NetID Admin Client

• Creates new NetIDs
• Provides administrative functionality for NetIDs and ApplicantIDs, such as ...
  • Create
  • Activate
  • Terminate
  • Change password
  • Create activation codes
• Use is restricted to a few trusted administrators in HR and Contact Center
• Custom app created at CIT

Several Components

• Desktop - Java fat client
  • Windows only
  • User authenticates with K4
• CORBA Business Logic Server
  • Tied to Java 1.42
• No automatic fail over
  • But can be moved manually via scswitch commands
  • No load balancing
  • OS: Solaris 5.9 cluster
  • Machines are in server farm
    • Two factor AuthN required for SSH login
  • Production: 3 node cluster
  • Shares node with some other Identity Management web apps
• Common CORBA Cloud
  • Run by IS
  • (Not sure about OS, failover, and load balancing)

A new NetID (or ApplicantID) gets copied to these DBs.

• Alias (via CUSSP using Kerberos 4, via Kfront)
• PeopleSoft (via JDBC using ID/password)
• Directory Server (via LDAP with SSL using BindID/pwd)
• NetID Kerberos KDC (via C binary kadmin using K5) or ...
  • Guest Kerberos KDC (if ApplicantID)
• Permit Server (via CUSSP using Kerberos 4)
• IdM Orcale DB - (via JDBC using ID/pwd)