SDT Tech Briefing06 01 07

Information about SDT Tech Briefing06 01 07

Published on June 19, 2007

Author: Mentor

Source: authorstream.com

Content

Stanford Desktop Tools:  Stanford Desktop Tools Making the Move from PC-Leland to Stanford Desktop Tools Ammy Hill, IT Services Campus Readiness Specialist Jay Stamps, IT Services Desktop Systems Software Developer June 1st 2007 Tech Briefing, Turing Auditorium Moving Away From PC-Leland:  Moving Away From PC-Leland PC-Leland was created when no tool available met Stanford needs Kerberos authentication is widely used today Minimally customized standards-based open source solutions are a better alternative to home-grown software Stanford Desktop Tools Replaces needed functionality Automatically updates Essential Stanford Software Does not support Kerberos 4 Why We’re Leaving Kerberos 4 Behind:  Why We’re Leaving Kerberos 4 Behind Kerberos 4 is no longer a widely-used technology Kerberos 4 is vulnerable to offline brute force attacks that can break individual accounts As Kerberos 4 becomes a less supported technology, we risk not being able to speedily patch our infrastructure We maintain a set of Stanford-specific patches to both Kerberos 4 and Kerberos 5, which must be updated with each new release of either version of Kerberos we intend to deploy Our mixed K4 and K5 infrastructure prevents us from using many of the features of Kerberos. Improvements to Stanford Desktop Tools:  Improvements to Stanford Desktop Tools Stanford Desktop Tools for Windows version 1.3.5 was released on May 22, 2007. Features include: New version of Network Identity Manager (NIM) Simpler log in screen Login screen pops up in focus Login screen shows up in task bar when waiting for entry Support for Windows Vista Stanford Desktop Tools: Installation:  Stanford Desktop Tools: Installation Before you install, upgrade Sundial to Oracle Calendar version 10 PC-Leland will be automatically uninstalled when SDT is installed Kerberos for Windows (including Network Identity Manager) is installed and configured with SDT BigFix and Stanford OpenAFS can be installed from the Stanford Desktop Tools interface Slide6:  Slide7:  Slide8:  Slide9:  Slide10:  Slide11:  Slide12:  Slide13:  Slide14:  Slide15:  Slide16:  Slide17:  Slide18:  Slide19:  Slide20:  Slide21:  Slide22:  Slide23:  Slide24:  Slide25:  Slide26:  Slide27:  Slide28:  Slide29:  Slide30:  Slide31:  After SDT Installation is Complete:  After SDT Installation is Complete PC-Leland is replaced by Stanford Desktop Tools and Network Identity Manager Click on the S icon to access Stanford Desktop Tools Slide33:  Slide34:  Slide35:  Slide36:  Slide37:  Slide38:  Slide39:  Slide40:  Slide41:  Network Identity Manager:  Network Identity Manager NIM’s New Credentials dialog box replaces PC-Leland’s log-on screen When login is required, the New Credentials box appears. A task bar item also appears (just in case something stole focus from the login screen) Stanford Desktop Tools: Authentication:  Stanford Desktop Tools: Authentication Windows’ native Kerberos has to be supplemented The SDT installer also installs MIT Kerberos for Windows, including Network Identity Manager (NIM), and configures it for use at Stanford Right-click on the SDT system tray icon for easy access to an authentication dialog box, Kerberos ticket status information, optionally AFS tools, etc. Stanford Desktop Tools: OpenAFS:  Stanford Desktop Tools: OpenAFS If You Install OpenAFS, SDT Provides Quick Access The SDT system tray or dock icon menu lets you launch the AFS Controller or mount recently accessed AFS volumes from a list OpenAFS provides context menus for both Mac OS and Windows If you right-click or ctrl-click an AFS directory in the Mac’s Finder or in Windows Explorer, there will be an AFS menu item that you can use to view or set ACLs, etc OpenAFS, as the name suggests, is an open source project The GUI AFS Controller has been developed at Stanford We have a good working relationship with the OpenAFS project team, but can only influence, not control, the direction of future development Stanford Desktop Tools: Single Sign-on:  Stanford Desktop Tools: Single Sign-on What Is Single Sign-on? A single log-in gains you access to multiple resources, such as web applications, that require you to identify, or 'authenticate,' yourself The 2-way cross-realm trust between Stanford’s Windows Kerberos realm and the *nix-based MIT Kerberos 5 realm is now complete Some web applications (Axess, e.g.) still require a separate log-on SDT Makes Single Sign-on Easier—but… At present only two groups of users will benefit Mac users, especially those whose local account’s short name and password match their SUNet ID and password exactly Windows users whose PCs are joined to the Stanford Windows Infrastructure and who log on to their WIN account The SDT for Windows installer configures both IE and Firefox for Stanford single sign-on Go to https://weblogin.stanford.edu/settings to Test and Enable Single Sign-On Slide46:  Slide47:  Slide48:  On the Horizon:  On the Horizon Many Improvements to SDT Are Coming The ability to install and update site-licensed software that requires user authentication for download NIM will be able to change SUNet ID passwords A new user-interface for SDT in the fall More flexible, user-configurable options for scheduled or unscheduled software updating Improved, more detailed logging Moving to Stanford Desktop Tools:  Moving to Stanford Desktop Tools As of April 2008, PC-Leland and MacLeland will be obsolete Encourage the Computer Users You Support to Adopt SDT Sooner Rather Than Later When they get a new computer After a big annual deadline When other upgrades are happening SDT Is Self-Updating: To Have It Is Always to Have the Latest Version! Tech Express Talks on SDT are scheduled quarterly in July, October, January, and March Encourage nervous users to attend and learn more before switching Frequently Asked Questions:  Frequently Asked Questions Frequently Asked Questions and Their Answers Are Now Available on the Stanford IT Services FAQ Site: http://faq.stanford.edu Links for More Information:  Links for More Information SDT Documentation on the ESS Site http://www.stanford.edu/services/ess/pc/docs/sdt/index.html http://www.stanford.edu/services/ess/mac/docs/sdt/index.html SDT FAQ Pages https://tools.stanford.edu/faq/index.php?action=showandamp;cat=23 https://tools.stanford.edu/faq/index.php?action=showandamp;cat=24 SDT Release Notes http://www.stanford.edu/dept/its/support/sdt/docs/release_notes.txt MIT Kerberos http://web.mit.edu/Kerberos OpenAFS Project http://www.openafs.org Stanford AFS Software Download and Documentation http://www.stanford.edu/services/openafs/index.html What additional questions do you have? :  What additional questions do you have? Contact Information:  Contact Information For most questions, we recommend contacting HelpSU: http://helpsu.stanford.edu or 5-HELP For questions about the K4 to K5 project plan, contact Ammy Hill [email protected]

