Raven info eagle current status

Raven! info. eagle. current. status (. . . or “where we've got to with Raven”) Jon Warbrick University of Cambridge Computing Service jon. warbrick@ucs. cam. ac. uk

Remind me, what it is? ● ● A centrally-managed, password-based authentication system for web-based services Consisting of – Centrally-managed user ids and passwords – Central authentication server – 'Application Agents' (AAs) for web servers and web applications

Where we are today ● User ids and passwords issued to everyone ● Central server running ● ● CS supported AAs for Apache 1 and 2 under Unix (Solaris, Linux, Mac. OSX); Perl CGI Contributed AAs (of varying quality) for Tomcat, Ruby CGI, PHP

Who's using it? ● www. cam extending 'cam-only' ● The new @cam mail redirection service ● CS for internal Wiki access ● University Library, Computer Laboratory, Geography, Genetics, . . . ● Clare, Downing, Trinity Hall, Jesus, . . . ● Union Society, SRCF, . . .

What you can do with it ● A replacement for 'cam-only': Add. Module mod_ucam_webauth. c AACookie. Key "some random string" Auth. Type Ucam-Web. Auth Require valid-user

What you can do with it (2) ● An extension of 'cam-only': Add. Module mod_ucam_webauth. c AACookie. Key "some random string" Order allow, deny Allow from. cam. ac. uk Auth. Type Ucam-Web. Auth Require valid-user Satisfy any

What you can do with it (3) ● Group access Add. Module mod_ucam_webauth. c AACookie. Key "some random string" Auth. Type Ucam-Web. Auth. Group. File web-groups Require group staff

Where next? ● Apache module built for Windows and Novell? ● Better AAs: Java/Tomcat, PHP, . . . ? ● More AAs: IIS? . . . ? ● Extension to non-University people? ● ● Example 'Ravenization' of existing web applications? Links with Kerberos, Athens, Shiboleth, . . . ?

For more information. . . ● See http: //www. cam. ac. uk/cs/raven/ ● Mailing list at cs-raven-devel-request@lists. cam. ac. uk

Questions so far?