Search

Elearning and web based information systems is a means to communicate and exchange information for academic purposes. Nowadays lightweight directory access protocol (LDAP) is a state of the art method of choice. With LDAP technologies user only need one username and password to access to multiple web based application, The problem is if the user wanted to do autentification said user had to input their credentials over and over again for each application. To solve that problem single sign on mechanism (SSO) is invented. With SSO user only need login once and they got all the same credentials with them to all intergrated application wthin the campus. To implement the SSO we use Central authentication service (CAS) as a authentifiation central within LDAP structure as a user management. In this reseach we see that single sign on (SSO) system that intergrated into student management system, E-Learning system and Internal blog system both use of database based system or even LDAP based system.

This paper presents an approach for persistent data backends for OPC UA namespaces. OPC UA as M2M protocol is used in various manufacturing machines and provides data access to e.g. sensors and setpoints. The central and persistent data storage for e.g. data-mining and condition-monitoring services in information technology infrastructures is challenging. Therefore, a holistic approach for storing OPC UA information in lightweight directory access protocol server is presented including a model for storing namespaces, information models and values in LDAP trees of scalable enterprise infrastructures to fulfil manufacturing and IT requirements in the context of Industry 4.0.

Unprecedentedly, a massive number of devices are getting connected to the network in the new era of the Internet of Things. For the discovery, authentication,, secure access and management of these Internet of Things devices, an Internet of Things directory service is needed. Its responsibility would be to store and provide the attributes of Internet of Things devices, such as identifier, location, owner's name, generated data types, and security parameters. In this article, we present the architectural design of an Internet of Things directory service that is capable of storing a huge number of records and providing functions for their fast lookup (latency of a few milliseconds) and dynamic update (latency of a few seconds), while fully complying with owner-centric security and privacy policies. To demonstrate its feasibility and overall quality, we also discuss the experimental results obtained from a proof-of-concept implementation of the record database and related communication interfaces.

In this chapter, we cover a series of use cases for specific configurations of MongoDB in production, such as hybrid on-prem/cloud clusters, low-latency applications, using an LDAP pool for authentication, and how to store large binary files.

Context is major source of communication, where information is gathered easily from user context due to the progress of smart and context aware systems. Even, service directory also supports the systems to response the requests, sent through client. In this paper, the authors overviews context aware systems, their sensing capabilities in location or beyond location along with COIVA (a context aware system). Eight discovery protocols along with their functionalities (such as DEAPspace, DNS-SD, JXTA, RDP, LDAP, CORBA Trader, UDDI and Superstring) are discussed and compared to evaluate the performance and efficiency of system. In addition, six middleware (such as CAMPUS, CASF, SeCoMan, CoCaMAAL, BDCaM, and FlexRFID) are compared to evaluate factors (such as Architectural style, Context abstraction/Reasoning level, Context awareness level, Contextual adaptation approaches, Decision making, and Programming model). The authors further categorized them into sub categories discussed in Section 4 and named CoCaMAAL as better middleware as compared to others.

Attribute-based access control (ABAC) is being widely adopted due to its flexibility and universality in capturing authorizations in terms of the properties (attributes) of users and resources. However, specifying ABAC policies is a complex task due to the variety of such attributes. Moreover, migrating an access control system adopting a low-level model to ABAC can be challenging. An approach for generating ABAC policies is to learn them from data, namely from logs of historical access requests and their corresponding decisions. This paper proposes a novel framework for learning ABAC policies from data. The framework, referred to as Polisma, combines data mining, statistical, and machine learning techniques, capitalizing on potential context information obtained from external sources (e.g., LDAP directories) to enhance the learning process. The approach is evaluated empirically using two datasets (real and synthetic). Experimental results show that Polisma is able to generate ABAC policies that accurately control access requests and outperforms existing approaches.

Joomla is a free and open-source content management system (CMS) for publishing web content. It is the second most widely used CMS in the world. LDAP is an open standard which is commonly used to provide a central place for storing users and users’ data. In this article we propose approach for integrating Joomla, with OpenLDAP, based on usage of the Joomla LDAP Authentication plugin and JMapMyLDAP extension.

