Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-05 Thread Don Hamparian
Hello Riley, and everyone participating. Your email is a very succinct summary of what many are likely thinking right now about EZproxy, its future, and open source or other alternatives. As a nonprofit membership organization, OCLC strives to align its pricingwith our mission to serve our member

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Riley Childs
I never thought about this before, but it makes perfect sense, it is impossible for the only product in the industry to maintain a perpetual licensing model, EZProxy is the only one stop shop of its kind, and that is exactly the reason an alternative is needed. Not because EZProxy is lacking or

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Terry Reese
ability to hack the proxy. --tr -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Peter Murray Sent: Monday, February 3, 2014 4:21 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I think it also useful to think

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Peter Murray
I think it also useful to think about this from the service provider’s perspective. There have been a few calls for enhancements/fixes in this thread, but with no source of ongoing revenue (for self-hosted installations, at least) I don’t know how we can realistically expect the service provide

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread stuart yeates
On 04/02/14 05:09, Andrew Anderson wrote: There exists a trivial DoS attack against EZproxy that I reported to OCLC about 2 years ago, and has not been addressed yet. ... and as soon as that gets a CVE (see http://cve.mitre.org/), corporate IT departments will force libraries to upgrade to th

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Salazar, Christina
.ND.EDU] On Behalf Of Scott Prater Sent: Monday, February 03, 2014 9:06 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I'd add to the list that EZProxy integration with Shibboleth is fairly minimal; for example, it doesn't support chaining att

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Scott Prater
I'd add to the list that EZProxy integration with Shibboleth is fairly minimal; for example, it doesn't support chaining attribute authorities, which is an issue for us. We opened a ticket several years requesting that feature, but realistically, I doubt it will ever get added. If EZProxy we

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Andrew Anderson
For me it’s a little more concrete, and a little less abstract when it comes to why a viable alternative to EZproxy is necessary. It has very little to do with the cost of EZproxy itself, and much more to do with support, features, and functionality. There exists a trivial DoS attack against E

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread Riley Childs
So the OCLC is starting to become THE one stop shop, next thing you know they will be making an offer on LibGuides. Sent from my iPhone > On Feb 2, 2014, at 8:43 PM, "stuart yeates" wrote: > > It's worse than that. > > The price we were quoted for hosting seems to have been picked so it can > b

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread stuart yeates
It's worse than that. The price we were quoted for hosting seems to have been picked so it can be offered with a 90% discount when bundled with a package deal with other OCLC products; buying into the on-going balkanization of the industry. cheers stuart On 01/02/14 16:24, Roy Tennant wrote:

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread Riley Childs
The institution sacrifices 10 books each year, in the long term this is a lot of money, it isn't a mater of money also, it is the issue there is no alternative to EZProxy. Sent from my iPhone > On Feb 2, 2014, at 3:58 PM, "Wilhelmina Randtke" wrote: > > $500 this year. Five years out, it won'

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread Wilhelmina Randtke
$500 this year. Five years out, it won't be less than $495 each year, but potentially much more. -Wilhelmina Randtke On Fri, Jan 31, 2014 at 9:24 PM, Roy Tennant wrote: > When it comes to hedging bets, I'd sure rather hedge my $50,000 bet than my > $500 one. Just sayin'. > Roy > > > On Fri, J

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread stuart yeates
On 01/02/14 08:34, Mosior, Benjamin wrote: Does anyone have any thoughts on how to move forward with organizing the development and adoption of an alternative proxy solution? A collaborative Google Doc? Perhaps a LibraryProxy GitHub Organization? I'd say that more than anything else what is n

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Roy Tennant
When it comes to hedging bets, I'd sure rather hedge my $50,000 bet than my $500 one. Just sayin'. Roy On Fri, Jan 31, 2014 at 6:04 PM, BWS Johnson wrote: > Salvete! > > Tisn't necessarily Socialist to hedge one's bets. Look at what Wall > St. experts advise when one is unsure of whether t

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Riley Childs
Exactly! OCLC already knows they are the only game in town, that is what drove them to the new pricing scheme, so what is to stop them from jacking up prices even more? They are the Gold, Silver, and Bronze standard, so maybe it is time to develop an alternative, in the hope it will garner vendo

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread BWS Johnson
Salvete! Tisn't necessarily Socialist to hedge one's bets. Look at what Wall St. experts advise when one is unsure of whether to hold or sell. Monopoly is only ever in the interest of those that hold it. Short term the aquarium is enticing, but do you enjoy your collapsed dorsal f

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Kyle Banerjee
On Fri, Jan 31, 2014 at 3:10 PM, Salazar, Christina < christina.sala...@csuci.edu> wrote: > I think though that razor thin budgets aside, the EZProxy using community > is vulnerable to what amounts to a monopoly. Don't get any ideas, OCLC > peeps (just kiddin') but now we're so captive to EZProxy,

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Salazar, Christina
I think though that razor thin budgets aside, the EZProxy using community is vulnerable to what amounts to a monopoly. Don't get any ideas, OCLC peeps (just kiddin') but now we're so captive to EZProxy, what are our options if OCLC wants to gradually (or not so gradually) jack up the price? Doe

