Difference between revisions of "Opplet"

From CNM Wiki
Jump to: navigation, search
Line 1: Line 1:
[[Opplet]] (Russian: ''[[Оплёт]]''; hereinafter, the ''Software'') is [[user management software]], which is integrated through [[API]] with authorization and authentication systems. [[Opplet.net]] is the ''Software's'' instance that supports [[CNM Cloud]].
+
[[Opplet]] (Russian: ''[[Оплёт]]''; hereinafter, the ''Software'') is [[user management software]], which is integrated through [[API]] with authorization and authentication systems. [[Opplet.net]] is the ''Software's'' [[user interface]] ([[user interface|UI]]) that is supported by [[CNM Cloud]].
  
==OpenStack==
+
 
The ''Software'' shall be integrated with the native [[OpenStack Keystone]] authorization system of [[OpenStack]] using the output on the [[LDAP]] protocol.<blockquote>Keystone is an OpenStack's Identity API. It supports LDAP, OAuth, OpenID Connect, SAML and SQL. ... [Keystone] does not actually implement any user-management functions; rather, it provides plug-in interfaces so that organizations can leverage their current authentication services.</blockquote>Currently, the programming interface of Opplet is [[simpleSAMLphp]], but, if required, it will be replaced with [[LDAP]].
+
==Integration==
 +
 
 +
on the issue, this is a set of improvements:
 +
1. remaking the LDAP authorization plugin so that it works on a wiki older than version 1.27
 +
2. API wiki plugin that will work out information from braids to change user rights (add / remove to / from group)
 +
3. module braid for working with a sudl, which processes information transmitted by the muddle and adds / removes braid and LDAP from / to the group (already developed, requires testing)
 +
4. module braid for working with a wiki, which will give data to the wiki to change rights (already developed, requires testing)
 +
5. plugin muddle for transmitting data about the end of the course in braid (already developed, being tested)
 +
but most importantly, I don’t touch the core of systems anywhere, that is, we can update without problems.
 +
 
 +
as a result, we use the Moodle plugin for communication, two Wiki plugins and two braided modules (which use the module for communicating with LDAP)
 +
It sounds quite difficult, but it should work stably, for verification I am also going to make a rights verification module in different systems.
 +
 
 +
 
 +
 
 +
==OpenStack (promising extension)==
 +
The ''Software'' shall be integrated with the native [[OpenStack Keystone]] authorization system of [[OpenStack]] using the output on the [[LDAP]] protocol.<blockquote>Keystone is an OpenStack's Identity API. It supports LDAP, OAuth, OpenID Connect, SAML and SQL. ... [Keystone] does not actually implement any user-management functions; rather, it provides plug-in interfaces so that organizations can leverage their current authentication services.</blockquote>

Revision as of 18:37, 25 December 2018

Opplet (Russian: Оплёт; hereinafter, the Software) is user management software, which is integrated through API with authorization and authentication systems. Opplet.net is the Software's user interface (UI) that is supported by CNM Cloud.


Integration

on the issue, this is a set of improvements: 1. remaking the LDAP authorization plugin so that it works on a wiki older than version 1.27 2. API wiki plugin that will work out information from braids to change user rights (add / remove to / from group) 3. module braid for working with a sudl, which processes information transmitted by the muddle and adds / removes braid and LDAP from / to the group (already developed, requires testing) 4. module braid for working with a wiki, which will give data to the wiki to change rights (already developed, requires testing) 5. plugin muddle for transmitting data about the end of the course in braid (already developed, being tested) but most importantly, I don’t touch the core of systems anywhere, that is, we can update without problems.

as a result, we use the Moodle plugin for communication, two Wiki plugins and two braided modules (which use the module for communicating with LDAP) It sounds quite difficult, but it should work stably, for verification I am also going to make a rights verification module in different systems.


OpenStack (promising extension)

The Software shall be integrated with the native OpenStack Keystone authorization system of OpenStack using the output on the LDAP protocol.

Keystone is an OpenStack's Identity API. It supports LDAP, OAuth, OpenID Connect, SAML and SQL. ... [Keystone] does not actually implement any user-management functions; rather, it provides plug-in interfaces so that organizations can leverage their current authentication services.