Kent, I work at the MITRE Corporation. We are trying to use AFS Web Secure (AWS) to provide a secure web ased interface to our project files. At least one of the shortcomings of this product is lack of support in the following areas: -- Ability to securely upload files to AFS space using AWS. -- Lack of an API definition. To date, Transarc has not been responsive to my questions re: API and file upload. -- Lack of support for Netscape Enterprise Server 4.0 and higher. Again, no response from Transarc. -- We definitely need an interface to the pts server to add, delete and modify groups and the file server to define ACL entiries. "Kent L. Johnson" wrote: > > We have AFS Websecure deployed on our campus-wide web server. We are trying > to promote its use, and are discussing functions which will provide a simple > interface to add/delete/modify pts groups, from a web-based application. See my comments above. ============================================================================== > > Many of our users are PC based users who access their AFS files through > samba. Therefore, they do not run AFS on their PCs and do not login to Unix > systems to access the pts groups. Additionally, there is a steep learning > curve for non-Unix people, before using the pts commands. We have a very similar situation at MITRE. We have been trying to secure this interface. ============================================================================= > We are trying to develop functional requirements for the web-based pts group > application. The basic idea is to have a web-based application to which > users will authenticate using WebSecure, and then will interact with a GUI to > examine and modify the PTS groups owned by them. > > Has anyone else considered this type of function? > Has anyone implemented this type of function? > > We are interested to know if anyone else has attempted to develop any similar > applications. > I would be very interested in discussing this further with you. I will be out of pocket today (Wed 6/14). I will be available the remainder of the week. My phone number and email address at at the bottom of this message. At this time, we are looking at other solutions for our environment. But, I have not given up on AWS entirely. Kenneth Zwirble The MITRE Corporation tel: 781-271-7805 email: [EMAIL PROTECTED] > -- > Kent Johnson Internet: [EMAIL PROTECTED] > Unix Systems Programmer (VCC 323) Phone: (518) 276-8175 > Rensselaer Polytechnic Institute Fax: (518) 276-2809
begin:vcard n:Zwirble;Kenneth C. tel;fax:781-271-3957 DSN: 478-1186 X3957 tel;work:781-271-7805 DSN: 478-1186 X 7805 x-mozilla-html:FALSE url:http://www.mitre.org org:The MITRE Corporation;G022 - Enterprise Security Solutions version:2.1 email;internet:[EMAIL PROTECTED] title:Lead Infosec Engineer adr;quoted-printable:;;202 Burlington Road=0D=0AMailstop B305;Bedford;MA;01730-1420;USA fn:Kenneth C. Zwirble end:vcard
