1. Google Apps – KKU Experience
+DENPONG SOODPHAKDEE
VP.ACAD.IT @KKU

2. ubiquitous computing, ubiquitous
information, ubiquitous networks,
at unlimited speed, about
everything, everywhere, from
anywhere, on all kinds of devices
that make it ridiculously easy to
connect, organize, share, collect,
collaborate and publish.
Michael Wesch, Prof. Kansas State University

4. Traditional Learning Pervasive Learning
Mobile Learning Ubiquitous Learning
Embeddedness
Mobility
Low high
high
Low

10. What we have?
• People
• Staffs ~ 10,000
• Students ~ 43,000
• Connectivity
• Internet ~ 1 + 1 Gbps
• Intranet ~ 1 – 10 Gbps
• Mail Gateway – IronPort C150
• License: 1 Gbps
• Mail Server
• NextMessage
• 1 GB / account for staffs

11. Mail Service for Students (past)
LDAP
Google Apps: glive.kku.ac.th
Login
Google Apps
Directory Sync

12. How did we start?
• Single Sign‐On instead of Google Apps Directory Sync
• Teamed with Google (CRM‐Charity)
• Policy team: VP Academic & IT and AP for IT
• Technical team: KKUCC
• Change management team: KKUCC & ILTI
• The program will take ~ 6 months.
• We started in April, and want to finished (at least, infrastructure) in May.

13. Policy
• Single Sign‐On
• Or, at least, single account
• Enable all Google Apps for Edu. services except ads.
• Staffs
• Staffs must use their own KKU account
• Domain: kku.ac.th
• The Cabinet Resolution forces MX to be set to KKU, not Google. :(
• Staff have to manually / voluntarily forward their mail to Google
• Students
• Student must be able to choose their own username.
• Student accounts will be life‐long.
• Must be a part of first name and/or last name
• Domain: kkumail.com
• Vote, using facebook :)

14. Technical
• Google Apps SSO is based on Security Assertion Markup Language
(SAML)
• Establish trust between two parties (host‐based) using PKI
• RSA
• DSA
• PoC?
• Moodle‐Google Apps Integration
• SAML 2.0‐based Single Sign‐On
• Data synchronization through Google Provisioning API.
• Password
• Global password changing web apps

15. Staff infrastructure
HR DB (MySQL)
accounts.kku.ac.th
- login
- logout
Google Apps: kku.ac.th
SSO
Login
Redir. login
Account
LDAP

16. Student Infrastructure
Reg. DB (Oracle)
std-acct.kku.ac.th
- login
- logout
- e-mail chooser
Google Apps: kkumail.com
SSO
Login
Redir. login
LDAP mod.
Account
LDAP

17. Sign‐on Server
• VMs in ESXi on IBM x3630 M3
• 4‐8 vCPU / 2 GB memory / 16 GB storage
• Platform:
• Ubuntu Linux 10.04 LTS
• Lighttpd + PHP5 (FastCGI mode)
• Percona MySQL Server
• (Customized) Moodle 1.9 + Google Apps Integration

18. Focus Group
• Students: 12+ hr connect to the Internet
• Paperwork
• File sharing
• Top‐down policy
• Class assignment
• Support
• PR

19. Google Apps Website

20. Change Management Plan

21. Google Apps Features

22. Ads

23. Poster and Roll‐up

25. What next?

26. reached one billion
YouTube views on
December 21, 2012
6 months and 24 days
uploaded to
YouTube on July 18,
2012

27. LICENSE: Creative
Commons (Attribution‐
Noncommercial‐No
Derivative Works).
5 years 11 months
uploaded to
YouTube on Mar 10,
2007

34. http://slideshare.net/denpong
denpong@kku.ac.th