From mitch at ncsa.uiuc.edu Fri Feb 17 08:53:09 2006 From: mitch at ncsa.uiuc.edu (Mitch Kutzko) Date: Fri, 17 Feb 2006 10:53:09 -0600 Subject: [CMI.PM] Web account management module? Message-ID: <3.0.5.32.20060217105309.013e9d58@pop.ncsa.uiuc.edu> Hi, everyone -- I need to write an online event signup script for the web site of a local student group here on campus. Each user needs to have their own login/ID for the signups. I'm looking for a Perl solution that allows the users to manage their passwords themselves, with an administrator (most likely me) only having to approval the initial signup. (Ie, I don't have to deal with the tons of "I forgot my password" requests that will inevitably show up with a group of 200 to 300 members.) Any ideas? Google hasn't really shown me anything that really looks both workable, secure, and free. (In fact, most everything I found for this via Google appears to have been developed on/for Win32 platforms, not *nix platforms.) Thanks for any help! Mitch -- Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | 217-333-1199 Project: http://dast.nlanr.net | Personal: http://hobbes.ncsa.uiuc.edu From cclausen at acm.org Fri Feb 17 09:03:34 2006 From: cclausen at acm.org (Christopher D. Clausen) Date: Fri, 17 Feb 2006 11:03:34 -0600 Subject: [CMI.PM] Web account management module? References: <3.0.5.32.20060217105309.013e9d58@pop.ncsa.uiuc.edu> Message-ID: <0d1b01c633e4$fac1e910$1ffbae80@ad.uiuc.edu> Mitch Kutzko wrote: > Hi, everyone -- I need to write an online event signup script for the > web site of a local student group here on campus. Each user needs > to have their own login/ID for the signups. > > I'm looking for a Perl solution that allows the users to manage their > passwords themselves, with an administrator (most likely me) only > having to approval the initial signup. (Ie, I don't have to deal > with the tons of "I forgot my password" requests that will inevitably > show up with a group of 200 to 300 members.) Uhh, can you use bluestem? Its in Perl. You need an SSL webserver though (which you should have anyway if passwords are in use.) I highly suggest that you authenticate at the web server level and NOT at the application level. There are several apache modules that do such things. < Hi, Mitch, Since it's for a campus group, why not just use the existing webtools? If you go to http://webtools.uiuc.edu/, then click the Login link and authenticate to Bluestem, there's a Group Manager tool that may already do what you want. And since it uses Bluestem, it keeps you out of the password business. Cheers, Mark _____________ Mark Tomory UIUC Physics > -----Original Message----- > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org [mailto:champaign- > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Mitch Kutzko > Sent: Friday, February 17, 2006 10:53 AM > To: CU Perlmongers > Subject: [CMI.PM] Web account management module? > > Hi, everyone -- I need to write an online event signup script for the web > site of a local student group here on campus. Each user needs to have > their own login/ID for the signups. > > I'm looking for a Perl solution that allows the users to manage their > passwords themselves, with an administrator (most likely me) only having > to > approval the initial signup. (Ie, I don't have to deal with the tons of > "I > forgot my password" requests that will inevitably show up with a group of > 200 to 300 members.) > > Any ideas? Google hasn't really shown me anything that really looks both > workable, secure, and free. (In fact, most everything I found for this > via > Google appears to have been developed on/for Win32 platforms, not *nix > platforms.) > > Thanks for any help! > > Mitch > -- > Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | 217-333-1199 > Project: http://dast.nlanr.net | Personal: http://hobbes.ncsa.uiuc.edu > _______________________________________________ > Champaign-Urbana mailing list > Champaign-Urbana at pm.org > http://mail.pm.org/mailman/listinfo/champaign-urbana From mitch at ncsa.uiuc.edu Fri Feb 17 14:21:46 2006 From: mitch at ncsa.uiuc.edu (Mitch Kutzko) Date: Fri, 17 Feb 2006 16:21:46 -0600 Subject: [CMI.PM] Web account management module? In-Reply-To: Message-ID: <3.0.5.32.20060217162146.013e9d58@pop.ncsa.uiuc.edu> Good ideas from everyone so far, but the group in question has decided that they want to get their own, private domain