[B! Webèªè¨¼] kopugã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kopug id:kopug

Webèªè¨¼ã«é–¢ã™ã‚‹kopugã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSOã®äººæ°—è¨˜äº‹ 107ä»¶ - ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯
èªè¨¼ã¨èªå¯ã«ã¤ã„ã¦ã®çŸ¥è˜ãŒå¿…è¦ã«ãªã£ãŸã®ã§ã€åŸºç¤Žçš„ãªã“ã¨ã‚’å¦ã‚“ã§ã„ã¾ã™ã€‚ ä¸€åˆ‡ä½•ã‚‚çŸ¥ã‚‰ãªã„çŠ¶æ…‹ã‹ã‚‰æ‰‹å½“ãŸã‚Šæ¬¡ç¬¬ã«ç´°ã‹ãèª¿ã¹ã‚‹ã®ã¯å¤§å¤‰ã ã£ãŸã®ã§ã€è¶…ã‚µãƒžãƒªã‚’æ•´ç†ã—ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ã“ã®æœ¬ã¯ã€Œå€‹ã€…ã®è¦ç´ ã«è©³ã—ããªã‚‹å¿…è¦ã¯ãªã„ã‚“ã ã‘ã©ã€æ¦‚è¦ãã‚‰ã„ã¯ã•ã£ã¨æŠŠæ¡ã—ã¦ãŠããŸã„ã€ã¨ã‹ã€Œæ‰‹å½“ãŸã‚Šæ¬¡ç¬¬ã«è©³ç´°èª¿æŸ»ã‚’ã™ã‚‹å‰ã«ã€ä¸€çž¥ã—ã¦ã“ã‚Œã‹ã‚‰è¸ã¿è¾¼ã‚‚ã†ã¨ã—ã¦ã„ã‚‹é ˜åŸŸã®è¶…ä¿¯çž°ãƒžãƒƒãƒ—ã‚’ä½œã‚‹ã€ã¨ã„ã†æ„Ÿã˜ã§ä½¿ã†ã“ã¨ã‚’æƒ³å®šã—ã¦ã„ã¾ã™ã€‚ åŒã˜æ§˜ãªæ–¹ã®å½¹ã«ç«‹ã£ãŸã‚‰ã€ã¨ã¦ã‚‚å¬‰ã—ã„ã§ã™ã€‚ ã“ã®æœ¬ã¯ç†è€…ã®ç†è§£ã«é€£å‹•ã—ã¦è¿½è¨˜ä¿®æ£ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ OAuth èªè¨¼ ã‚ã¨ã§èªã‚€ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ OpenID security èªå¯ æœ¬ authentication SAML Innovative Techï¼š ã“ã®ã‚³ãƒ¼ãƒŠãƒ¼ã§ã¯ã€ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã®æœ€æ–°ç ”ç©¶ã‚’ç´¹ä»‹ã™ã‚‹Webãƒ¡ãƒ‡ã‚£ã‚¢ã€ŒSeamlessã€ã‚’ä¸»å®°ã™ã‚‹å±±ä¸‹è£•æ¯…æ°ãŒåŸ·ç†ã€‚æ–°è¦æ€§ã®
kopug 2006/09/16
Webèªè¨¼
ãƒªãƒ³ã‚¯
opensso: ãƒ›ãƒ¼ãƒ
The Open Web SSO project (OpenSSO) provides core identity services to simplify the implementation of transparent single sign-on (SSO) as a security component in a network infrastructure. OpenSSO provides the foundation for integrating diverse web applications that might typically operate against a disparate set of identity repositories and are hosted on a variety of platforms such as web and appli
kopug 2006/09/16
linux