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Tim McGeary
Even with razor thin budgets, this is a no brainer. May they need decide between buying 10 new books or license EZProxy? Possibly, but if they have a need for EZProxy, that's still a no brainer - until a solid OSS replacement that includes as robust a developer /support community comes around. B

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Riley Childs
But there are places on a razor thin budget, and things like this throw them off ball acne Sent from my iPhone > On Jan 31, 2014, at 3:32 PM, "Tim McGeary" wrote: > > So what's the price point that EZProxy needs to climb to make it more > realistic to put resources into an alternative. At $500

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Tim McGeary
So what's the price point that EZProxy needs to climb to make it more realistic to put resources into an alternative. At $500/year, I don't even have to think about justifying it. At 1% (or less) of the cost of position with little to no prior experience needed, it doesn't make a lot of sense to

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Mosior, Benjamin
Does anyone have any thoughts on how to move forward with organizing the development and adoption of an alternative proxy solution? A collaborative Google Doc? Perhaps a LibraryProxy GitHub Organization? Benjamin Mosior

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Ross Singer
Not only that, but it's also expressly designed for the purpose of reverse proxying subscription databases in a library environment. There are tons of things vendors do that would be incredibly frustrating to get working properly in Squid, nginx, or Apache that have already been solved by EZProxy.

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Kyle Banerjee
> EZproxy is a self-installing statically compiled single binary download, > with a built-in administrative interface that makes most common > administrative tasks point-and-click, that works on Linux and Windows > systems, and requires very little in the way of resources to run. It also > has a l

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Andrew Anderson
4LIB@LISTSERV.ND.EDU] On Behalf Of Kyle > Banerjee > Sent: Friday, January 31, 2014 12:14 PM > To: CODE4LIB@LISTSERV.ND.EDU > Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? > > Many good ideas in this thread. > > One thing I'd just like to throw out there is that t

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Joshua Welker
@LISTSERV.ND.EDU] On Behalf Of Timothy Cornwell Sent: Friday, January 31, 2014 11:44 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I have an IT background and some apache proxy experience, and it seems fairly easy - for me. I understand it may not be for libraries

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Timothy Cornwell
limited IT resources? -T -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Kyle Banerjee Sent: Friday, January 31, 2014 12:14 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? Many good ideas in this

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Kyle Banerjee
Many good ideas in this thread. One thing I'd just like to throw out there is that there are some ideas that may be good to distribute in the form of virtual machines and this might be one of them. Proxying is needed by practically all libraries and takes little in terms of systems resources. But

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Cary Gordon
If there is a demand for an EZProxy alternative, nginx might be a better way to go. Nginx is a reverse proxy ootb, and it is very configurable. It is fast, simple and, notably, it is fast. Cary On Jan 31, 2014, at 5:43 AM, Ryan Eby wrote: > There was actually a breakout in 2011? Code4lib disc

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Ryan Eby
There was actually a breakout in 2011? Code4lib discussing Apache and using it as a proxy. I believe Terry Reese and Jeremy Frumkin, then from Oregon?, were the ones leading it. There was lots of interest but I’m not sure if anything took off or if they have documentation somewhere of how far th

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Riley Childs
Well I think there are acctually working solutions if you Google EZProxy squid you find tons of people who have cobbled together solutions, you just need the best pieces together to make it work! Who wants to start the GitHub repo? Sent from my iPhone > On Jan 29, 2014, at 8:58 PM, "Scott Prate

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Scott Prater
I second Stuart's kudos. Replacing EZProxy with an Apache proxy sounds just crazy enough to be brilliant. I could see an open source recipe book taking shape: how to accomplish EZProxy functions using Apache modules and their directives. I think that might end up being more useful than yet anoth

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Ross Singer
d product is updated to the most current version > automatically. > >> > >> My recommendation is: If your installation of EZProxy works, don't > change it. Yet. Upgrade your installation to the last version available > under the old license, and use that for as long as you can.

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Shirley Lincicum
may very well be Apache HTTPd with vendor-specific > configuration files. > > -- > Andrew Anderson, Director of Development, Library and Information > Resources Network, Inc. > http://www.lirn.net/ | http://www.twitter.com/LIRNnotes | > http://www.facebook.com/LIRNnotes >

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread stuart yeates
Thank you Andrew, that is insanely useful. cheers stuart On 30/01/14 12:00, Andrew Anderson wrote: When OCLC first announced their purchase of EZproxy, we started a low priority research project to see what the alternatives were a few years ago, and what it would take to bring them into a pro

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Andrew Anderson
braries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of > stuart yeates > Sent: Wednesday, January 29, 2014 1:40 PM > To: CODE4LIB@LISTSERV.ND.EDU > Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? > > The text I've seen talks about "[e]xpanded reporting capa

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread David Friggens
; -Original Message- > From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of > stuart yeates > Sent: Tuesday, January 28, 2014 10:03 PM > To: CODE4LIB@LISTSERV.ND.EDU > Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? > > I probably should have