name. Since it will be outside the uiuc.edu domain space, Bluestem and other UIUC-based solutions won't work. Thanks anyway! Mitch At 04:07 PM 2/17/2006 -0600, Mark C Tomory wrote: > Hi, Mitch, > > Since it's for a campus group, why not just use the existing webtools? > If you go to http://webtools.uiuc.edu/, then click the Login link and > authenticate to Bluestem, there's a Group Manager tool that may already > do what you want. And since it uses Bluestem, it keeps you out of the > password business. > > Cheers, > Mark > > _____________ > Mark Tomory > UIUC Physics > > > > -----Original Message----- > > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org > [mailto:champaign- > > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Mitch Kutzko > > Sent: Friday, February 17, 2006 10:53 AM > > To: CU Perlmongers > > Subject: [CMI.PM] Web account management module? > > > > Hi, everyone -- I need to write an online event signup script for the > web > > site of a local student group here on campus. Each user needs to > have > > their own login/ID for the signups. > > > > I'm looking for a Perl solution that allows the users to manage their > > passwords themselves, with an administrator (most likely me) only > having > > to > > approval the initial signup. (Ie, I don't have to deal with the tons > of > > "I > > forgot my password" requests that will inevitably show up with a group > of > > 200 to 300 members.) > > > > Any ideas? Google hasn't really shown me anything that really looks > both > > workable, secure, and free. (In fact, most everything I found for > this > > via > > Google appears to have been developed on/for Win32 platforms, not *nix > > platforms.) > > > > Thanks for any help! > > > > Mitch > > -- > > Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | > 217-333-1199 > > Project: http://dast.nlanr.net | Personal: > http://hobbes.ncsa.uiuc.edu > > _______________________________________________ > > Champaign-Urbana mailing list > > Champaign-Urbana at pm.org > > http://mail.pm.org/mailman/listinfo/champaign-urbana > > -- Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | 217-333-1199 Project: http://dast.nlanr.net | Personal: http://hobbes.ncsa.uiuc.edu From tomory at uiuc.edu Fri Feb 17 14:56:27 2006 From: tomory at uiuc.edu (Mark C Tomory) Date: Fri, 17 Feb 2006 16:56:27 -0600 Subject: [CMI.PM] Web account management module? Message-ID: Hi, Mitch, I wouldn't be so sure. If they're using the University network, then they can get CITES to register the domain for them (in fact, they have to or CITES will have a fit--I know, we did it once here in Physics). That being the case, I suspect you could use Bluestem after all; at least, I can think of no reason why CITES would object, and I encourage you to ask. The person to contact is Milt Epstein (mepstein at uiuc.edu and/or certmgr at uiuc.edu). Best regards, Mark _____________ Mark Tomory UIUC Physics > -----Original Message----- > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org [mailto:champaign- > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Mitch Kutzko > Sent: Friday, February 17, 2006 4:22 PM > To: CU Perlmongers > Subject: Re: [CMI.PM] Web account management module? > > Good ideas from everyone so far, but the group in question has decided > that > they want to get their own, private domain name. Since it will be outside > the uiuc.edu domain space, Bluestem and other UIUC-based solutions won't > work. > > Thanks anyway! > > Mitch > > > At 04:07 PM 2/17/2006 -0600, Mark C Tomory wrote: > > Hi, Mitch, > > > > Since it's for a campus group, why not just use the existing webtools? > > If you go to http://webtools.uiuc.edu/, then click the Login link and > > authenticate to Bluestem, there's a Group Manager tool that may already > > do what you want. And since it uses Bluestem, it keeps you out of the > > password business. > > > > Cheers, > > Mark > > > > _____________ > > Mark Tomory > > UIUC Physics > > > > > > > -----Original Message----- > > > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org > > [mailto:champaign- > > > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Mitch Kutzko > > > Sent: Friday, February 17, 2006 10:53 AM > > > To: CU Perlmongers > > > Subject: [CMI.PM] Web account management module? > > > > > > Hi, everyone -- I need to write an online event signup script for the > > web > > > site of a local student group here on