Title 大学の情報システムを認証から俯瞰する : 情報サービスを こわれもの にしないために Author(s) 上田, 浩 Citation (2015) Issue Date 2015-07-29 URL http://hdl.handle.net/2433/198885 Right Type Conference Paper Textversion author Kyoto University
AXIOLE OmniSwitch/OmniAccess Microsoft Shibboleth VPN 802.11n LAN MAC VLAN Microsoft Office365 Shibboleth Microsoft 1 LAN 2000 [1, 2, 3] LAN LAN [4, 5] As Is @UEDA Hiroshi, uep@media.kyoto-u.ac.jp
/ LAN Shibboleth VPN 802.11 LAN MAC VLAN Microsoft 2 3 Office365 Education Shibboleth 4 5 6 2 2.1 2006 7 2007 4 2007 4 ID 2.2 AXIOLE ID ID ID ID ID ID ID ( ) Web ( 1) ID AXIOLE ( ) ID ID ID PDF ( 2) IMAP Moodle 4 AXIOLE ( 3)[6] 2007 4 60% AXIOLE 4,000 2
/ LAN 4 1 2007 2 2 2008 3 PPTP VPN AXIOLE LDAP VPN e [7, 8] LAN 2008 5 802.11n LAN [6] ( 4) LAN Aruba Networks OEM Alcatel-Lucent OmniAccess *1 2.3 OmniSwitch /MAC 2009 4 ( ) 2008 2 3 2007 4 *1 Aruba 1 OEM Alcatel- Lucent 3 OmniAccess 3
/ LAN *3 VLAN 5 e 6 2009 4 ( ) ( 5) LAN (FTTD) ID 2009 4 4 *2 Google Apps ( 6) OmniSwith 9800 OS CentOS [9] Google Apps 2013 4 [10] 2009 4, FTTD (Fiber to the Desk) LAN 1Gpbs FTTD 9 Alcatel-Lucent OmniSwitch 9800 3 LAN 2 FTTD VLAN LAN 10 MAC MAC VLAN *3 *2 EXGEN Networks LDAP Manager 4
/ LAN 7 : 9 FTTD : 1Gbps 8 : 10 ( ) Radius ( ):670 SFP 20G MAC VLAN MAC VLAN 11 Radius MAC Radius MAC VLAN VLAN Radius FreeRADIUS MySQL MAC MAC ( 12) MySQL Radius MySQL 5
/ LAN 11 MAC VLAN : MAC / ID 12 MAC : FTTD DHCP UTP PC LAN MAC PC Web Web Web FTTD 2010 3 23 1Gbps NAS [11] *4 *4 ( ) 3 3.1 Live@edu/Office365 Education 2011 9 Microsoft [12] KUMOI(Kyoto University Mail cloud Interface) 2011 12 Live@edu 2014 8 Office365 Education 2013 Live@edu Office365 1 Office365 Office 6
/ LAN 1 KUMOI Live@edu Office365(Wave14) kyodai.hanako.xxx@st.kyoto-u.ac.jp ID Windows Live Microsoft Online Services SSO Toolkit Shibboleth, ADFS Exchange Online Exchenge Server 2010 10G/ SkyDrive SharePoint Online Windows Messenger Lync Online SLA 99.9% A2 *5. / Office365 ID Windws Live ID Microsoft Online Services ID Windows Live ID SSO Toolkit Windows Live ID Office365 Live@edu Office365 Web UI Office365 Exchange Online *5 Office A3 A4 Office365 SLA Service Level Agreement SLA http://office.microsoft.com/ja-jp/ academic/fx103045755.aspx 13 15 Lync Online Shibboleth SharePoint Web Office365 Shibboleth Web Shibboleth KUMOI [13, 14] Office365 Shibboleth Microsoft Shibboleth IdP ( 13, 14) 2012 2013 8 19 26 1 Office365 Shibboleth SP Live@edu IMAP/SMTP 7