Related presentations


Other presentations created by Mentor

Johari Window
30. 10. 2007
0 views

Johari Window

ConsolServiceCorp
28. 04. 2008
0 views

ConsolServiceCorp

astwood
22. 04. 2008
0 views

astwood

Eco24 16
17. 04. 2008
0 views

Eco24 16

wipo smes uln 07 www 89155
16. 04. 2008
0 views

wipo smes uln 07 www 89155

taiex ghymers rijen2006 ppt
14. 04. 2008
0 views

taiex ghymers rijen2006 ppt

e future
13. 04. 2008
0 views

e future

sapir 12 2007
10. 04. 2008
0 views

sapir 12 2007

cbm47 441
09. 04. 2008
0 views

cbm47 441

Ocean
07. 04. 2008
0 views

Ocean

Closing Plenary PERUGIA
30. 03. 2008
0 views

Closing Plenary PERUGIA

The Ming and Qing Dynasties
25. 03. 2008
0 views

The Ming and Qing Dynasties

fables and morals
14. 09. 2007
0 views

fables and morals

Temperate Woodland
14. 09. 2007
0 views

Temperate Woodland

OB IDDRI 200104
12. 10. 2007
0 views

OB IDDRI 200104

NacTem2007XuUszkoreit
15. 10. 2007
0 views

NacTem2007XuUszkoreit

Leduff course 1
16. 10. 2007
0 views

Leduff course 1

WIM
16. 10. 2007
0 views

WIM

Shakespeare Presentation
19. 10. 2007
0 views

Shakespeare Presentation

Puska
07. 09. 2007
0 views

Puska

Mystery Animal
14. 09. 2007
0 views

Mystery Animal

CREATION to EVOLUTION
14. 09. 2007
0 views

CREATION to EVOLUTION

nw pall care bad news
29. 09. 2007
0 views

nw pall care bad news

SUPPLY LCS MDS
22. 10. 2007
0 views

SUPPLY LCS MDS

PRESENTACION GTI Malaga
24. 10. 2007
0 views

PRESENTACION GTI Malaga

ethics health disparities
29. 10. 2007
0 views

ethics health disparities

halt
23. 10. 2007
0 views

halt

BTL Fuels
16. 11. 2007
0 views

BTL Fuels

2005 CeladrinLecture
17. 11. 2007
0 views

2005 CeladrinLecture

newsletters
05. 10. 2007
0 views

newsletters

Moscow Presentation
23. 11. 2007
0 views

Moscow Presentation

6 338 Progress Presentation
28. 12. 2007
0 views

6 338 Progress Presentation

6 01 T P Analog Systems
03. 01. 2008
0 views

6 01 T P Analog Systems

Prepare Yourself
04. 10. 2007
0 views

Prepare Yourself

idruspresentation
07. 01. 2008
0 views

idruspresentation

8p
24. 10. 2007
0 views

8p

stewart
08. 10. 2007
0 views

stewart

lizhitang
11. 10. 2007
0 views

lizhitang

Inter scholastic Sports
09. 07. 2007
0 views

Inter scholastic Sports

High School Athletics
09. 07. 2007
0 views

High School Athletics

4479
09. 07. 2007
0 views

4479

42 sp101
09. 07. 2007
0 views

42 sp101

2005 Flag Football Clinic
09. 07. 2007
0 views

2005 Flag Football Clinic

lec TC strain gauge
16. 02. 2008
0 views

lec TC strain gauge

SNAP Propulsion
07. 11. 2007
0 views

SNAP Propulsion

Legend Powerpoint
28. 02. 2008
0 views

Legend Powerpoint

lect10
14. 09. 2007
0 views

lect10

bec
15. 10. 2007
0 views

bec

APS NW Poster
12. 03. 2008
0 views

APS NW Poster

UofWfAC06
