Brazilian National Research and Education Network (NREN) - AAI & eduroam
48
Brazilian NREN - AAI & eduroam Antônio Carlos Fernandes Nunes Service Management Director RNP – Brazilian NREN 12/04/2013
-
Upload
antonio-carlos-f-nunes -
Category
Documents
-
view
33 -
download
2
description
RNP - Brazilian National Research and Education Network (NREN) - authentication and authorisation infrastructure (AAI) & eduroam
Transcript of Brazilian National Research and Education Network (NREN) - AAI & eduroam
Brazilian NREN - AAI & eduroam Antônio Carlos Fernandes Nunes
Service Management Director
RNP – Brazilian NREN
12/04/2013
AGENDA
1
Federation What is Federation?
Main Concept
Federation in Brazil
How it works?
Governance
Status
CAFe Evolution
eduGAIN – A strong alliance
Identity Federation in the world
Other AAI project in Latin America
eduroam eduroam Big Bang
eduroam development in Brazil
Where can we use it?
How it works?
Requirements
Other eduroam project in Latin America
What is Federation?
3
“Union of different communities that trust each other and who share the same rules and because of that have access to specific services.”
4
What is Federation?
“Union of different communities that trust each other and
who share the same rules and because of that provide access to specific services.”
5
What is Federation?
“Union of different communities that trust each other and who share the same rules and because of that provide access to specific
services.”
6
What is Federation?
“Union of different communities that trust each other and who share the
same rules and because of that, provide access to specific services.”
What is the principal concept that AAI is based on ?
MAIN CONCEPT
1
FEDERATION IN BRAZIL
8
FEDERATION MODELING
1
TF - Federation
WG -directories (2002 - 2003)
WG – DIR-EDU (2003 - 2004)
WG - Middleware
(2004 - 2005)
2007 - 2010
CAFe launch 2010
CAFe, how it works?
CAFe – Components
• Components:
– Users;
– Identity;
– Identity providers (IdP);
– Service Providers (SP).
CAFE – HOW IT WORKS?
Redirecting to WAYF
SP’s URL
1
2
3
WAYF’s URL
Choose your IdP
4
WAYF’s URL
Redirection to IdP
IdP’s URL
joao
Authentication:
User:
Pass: *******
5
6
Redirecting to the SP
Idp’s URL
7
URL: do SP
Welcome to SP
CAFE – COMPONENTS
14
GOVERNANCE
AAI Advisor Comitee
Service Management
CAFe Operation and 2 level
support team
PKI Operation and 2 level
support team
Eduroam Operation and 2 level support
team
AAI Technical Comitee
CAFe – Status
15
CAFE IN 2010 - IDP
1
6 IdPs: IMPA (A), UFMG (B), UFMS (C), UFPA (D), UFRGS (E), UFSC (F) and UNIVASF (G)
CAFE IN 2013 - IDP
1
41 IdPs! - 650% growth – more than 200% every year
20
CAFE EVOLUTION
2010 First federation in Latin America to join REFEDS
2012 It is the first eduGAIN partnership outside Europe
21
STRONG ALIANCE
22
A short introduction
23
IDENTITY FEDERATION AROUND THE WORLD
24
IDENTITY FEDERATION AROUND THE WORLD
26
HOW EDUGAIN WORKS?
27
MAIN BENEFITS TO USE EDUGAIN
28
HOW TO JOIN EDUGAIN?
Source: <http://www.edugain.org/technical/joining_checklist.php>
29
EDUGAIN MEMBERSHIP STATUS
Source: <http://www.edugain.org/technical/status.php>
1
31
EDUROAM BIG BANG
EDUROAM DEVELOPMENT IN BRAZIL
32 1
eduroam Europe (2002 -
nowadays)
eduroam Latin
America (2009 -
nowadays)
eduroam Brazil (2011-nowadays)
2012 - 2014
ELCIRA Project
33
WHERE CAN I USE IT (WORLD)?
Source: <http://monitor.eduroam.org/eduroam_map.php?type=all>
54 countries > 8.200 access points
34
WHERE CAN I USE IT (LA)?
Source: <http://monitor.eduroam.org/eduroam_map.php?type=all>
198 access points in Brazil 6 access points in Chile
Che, y nosotros? Tranquilo, vago! Tenemos el trabajo de !
35
WHERE CAN I USE IT?
36
RADIUS Server
LDAP Server
University A
RADIUS Server National PROXY
HOW IT WORKS (NATIONAL ROAMING)?
Campus B
Campus A
Roaming user (University A)
RADIUS Server
37
RADIUS Server National PROXY
RADIUS Server LATAM PROXY
RADIUS Server GLOBAL PROXY
RADIUS Server
LDAP Server
Campus A
HOW IT WORKS (INTERNATIONAL ROAMING)?
Campus B
Campus A
Roaming user
RADIUS Server
Hardware: • Server (processor Intel Core i3, 4GB RAM e HD 500 GB); • At least one Access point supporting the protocols IEEE
802.11i e IEEE 802.1X. Server Softwares: • Ubuntu LTS 10.04 (Recomended); • FreeRADIUS 2.1.10; • OpenLDAP 2.4.23; • RadSec 1.3; • OpenSSL 0.9.8.
REQUIREMENTS
39
OTHER AAI PROJECT IN LATIN AMERICA
The ELCIRA Project aims to coordinate a series of collaboration tools and services that are being developed in Europe and Latin America in order to provide an interoperability framework that facilitates the work of European-Latin American research teams and to foster collaboration in joint research projects
40
OTHER AAI PROJECT IN LATIN AMERICA
• Creation of a virtual course to train NREN technical teams in order to replicate the action in their NRENs and with their customers;
• Action and Policy Coordination with other regional AAI organizations and federations;
• Action and Policy Coordination with other regional eduroam organizations;
• Deployment of showcase examples with two RedCLARA NRENs or their institutions;
• Implementation of AAI interoperability and interoperation with Latin American federations and its European counterparts;
• Implementation of eduroam interoperability and interoperation with Latin American federations and their European counterparts.
Coordinated Actions for AAI
between EU and LA
Promoting the
deployment of eduroam
services
41
ELCIRA FUNDED BY
42
ELCIRA INITIALS MEMBERS
43
OTHER EDUROAM PROJECT IN LATIN AMERICA
• Creation of a virtual course to train NREN technical teams in order to replicate the action in their NRENs and with their customers;
• Action and Policy Coordination with other regional eduroam organisations;
• Deployment of showcase examples with two RedCLARA NRENs or their institutions.
• Implementation of eduroam interoperability and interoperation with Latin American federations and their European counterparts.
• RNP – www.rnp.br
• CAFe – www.rnp.br/servicos/cafe
• eduroam – www.eduroam.org
• eduroam (Brazil) – www.rnp.br/servicos/eduroam
• eduGAIN – www.edugain.org
• REFEDS: www.refeds.org
• ELCIRA: www.elcira.eu
44
MORE INFORMATIONS
46
http://portal.rnp.br/web/servicos/blog http://portal.rnp.br/web/servicos/blog/-/blogs/rss
RNP SERVICES NEWS
47
@servicos_rnp
RNP SERVICES TWITTER
48
Muchas Gracias!
Antônio Carlos Fernandes Nunes [email protected]
@servicos_rnp
http://www.rnp.br/servicos