/ LAN 16 KUMOI 14 Outlook Web App WebSSO 8 KUMOI OWA = OWA ECS-ID 3.2 Office365 Education Shibboleth Office365 Education Shibboleth 15 Office365 *6 Shibboleth IMAP/SMTP Live@edu Office365 Education KUMOI 2011 12 2015 3?? 16 KUMOI 2012 4 2015 3 *6 Exchange Online Active Directory GAL AD Active Directory (2012 3 5 2013 Office365 ) Live ID Microsoft KUMOI ( 17 2013 4 1 Office365 ) Office365 8
/ LAN 認証失敗 ImmutableId, ユーザ名, メールアドレス 1. 認証リクエスト ECS- ID@st.kyoto- u.ac.jp 6. 認証リクエスト とユーザ名の 比較 5. ユーザ名の 比較 統合認証基盤 フェデレーションドメイン 2. IdP へ Basic 認証 ECS- ID とパスワードを送信 統合 LDAP 17 Office365 KUMOI Microsoft Live ID *7 Office365 2013 9 Wave15 IMAP/SMTP ID IMAP/SMTP 18 2013 12 7 IMAP UPN (!) Wave15 IMAP Office365 AD UserPrincipalName UPN ID@st.kyotou.ac.jp 5 *7 Wave15 Live@edu Office365 Wave14 Wave15 ECS- ID, UPN, メールアドレス, ライセンス情報, パスワード情報 AD の ObjectGUID を ImmutableID として同期 18 O365 用システム フォレスト構成 AD AD Directory Sync ライセンス同期ツール 3. ECS- ID とパスワード による認証 4. UPN の取得 Wave15 IMAP/SMTP 6 6 IMAP OWA Exchange Server UPN 2014 1 8 2014 1 2 Office 3.1 Office365 Office PC Office Office365 KUMOI Office365 9
/ LAN 19 Student Advantage Microsoft Office 2015 3 KUMOI Microsoft Office 19 EES/OVE-ES Student Advantage OVE-ES Microsoft Student Advantage Microsoft Office365 Education Microsoft *8 Education Windows OS UNIX Microsoft Shibboleth Live@edu [15] *8 Office365 2008 Microsoft Online Services 10
/ LAN [16] Office Microsoft 4 2015 LAN VPN Microsoft SINET Office365 Shibboleth Microsoft Microsoft Microsoft 5 FTTD VLAN Microsoft Office365 Shibboleth LAN Office365 Shibboleth ( ID/ LDAP ) 11
/ LAN Office365 Shibboleth 6 Shibboleth VPN 802.11n LAN MAC VLAN Microsoft Office365 Shibboleth Microsoft VPN Google Apps Microsoft Office365 Shibboleth FTTD NTT KUMOI Office365 Education ML *9 [1],,,, No. 10, pp. 55 62 (2006). [2],,,,,, Vol. 51, No. 3, pp. 1031 1039 (2010). [3],,,,, Shibboleth,, Vol. 52, No. 2, pp. 703 713 (2011). [4],,,,, KUINS-III ( ),. B,, Vol. 86, No. 8, pp. 1494 1501 (2003). [5],,,, *9 https://groups.google.com/forum/#!forum/ o365edu 12
/ LAN,,, Vol. 53, No. 3, pp. 958 968 (2012). [6] NetSpring AX- IOLE Vol.01, http://www.axiole.jp/casestudy/ jirei1.html. [7],,,, [ ] : e,, 110, pp. 135 138 (2011). [8],,, [ ] Moodle e,, Vol. 6, No. 2, pp. 97 104 (2015). [9],,,,,,,,, 21, pp. D2 5 (2009). [10] Google Apps/Gmail,, :, pp. 3 18 (2009). [11],,,,,,,,,,, No. 14, pp. 56 63 (2010). [12],,,,,,,,, ICT 2011, pp. 371 373 (2011). [13] Shibboleth Office365 Education, 7, pp. 79 88 (2013). [14],,,, Office365, ICT 2013, pp. W3E 6 (2013). [15],,, Office365 Education :,, CLE, Vol. 2015-CLE-16, No. 9, pp. 1 8 (2015). [16] Office365 Education,, Vol. 113, No. 442, pp. 115 120 (2014). 13