Identity Provider Shibboleth per il servizio di federazione e Single Sign-On di Ateneo

L’università di Bologna, da sempre attenta alle nuove tecnologie e all’innovazione, si è dotata nel 2010 di un Identity Provider (IDP), ovvero un servizio per la verifica dell’identità degli utenti dell’organizzazione tramite username e password in grado di sollevare le applicazioni web (anche esterne all’organizzazione) dall’onere di verificare direttamente le credenziali dell’utente delegando totalmente la responsabilità sul controllo dell’identità digitale all’IDP. La soluzione adottata (Microsoft ADFS) si è dimostrata generalmente semplice da configurare e da gestire, ma ha presentato problemi di integrazione con le principali federazioni di identità regionali e italiane (FedERa e IDEM) a causa di una incompatibilità con il protocollo SAML 1.1, ancora utilizzato da alcuni dei servizi federati. Per risolvere tale incompatibilità il "CeSIA – Area Sistemi Informativi e Applicazioni" dell’Università di Bologna ha deciso di dotarsi di un Identity Provider Shibboleth, alternativa open source ad ADFS che presenta funzionalità equivalenti ed è in grado di gestire tutte le versioni del protocollo SAML (attualmente rilasciato fino alla versione 2.0). Il mio compito è stato quello di analizzare, installare, configurare e integrare con le federazioni IDEM e FedERa un’infrastruttura basata sull’IDP Shibboleth prima in test poi in produzione, con la collaborazione dei colleghi che in precedenza si erano occupati della gestione della soluzione Microsoft ADFS. Il lavoro che ho svolto è stato suddiviso in quattro fasi: - Analisi della situazione esistente - Progettazione della soluzione - Installazione e configurazione di un Identity Provider in ambiente di test - Deploy dell’Identity Provider in ambiente di produzione

The Effect of the No-Passing Zone Sign on "Passing" Accidents, 1963

The No Passing Zone sign (Wl0-4) was designed in 1958 for the purpose of informing the driver contemplating a passing maneuver of hazardous sight conditions ahead. This warning sign, of pennent shape design, was placed on the left side of the road so as to be more conspicuous to the intended driver. During the two year period 1959-1960, the Wl0-4 signs were erected throughout the Iowa Primary Road System.

Monetary integration and real estate markets: an investigation of the impact of the introduction of a single currency on real estate performance

This paper assesses the impact of the monetary integration on different types of stock returns in Europe. In order to isolate European factors, the impact of global equity integration and small cap factors are investigated. European countries are sub-divided according to the process of monetary convergence. Analysis shows that national equity indices are strongly influenced by global market movements, with a European stock factor providing additional explanatory power. The global and European factors explain small cap and real estate stocks much less well –suggesting an increased importance of ‘local’ drivers. For real estate, there are notable differences between core and non-core countries. Core European countries exhibit convergence – a convergence to a European rather than a global factor. The non-core countries do not seem to exhibit common trends or movements. For the non-core countries, monetary integration has been associated with increased dispersion of returns, lower correlation and lower explanatory power of a European factor. It is concluded that this may be explained by divergence in underlying macro-economic drivers between core and non-core countries in the post-Euro period.

Complication and failure rates in patients treated for chronic periodontitis and restored with single crowns on teeth and/or implants

