The Cape Higher Education Consortium (CHEC) manages Calico, a Library Management System for the four Western Cape Universities. This system ran on physical servers in the Internet Solutions Datacenter. The hardware became very expensive to maintain, and when three of the universities indicated they would be migrating to the cloud-based version of the software within the next 12-18 months, it became clear the current setup would need to be revisited.
CHEC approached UCT for assistance, and we proposed to virtualise the Calico infrastructure. Given the high availability requirements, the team (notably Waylon and Abraham), with some excellent project management from Leon Alexander, managed to do a P2V (Physical to Virtual) conversion, and ensured a successful cut-over this past weekend.
The development, production and warehouse environments are now running fully virtualised in a DMZ on ICTS’ VMware infrastructure.
Feedback from the libraries has been very positive, and we are happy to have been part of this project.
The following post written by Donald Coetzee
South African Federated Identities for Research and Education
This project is currently underway where UCT is very involved in the move to federate with other institutions around South Africa. SAFIRE will provide a central authentication entry point to allow easier access to shared applications by authenticating users using their institution’s login credentials.
As an example: An application (Service Provider) called “filesender” is deployed at UCT, which provides for sharing of large files between users. Navigating to http://filesender.uct.ac.za, on the login screen, a redirection is performed to a “Discovery Service ”The user then clicks Logon, The page redirects to what is called “The Discovery Service”:
The Discovery Service allows a user to specify which institution they are from , and this is where the “central” part in ‘central authentication entry point to allow easier access to shared applications by authenticating users using their institution’s login credentials’ comes in. Once the user chooses his/her ‘home institution’ the user is offered the opportunity to login to their home institution’s login service (Identity Provider).
Once the user is authenticated by the source institution, the application can be accessed and used.
In this case, Filesender as a federated application, can be used by an (authenticated) user from another (authorised) institution
MConf is another federated application hosted by SanRen, but UCT users are allowed to access it using their UCT credentials.
Mconf is an online meeting utility, that has also been joined to the federation, and when a user clicks ‘login via SAFIRE’:
If a user is already signed in to the Federation, there is no need to authenticate again.
As the federation matures, and more Applications (Service Providers), and Home institutions (Identity Providers) are added to the federation, the easier it will become for institutions in, and even those outside of South Africa to share resources, collaborate, and importantly: share Research.
The project is currently in the deployment phase, and go-live will be communicated soon!
We will be moving ICTS staff mailboxes from on-premise Exchange 2010/2013 servers to the Office 365 Datacenter (in Europe…), next week. We hope to use this as a final test before we start with the rest of the 9000-odd mailboxes.
A lot of work and preparation went into this project, and after this is done, the only box to be ticked will be to migrate away from Mailman as our mailing list software.