In today’s world for each and every one, the data is very important factor or data plays a very important role. The concept of computer data is coming from the eighteenth century, and in nineteenth, computer data is very important concept. In nineteenth most of the devices are having the data storage capability. So, this data storage capability leads the computer to invent various protocols. The protocol is the special set of rules that are used to access the data, to exchange the data and to communicate between various notes of computer. Mainly data is stored in databases or in directory servers in computer. The protocols are also used to compress the data, to notify the data sending device that data sending is over and to notify the receiving data device that data receiving is over. Depending upon the operation, protocols are classified into various types. Protocols are fallen under the Open Systems Interconnection (OSI) models. It consists of various layers and various protocols. Depending upon the use and application, protocols are used.

Comparing two or more routes on Internet is difficult owing to the variability of the measurements resulting from the different routes or use conditions. With current tools such as SDN[1], it is important to determine with certainty which the best route between a user and an internet service. This will be achieved with fast measurements which do not affect the operation of the network. With trends such as IoT, the best routes can be identified based on latency and not just on the jumps between autonomous systems, fact that optimizes data traffic in a specific way whether it is IPv4 or IPv6. As time elapses, it becomes more important to have a perfect setting for the LAN, which means optimal DNS, LDAP Servers appropriate number, etc. Thats why we propose a precise method that contemplates every possible variation of data, thus making a comparison by means of the use of confidence limits.

Wireless network is a network utilizing radio waves that propagate openly. This network requires security to simplify the process by using user Authentication. One of technology that could be used in order to make it safer is a Lightweight Directory Access Protocol (LDAP) and Remote Authentication Dila In User Service (RADIUS). Computer Systems Engineering Department is one of the study program in the Faculty of Engineering, University of Diponegoro that reserve the internet service everyday for students need. However, internet wireless network in this department is not yet safe enough,for the necessary to secure it’s need creating a security system with LDAP and RADIUS.The results of this study is a network authentication server using OpenLDAP and FreeRadius Hotspot that will be integrated with an account of Academic Information System, which is implemented on Prodi Computer Systems Engineering Department of the University of Diponegoro.

In order to overcome the problems existing in the current internet of things information integration model, lightweight information integration model of IOT based on VMware cluster technology was proposed. This model designs the standard coded identification for each node in the internet of things, constructs the category of node attributes and node object categories of the internet of things, and the node LDAP information model, and constructs the node management platform of the internet of things. VMware cluster technology is introduced, and VMware infrastructure is used to realise the virtualisation and integration of lightweight internet of things information from server, network and storage. The results show that the number of servers used in this paper is 4, with the least number. The server occupies less space than 8 U, the power consumption of the server is lower than 3,500 W/h, and the power consumption is lower, showing a good performance.

This study inspects the capability of LDAP in improving the performance of query operation in the trading service. Thus, an experiment is conducted to distinguish the performance result gained from a trading service which uses LDAP with a trading service that uses relational database as its backend storage. From the outcome of the experiment conducted, we verified that a trading service that use LDAP provide a better performance as compared to a trading service that relational database.

By default, Linux systems use local users for authentication. Those users are listed in the /etc/passwd file. This can become a nuisance when there are many Linux systems in the network, as every user needs a local account in each and every one of them. A first approach to the use of a centralized repository for authentication was Network Information Services (NIS) developed initially by Sun. Now, this has been largely replaced by LDAP.

