Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-05 Thread Don Hamparian
Hello Riley, and everyone participating. Your email is a very succinct summary of what many are likely thinking right now about EZproxy, its future, and open source or other alternatives. As a nonprofit membership organization, OCLC strives to align its pricingwith our mission to serve our

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Andrew Anderson
For me it’s a little more concrete, and a little less abstract when it comes to why a viable alternative to EZproxy is necessary. It has very little to do with the cost of EZproxy itself, and much more to do with support, features, and functionality. There exists a trivial DoS attack against

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Scott Prater
I'd add to the list that EZProxy integration with Shibboleth is fairly minimal; for example, it doesn't support chaining attribute authorities, which is an issue for us. We opened a ticket several years requesting that feature, but realistically, I doubt it will ever get added. If EZProxy

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Salazar, Christina
: Monday, February 03, 2014 9:06 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I'd add to the list that EZProxy integration with Shibboleth is fairly minimal; for example, it doesn't support chaining attribute authorities, which is an issue for us. We

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread stuart yeates
On 04/02/14 05:09, Andrew Anderson wrote: There exists a trivial DoS attack against EZproxy that I reported to OCLC about 2 years ago, and has not been addressed yet. ... and as soon as that gets a CVE (see http://cve.mitre.org/), corporate IT departments will force libraries to upgrade to

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Peter Murray
I think it also useful to think about this from the service provider’s perspective. There have been a few calls for enhancements/fixes in this thread, but with no source of ongoing revenue (for self-hosted installations, at least) I don’t know how we can realistically expect the service

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Terry Reese
the proxy. --tr -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Peter Murray Sent: Monday, February 3, 2014 4:21 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I think it also useful to think about this from

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-03 Thread Riley Childs
I never thought about this before, but it makes perfect sense, it is impossible for the only product in the industry to maintain a perpetual licensing model, EZProxy is the only one stop shop of its kind, and that is exactly the reason an alternative is needed. Not because EZProxy is lacking or

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread stuart yeates
On 01/02/14 08:34, Mosior, Benjamin wrote: Does anyone have any thoughts on how to move forward with organizing the development and adoption of an alternative proxy solution? A collaborative Google Doc? Perhaps a LibraryProxy GitHub Organization? I'd say that more than anything else what is

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread Wilhelmina Randtke
$500 this year. Five years out, it won't be less than $495 each year, but potentially much more. -Wilhelmina Randtke On Fri, Jan 31, 2014 at 9:24 PM, Roy Tennant roytenn...@gmail.com wrote: When it comes to hedging bets, I'd sure rather hedge my $50,000 bet than my $500 one. Just sayin'.

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread Riley Childs
The institution sacrifices 10 books each year, in the long term this is a lot of money, it isn't a mater of money also, it is the issue there is no alternative to EZProxy. Sent from my iPhone On Feb 2, 2014, at 3:58 PM, Wilhelmina Randtke rand...@gmail.com wrote: $500 this year. Five years

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread stuart yeates
It's worse than that. The price we were quoted for hosting seems to have been picked so it can be offered with a 90% discount when bundled with a package deal with other OCLC products; buying into the on-going balkanization of the industry. cheers stuart On 01/02/14 16:24, Roy Tennant

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-02-02 Thread Riley Childs
So the OCLC is starting to become THE one stop shop, next thing you know they will be making an offer on LibGuides. Sent from my iPhone On Feb 2, 2014, at 8:43 PM, stuart yeates stuart.yea...@vuw.ac.nz wrote: It's worse than that. The price we were quoted for hosting seems to have been

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Ryan Eby
There was actually a breakout in 2011? Code4lib discussing Apache and using it as a proxy. I believe Terry Reese and Jeremy Frumkin, then from Oregon?, were the ones leading it. There was lots of interest but I’m not sure if anything took off or if they have documentation somewhere of how far

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Cary Gordon
If there is a demand for an EZProxy alternative, nginx might be a better way to go. Nginx is a reverse proxy ootb, and it is very configurable. It is fast, simple and, notably, it is fast. Cary On Jan 31, 2014, at 5:43 AM, Ryan Eby ryan...@gmail.com wrote: There was actually a breakout in

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Kyle Banerjee
Many good ideas in this thread. One thing I'd just like to throw out there is that there are some ideas that may be good to distribute in the form of virtual machines and this might be one of them. Proxying is needed by practically all libraries and takes little in terms of systems resources.

