• Created by user-b937b, last updated on Jan 22, 2008 1 minute read

GuestID System

  • Provides a Kerberos ID for users who do not have a NetID
  • Currently used in 2 cases: Blackboard and Applicants
    • Allows users who do not have a NetID to use Kerberos AuthN when using Blackboard
    • Allows applicants to use Kerberos AuthN when applying on-line
      • GuestIDs used by applicants are also called ApplicantIDs
  • Uses GuestID KDC
  • Blackboard and Admissions use CUWebAuth configured to use both NetIDs and GuestIDs.
  • Blackboard and Admissions provide AuthZ via their systems
    • Blackboard sys admins authorize the GuestID using Blackboard tools
    • Admissions authorizes ApplicantIDs with their admissions system
  • User gets a GuestID via the GuestID Registration web page
    • Registration page is protected via HTTP Basic ID and password
    • Registrations are confirmed and activated via e-mail
  • There are also web pages for ...
    • Change password
    • Retrieve a forgotten password
    • Change e-mail address and name.
    • Managing account information by trusted administrators
  • The web pages ...
    • Are written in ColdFusion
    • Are hosted on the IS Multi-Server ColdFusion Hosting service.
    • Use SSL
    • Use CUWebAuth and CUWebLogin where needed for Kerberos AuthN
    • Use LDAP with Directory Server
    • Use kadmin with Guest Kerberos KDC
  • Registration information on each GuestID is stored in a special branch of Directory Server
    • Is not searchable by public
  • No labels