Open Web Applications Security Project (OWASP), an open-source community committed to serve application developers and security professionals has always accentuated on the dire consequences of web application vulnerabilities like SQLI, XSS, LDAP, and Buffer overflow attacks frequently occurring on the web application threat landscape. Since these attacks are difficult to comprehend, machine learning algorithms are often applied to this problem context for decoding anomalous patterns. This work explores the performance of algorithms like decision forest, neural networks, support vector machine, and logistic regression. Their performance has been evaluated using standard performance metrics. HTTP CSIC 2010, a web intrusion detection dataset is used in this study. Experimental results indicate that SVM and LR have been superior in their performance than their counterparts. Predictive workflows have been created using Microsoft Azure Machine Learning Studio (MAMLS), a scalable machine learning platform which facilitates an integrated development environment to data scientists.

cURL is a command line tool for getting or sending files using the URL syntax. cURL supports a range of common Internet protocols like HTTP, HTTPS, FTP, FTPS, SCP, SFTP, TFTP, and LDAP, out of which HTTP is of interest for our discussions in this book.

Identity federation technology has been widely used in recent years. But the solution for federate access is totally different between the Web-Based and Non-Web-Based scenarios. Furthermore, it is highly limited for lack of support from Non-Web-Based scenarios now. This paper proposes a generic federate access solution based on LDAP roaming, which can provide reliable identity roaming in any internet service. To service providers, our solution is transparent and looks like a LDAP. The paper first presents the difficulties in realizing LDAP roaming and discusses offers solutions to the implementation of LDAP roaming. Then it evaluates the easy integration and usability of LDAP roaming. Finally it compares the Generic Solution with the existing federal access solution.

In this paper the idea of an enhanced security authentication procedure is presented. This procedure prohibits the transmission of the user’s password over the network while still providing the same authentication service. To achieve that, Kerberos Protocol and a secure password repository are adopted, namely a smart card. The conditional access to a smart card system provides a secure place to keep credentials safe. Then, by referencing to them through identifiers, an authentication system may perform its scope without revealing the secrets at all. This elevates the trustworthiness of the mechanism while at the same time it a achieves to reduce the overhead of the authentication systems due to the elaborate encryptions procedures.

In today’s heterogeneous networks, the use of different operating systems in the same network is increasingly common. In such environments integrating the different systems can be a real challenge. Fortunately, there are many solutions available that allow different systems to work effectively in a cooperative manner.

Authentication is required for to authenticate user administrators for accessing network devices. In large-scale network devices management, firstly administrators need centralized user management to modify their account for logging network devices. Secondly, they must have log monitoring data who modified their account. The goal of this research is to develop and implement Authorization, Authentication, Accounting (AAA) system and making Log Monitoring System (LMS). Objectives of this research are implementing a system that can centralize and manage network administrators account. Design and topology of the network use simple star network. Software design uses Rapid Application Development (RAD) method. Research began with analyzing the research problem, next step is creating a system design, then build the system. After the system has been built, a demo is done whether the system is running well. If the system has not functioning as desired yet, refine the system. If already functioning as desired, a testing is done. If there are no obstacles during testing, the system is ready to be implemented by users who will use the system. The result shown that system is able to centralized authentication and authorization using Terminal Access Controller Access-Control System (TACACS), and processing accounting data into information in graphical form using ELK Stack. The result of the research is developing monitor user login and log review. The test result shown that system can manage network administrators account according to the Authentication, Authorization, Accounting (AAA) principle.

This paper focuses on attribute-based access control (ABAC) in distributed automation and control systems. ABAC policies execute authorization decisions based on user information, object information and environment conditions. The proposed security system uses attribute certificates to represent both subject and object attributes and an LDAP server to store and distribute attribute certificates. This approach adapts concepts of credential management for subjects and uses the same mechanism for both subject and object management. An attribute management system provides an interface to edit and view both subject and object information. Certificate Revocation Lists (CRLs) exist for both types of attribute certificates. The entities of the distributed access control system implement synchronization mechanisms to keep local information up-to-date.