Webèªè¨¼

secure
ãƒªãƒ³ã‚¯
SAML(Security Assertion Markup Language)
SAMLã¨ã¯ã€ç•°ãªã‚‹ã‚·ã‚¹ãƒ†ãƒ é–“ã«ãŠã‘ã‚‹èªè¨¼æƒ…å ±ã®äº¤æ›ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã™ã€‚ä»¥å‰ã®AuthXML (Authentication XML) ã¨S2MLï¼ˆSecurity Services Markup Languageã€Netegrityç¤¾ä»–æ•°ç¤¾ãŒé–‹ç™ºï¼‰ãŒçµ±åˆã•ã‚Œã€æ–°ã—ã„æ©Ÿèƒ½ãŒè¿½åŠ ã•ã‚Œã¦SAMLã¨ãªã‚Šã¾ã—ãŸã€‚2002å¹´11æœˆã«1.0ç‰ˆãŒOASISæ¨™æº–ã¨ã—ã¦æ‰¿èªã•ã‚Œã€ç¾åœ¨2.0ç‰ˆãŒé–‹ç™ºä¸ã§ã™ã€‚ (http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security) SAMLã¨ã¯ä½•ã‹ï¼Ÿ ä½•ã‹ã‚’è³¼å…¥ã—ãŸã„å ´åˆã€ã‚ã‚‹ã‚µã‚¤ãƒˆã§ãƒ¦ãƒ¼ã‚¶åã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç‰ã®æƒ…å ±ã‚’å…¥åŠ›ã—ã¦ã‚µã‚¤ãƒ³ã‚ªãƒ³ã—ã¦ã‚‚ã€åˆ¥ã®ã‚µã‚¤ãƒˆã«ã‚µã‚¤ãƒ³ã‚ªãƒ³ã™ã‚‹ã¨ãã«ã¯æ–°ãŸã«å…¥åŠ›ã—ç›´ã•ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ä¸€åº¦ã‚ã‚‹ã‚µã‚¤ãƒˆã«ã‚µã‚¤ãƒ³ã‚ªãƒ³ã™ã‚Œã°ä»–ã®ã‚µã‚¤ãƒˆã§ã‚‚å…¥åŠ›ä½œæ¥ãªã—ã§åˆ©ç”¨ã§ãã‚‹ã¨ãƒ¦ãƒ¼ã‚¶ã«ã¨ã£ã¦ã¯ã¨ã¦
kopug 2006/09/16
Webèªè¨¼

secure

linux
ãƒªãƒ³ã‚¯
ã‚±ãƒ«ãƒ™ãƒã‚¹èªè¨¼
ãƒã‚¤ãƒ³ãƒˆ â—ã‚±ãƒ«ãƒ™ãƒã‚¹ï¼ˆKerberosï¼‰èªè¨¼ã¨ã¯ï¼Œè¤‡æ•°ã®ã‚µãƒ¼ãƒãƒ¼ã¨è¤‡æ•°ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®èªè¨¼æƒ…å ±ã‚’ä¸€å…ƒç®¡ç†ã™ã‚‹ã®ã«é©ã—ãŸã—ãã¿ã§ã‚ã‚‹ã€‚ã‚„ã‚Šã¨ã‚Šã™ã‚‹é€šä¿¡ã‚’æš—å·åŒ–ã™ã‚‹æ©Ÿèƒ½ã‚‚ã‚ã‚‹ â—ã‚±ãƒ«ãƒ™ãƒã‚¹èªè¨¼ã‚’å®Ÿè£…ã™ã‚‹ã«ã¯ï¼Œã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆé–“ã§æ™‚åˆ»åŒæœŸãŒå¿…è¦ â—ã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ã¨ã¯ï¼Œ1å›žã®èªè¨¼ã§è¤‡æ•°ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã—ãã¿ã®ã“ã¨ ã“ã‚Œã¾ã§ã«ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ç’°å¢ƒã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹èªè¨¼æ–¹å¼ã‚’è¦‹ã¦ãã¾ã—ãŸãŒï¼Œä»Šå›žã¯ã‚±ãƒ«ãƒ™ãƒã‚¹èªè¨¼ã¨ã„ã†æŠ€è¡“ã‚’å¦ã³ã¾ã™ã€‚ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’ä¸€å…ƒç®¡ç†ã—ï¼Œä¸€åº¦å—ã‘ãŸèªè¨¼æƒ…å ±ã‚’ã»ã‹ã®ã‚µãƒ¼ãƒãƒ¼ã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ãã«ã‚‚å¼•ãç¶™ã’ã‚‹ã‚ˆã†ã«ã™ã‚‹ä»•çµ„ã¿ã§ã™ã€‚ç¤¾å†…ãƒãƒƒãƒˆãªã©ã«å¤šæ•°ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã‚µãƒ¼ãƒãƒ¼ãŒå˜åœ¨ã—ï¼Œå€‹ã€…ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯åŒæ™‚ã«è¤‡æ•°å°ã®ã‚µãƒ¼ãƒãƒ¼ã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹å¿…è¦ãŒã‚ã‚‹æ™‚ã«å¨åŠ›ã‚’ç™ºæ®ã—ã¾ã™ã€‚ PPPã‚„RADIUSã¨ã¯é•ã† å‰å›žã¾ã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ç’°å¢ƒã§åˆ©ç”¨ã•ã‚Œã‚‹èªè¨¼æ–¹å¼ã‚’ã„ãã¤ã‹ç´¹ä»‹ã—ã¦ãã¾ã—ãŸã€‚ã“ã“ã§ç°¡å˜ã«æ•´
kopug 2006/09/16
linux

