Supplementary Seminars

Sunday March 1, 2009

8:30AM-12:00PM

Implementing CAS
Adam Rybicki
Unicon, Inc.

This session has three sections:

• CAS Overview
  
• Implementing CAS 3.x
  • Maven2 build
  • How to customize the logon screen
  • Replacing the "dummy" authentication handler with a real one (LDAP)
• CAS-enabling Web applications
  • uPortal
  • Sample Tomcat application
  • Other if time permits

DSpace workshop
Brad McLean
DSpace Foundation

Come to this half day workshop if you are interested in getting your repository up and running using DSpace software. In this course you will learn how to install and configure DSpace 1.5. How to develop your user interface using Manakin, and how to integrate customizations such as LDAP. This is an interactive workshop for those wanting to learn the fundementals of installing and maintaining DSpace open source software.

Sakai Developer Bootcamp: Part 1
Anthony Whyte
Sakai Foundation/University of Michigan

Aaron Zeckoski
CARET

Zach Thomas
Aeroplane Software

Sakai developer bootcamps are intensive day-long workshops consisting of presentations and exercises designed to ease the learning curve for those interested in writing tools and services that integrate with the Sakai framework. Sakai bootcamps also highlight new development technologies and elucidate best practices. The Dallas boot camp will move beyond the traditional discussion of how to write tightly integrated Java-based Sakai applications and introduce attendees to lighter-weight RESTful approaches that leverage Sakai's entity broker.  Registrants for Sakai Developer Bootcamp: Part 1 should also register for Sakai Developer Bootcamp: Part 2.

User Interface Development with jQuery
Colin Clark
University of Toronto

Learn how to build dynamic JavaScript user interfaces using the jQuery toolkit. This workshop will walk you through the techniques of using jQuery to do DOM manipulation, event handling, and AJAX communication within the browser. We will also cover the use of jQuery plugins, UI widgets, and the Fluid framework.

This workshop assumes some familiarity with programming and HTML/CSS. A refresher on the JavaScript language, along with guidance on how to write portal-friendly code, will be provided.

Migrating to uPortal 3
Eric Dalquist
University of Wisconsin

JA-SIG released uPortal version 3.0.0 GA in April 2008 – almost a year ago, from the date of this conference. Between than and now, several institutions have launched uP3 in production, including some that had existing uPortal deployments with 60k users or more. Many more institutions have publicly expressed their intent to deploy uP3 in the near term.

Moving to uP3 is more challenging than previous upgrades in several ways: changes to the database schema mean that institutional data must be migrated from the old platform to the new; new XML context files for configuration require fresh attention from administrators; and changes to the build system – especially the introduction of Maven 2 – will necessitate changes to many local customizations.

This seminar aims to prepare you for these challenges. Each of the presenters has been instrumental in one of the largest uP3 migrations to-date: Eric Dalquist with The University of Wisconsin Madison, and Andrew Wills for Johns Hopkins University. They will give you the insider's perspective, the best available tips, tools, and practices for migrating to uP3 quickly and painlessly.

In particular, this session covers upgrade planning, data migration with uPortal Import/Export, using Source Code Management (SCM) effectively, uP3 configuration, and working with the uP3 Maven build.

1:00PM-4:30PM

Sakai Developer Bootcamp: Part 2
Anthony Whyte
Sakai Foundation/University of Michigan

Zach Thomas
Aeroplane Software

Aaron Zeckoski
CARET

Sakai developer bootcamps are intensive day-long workshops consisting of presentations and exercises designed to ease the learning curve for those interested in writing tools and services that integrate with the Sakai framework. Sakai bootcamps also highlight new development technologies and elucidate best practices. The Dallas boot camp will move beyond the traditional discussion of how to write tightly integrated Java-based Sakai applications and introduce attendees to lighter-weight RESTful approaches that leverage Sakai's entity broker.  Registrants for Sakai Developer Bootcamp: Part 2 should also register for Sakai Developer Bootcamp: Part 1.

The Most Interesting Features of the Fedora Repository System
Sandy Payette
Fedora Commons

This seminar will provide an introduction to the Fedora architecture with a focus on key capabilities that make Fedora worthy of its name, the "Flexible Extensible Digital Object Repository Architecture." Specifically, will explore Fedora's integration with semantic technologies, ways to integrate Fedora with applications and the Web, and plugging Fedora into heterogeneous back end stores, both enterprise storage and cloud storage.

Shibboleth 2 implementation guide
Scott Cantor
Ohio State University

The Shibboleth Single Sign-on and Federation software is being adopted to address authentication for both on and off-campus services. This seminar will provide a mini-implementation guide, including a review of the architecture and configuration options for those organizations interested in enabling access to services of all kinds, including those offered by third parties.

Skinning uPortal 3
Gary Thompson
Unicon

An interactive work session on how to design and implement skins for uPortal 3, including design guidelines and considerations, an in-depth review of the theme code, page markup, and CSS, and a walkthrough of creating a new skin.

Getting Started with uPortal
Andrew Petro
Unicon, Inc.

This seminar is a basic hands-on introduction to uPortal 3. In this session, participants will complete activities including: build uPortal from source, deploy it into a Tomcat, configure it to use JASIG's CAS server for authentication in addition to local authentication, install an additional skin, add a user attribute source, configure PAGS, install a channel a JSR-168 portlet, and other activities aligned with getting started with uPortal.

Wednesday, March 4, 2009

1:00PM-4:30PM

Web Application Security 101
Neil Matatall
University of California, Irvine

Marina Arseniev
University of California, Irvine

Easily accessible, simple instructions on how to attack a website are freely available to teenagers or professional hackers in the black market of personal data. Attacks such as URL rewriting, cross-site scripting, and SQL injection permit the most deadly form of application hacking, allowing intruders to access your data. Although a firewall is good protection, it is the beginning of a security strategy and does not protect a web application from these kinds of exploits. This session will demonstrate and explain common application hacks, defense techniques, and countermeasures. We will share various open source and vendor scanning tools that can be used to detect application security vulnerabilities and review OWASP's WebGoat as a security learning tool. You will also learn emerging practices on how to incorporate quality and security assurance into your software development life cycle or software acquisition. Sample checklists will be provided that can be used as part of a security review process.

Spring Portlet MVC
John Lewis
Unicon, Inc.

This seminar provides a hands-on introduction to Portlet development using the Spring MVC framework. Topics include basic introductions to Spring and JSR-168 Portlets, setting up a Portlet development environment, an overview of the API and exercises using the basic Controllers and Handler Mappings from the framework. Advanced topics will include Interceptors, Form Controllers, File Upload, Security, and the new Annotation-based Mappings introduced in Spring 2.5.