Objectives: To assess the biological and technical complication rates of single crowns on vital teeth (SC-V), endodontically treated teeth without post and core (SC-E), with a cast post and core (SC-PC) and on implants (SC-I). Material and methods: From 392 patients with chronic periodontitis treated and documented by graduate students during the period from 1978 to 2002, 199 were reexamined during 2005 for this retrospective cohort study, and 64 of these patients were treated with SCs. Statistical analysis included Kaplan–Meier survival functions and event rates per 100 years of object-time. Poisson regression was used to compare the four groups of crowns with respect to the incidence rate ratio of failures, and failures and complications combined over 10 years and the entire observation period. Results: Forty-one (64%) female and 23 (36%) male patients participated in the reexamination. At the time of seating the crowns, the mean patient age was 46.8 (range 24–66.3) years. One hundred and sixty-eight single unit crowns were incorporated. Their mean follow-up time was 11.8 (range 0.8–26.4) years. During the time of observation, 22 biological and 11 technical complications occurred; 19 SC were lost. The chance for SC-V (56) to remain free of any failure or complication was 89.3% (95% confidence interval [CI] 76.1–95.4) after 10 years, 85.8% (95% CI 66–94.5) for SC-E (34), 75.9% for SC-PC (39), (95% CI 58.8–86.7) and 66.2% (95% CI 45.1–80.7) for SC-I (39). Over 10 years, 95% of SC-I remained free of failure and demonstrated a cumulative incidence of failure or complication of 34%. Compared with SC-E, SC-I were 3.5 times more likely to yield failures or complications and SC-PC failed 1.7 times more frequently than did SC-E. SC-V had the lowest rate of failures or complications over the 10 years. Conclusions: While SCs on vital teeth have the best prognosis, those on endodontically treated teeth have a slightly poorer prognosis over 10 years. Crowns on teeth with post and cores and implant-supported SCs displayed the highest incidence of failures and complications.

Systematic review of the survival rate and the incidence of biological, technical, and aesthetic complications of single crowns on implants reported in longitudinal studies with a mean follow-up of 5 years

To assess the 5-year survival of implant-supported single crowns (SCs) and to describe the incidence of biological, technical, and aesthetic complications. The focused question was: What is the survival rate of implants supporting single crowns and implant-supported crowns with a mean follow-up of 5 years and to which extent do biological, technical, and aesthetic complications occur?

Failures and complications in patients with birth defects restored with fixed dental prostheses and single crowns on teeth and/or implants

OBJECTIVES: To assess retrospectively, over at least 5 years, the incidences of technical and biological complications and failures in young adult patients with birth defects affecting the formation of teeth. MATERIAL AND METHODS: All insurance cases with a birth defect that had crowns and fixed dental prostheses (FDPs) inserted more than 5 years ago were contacted and asked to participate in a reexamination. RESULTS: The median age of the patients was 19.3 years (range 16.6-24.7 years) when prosthetic treatment was initiated. Over the median observation period of 15.7 years (range 7.4-24.9 years) and considering the treatment needs at the reexamination, 19 out of 33 patients (58%) with reconstructions on teeth remained free from all failures or complications. From the patients with FDPs and single unit crowns (SCs) on implants followed over a median observation period of 8 years (range 4.6-15.3 years), eight out of 17% or 47% needed a retreatment or repair at some point due to a failure or a complication. From the three groups of patients, the cases with amelogenesis/dentinogenesis imperfecta demonstrated the highest failure and complication rates. In the cases with cleft lip, alveolus and palate (CLAP) or hypodontia/oligodontia, 71% of the SCs and 73% of the FDPs on teeth (FDP T) remained complication free over a median observation period of about 16 years. Sixty-two percent of the SCs and 64% of the FDPs on implants remained complication free over 8 years. Complications occurred earlier with implant-supported reconstructions. CONCLUSIONS: Because healthy, pristine teeth can be left unprepared, implant-supported SCs and FDPs are the treatment choice in young adults with birth defects resulting in tooth agenesis and in whom the edentulous spaces cannot be closed by means of orthodontic therapy. However, the trend for earlier and more frequent complications with implant-supported reconstructions in young adults, expecting many years of function with the reconstructions, has to be weighed against the benefits of keeping teeth unprepared. In cases with CLAP in which anatomical conditions render implant placement difficult and in which teeth adjacent to the cleft require esthetic corrections, the conventional FDP T still remains the treatment of choice.