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Riley Childs
;>> change, either to the yearly fee, or the cost of hosted, or to some >>> as-yet-undetermined alternative. But I see no need to start paying now for >>> updates you don't need. >>> >>> -Andy >>> >>> >>> >>> Andy I

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Cary Gordon
>> as-yet-undetermined alternative. But I see no need to start paying now for >> updates you don't need. >> >> -Andy >> >> >> >> Andy Ingraham Dwyer >> Infrastructure Specialist >> State Library of Ohio >> 274 E. 1st Avenue >&g

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Margo Duncan
ies [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of stuart yeates Sent: Wednesday, January 29, 2014 1:40 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? The text I've seen talks about "[e]xpanded reporting capabilities to support management decision

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread stuart yeates
uart yeates Sent: Tuesday, January 28, 2014 10:03 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I probably should have been more specific. Does anyone have experience switching from EzProxy to anything else? Is anyone else aware of the coming OCLC chan

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Richard Sarvas
--- Original message From: Andreas > Orphanides Date:01/28/2014 9:29 PM > (GMT-05:00) To: CODE4LIB@LISTSERV.ND.EDU > Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? > That's simple for the techs, but VPNs can be a royal pain > in the keester if you're an end

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Ingraham Dwyer, Andy
.ohio.gov -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of stuart yeates Sent: Tuesday, January 28, 2014 10:03 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I probably should have been more specific. Do

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
phanides > Date:01/28/2014 9:29 PM (GMT-05:00) > To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] > EZProxy changes / alternatives ? > That's simple for the techs, but VPNs can be a royal pain in the > keester if > you're an end-user, for a variety of reas

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread tmccanna
Ditto to Andreas. Sent from my Verizon Wireless 4G LTE Smartphone Original message From: Andreas Orphanides Date:01/28/2014 9:29 PM (GMT-05:00) To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? That's simple for the techs, but VPN

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
Someone actually has a empty repo on GitHub called "freeproxy" but that might take a while... Sent from my iPhone > On Jan 28, 2014, at 9:52 PM, "Ross Singer" wrote: > > I hate to say it, but Squid will not be simple to get the kind of results > EZProxy gets. Shibboleth can take care of a han

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Ross Singer
I hate to say it, but Squid will not be simple to get the kind of results EZProxy gets. Shibboleth can take care of a handful (of probably some of your larger, more commonly accessed?) resources. Maybe Squid can take care of the rest, but my guess is it's the smaller, more niche resources that

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
My solution came from Google, but it was people setting up the solution, from what I can tell EZProxy had the market cornered, but Squid should be simple enough to setup, and with the coming changes more people in your boat will be able to solutionize! Sent from my iPhone > On Jan 28, 2014, at

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread stuart yeates
I probably should have been more specific. Does anyone have experience switching from EzProxy to anything else? Is anyone else aware of the coming OCLC changes and considering switching? Does anyone have a worked example like: "My EzProxy config for site Y looked like A; after the switch, my X

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
A VPN could be a stopgap while you figure something else out, but yes I agree they are a pain for patrons. Plus from a security standpoint I wouldn't want patrons VPNing into my network, too many holes. Sent from my iPhone > On Jan 28, 2014, at 9:26 PM, "Andreas Orphanides" wrote: > > That's s

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Andreas Orphanides
That's simple for the techs, but VPNs can be a royal pain in the keester if you're an end-user, for a variety of reasons. It should be incumbent on us as information specialists to unburden the user to the extent possible. On Tue, Jan 28, 2014 at 9:23 PM, Aaron Addison wrote: > Some use Squid, i

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Aaron Addison
Some use Squid, its not hard to set up. But most vendors publish rules with ezproxy in mind. The other fairly simple solution is to run a VPN for access, and require people to use that. Aaron On Tuesday, January 28, 2014, stuart yeates wrote: > We've just received notification of forth-comin

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
Did a little research I think Squid would work, not as a drop in replacement. Same with apache (there is a proxy redirect directive...I don't recall it). I haven't tried either solution, but they seem to have the same concept, albeit with a little more configuration! Good Luck //Riley Sent fro

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread stuart yeates
EZProxy is a proxy for use with vendors that have products gateway'd by IP address. It allows users who are off-campus to access resources that are locked down by IP address as though the user was on campus. It does deep-packet inspection to write URLs and javascript, facing DNS stuff, etc. It

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
Ok, what exactly is EZProxy, I could never figure that out, if I knew I could help :) Sent from my iPhone > On Jan 28, 2014, at 9:04 PM, "stuart yeates" wrote: > > We've just received notification of forth-coming changes to EZProxy, > which will require us to pay an arm and a leg for future ver

[CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread stuart yeates
We've just received notification of forth-coming changes to EZProxy, which will require us to pay an arm and a leg for future versions to install locally and/or host with OCLC AU with a ~ 10,000km round trip. What are the alternatives? cheers stuart -- Stuart Yeates Library Technology Services