Design And Implementation Of Single Sign-On And Unified Identity Authentication System Based On CAS

Increasingly rapid development of computer networks, network information age has brought great convenience to people at the same time, but also be submerged in the sea of information. Countless servers and applications stored on the internet a lot of data, and the data format varies. This will not only lead to the administrator to manage time-consuming, not easy to use user access, and a large number of duplicate data information is stored in more than one, can not be shared, then the urgent need of a new technology to solve these problems, this time, the directory service technology emerged.Directory services provide customized information storage function, the user can quickly distributed throughout the network to find the resources or services. It can be described, based on attributes, rarely changes, frequently queried data organized according to the tree information mode, information management and service interfaces for users. Directory services will be able to provide internal services can also be a range, even a global service. Directory services in a central location to store data, so that users on the network, computers and applications can be accessed over the network. These data include the computer name and address, user name, password, Email, access permissions, digital certificates, organizational membership, printers and so on.Directory services for computer networks is essential, many companies and organizations recognize the importance of a directory service, both internally and externally to build their own directory services. In short, the directory service reflects its value, many domestic and foreign companies and organizations have carried out research. This paper, based on the open source OpenLDAP directory server, the directory service technologies for integrated research and JAVA environment for the specific application, the main research contents:What is a directory service, directory service background and significance; Analyze LDAP directory service data storage structure, and Entry. ObjectClass. Attribute and other terms; Based on OpenLDAP directory server, set up directory services:OpenLDAP security access control and access control Filter syntax; Ldapbrowser visualization tool use; JAVA language environment using the JNDI operation OpenLDAP; Using LDIF file for LDAP data manipulation; OpenLDAP custom and application of Schema; Data between multiple OpenLDAP directory server push and pull synchronization.To achieve the ultimate goal:Analyze LDAP directory service data storage structure, and Entry, ObjectClass, Attribute; Application OpenLDAP security access control and access control Filter syntax; Several experiments OpenLDAP authentication mechanism distinction; multiple OpenLDAP directory server data between "push" and "pull" synchronization; Achieve the OpenLDAP Schema customize and application; achieved through JNDI LDAP library access and manipulate data; Implementation uses LDAP LDIF file format data manipulation; OpenLDAP experimental data backup and log management.