 • A collection of programs (mostly Perl5) for managing users and attributes • Procedures for extracting information from LT (UoOs HR-system) and FS (UoOs Student registry) • Printer accounting!

  8. More… • Creates: • NIS (2 domains) • AD (win2k) • LDIF • IMS Enterprise • Domino Directory • Tivoli • Remedy ARS • Exim (mail) • Mailman (mail-lists) • etc

  9. LT – HR-system (i) • Gives UREG: • Organizational units • SKO – unit number • Made national by our national Student registry system • 4 parts • Institution (‘\d{4}’) • Faculty (‘\d{2}’) • Department (‘\d{2}’) • Group (‘\d{2}’) • Organization unit Name • Phone, fax, URL, email (for the unit) • Addresses (Snail-mail and physical address)

  10. LT – HR-system (ii) • Gives UREG • Person • National id-number (Social security number) • Name • Org.unit • Type (Faculty, Staff, other) • Problem: It takes time to register a person, to much time… • Gets from UREG • Email-addresses

  11. FS – Student registry • Gives UREG: • Persons • National id-number (Social security number) • Name • addresses • Curriculum • Gets from UREG • Email-addresses

  12. LT FS BOFH Ureg2000 LDAP UA (Adgangskontroll) Notes Exim/Mailman NT LMS (CF) Tivoli PRISS NIS (UiO) ARS NIS (IfI) AD (W2K) Radius

  13. UREG (or BAS) creates • Userid/shortname ’baardj’ (unix-username) • Username in NIS • Loginname in AD • UID in LDAP (for MacOS X) • Groups, general group basic • Creating Filegroups • Creating netgroups • Creating AD groups • Creating Notes groups • Creating mailinglists

  14. Is this a PKI? No! • But it is a requirement for a functional PKI. • We are not a CA (to much work) • But we need certificates for persons, roles, organizations, units and servers. • External CA for persons, internal for all others. • We need a map from ID in persons certificates to an uniq id at the University, which CA is secondary

  15. More? Contact us! • Bard.Jakobsen@usit.uio.no • +47 22852778 • Foils: http://folk.uio.no/baardj/pres/GNOMIS-eng.ppt

  16. Coming Structure of LDAP at UoO

More Related