Plastid-localized acetyl-CoA carboxylase of bread wheat is encoded by a single gene on each of the three ancestral chromosome sets

5′-End fragments of two genes encoding plastid-localized acetyl-CoA carboxylase (ACCase; EC 6.4.1.2) of wheat (Triticum aestivum) were cloned and sequenced. The sequences of the two genes, Acc-1,1 and Acc-1,2, are 89% identical. Their exon sequences are 98% identical. The amino acid sequence of the biotin carboxylase domain encoded by Acc-1,1 and Acc-1,2 is 93% identical with the maize plastid ACCase but only 80–84% identical with the cytosolic ACCases from other plants and from wheat. Four overlapping fragments of cDNA covering the entire coding region were cloned by PCR and sequenced. The wheat plastid ACCase ORF contains 2,311 amino acids with a predicted molecular mass of 255 kDa. A putative transit peptide is present at the N terminus. Comparison of the genomic and cDNA sequences revealed introns at conserved sites found in the genes of other plant multifunctional ACCases, including two introns absent from the wheat cytosolic ACCase genes. Transcription start sites of the plastid ACCase genes were estimated from the longest cDNA clones obtained by 5′-RACE (rapid amplification of cDNA ends). The untranslated leader sequence encoded by the Acc-1 genes is at least 130–170 nucleotides long and is interrupted by an intron. Southern analysis indicates the presence of only one copy of the gene in each ancestral chromosome set. The gene maps near the telomere on the short arm of chromosomes 2A, 2B, and 2D. Identification of three different cDNAs, two corresponding to genes Acc-1,1 and Acc-1,2, indicates that all three genes are transcriptionally active.

Women putting up "Dolly Madison" sign on Madison Avenue at Second Women's March

General note: Title and date provided by Bettye Lane.

Context-aware multi-factor authentication

Trabalho apresentado no âmbito do Mestrado em Engenharia Informática, como requisito parcial para obtenção do grau de Mestre em Engenharia Informática

Integració d'una aplicació de HelpDesk amb LDAP i bbdd externes

Aquest memòria explica el desenvolupament d’un projecte per ampliar l’eina de Help Desk ServiceTonic perquè accedeixi a fonts de dades de tipus LDAP i a bases de dades externes a la pròpia, per realitzar l’autentificació dels usuaris i extreure la informació dels contactes, també permetre l’accés d’usuaris ja autentificats externament sense que tornin a introduir les seves dades d’accés (Single Sign On). La realització del projecte ha suposat un increment en la capacitat d’integració de ServiceTonic amb fonts de dades externes, ampliant el mercat de clients a empreses que ja tenen les dades estructurades.

Adaptive Privacy Management System Design For Context-Aware Mobile Devices

While mobile technologies can provide great personalized services for mobile users, they also threaten their privacy. Such personalization-privacy paradox are particularly salient for context aware technology based mobile applications where user's behaviors, movement and habits can be associated with a consumer's personal identity. In this thesis, I studied the privacy issues in the mobile context, particularly focus on an adaptive privacy management system design for context-aware mobile devices, and explore the role of personalization and control over user's personal data. This allowed me to make multiple contributions, both theoretical and practical. In the theoretical world, I propose and prototype an adaptive Single-Sign On solution that use user's context information to protect user's private information for smartphone. To validate this solution, I first proved that user's context is a unique user identifier and context awareness technology can increase user's perceived ease of use of the system and service provider's authentication security. I then followed a design science research paradigm and implemented this solution into a mobile application called "Privacy Manager". I evaluated the utility by several focus group interviews, and overall the proposed solution fulfilled the expected function and users expressed their intentions to use this application. To better understand the personalization-privacy paradox, I built on the theoretical foundations of privacy calculus and technology acceptance model to conceptualize the theory of users' mobile privacy management. I also examined the role of personalization and control ability on my model and how these two elements interact with privacy calculus and mobile technology model. In the practical realm, this thesis contributes to the understanding of the tradeoff between the benefit of personalized services and user's privacy concerns it may cause. By pointing out new opportunities to rethink how user's context information can protect private data, it also suggests new elements for privacy related business models.

Módulo de autenticación SAML2 para DokuWiki

Este Proyecto Final del Máster Oficial de Software Libre, Módulo de autenticación SAML2 para DokuWiki, consiste en el desarrollo de un módulo que permite integrar la aplicación web DokuWiki con una infraestructura de autenticación y autorización basada en SAML2 (un sistema Single Sign-On). Concretamente la infraestructura SAML2 a la que se hace referencia consiste en la instalación de la aplicación SimpleSAMLphp con el consiguiente despliegue de un Proveedor de Servicios y un Proveedor de Identidad.