NetID Change Password Web App

  • An end user can change their NetID password if they know their current password
  • Changes password in NetID Kerberos KDC
  • Sets same password in CIT's Active Directory if user is assigned a special permit
  • Custom web app created at CIT
  • New password must meet complexity rules
  • Uses Java and Spring framework
  • Uses Tomcat (shared instance with several other IdM web apps)
  • Uses Apache web server
  • Uses SSL
  • CUWebAuth provides end user authentication to web app
  • Uses kadmin C binary to hit NetID Kerberos KDC via Kerberos 5
  • Uses LDAP and SSL, with Bind ID/password for Active Directory
  • OS: Solaris 5.9 Cluster
  • No automatic fail over
    • But can be moved manually via scswitch commands
  • No load balancing
  • Machines are in server farm
    • Two factor AuthN required for SSH login
  • Production: 3 node cluster
    • Shares node with some other IdM web apps
  • Test: 2 node cluster
  • Dev: 2 node cluster
  • No labels