• Created by user-b937b, last updated on Jan 18, 2008 1 minute read

ApplicantID Forgot Password Web App

  • A forgotten ApplicantID password can be reset if the user knows the answers to their security questions
  • Can reset their ApplicantID password in NetID Kerberos KDC
  • Custom web app created at CIT
  • New password must meet complexity rules
  • Uses Java and Spring framework
  • Uses Tomcat (shared instance with several other IdM web apps)
  • Uses Apache web server
  • Uses SSL
  • Uses kadmin C binary to hit Guest ID Kerberos KDC via Kerberos 5
  • Uses JDBC with ID/password for Oracle DB which stores security questions
    • Oracle DB is hosted by DBA group. IdM has our own DB instance on shared hardware
    • Security questions are encrypted by app with Java Cryptography Extension PBEWithSHA1AndDESede
  • OS: Solaris 5.9 Cluster
  • No automatic fail over
    • But can be moved manually via scswitch commands
  • No load balancing
  • Machines are in server farm
    • Two factor AuthN required for SSH login
  • Production: 3 node cluster
    • Shares node with some other IdM web apps
  • Test: 2 node cluster
  • Dev: 2 node cluster
  • No labels