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Timothy Cornwell
with limited IT resources? -T -Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Kyle Banerjee Sent: Friday, January 31, 2014 12:14 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? Many good ideas

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Joshua Welker
@LISTSERV.ND.EDU] On Behalf Of Timothy Cornwell Sent: Friday, January 31, 2014 11:44 AM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I have an IT background and some apache proxy experience, and it seems fairly easy - for me. I understand it may not be for libraries

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Andrew Anderson
Banerjee Sent: Friday, January 31, 2014 12:14 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? Many good ideas in this thread. One thing I'd just like to throw out there is that there are some ideas that may be good to distribute in the form

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Kyle Banerjee
EZproxy is a self-installing statically compiled single binary download, with a built-in administrative interface that makes most common administrative tasks point-and-click, that works on Linux and Windows systems, and requires very little in the way of resources to run. It also has a

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Ross Singer
Not only that, but it's also expressly designed for the purpose of reverse proxying subscription databases in a library environment. There are tons of things vendors do that would be incredibly frustrating to get working properly in Squid, nginx, or Apache that have already been solved by

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Mosior, Benjamin
Does anyone have any thoughts on how to move forward with organizing the development and adoption of an alternative proxy solution? A collaborative Google Doc? Perhaps a LibraryProxy GitHub Organization? Benjamin Mosior

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Tim McGeary
So what's the price point that EZProxy needs to climb to make it more realistic to put resources into an alternative. At $500/year, I don't even have to think about justifying it. At 1% (or less) of the cost of position with little to no prior experience needed, it doesn't make a lot of sense to

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Riley Childs
But there are places on a razor thin budget, and things like this throw them off ball acne Sent from my iPhone On Jan 31, 2014, at 3:32 PM, Tim McGeary timmcge...@gmail.com wrote: So what's the price point that EZProxy needs to climb to make it more realistic to put resources into an

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Tim McGeary
Even with razor thin budgets, this is a no brainer. May they need decide between buying 10 new books or license EZProxy? Possibly, but if they have a need for EZProxy, that's still a no brainer - until a solid OSS replacement that includes as robust a developer /support community comes around.

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Salazar, Christina
I think though that razor thin budgets aside, the EZProxy using community is vulnerable to what amounts to a monopoly. Don't get any ideas, OCLC peeps (just kiddin') but now we're so captive to EZProxy, what are our options if OCLC wants to gradually (or not so gradually) jack up the price?

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Kyle Banerjee
On Fri, Jan 31, 2014 at 3:10 PM, Salazar, Christina christina.sala...@csuci.edu wrote: I think though that razor thin budgets aside, the EZProxy using community is vulnerable to what amounts to a monopoly. Don't get any ideas, OCLC peeps (just kiddin') but now we're so captive to EZProxy,

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread BWS Johnson
Salvete! Tisn't necessarily Socialist to hedge one's bets. Look at what Wall St. experts advise when one is unsure of whether to hold or sell. Monopoly is only ever in the interest of those that hold it. Short term the aquarium is enticing, but do you enjoy your collapsed dorsal

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Riley Childs
Exactly! OCLC already knows they are the only game in town, that is what drove them to the new pricing scheme, so what is to stop them from jacking up prices even more? They are the Gold, Silver, and Bronze standard, so maybe it is time to develop an alternative, in the hope it will garner

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-31 Thread Roy Tennant
When it comes to hedging bets, I'd sure rather hedge my $50,000 bet than my $500 one. Just sayin'. Roy On Fri, Jan 31, 2014 at 6:04 PM, BWS Johnson abesottedphoe...@yahoo.comwrote: Salvete! Tisn't necessarily Socialist to hedge one's bets. Look at what Wall St. experts advise when one

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Ingraham Dwyer, Andy
Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of stuart yeates Sent: Tuesday, January 28, 2014 10:03 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I probably should have been more specific. Does anyone have experience

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Richard Sarvas
/divdivFrom: Andreas Orphanides akorp...@ncsu.edu /divdivDate:01/28/2014 9:29 PM (GMT-05:00) /divdivTo: CODE4LIB@LISTSERV.ND.EDU /divdivSubject: Re: [CODE4LIB] EZProxy changes / alternatives ? /divdiv /divThat's simple for the techs, but VPNs can be a royal pain in the keester if you're

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread stuart yeates
To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I probably should have been more specific. Does anyone have experience switching from EzProxy to anything else? Is anyone else aware of the coming OCLC changes and considering switching? Does anyone have

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Margo Duncan
@LISTSERV.ND.EDU] On Behalf Of stuart yeates Sent: Wednesday, January 29, 2014 1:40 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? The text I've seen talks about [e]xpanded reporting capabilities to support management decisions in forthcoming versions and encourages

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Cary Gordon
- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of stuart yeates Sent: Tuesday, January 28, 2014 10:03 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I probably should have been more specific. Does anyone have experience

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Riley Childs
To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I probably should have been more specific. Does anyone have experience switching from EzProxy to anything else? Is anyone else aware of the coming OCLC changes and considering switching? Does anyone have

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread David Friggens
Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? I probably should have been more specific. Does anyone have experience switching from EzProxy to anything else? Is anyone else aware of the coming OCLC changes and considering switching? Does anyone have a worked example like: My

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Andrew Anderson
-Original Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of stuart yeates Sent: Wednesday, January 29, 2014 1:40 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? The text I've seen talks about [e]xpanded

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread stuart yeates
Thank you Andrew, that is insanely useful. cheers stuart On 30/01/14 12:00, Andrew Anderson wrote: When OCLC first announced their purchase of EZproxy, we started a low priority research project to see what the alternatives were a few years ago, and what it would take to bring them into a

