ServiceID Manager Web App

• Web app which creates new Kerberos principals, srvtabs, and keytabs
• Custom web app created at CIT
• Uses Java and Tomcat
• Uses Spring/Struts framework
• Uses SSL
• CUWebAuth provides Kerberos AuthN to app
• Special branch of Directory Server is DB
  • Uses LDAP and SSL with Directory Server
  • Uses BindID and password to authenticate to Directory Server
• Uses kdamin via K5 with NetID KDC
• OS: Solaris 5.9 Cluster
• No automatic fail over
  • But can be moved manually via scswitch commands
• No load balancing
• Machines are in server farm
  • Two factor AuthN required for SSH login
• Production: 3 node cluster
  • Shares node with some other IdM web apps
• Test: 2 node cluster
• Dev: 2 node cluster