Shibboleth and Napster

1
Shibboleth and Napster
2
Napster - History

• One stop shop for pirated (and free) MP3s.
• Unlimited use download
• Sued by Recording Industry Association of America
  (RIAA)
• Shutdown July 11, 2001

3
Digital Rights Management (DRM) Music

• Generalized copy protection
• Can limit where a DRM music file can be played
• Specific personal computer
• Specific music playing software
• Portable music player
• Expiration date

4
Selling DRM Music

• iTunes Music Store
• Apple Computer
• Rhapsody
• RealNetworks
• MusicNet
• EMI Music, Bertelsmann's AG, AOL Time Warner,
  Sony Music Entertainment
• Distributed by MusicNet_at_AOL, Virgin Digital,
  Ctrax
• PressPlay
• Sony Music Entertainment, Universal Music Group

5
Roxio PressPlay Napster

• Roxio
• Software company best known for CD-burning
  software
• Buys Pressplay
• Buys the Napster name
• Enhances Pressplay and relaunches it as Napster

6
Napster - Current

• Basic Subscription
• 9.95/month
• Unlimited Streaming
• Unlimited Tethered Downloads
• Purchase Tracks

7
Napster - Player

• Windows Media Player 9
• Internet Explorer components

8
Streaming

• DRM music file is downloaded to PC
• Not actually streamed
• Not visible in player after download
• Stored in IE Temporary Internet Files directory
• Not all tracks are available for streaming
• Can not burn to CD
• Can not transfer to portable music player

9
Tethered Download

• DRM music file downloaded to PC
• Becomes visible in players music library
• Can play on up to 3 different PCs.
• Not all tracks are available for tethered
  download.
• Music files will not play after your Napster
  subscription expires
• Can not burn to CD
• Can not transfer to portable music player

10
Purchase Tracks

• 99 cents each
• DRM music file downloaded to PC
• Can play on up to 5 PCs
• Can burn to CD
• Can transfer to portable music player

11
Cornell - Napster

• Cornell has purchased 1 year subscriptions for
  students at reduced rate
• Students register via special Napster web page

12
Napster Registration

• Student creates ID and password for Napster use

13
Shibboleth - Napster

• Only Cornell students are eligible
• Shibboleth tells Napster who is a Cornell student.

14
Shibboleth
Run by CIT
Origin
Target
Run by Napster
15
Kerberos KDC
uportal.cornell.edu
zx6R-636rs250
zx6R-636rs250
ss77 zx6R-636rs250
Origin
Target
Can I have attributes for zx6R-636rs250

• student_at_cornell.edu
• t913jtp11_at_cornell.edu
• urnietfrfc1510
• Digitally signed by CIT

LDAP Directory
16
Origin Version 1.2

• Solaris 9
• Apache 1.3.29
• CUWebAuth 1.0.15
• mod_ssl 2.8.16
• Jakarta Tomcat 4.1.27-LE-jdk14
• Shibboleth.war
• JK 1.2

17
Target Version 1.1

• Apache 1.3.29
• mod_shire.so
• mod_shibrm.so
• mod_ssl 2.8.16
• shar

18
Building the Target

• Openssl 0.9.7d
• Log4cpp 0.3.4b
• cURL 7.10.5
• Xerces 2.5.0
• Xml-security-c 0.2.0
• OpenSAML 0.9.1

19
Shibboleth - Technology

• PKI
• Everything over HTTP
• RFC 3093? ?
• HTTP over SSL

20
Kerberos KDC
uportal.cornell.edu
zx6R-636rs250
zx6R-636rs250
ss77 zx6R-636rs250
Origin
Target
Can I have attributes for zx6R-636rs250

• student_at_cornell.edu
• t913jtp11_at_cornell.edu
• urnietfrfc1510
• Digitally signed by CIT

LDAP Directory