----- Original Message -----
From: Kwon Oh-hoon <[EMAIL PROTECTED]>
To: Gary Dobbins <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, April 16, 1999 8:01 PM
Subject: Re: [Q] About GINA Module of AFS 3.5 products
> >
> > You're welcome to a copy, however...
> > <...snip...>
> > I'm at this moment totally rewriting it to serve a new system
> > Still want the old code?
> >
>
> Firstly, I give unstined praise for you and your product.
>
> I think the new GINA will help us, but as soon as possible
> we need authentication module to use in Web Applications
> such as Active Server Pages, and Windows Applcation such as
> Visual Basic, Access, etc.
>
> Is the old GINA fit for these purpose?
The GINA does not directly benefit the webserver (IIS), but the
password-update mechanism does.
The mechanism by which the GINA updates the Domain Controller's
mirror of your primary credenitals can also benefit the IIS, but
would require an IIS ISAPI AuthFilter extension be written, and
that part is not at all ready for release.
My hope is to publish the GINA, the listener (which updates the NT
domain), and the IIS extension. To use this package at a site
would require modification to only the listener, to communicate
with your site's authentication reference. Adaptation of the
subtleties of the GINA's function would be second-order tasks.
> If we use it, what is the requirements of AFS NT?
Doesn't matter if you have AFS-NT or not. The only external
prerequisite is that you have some form of callable credential
verifier (i.e. "is this userID/password combination valid?"). For
that, we happen to use a UDP socket to call into a TACACS server
(so the Kerb code only needs to live in one place), but any number
of mechanisms could be adapted, including calling a Kerb library on
the NT PDC.
> Should we have AFS 3.5 for windows?
Again, makes no difference. Our code happens to facilitate
interoperation with AFS, but those are just text strings that could
be changed or eliminated, depending upon what it is you want to
adapt.
> Finally, when will you finish rewriting the new GINA?
Expected in May. Will post to the [EMAIL PROTECTED] list (this one
too, if appropriate and demand warrants) when I have something
packaged up suitable for re-use (all the embarrassing comments are
taken out of the code ;-).
------------------------------------------------------------
Gary L. Dobbins -- Director, Technical Science
University of Notre Dame, Office of Information Technologies
[EMAIL PROTECTED] -- http://www.nd.edu/~dobbins
219.631.7566 -- FAX 219.631.8201
------------------------------------------------------------
