Authentication - Revision history

Pew at 08:26, 3 January 2019

2019-01-03T08:26:53Z

2019-01-03T08:25:49Z

2019-01-03T08:25:10Z

‎Account maintenance instructions

2019-01-03T08:25:03Z

2019-01-03T08:24:43Z

2018-01-04T05:57:49Z

2018-01-04T01:13:22Z

2018-01-02T08:44:31Z

2016-03-26T19:28:08Z

‎Account maintenance instructions

2016-03-26T19:27:57Z

← Older revision		Revision as of 08:26, 3 January 2019
Line 18:		Line 18:
	= CAS =		= CAS =

		+	The '''Virginia Tech Central Authentication System''' or '''CAS''' is the Virginia Tech deployment of the [[Free software\|open source]] [[w:Shibboleth (Internet2)\|Shibboleth]] authentication system. Shibboleth can be thought of as an identity provider similar to [[w:OpenID\|OpenID]], but more centralized, and thus well-liked by institutions such as universities.
		+
		+	== Scripted Login ==
		+	The following is a work in progress. Eventually, the following commands should yield a login.
		+	<pre>
		+	$ curl -s -c cookies https://auth.vt.edu/login?service=https://my.vt.edu/Login \| sed -nrf sedconf \| xargs curl
		+	</pre>
		+
		+	The <code>sedconf</code> file's contents are below.
		+	<pre>
		+	/name="lt"/s/.value="([^"]).*/-d "lt=\1"/p
		+	/name="_eventId"/s/.value="([^"]).*/-d "eventId=\1"/p
		+	/name="submit"/s/.value="(^")".*/-d "submit=\1"/p
		+	/action="/s/.action="([^;])[^?](\??[^"]).*/--url "https:\/\/auth.vt.edu\1\2"/p
		+	$a -d "username=bob"
		+	$a -d "password=bubba"
		+	$a -c cookies
		+	</pre>
		+
		+	Refer to the [[sed]] and [[curl]] manual pages for details on the various commands that drive this script.
		+
		+	=External Links=
		+	* [https://auth.vt.edu VT CAS]
		+	* [http://www.computing.vt.edu/infrastructure_services/cas/index.html Description of CAS]

	[[Category:Infrastructure]]		[[Category:Infrastructure]]
		+	[[Category:Scripts]]
		+	[[Category:Campus computing resources]]

@@ Line 1: / Line 1: @@
 VTLUUG uses [[Infrastructure:Chimera|chimera]] as it's FreeIPA server, and all VTLUUG hosts except [[Infrastructure:Joey|joey]], the router, are in its domain.
@@ Line 12: / Line 14: @@
 With the old deployment, [[Infrastructure:Acidburn|acidburn]] should be acceptable through normal password authentication over ssh. There is no need to configure tickets or anything else Kerberos related.
 [[Category:Infrastructure]]

@@ Line 3: / Line 3: @@
 == Account maintenance instructions ==
-All users can log into [[https://chimera.vtluug.org Chimera's FreeIPA web GUI] to edit their account. Yes, it does have a self signed cert. Get over it /s
+All users can log into [https://chimera.vtluug.org Chimera's FreeIPA web GUI] to edit their account. Yes, it does have a self signed cert. Get over it /s
 For management of the entire domain, officers are able to add, remove, or modify users in any way.

@@ Line 1: / Line 1: @@
-VTLUUG uses [[Infrastructure:Chimera chimera]] as it's FreeIPA server, and all VTLUUG hosts except [[Infrastructure:Joey joey]], the router, are in its domain.
+VTLUUG uses [[Infrastructure:Chimera|chimera]] as it's FreeIPA server, and all VTLUUG hosts except [[Infrastructure:Joey|joey]], the router, are in its domain.
 == Account maintenance instructions ==
@@ Line 9: / Line 9: @@
 == History ==
-VTLUUG has been was Kerberos and LDAP for authentication until the [[CVL eviction]]. We then migrated to an LDAP only domain due to a lack of IPv6 on behind router.ece.vt.edu. The old Kerberos server was configured to work on IPv6 only therefore we were required to migrate away from its use for authentication.
+VTLUUG has been was Kerberos and LDAP for authentication until the [[CVL eviction]]. We then migrated to an LDAP only domain due to a lack of IPv6 on behind router.ece.vt.edu. The old Kerberos server was configured to work on IPv6 only, therefore, we were required to migrate away from its use for authentication.
-With the old deployment, [[Infrastructure:Acidburn acidburn]] should be acceptable through normal password authentication over ssh. There is no need to configure tickets or anything else Kerberos related.
+With the old deployment, [[Infrastructure:Acidburn|acidburn]] should be acceptable through normal password authentication over ssh. There is no need to configure tickets or anything else Kerberos related.
 [[Category:Infrastructure]]

@@ Line 1: / Line 1: @@
-TODO: Expand
+VTLUUG uses [[Infrastructure:Chimera chimera]] as it's FreeIPA server, and all VTLUUG hosts except [[Infrastructure:Joey joey]], the router, are in its domain.
-VTLUUG has been was Kerberos and LDAP for authentication until the [[CVL eviction]]. We have now migrated to an LDAP only domain due to a lack of IPv6 on behind router.ece.vt.edu. The old Kerberos server was configured to work on IPv6 only therefore we were required to migrate away from its use for authentication.
+== Account maintenance instructions ==
-With the current deployment acidburn should be acceptable through normal password authentication over ssh. There is no need to configure tickets or anything else Kerberos related.
+All users can log into [[https://chimera.vtluug.org Chimera's FreeIPA web GUI] to edit their account. Yes, it does have a self signed cert. Get over it /s
-==Account maintenance instructions==
+For management of the entire domain, officers are able to add, remove, or modify users in any way.
-All users will be able to use standard shell commands (such as chsh) to change attributes of their own account. Additionally they can make direct requests to the LDAP server (razor.vtluug.org) using ldapmodify and .ldif files to change attributes as well. Explaining .ldif files and ldapmodify is beyond the scope of this article.
+== History ==
 [[Category:Infrastructure]]

@@ Line 10: / Line 10: @@
 For management of the entire domain officers who know the LDAP root users credentials will be able to log in to the LDAP Administrator web application running on razor.vtluug.org. Information on this is really only shared on a need to know basis between officers, and the content is not entirely appropriate for a public wiki.
 [[Category:Infrastructure]]
 [[Category:Needs restoration]]

@@ Line 4: / Line 4: @@
 ==Account maintenance instructions==
-''Main article: [[VTLUUG:LDAP info]]''
+''Main article: [[VTLUUG:LDAP Info]]''
 All users will be able to use standard shell commands (such as chsh) to change attributes of their own account. Additionally they can make direct requests to the LDAP server (razor.vtluug.org) using ldapmodify and .ldif files to change attributes as well. Explaining .ldif files and ldapmodify is beyond the scope of this article.

← Older revision		Revision as of 19:27, 26 March 2016
Line 4:		Line 4:

	==Account maintenance instructions==		==Account maintenance instructions==
		+	''Main article: [[VTLUUG:LDAP info]]''
	All users will be able to use standard shell commands (such as chsh) to change attributes of their own account. Additionally they can make direct requests to the LDAP server (razor.vtluug.org) using ldapmodify and .ldif files to change attributes as well. Explaining .ldif files and ldapmodify is beyond the scope of this article.		All users will be able to use standard shell commands (such as chsh) to change attributes of their own account. Additionally they can make direct requests to the LDAP server (razor.vtluug.org) using ldapmodify and .ldif files to change attributes as well. Explaining .ldif files and ldapmodify is beyond the scope of this article.