KProxy

  • Provides Kerberos AuthN for WebDAV clients
  • Custom solution created at CIT
    • Uses a modified mod_auth_kerb Apache module
  • NetID/password is entered into dialog supplied by the WebDAV client
  • Is a Kerberos proxy
  • Uses K5 to authenticate user
  • Uses K4 KPA Credential to authenticate to WebDAV server
  • Uses SSL
  • Uses Apache
  • No automatic fail over
    • But a DNS change can point clients to a secondary KProxy server
  • No load balancing
  • OS: Solaris 5.9
  • Machines are in server farm
    • Two factor AuthN required for SSH login
  • Production: 2 machines (primary and secondary)
    • Split between Rhodes and CCC
  • Test: 1 instance
  • No labels