Managing digital identities and access control for enterprise users and applications remains one of the greatest challenges facing computing today. An attempt to address this issue led to the proposed security paradigm called Identity and Access Management (IAM) service based on IAM standards. Current approaches such as Lightweight Directory Access Protocol (LDAP), Central Authentication Service (CAS) and Security Assertion Markup Language (SAML) lack comprehensive analysis from conception to physical implementation to incorporate these solutions thereby resulting in impractical and fractured solutions. In this paper, we have implemented Identity and Access Management System (IAMSys) using the Lightweight Directory Access Protocol (LDAP) which focuses on authentication, authorization, administration of identities and audit reporting. Its primary concern is verification of the identity of the entity and granting correct level of access for resources which are protected in either the cloud environment or on-premise systems. A phased approach methodology was used in the research where it requires any enterprise or organization willing to adopt this must carry out a careful planning and demonstrated a good understanding of the technologies involved. The results of the experimental evaluation indicated that the average rating score is 72.0 % for the participants involved in this study. This implies that the idea of IAMSys is a way to mitigating security challenges associated with authentication, authorization, data protection and accountability if properly deployed.

In today’s Internet, cyber security has been an increasingly known and needed aspect during the last years. With the advent of the Internet of Things (IoT) and especially Industrial Internet of Things (IIoT), it finally is a key requirement to make Industrie 4.0 and Industrial Internet actually happen. OPC Unified Architecture (OPC UA), a new and promising industrial technology, provides basic security but security scope, is limited to connection security; actual data access authorization is neither specified nor implemented. Thus, this paper recommends an authorization mechanism for the IoT based on OPC UA to protect data confidentiality and privacy. On the other hand, the proposed mechanism integrates with Lightweight Directory Access Protocol (LDAP) as a widely accepted technology for authentication. The paper describes the solution space and recommended solution, introduces a prototype and first evaluation, and analyzes LDAP for its suitability as an alternative solution.

The simulation of static and dynamic assignment of Internet Protocol version 4 and version 6 addresses within an Remote Authentication Dial-In User Service solution, is presented in this paper. The user Authentication, Authorization and Accounting analysis is achieved using the Lightweight Directory Access Protocol, which queries the Universal State Server records. The user passwords are hashed using legacy and modern hash function families, and the Microsoft Challenge-Handshake Authentication Protocol version 1 and version 2, the Challenge-Handshake Authentication Protocol and the Password Authentication Protocol, are used to authenticate the hosts requesting access to the network. The Triple-A Language is used to develop the software program called PolicyFlow, while the solution is simulated using the 8950 AAA software from Nokia.

The Authentication, Authorization and Accounting solution presented in this paper uses Lightweight Directory Access Protocol to query the entries of the Universal State Server, and supports the dynamic assignment of Internet Protocol version 4 information for the hosts authenticated with the Extensible Authentication Protocol. The used authentication methods are Tunneled Transport Layer Security and Transport Layer Security. The 8950 AAA program from Nokia is used to develop the PolicyFlows written in Triple-A Language, and to simulate the scenarios regarding the Extensible Authentication Protocol.

The paper presents an approach to the creation of information environment in the structural unit (including departments, labs, science and educational centers, etc.) of an educational organization (Universities), based on the integration of several open-source systems intended for: authorization, data storage, version control and management of training courses for the purpose of automation of educational processes and electronic document management. Examples of successful use of the deployed system are represented.

There are three main components of the enterprise IT that consume most of the time resources of support personnel: asset management, user management, and service management. Each of these components can be handled by specialized systems. This common practice typically results either in three inconsistent datasets telling different stories about the computing environment, or in a high workload environment where information is kept in sync mostly by personnel manually, which is wasteful and expensive. The authors developed a system named "Mycros" that would create no dataset inconsistencies and would push most of the work towards office personnel and towards user self-service. This system stores all the information into LDAP databases stored on servers that are already in place for authentication. Various web interfaces available to the end users and to office personnel are used for performing simple dataset modifications.

