todo

bring up an nntp interface to the lists to help force the thinking about
the spread of the archives and what it means for authz issues in this
space. we'll have archive access on a list-specific page provided by the
listmgr tool, archives via a website (cms/forum/bboard system), archives
via nntp, archives via imap, archives via rss.

it should be possible to subscribe to any one of these services. the key
in the authz space is really to determine if you may subscribe.

Is it possible to assign mutliple IP addresses to a single interface using DHCP? The man page for dhcpd.conf suggests one can, but I haven't figured out how to do this. This is desirable so that we can multi-home our hosts to the internal/external IPs on the shared segment and not need to cross a router boundry for things like NFS file shares.

The weblogin service is a WebISO solution. It leverages the Pubcookie technology from University of Washington, which is an open-source software for intra-institutional Web authentication. There may be many Websites that require authentication in UAB. The weblogin helps user just login once and then reuse the existing authentication to visit the other Websites.

Pubcookie consists of a login server and modules for Web server like Apache HTTP server or Microsoft IIS.
If IIS is used as Web server, ISAPI Filter is needed. For Apache HTTP server, we need to install Apache Module. Please see the Pubcookies Websites for the detail: http://pubcookie.org/docs/

We need to understand what the purpose of the authtypeN values in the ISAPI filter are for (looks like backward compatibility) and if we need them (I'm guessing not).

We need an email list geared towards users of the weblogin service. This could potentially be a forum need to scratch head and think. List name would look like weblogin@lists.lab.ac.uab.edu.

This is a page that can be visited by users interested in setting up their webapp with pubcookie. It should include links to all the necessary files and documentation on how to this up.

The propsed URL is http://lab.ac.uab.edu/beta/weblogin

We need to know if the ms patch application process has any impact on the operation of the ISAPI pubcookie filter.

This involves setting up a vanilla w2k box, install and config pubcookie, make sure everything is working, and then apply all ms patches to the os and iis, after that see if pubcookie still works.

We need to create a presentation for the TIMGROUP meeting. It should cover the needs of an audience of technology professionals interested in a WebISO solution.

We need to test the per-application custom logout message feature that is part of the login server. We need to determine if this is a service we want to provide to application writers on campus.

We need to get a verisign server cert for the login server.

https://onsite.verisign.com/UniversityofAlabamaatBirminghamITInfrastructureServicesGlobalServer/serverEnroll.htm