campus. Each user needs to > > have > > > their own login/ID for the signups. > > > > > > I'm looking for a Perl solution that allows the users to manage their > > > passwords themselves, with an administrator (most likely me) only > > having > > > to > > > approval the initial signup. (Ie, I don't have to deal with the tons > > of > > > "I > > > forgot my password" requests that will inevitably show up with a group > > of > > > 200 to 300 members.) > > > > > > Any ideas? Google hasn't really shown me anything that really looks > > both > > > workable, secure, and free. (In fact, most everything I found for > > this > > > via > > > Google appears to have been developed on/for Win32 platforms, not *nix > > > platforms.) > > > > > > Thanks for any help! > > > > > > Mitch > > > -- > > > Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | > > 217-333-1199 > > > Project: http://dast.nlanr.net | Personal: > > http://hobbes.ncsa.uiuc.edu > > > _______________________________________________ > > > Champaign-Urbana mailing list > > > Champaign-Urbana at pm.org > > > http://mail.pm.org/mailman/listinfo/champaign-urbana > > > > > -- > Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | 217-333-1199 > Project: http://dast.nlanr.net | Personal: http://hobbes.ncsa.uiuc.edu > _______________________________________________ > Champaign-Urbana mailing list > Champaign-Urbana at pm.org > http://mail.pm.org/mailman/listinfo/champaign-urbana From mepstein at uiuc.edu Fri Feb 17 15:13:43 2006 From: mepstein at uiuc.edu (Milt Epstein) Date: Fri, 17 Feb 2006 17:13:43 -0600 (CST) Subject: [CMI.PM] Web account management module? In-Reply-To: References: Message-ID: On Fri, 17 Feb 2006, Mark C Tomory wrote: > Hi, Mitch, > > I wouldn't be so sure. If they're using the University network, then > they can get CITES to register the domain for them (in fact, they > have to or CITES will have a fit--I know, we did it once here in > Physics). That being the case, I suspect you could use Bluestem > after all; at least, I can think of no reason why CITES would > object, and I encourage you to ask. The person to contact is Milt > Epstein (mepstein at uiuc.edu and/or certmgr at uiuc.edu). Hey, I was trying to stay out of this thread! The contact address for such Bluestem questions is actually bluestem-mgr at uiuc.edu; certmgr is for certificates. And -- speaking unofficially -- we'd probably need a pretty good reason to allow Bluestem to be used with a non-uiuc.edu site. I believe there is only one such site currently; that's e-academy.com, for the webstore. For example, the Bluestem SLD, located at: http://www.cites.uiuc.edu/services/bluestem_sld.html has info on "Who can use this service"; related to who can have Bluestem application servers, it says: Individual departments can choose to implement Bluestem authentication on their web servers and for applications that they develop. For more information on how to do this, see the Bluestem webpage. Note also that Mitch did not indicate that the group's domain would be hosted on the UIUC network; they might very well have everything handled externally. (And I believe there are some policies in place for when a separate domain can be hosted on the UIUC network; and as I recall, they were somewhat strict.) > > -----Original Message----- > > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org > [mailto:champaign- > > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Mitch Kutzko > > Sent: Friday, February 17, 2006 4:22 PM > > To: CU Perlmongers > > Subject: Re: [CMI.PM] Web account management module? > > > > Good ideas from everyone so far, but the group in question has decided > > that > > they want to get their own, private domain name. Since it will be > outside > > the uiuc.edu domain space, Bluestem and other UIUC-based solutions > won't > > work. > > > > Thanks anyway! > > > > Mitch > > > > > > At 04:07 PM 2/17/2006 -0600, Mark C Tomory wrote: > > > Hi, Mitch, > > > > > > Since it's for a campus group, why not just use the existing > webtools? > > > If you go to http://webtools.uiuc.edu/, then click the Login link > and > > > authenticate to Bluestem, there's a Group Manager tool that may > already > > > do what you want. And since it uses Bluestem, it keeps you out of > the > > > password business. > > > > > > Cheers, > > > Mark > > > > > > _____________ > > > Mark Tomory > > > UIUC Physics > > > > > > > > > > -----Original