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Shirley Lincicum
yeates Sent: Wednesday, January 29, 2014 1:40 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? The text I've seen talks about [e]xpanded reporting capabilities to support management decisions in forthcoming versions and encourages towards the hosted

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Ross Singer
Message- From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of stuart yeates Sent: Wednesday, January 29, 2014 1:40 PM To: CODE4LIB@LISTSERV.ND.EDU Subject: Re: [CODE4LIB] EZProxy changes / alternatives ? The text I've seen talks about [e]xpanded reporting

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Scott Prater
I second Stuart's kudos. Replacing EZProxy with an Apache proxy sounds just crazy enough to be brilliant. I could see an open source recipe book taking shape: how to accomplish EZProxy functions using Apache modules and their directives. I think that might end up being more useful than yet

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-29 Thread Riley Childs
Well I think there are acctually working solutions if you Google EZProxy squid you find tons of people who have cobbled together solutions, you just need the best pieces together to make it work! Who wants to start the GitHub repo? Sent from my iPhone On Jan 29, 2014, at 8:58 PM, Scott Prater

[CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread stuart yeates
We've just received notification of forth-coming changes to EZProxy, which will require us to pay an arm and a leg for future versions to install locally and/or host with OCLC AU with a ~ 10,000km round trip. What are the alternatives? cheers stuart -- Stuart Yeates Library Technology

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
Ok, what exactly is EZProxy, I could never figure that out, if I knew I could help :) Sent from my iPhone On Jan 28, 2014, at 9:04 PM, stuart yeates stuart.yea...@vuw.ac.nz wrote: We've just received notification of forth-coming changes to EZProxy, which will require us to pay an arm and a

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread stuart yeates
EZProxy is a proxy for use with vendors that have products gateway'd by IP address. It allows users who are off-campus to access resources that are locked down by IP address as though the user was on campus. It does deep-packet inspection to write URLs and javascript, facing DNS stuff, etc.

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
Did a little research I think Squid would work, not as a drop in replacement. Same with apache (there is a proxy redirect directive...I don't recall it). I haven't tried either solution, but they seem to have the same concept, albeit with a little more configuration! Good Luck //Riley Sent

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Aaron Addison
Some use Squid, its not hard to set up. But most vendors publish rules with ezproxy in mind. The other fairly simple solution is to run a VPN for access, and require people to use that. Aaron On Tuesday, January 28, 2014, stuart yeates stuart.yea...@vuw.ac.nz wrote: We've just received

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Andreas Orphanides
That's simple for the techs, but VPNs can be a royal pain in the keester if you're an end-user, for a variety of reasons. It should be incumbent on us as information specialists to unburden the user to the extent possible. On Tue, Jan 28, 2014 at 9:23 PM, Aaron Addison

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
A VPN could be a stopgap while you figure something else out, but yes I agree they are a pain for patrons. Plus from a security standpoint I wouldn't want patrons VPNing into my network, too many holes. Sent from my iPhone On Jan 28, 2014, at 9:26 PM, Andreas Orphanides akorp...@ncsu.edu

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread stuart yeates
I probably should have been more specific. Does anyone have experience switching from EzProxy to anything else? Is anyone else aware of the coming OCLC changes and considering switching? Does anyone have a worked example like: My EzProxy config for site Y looked like A; after the switch, my X

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
My solution came from Google, but it was people setting up the solution, from what I can tell EZProxy had the market cornered, but Squid should be simple enough to setup, and with the coming changes more people in your boat will be able to solutionize! Sent from my iPhone On Jan 28, 2014, at

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Ross Singer
I hate to say it, but Squid will not be simple to get the kind of results EZProxy gets. Shibboleth can take care of a handful (of probably some of your larger, more commonly accessed?) resources. Maybe Squid can take care of the rest, but my guess is it's the smaller, more niche resources

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
Someone actually has a empty repo on GitHub called freeproxy but that might take a while... Sent from my iPhone On Jan 28, 2014, at 9:52 PM, Ross Singer rossfsin...@gmail.com wrote: I hate to say it, but Squid will not be simple to get the kind of results EZProxy gets. Shibboleth can take

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread tmccanna
Ditto to Andreas. Sent from my Verizon Wireless 4G LTE Smartphone div Original message /divdivFrom: Andreas Orphanides akorp...@ncsu.edu /divdivDate:01/28/2014 9:29 PM (GMT-05:00) /divdivTo: CODE4LIB@LISTSERV.ND.EDU /divdivSubject: Re: [CODE4LIB] EZProxy changes

Re: [CODE4LIB] EZProxy changes / alternatives ?

2014-01-28 Thread Riley Childs
akorp...@ncsu.edu /divdivDate:01/28/2014 9:29 PM (GMT-05:00) /divdivTo: CODE4LIB@LISTSERV.ND.EDU /divdivSubject: Re: [CODE4LIB] EZProxy changes / alternatives ? /divdiv /divThat's simple for the techs, but VPNs can be a royal pain in the keester if you're an end-user, for a variety