Georgia Tech's "Partnership for an Advanced Computing Environment (PACE)" team provides research computing resources, support and consultation for the entire campus and external collaborators. In response to a campus-wide demand, PACE initiated a project called "Instructional Cluster Environment (ICE)" to build instructional clusters to support educational efforts. These resources offer an educational environment that's identical to production clusters, and expected to provide thousands of grad/undergrad students with ample opportunities to gain first-hand scientific computing experience including HPC and GPU programming each year. Furthermore, the entire PACE scientific software repository is made accessible to all ICE students, providing an education environment that mirrors production research clusters in every aspect. The first of these clusters, funded by College of Computing (COC) technology fees, is now operational and serving 430 students. A PACE funded expansion is planned to be deployed next. We describe the ICE design, specifications, a scalable novel account management mechanism and policies to support large numbers of students with limited staff, a challenge common to many other institutions supporting their own educational resources.

Commercial computer aided design (CAD) applications have traditionally been based on a single user architecture. Recent research on multi-user collaborative CAD and other computer aided applications (CAx) have shown promising and highly functional prototypes of multi-user concurrent designing tools based on popular and market leading commercial software systems such as Siemens NX. However, for these prototypes to be deployed to the real-world corporate environment for commercial projects, security features such as access control and encrypted transport must be implemented as integral part of the enterprise network infrastructure.Directory services (DS) such as Microsoft Active Directory and Lightweight Directory Access Protocol (LDAP) has become the standard software and protocol for managing resources in the complex modern enterprise network. DS controller authenticates and authorizes user's access to resources and enforces security policies. This research presents a method to integrate existing ...

The discovery and management of desired network services present significant challenges for mobile networks. Based on the Service Location Protocol, this paper proposes an integrated service discovery architecture for vehicular ad hoc networks. The proposed approach divides the network into several logical zones. The zone structure is formed virtually based on position information. Each logical zone may have a zone directory agent to manage registered services from service providers. The proposed architecture considers both vehicle-to-infrastructure and vehicle-to-vehicle communication modes and introduces roadside directory agents and vehicle directory agents to reduce deployment costs. We also introduce a substitute query technique, cache mechanism, and backup mechanism to improve the request hit ratio and reduce the message overhead of the substitute query. Finally, we implement the proposed mechanisms in Network Simulator version 2, with simulation results showing that the proposed architecture can provide a high average data hit ratio and low message overhead. Copyright © 2016 John Wiley & Sons, Ltd.

APIs play a significant role in the sharing, utilization and integration of information and service assets for enterprises, delivering significant business value. However, the documentation of service APIs can often be incomplete, ambiguous, or even non-existent, hindering API-based application development efforts. In this paper, we introduce an approach to automatically mine the fine-grained message formats required in defining the APIs of services and applications from their interaction traces, without assuming any prior knowledge. Our approach includes three major steps with corresponding techniques: (1) classifying the interaction messages of a service into clusters corresponding to message types, (2) identifying the keywords of messages in each cluster, and (3) extracting the format of each message type. We have applied our approach to network traces collected from four real services which used the following application protocols: REST, SOAP, LDAP and SIP. The results show that our approach achieves much greater accuracy in extracting message formats for service APIs than current state-of-art approaches.

Database objects access by users has always been controlled in individual database or through enterprise authentication system like LDAP. In the event of abnormal usage, there is no way to detect nor remedial the situation. This paper proposes a novel data mining based method that increases the database security through intrusion detection and denial, and centrally controls the object access privilege of users across multitude of databases.

In ambient assisted living, one of the most concerning problems is how the living status of the elderly can be accurately judged through the data collected by ambient sensors. To solve this problem, environmental influences should be sufficiently considered. Some researchers have proposed collecting data comprehensively by distributed environmental sensors, but how the massive collected data were to be analyzed and transmitted was ignored. In this article, we propose a local data processing architecture on a local server to analyze collected data. In this three-layer architecture, the latest received data is stored in a data gathering layer. Afterward, a data filtering layer checks the efficiency of data. Also, this layer classifies the received data into static data reflecting sensors’ status and a realtime data stream reflecting quality of life. For static data, they are directly stored in a database, and the real-time data stream is divided into different levels. Based on these levels, a data analyzing layer reorganizes data into a neighborhood structure, which will be called RDAA. A risk factor is returned by RDAA and only abnormal data will be sent to a health care provider when its risk factor is larger than a given threshold. LDAP disperses the stress of remote centralized processing and data storage, which decreases the workload of the remote health care provider. Meanwhile, it also reduces network load and improves processing speed.