Message----- > > > > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org > > > [mailto:champaign- > > > > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Mitch Kutzko > > > > Sent: Friday, February 17, 2006 10:53 AM > > > > To: CU Perlmongers > > > > Subject: [CMI.PM] Web account management module? > > > > > > > > Hi, everyone -- I need to write an online event signup script for > the > > > web > > > > site of a local student group here on campus. Each user needs to > > > have > > > > their own login/ID for the signups. > > > > > > > > I'm looking for a Perl solution that allows the users to manage > their > > > > passwords themselves, with an administrator (most likely me) only > > > having > > > > to > > > > approval the initial signup. (Ie, I don't have to deal with the > tons > > > of > > > > "I > > > > forgot my password" requests that will inevitably show up with a > group > > > of > > > > 200 to 300 members.) > > > > > > > > Any ideas? Google hasn't really shown me anything that really > looks > > > both > > > > workable, secure, and free. (In fact, most everything I found for > > > this > > > > via > > > > Google appears to have been developed on/for Win32 platforms, not > *nix > > > > platforms.) > > > > > > > > Thanks for any help! > > > > > > > > Mitch > > > > -- > > > > Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | > > > 217-333-1199 > > > > Project: http://dast.nlanr.net | Personal: > > > http://hobbes.ncsa.uiuc.edu > > > > _______________________________________________ > > > > Champaign-Urbana mailing list > > > > Champaign-Urbana at pm.org > > > > http://mail.pm.org/mailman/listinfo/champaign-urbana > > > > > > > > -- > > Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | > 217-333-1199 > > Project: http://dast.nlanr.net | Personal: > http://hobbes.ncsa.uiuc.edu > > _______________________________________________ > > Champaign-Urbana mailing list > > Champaign-Urbana at pm.org > > http://mail.pm.org/mailman/listinfo/champaign-urbana > _______________________________________________ > Champaign-Urbana mailing list > Champaign-Urbana at pm.org > http://mail.pm.org/mailman/listinfo/champaign-urbana > Milt Epstein Research Programmer Integration and Software Engineering (ISE) Campus Information Technologies and Educational Services (CITES) University of Illinois at Urbana-Champaign (UIUC) mepstein at uiuc.edu From tomory at uiuc.edu Fri Feb 17 15:36:58 2006 From: tomory at uiuc.edu (Mark C Tomory) Date: Fri, 17 Feb 2006 17:36:58 -0600 Subject: [CMI.PM] Web account management module? Message-ID: I stand corrected. (Sorry, Milt, for dragging you into it!) Re. domains, my only exposure was the 'electronicstructore.org' domain that I had Alicia set up for one of our faculty. It's home to the website that accompanies a textbook he wrote. We had no problems, but I guess that just means it wasn't a fringe case. //Mark > -----Original Message----- > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org [mailto:champaign- > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Milton B Epstein > Sent: Friday, February 17, 2006 5:14 PM > To: CU Perlmongers > Subject: Re: [CMI.PM] Web account management module? > > On Fri, 17 Feb 2006, Mark C Tomory wrote: > > > Hi, Mitch, > > > > I wouldn't be so sure. If they're using the University network, then > > they can get CITES to register the domain for them (in fact, they > > have to or CITES will have a fit--I know, we did it once here in > > Physics). That being the case, I suspect you could use Bluestem > > after all; at least, I can think of no reason why CITES would > > object, and I encourage you to ask. The person to contact is Milt > > Epstein (mepstein at uiuc.edu and/or certmgr at uiuc.edu). > > Hey, I was trying to stay out of this thread! > > The contact address for such Bluestem questions is actually > bluestem-mgr at uiuc.edu; certmgr is for certificates. > > And -- speaking unofficially -- we'd probably need a pretty good > reason to allow Bluestem to be used with a non-uiuc.edu site. I > believe there is only one such site currently; that's e-academy.com, > for the webstore. > > For example, the Bluestem SLD, located at: > > http://www.cites.uiuc.edu/services/bluestem_sld.html > > has info on "Who can use this service"; related to who can have > Bluestem application servers, it says: > > Individual departments can choose to implement Bluestem > authentication on their web servers and for applications that they > develop. For more information on how to do this, see the Bluestem > webpage. > > Note also that Mitch did not indicate that the group's domain would be > hosted on the UIUC network; they might very well have everything > handled externally. (And I believe there are some policies in place > for when a separate domain can be hosted on the UIUC network; and as I > recall, they were somewhat strict.) > > > > > -----Original Message----- > > > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org > > [mailto:champaign- > > > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Mitch Kutzko > > > Sent: Friday, February 17, 2006 4:22 PM > > > To: CU Perlmongers > > > Subject: Re: [CMI.PM] Web account management module? > > > > > > Good ideas from everyone so far, but the group in question has decided > > > that > > > they want to get their own, private domain name. Since it will be > > outside > > > the uiuc.edu domain space, Bluestem and other UIUC-based solutions > > won't > > > work. > > > > > > Thanks anyway! > > > > > > Mitch > > > > > > > > > At 04:07 PM 2/17/2006 -0600, Mark C Tomory wrote: > > > > Hi, Mitch, > > > > > > > > Since it's for a campus group, why not just use the existing > > webtools? > > > > If you go to http://webtools.uiuc.edu/, then click the Login link > > and > > > > authenticate to Bluestem, there's a Group Manager tool that may > > already > > > > do what you want. And since it uses Bluestem, it keeps you out of > > the > > > > password business. > > > > > > > > Cheers, > > > > Mark > > > > > > > > _____________ > > > > Mark Tomory > > > > UIUC Physics > > > > > > > > > > > > > -----Original Message----- > > > > > From: champaign-urbana-bounces+tomory=uiuc.edu at pm.org > > > > [mailto:champaign- > > > > > urbana-bounces+tomory=uiuc.edu at pm.org] On Behalf Of Mitch Kutzko > > > > > Sent: Friday, February 17, 2006 10:53 AM > > > > > To: CU Perlmongers > > > > > Subject: [CMI.PM] Web account management module? > > > > > > > > > > Hi, everyone -- I need to write an online event signup script for > > the > > > > web > > > > > site of a local student group here on campus. Each user needs to > > > > have > > > > > their own login/ID for the signups. > > > > > > > > > > I'm looking for a Perl solution that allows the users to manage > > their > > > > > passwords themselves, with an administrator (most likely me) only > > > > having > > > > > to > > > > > approval the initial signup. (Ie, I don't have to deal with the > > tons > > > > of > > > > > "I > > > > > forgot my password" requests that will inevitably show up with a > > group > > > > of > > > > > 200 to 300 members.) > > > > > > > > > > Any ideas? Google hasn't really shown me anything that really > > looks > > > > both > > > > > workable, secure, and free. (In fact, most everything I found for > > > > this > > > > > via > > > > > Google appears to have been developed on/for Win32 platforms, not > > *nix > > > > > platforms.) > > > > > > > > > > Thanks for any help! > > > > > > > > > > Mitch > > > > > -- > > > > > Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | > > > > 217-333-1199 > > > > > Project: http://dast.nlanr.net | Personal: > > > > http://hobbes.ncsa.uiuc.edu > > > > > _______________________________________________ > > > > > Champaign-Urbana mailing list > > > > > Champaign-Urbana at pm.org > > > > > http://mail.pm.org/mailman/listinfo/champaign-urbana > > > > > > > > > > > -- > > > Mitch Kutzko | mitch at dast.nlanr.net | mitch at ncsa.uiuc.edu | > > 217-333-1199 > > > Project: http://dast.nlanr.net | Personal: > > http://hobbes.ncsa.uiuc.edu > > > _______________________________________________ > > > Champaign-Urbana mailing list > > > Champaign-Urbana at pm.org > > > http://mail.pm.org/mailman/listinfo/champaign-urbana > > _______________________________________________ > > Champaign-Urbana mailing list > > Champaign-Urbana at pm.org > > http://mail.pm.org/mailman/listinfo/champaign-urbana > > > > Milt Epstein > Research Programmer > Integration and Software Engineering (ISE) > Campus Information Technologies and Educational Services (CITES) > University of Illinois at Urbana-Champaign (UIUC) > mepstein at uiuc.edu > _______________________________________________ > Champaign-Urbana mailing list > Champaign-Urbana at pm.org > http://mail.pm.org/mailman/listinfo/champaign-urbana