10. 03. 2008
0 views

UofWfAC06

DrFlock
09. 07. 2007
0 views

DrFlock

health sports
09. 07. 2007
0 views

health sports

ASTR 2006 Presentation Template
29. 10. 2007
0 views

ASTR 2006 Presentation Template

4 DSM Design Guide
02. 01. 2008
0 views

4 DSM Design Guide

LiuhtoBaltic04
26. 10. 2007
0 views

LiuhtoBaltic04

STKU5 Larson
19. 06. 2007
0 views

STKU5 Larson

standard email
19. 06. 2007
0 views

standard email

Software Versions
19. 06. 2007
0 views

Software Versions

SDT Tech Briefing
19. 06. 2007
0 views

SDT Tech Briefing

refresh cycle07
19. 06. 2007
0 views

refresh cycle07

Q2 FY07 Slides
19. 06. 2007
0 views

Q2 FY07 Slides

Q1 FY07 Slides
19. 06. 2007
0 views

Q1 FY07 Slides

psj 0 6 yukai e
19. 06. 2007
0 views

psj 0 6 yukai e

psj 06 schoenfeld e
19. 06. 2007
0 views

psj 06 schoenfeld e

PRI050 WH06
19. 06. 2007
0 views

PRI050 WH06

portal
19. 06. 2007
0 views

portal

usc csci 530 f06 l13
19. 06. 2007
0 views

usc csci 530 f06 l13

BOSC Markel
14. 09. 2007
0 views

BOSC Markel

PresentationBA avril06
23. 10. 2007
0 views

PresentationBA avril06

volvo 09
29. 02. 2008
0 views

volvo 09

qz qc mrt ridership
26. 03. 2008
0 views

qz qc mrt ridership

3a 3 Hellsten
14. 09. 2007
0 views

3a 3 Hellsten

1 IARU DoAST Presentation
09. 07. 2007
0 views

1 IARU DoAST Presentation

sicily03
19. 06. 2007
0 views

sicily03

norway
14. 12. 2007
0 views

norway

1999KC os tri
09. 07. 2007
0 views

1999KC os tri

Virgo Sigrav2004 SF
15. 11. 2007
0 views

Virgo Sigrav2004 SF

RICyT Innocom
25. 10. 2007
0 views

RICyT Innocom

Telekomunikacja Polska 1
14. 09. 2007
0 views

Telekomunikacja Polska 1

sas06 das
19. 06. 2007
0 views

sas06 das

parallel session 1
07. 09. 2007
0 views

parallel session 1

Kestrel PI Presentation
30. 10. 2007
0 views

Kestrel PI Presentation

Ch10rev 06
19. 02. 2008
0 views

Ch10rev 06

DemoStudents2005
03. 10. 2007
0 views

DemoStudents2005

interiorscapeplants2
07. 12. 2007
0 views

interiorscapeplants2

PRS328 Schechter
19. 06. 2007
0 views

PRS328 Schechter

ASEAN China
10. 10. 2007
0 views

ASEAN China

tpa 6040a4 overview
19. 06. 2007
0 views

tpa 6040a4 overview

2006 AHM Dissemination Update
17. 10. 2007
0 views

2006 AHM Dissemination Update

Bhat
21. 11. 2007
0 views

Bhat

Aho ealta2006
07. 09. 2007
0 views

Aho ealta2006

Fairness
14. 09. 2007
0 views

Fairness

Ch22
15. 11. 2007
0 views

Ch22

Ready Boost
19. 06. 2007
0 views

Ready Boost

05 asphalt institute
26. 02. 2008
0 views

05 asphalt institute

LightGina
20. 03. 2008
0 views

LightGina

Working Water Conaway
28. 12. 2007
0 views

Working Water Conaway

HERDING101Presentati on
19. 11. 2007
0 views

HERDING101Presentati on

currentshow
02. 11. 2007
0 views

currentshow

flowes class4
11. 12. 2007
0 views

flowes class4