We reported the status of the educational ICT (Information and Communication Technology) environment in Kyushu University in SIGUCCS 2009. At that time, we provided the host computer and many iMacs as terminals for students. We have been using BYOD in our university since April 2013 as we reported in SIGUCCS 2013. At last, we almost completed the BYOD (Bring Your Own Device) project in Kyushu UniversityAs our next step, we are going to move all servers such as Moodle, Mahara, application server, LDAP, and AD (Active Directory) from "on the premises" to the cloud. The cloud provides many advantages for us, namely physical space, power, budget, performance, and so on. It is now desirable for us to use cloud aggressively. However, many important people remain concerned about potential security issues. We have provided detailed measures against the problems in order to persuade the old guard.In addition, it is important for us to provide a common ICT environment for students including Windows PCs and Macs. We are planning to introduce the VDI (Virtual Desktop Infrastructure) interface to make every student use a common Windows environment in classes without any limit in September 2017. Students can also use a Linux instance if they require it. For that purpose, we are going to develop the budget management system to control the usage of individual students under the specified budget level.We are realizing the next generation educational ICT environment under BYOD with AWS cloud. It should be the model case for new higher education in the world.

In a world of the global communications, with continuous expansion to new horizons, which requires anytime and anywhere access to information sources, the need to manage the communication requirements is a very important issue. Traditional IP networks are facing difficulties in ensuring, to a user, a specific bandwidth[1] level for network access. Related to this matter, in this article we are proposing a bandwidth control solution, through the medium of a newly developed Java application. The bandwidth management process is realized taking account of the privileges arising from the user's membership to certain directory service group, by using Active Directory specific software components. This paper presents the endorsement elements for a proposed network management application, highlighting the performed tests, at the development level, and the results obtained with the aimed bandwidth control application.

The article is devoted to the integration of educational resources and educational and informational systems in a single information and educational environment of the university. Access to the university's information and educational environment is carried out through the additional web-site of the official portal “Information and educational environment” for authorization, which uses technology of the single sign-on point, the main element of which is the creation of a user database. Taking into account the features of the analyzed directory services and the use of the domain structure of the network organization, we have selected to create the Lightweight Directory Access Protocol (LDAP) database using the OpenLDAP open protocol. Were described the implementation of the settings for a single sign-on page using the protocol for the web CAS (Central Authentication Service). To synchronize the University's corporate email and available Google services with the LDAP database, Google Apps developed a Google Apps Directory Sync application that synchronizes the structure and all users in Google Apps. In order to synchronize the e-learning system based on the LMS Moodle, an existing appropriate module was used to authenticate users through the LDAP database. Configuring the module, synchronizing users and groups is presented in the article. Also are listed the settings specified in the LocalSettings.php file that are related to LDAP authentication with the university's wiki portal via the installed and connected LDAP authentication module. Also we described an approach to synchronizing users with the systems of scientific conferences and seminars based on the open conference system engine, which includes a module for LDAP authentication. DOI: https://doi.org/10.28925/2414-0325.2017.3.6ez16

Authentication of Linux system users are maintained by PAM (Plugable Authentication Module). LDAP (Lightweight Directory Access Protocol) is used to replace the local user account authentication. Our existing environment uses PAM through Dovecot POP3 and RADIUS for authen-tication.This research focuses on the implementation of LDAP as an authentication service and migration of accounts and applications. Implementation and migration using account data that is using P AM. An application is also developed to search and modify existing account, and creating new account. Based on test performed, the account migration is successful. Testing the migrated accounts were performed. Also response time that is needed by LDAP to authenticate is shorter than the existing system which uses POP3 and RADIUS.