Webèªè¨¼

secure
ãƒªãƒ³ã‚¯
LDAPï¼ˆLightweight Directory Access Protocolï¼‰
kopug 2006/09/16
Webèªè¨¼

linux

secure
ãƒªãƒ³ã‚¯
ï¼ ITï¼šLDAPã«ã‚ˆã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ä¸€å…ƒç®¡ç†ï¼ˆ1/3ï¼‰
ä»Šå›žã¯ã€ã“ã®3ã¤ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä¸€å…ƒç®¡ç†ã™ã‚‹ãŸã‚ã«ã€ŒLDAPã‚µãƒ¼ãƒã€ã‚’åˆ©ç”¨ã—ã¾ã™ã€‚ã¤ã¾ã‚Šã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŠã‚ˆã³ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’LDAPã«æ ¼ç´ã—ã€ã™ã¹ã¦ã®ã‚µãƒ¼ãƒ“ã‚¹ãŒåŒã˜ãƒ‡ãƒ¼ã‚¿ã‚’å‚ç…§ã™ã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚ ãŸã ã—ã€ã“ã“ã§1ã¤è€ƒæ…®ã™ã¹ãç‚¹ãŒã‚ã‚Šã¾ã™ã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯ã€å…ƒã®ãƒ‡ãƒ¼ã‚¿ã‚’å‰²ã‚Šå‡ºã›ãªã„ã‚ˆã†ãªä»•çµ„ã¿ã§æš—å·åŒ–ã™ã‚‹ã®ãŒæ™®é€šã§ã™ã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒæ£ã—ã„ã‹ã©ã†ã‹ã‚’ç¢ºèªã™ã‚‹ã«ã¯ã€åŒã˜æ–¹æ³•ã§æš—å·åŒ–ã—ãŸãƒ‡ãƒ¼ã‚¿åŒå£«ã‚’æ¯”è¼ƒã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã—ã‹ã—ã€Linuxã¨Windowsã§ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æš—å·æ–¹æ³•ãŒç•°ãªã‚‹ãŸã‚ã€å…¥åŠ›ã—ãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒåŒã˜ã§ã‚‚æš—å·åŒ–ã•ã‚ŒãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ‡ãƒ¼ã‚¿ã‚’å¾Œã§æ¯”è¼ƒã™ã‚‹ã“ã¨ã¯ä¸å¯èƒ½ã§ã™ã€‚ãã®ãŸã‚ã€è¤‡æ•°ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ‡ãƒ¼ã‚¿ã‚’LDAPã‚µãƒ¼ãƒã®1äººã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å±žæ€§ã¨ã—ã¦ã¾ã¨ã‚ãŸã¨ã—ã¦ã‚‚ã€ä¸€æ–¹ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ï¼ˆä¾‹ãˆã°Windowsï¼‰ã«å¯¾ã—ã¦å¤‰æ›´ãŒã‚ã£ãŸå ´åˆã«ã¯ã€ä»–æ–¹ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ï¼ˆä¾‹ãˆã°Linuxï¼‰ã‚‚å¤‰æ›´ã•ã‚Œã‚‹ã‚ˆã†ãªä»•çµ„ã¿ãŒå¿…
kopug 2006/09/16
Webèªè¨¼

@IT

apache

linux
ãƒªãƒ³ã‚¯
http://info.kogaku.kyoto-u.ac.jp/wiki/?Service/LDAP0.5/120000
kopug 2006/09/16
Webèªè¨¼
ãƒªãƒ³ã‚¯
1