Inicio Explorar Axuda
Iniciar sesión
HvA
/
Implementation
réplica de https://github.com/DebenOldert/Implementation.git
2
0
Fork 0
Ficheiros Incidencias 0 Wiki

HvA project Implementation - 2015

Árbore: edf2aa2b76
Ramas Etiquetas
Implementation
ZIP TAR.GZ
Deben Oldert edf2aa2b76 IP update %!s(int64=10) %!d(string=hai) anos
ARS Server d80a0130ee First upload %!s(int64=10) %!d(string=hai) anos
Android app 0ed0f89c90 IP update %!s(int64=10) %!d(string=hai) anos
Documentation 8fe829ea4e First upload %!s(int64=10) %!d(string=hai) anos
SAS:APS Server edf2aa2b76 IP update %!s(int64=10) %!d(string=hai) anos
README.md 6efd7bf4f7 Update project status %!s(int64=10) %!d(string=hai) anos

README.md

HvA project Implementation - 2015

This project implementation, for the University of Applied Sciences of Amsterdam/ Hogeschool van Amsterdam.

Feel free to copy/use it for your own project.
Keep in mind that it took me several days/weeks, beers and asperines to make this.
So be nice, and give me some credit, I won't bite and it won't hurt you.

Now that is said, I can explain what I've made. First of all you need to understand the different parts of this project. There are 4 different parts

  • SAS: Smart Authentication Server (JAVA Servlet)
  • APS: Authentication Provider Service (LDAP directory)
  • ARS: Authentication Request Server (VPN server and NPS with our extension DLL)
  • APP: The android/ios app to enable the 2nd Authentication step

Each part has its own folder in this repo. (Except for SAS and APS, same servlet).
There are 2 scenarios, 1 where the user has no device registered and 2 the case where there is a device registered.

Scenario 1

A simple overview if the device is not registered in our APS:

  1. ARS send access request over RADIUS to NPS
  2. NPS extension receive access request
  3. NPS extension send authentication request to SAS
  4. SAS Authenticates the user via APS, APS returns NO userinfo
  5. SAS reply with code 2 (User needs device registration) and send sendmail request to APS
  6. APS sends email to user
  7. User follows instructions mail (Download from link and open from link)
  8. User logs in with device
  9. Device sends register request to SAS
  10. SAS forwards device registration request to APS
  11. APS registers device
  12. SAS sends result code to device When this is done the user retry to login and will automaticly follow scenario 2

Scenarion 2

When a device is already registered in our APS it goes as followed:

  1. ARS send access request over RADIUS to NPS
  2. NPS extension receive access request
  3. NPS extension send authentication request to SAS
  4. SAS Authenticates the user via APS, APS return userInfo
  5. SAS sends a PUSH notification to device
  6. Device access response (approved or cancelled) is send to SAS
  7. SAS replies to ARS with corresponding code
  8. ARS proccesses the request (code 0= accept/ code 1=reject)
  9. YEAAAH, user just logged in!!! (If we have chosen grand access ofcourse)

You can find all the SAS error codes in the ErrorCode.java class