With the continuous development of information construction, the application of digital campus system is increasing, the network scale expanding gradually, access control, and information security problem increasingly prominent. The original decentralized independent certification, the independent authorization, the independent account management model has been unable to meet the current and future development requirements, to improve the efficiency of information utilization, office management level, realize the informatization management, used in the construction of digital campus information service platform, unified interface and the combination of the unified identity authentication system is particularly important. According to the characteristics of the development of digital campus, based on the unification of the CAS and LDAP authentication solution, and the overall architecture design, for the digital campus application system integration and lay a good foundation for further development.

A computational science project with restricted-access data was awarded an allocation by XSEDE in 2016 to use the Bridges supercomputer at the Pittsburgh Supercomputing Center (PSC). As a condition of the license agreement for access to the data, multi-factor authentication (MFA) with XSEDE's Duo MFA service is required for users of this project to login to Bridges via SSH, in addition to filesystem access controls. Since not all Bridges users are required to authenticate to Bridges in this manner, a solution was implemented via Linux-PAM to require XSEDE Duo MFA for SSH login access by specific users, as identified by their local account name or membership in a local group. This paper describes the implementation on Bridges and its extensibility to other systems and environments with similar needs.

We propose a novel IoT directory service for storing, updating, and providing records of mobile IoT devices or objects. The IoT directory service is designed to manage a massive number of records (about one billion) and support fast lookup (latency of less than 10ms). It performs proactive caching of the records in various replicas (following the movement of mobile IoT devices or application clients) by dynamically assigning virtualized network and computing resources so that the lookup latency always remains low. The cache replicas are tracked to update them globally (latency of few seconds) whenever a record changes due to mobility. We have preliminarily implemented the directory service system and studied its performance in terms of lookup and update latencies.

DIT (Directory Information Tree), represented as a hierarchical data structure consisting of directory which is a collection of knowledge list. Replication is the method by which directory contents are automatically copied from a Directory Server to one or more other Directory Servers. Replication is handling by different replication schemes. Replication between different supported platforms is quit challenging task make possible in service oriented architecture. For accessing Directory servers the Protocol that uses TCP/IP networking stack is Lightweight Directory Access Protocol, the network protocol that is employed to access directory server's knowledge. Directory server replication helps user to access information more flexibly and speedily. In this paper we have proposed three schemes to replicate directory server data. Replication of Directory server results in high data availability and load balancing. These results reduce response time for user and prove the propose scheme is provably highly efficient and reliable. Due to more data availability the system handles fault tolerance.

The web server is configured to display the list of files contained in this directory. This is not recommended because the directory may contain files that are not normally exposed through links on the web site. The directory list have some serious vulnerability to show internal files and directory to outsider attackers. Therefore, the proposed countermeasure of directory list is presented to prevent unnecessary valuable information from outsider attackers. Key Words : Directory listings, web server, IIS, Apache, vulnerabilities, and Google Search요 약 본 논문은 디렉토리 리스팅이란 서버 시스템의 파일을 볼 수 있는 것으로 디렉토리 리스팅의 취약점을 갖고 있는 사이트를 찾는 방법과 보완하는 방법이 무엇이 있는지 알아본다 . 검색 사이트인 구글을 이용하여 디렉토리 리스팅 취약점이 있는 사이트를 찾는 법, 구글 검색에 내가 운영하는 사이트가 검색되지 않는 방법과 웹 서버의 운영자가 할 수 있는 취약점 제거 방법을 제시한다 . 주제어 : 디렉토리 리스팅, 웹서버, IIS, 아파치, 취약점, 구글 검색 * This research is supported by 2014 Baekseok University research fund.Received 12 July 2014, Revised 24 September 2014Accepted 20 October 2014Corresponding Author: Sunghyuck Hong(Division of Information and Communication, Baekseok University) Email: shong@bu.ac.krⒸ The Society of Digital Policy & Management. All rights reserved. This is an open-access article distributed under the terms of the Creative Commons Attribution Non-Commercial License (http://creativecommons.org/licenses/by-nc/3.0), which permits unrestricted non-commercial use, distribution, and reproduction in any medium, provided the original work is ISSN: 1738-1916 properly cited.

