GuestID System

• Provides a Kerberos ID for users who do not have a NetID
• Currently used in 2 cases: Blackboard and Applicants
  • Allows users who do not have a NetID to use Kerberos AuthN when using Blackboard
  • Allows applicants to use Kerberos AuthN when applying on-line
    • GuestIDs used by applicants are also called ApplicantIDs
• Uses GuestID KDC
• Blackboard and Admissions use CUWebAuth configured to use both NetIDs and GuestIDs.
• Blackboard and Admissions provide AuthZ via their systems
  • Blackboard sys admins authorize the GuestID using Blackboard tools
  • Admissions authorizes ApplicantIDs with their admissions system
• User gets a GuestID via the GuestID Registration web page
  • Registration page is protected via HTTP Basic ID and password
  • Registrations are confirmed and activated via e-mail
• There are also web pages for ...
  • Change password
  • Retrieve a forgotten password
  • Change e-mail address and name.
  • Managing account information by trusted administrators
• The web pages ...
  • Are written in ColdFusion
  • Are hosted on the IS Multi-Server ColdFusion Hosting service.
  • Use SSL
  • Use CUWebAuth and CUWebLogin where needed for Kerberos AuthN
  • Use LDAP with Directory Server
  • Use kadmin with Guest Kerberos KDC
• Registration information on each GuestID is stored in a special branch of Directory Server
  • Is not searchable by public