How to coordinate heterogeneous database to realize sharing and consistency of information not only is an important research subject in the database filed, but also is an emerging research hot spot in the field of database system. As a new development direction of computer software, it applies some new techniques to integrate the existing systems to develop new applications. The paper analyzes CSCW, XML, JDBC and heterogeneous database, and proposes a solution of heterogeneous database. The solution absorbs the thoughts of database meta data, middle ware and LDAP directory service.

With the development of digital campus in university, more and more application systems have been used. In these systems, authentication function has been repeatedly design, which can be easy to cause multiple accounts and passwords, and brought inconvenience to users and administrators. Unified identity authentication system based on LDAP is a good solution to this problem. In this paper, based on the analysis of LDAP protocol and CAS, the unified identity authentication system built for digital campus is designed and implemented, and LDAP management system is also developed to achieve unified management of directory information in the university.

Currently, local area network (LAN) is commonplace in the Nigerian tertiary institutions and can be a good platform for distributing and disseminating instructional materials. Thus, this paper proposes to improve the quality of academics through online provision of learning resources based on Free and Open Source Software (FOSS); wired and wireless access to contents; and availability of the system 24/7. The system is based on third party software or FOSS called phpBB and Windows 2003 Server Active Directory Services. Both are installed and configured on an intranet. It has a discussion forum which is accessed through Hypertext Transfer Protocol using a web browser; and directory services for files/folders upload and download based on a set of privilege levels in Discretionary Access Control List (DACL) as a way of improving security. The system leads to the development of a virtual campus in Covenant University. Also, it has helpedimprove the quality of teaching by making lecture notes availably on the intranet, lecturer/studentinteraction, accessibility to teaching materials and reduce student’s idle time. The system helps in no small measure to correct the problems plaguing the educational sector such as examination malpractice, decline standards of education and cultism, as students are gainfully engaged in academic and social activities. The creation of a virtual campus would enhance the level of e-participation, and e-readiness of the graduate for the employment market. In particular, it bridges the divide between the developed and the developing nations.

The users and permission management functions of multiple application system will increase management complexity, reduce the convenience of users using.Analyze the module features of application system , LDAP technology , XML and RBAC technologies,etc. to build a permission centralized control system and combine with configuration file to solve the docking problems between various application systems and control systems.The system achieve unified management of users, permissions, application modules and access control and improve management efficiency and user experience.

Nowadays, a university needs to build and maintain a central ID database and authentication system for better ICT (information and communication technology) services. In 2008, the headquarters of Kyushu University had defined medium-range policy of ICT infrastructure preparation, and the policy had indicated construction of a central authentication system. According to the policy, the authors elaborated an installation plan of the Kyu(Q)shu University authentication system (QUAS, for short). Since 2009, Information Infrastructure Initiative of Kyushu University, to which the authors belong, has been issuing ID cards to all employees, and also operating LDAP servers. This paper introduces the action plan and outline of QUAS. This paper also describes two recent topics of QUAS. One is high load of LDAP servers because of rapid increase of mobile devices, and the other one is development of a multifactor authentication Shibboleth Identity Provider (IdP).

In this paper, resource registry and management framework based on LDAP is proposed. The function, external interface and internal structure of the framework are firstly introduced. Then, the data naming, data model, data operation, security mechanism and advantages of LDAP are introduced in detail. At last, a typical application based on the framework is proposed. The framework provides a better way to manage resource and achieve resource sharing.

With the development of Internet technology, the increasing of the application service makes the enterprise network management and security more and more complex. Based on it, the enterprise portal needs a system with high performance for identity authentication management. In this, implements the research of unified identify authentication system through LDAP, designs a rational structure of the directory tree. Thus, All the application servers use the user information in the same directory. By the manner, the problem of disagreement and larger maintenance burden can be solved and the system security can be improved.