mod_pubcookie 3.3.1 review

mod_pubcookie is an Apache module for Pubcookie web single sign-on. Pubcookie consists of a standalone login server and modules fo

License: The Apache License 2.0 File size: 2064K Developer: Pubcookie team

0

mod_pubcookie is an Apache module for Pubcookie web single sign-on.

Pubcookie consists of a standalone login server and modules for common web server platforms like Apache and Microsoft IIS.

Together, these components can turn existing authentication services (like Kerberos, LDAP, or NIS) into a solution for single sign-on authentication to websites throughout an institution.

What is Pubcookie?

Pubcookie is an open-source package for intra-institutional single-sign-on end-user web authentication. More generally, it is an approach to identifying users as they browse to an institution's many websites that require authentication. It helps an institution reuse existing authentication services (like Kerberos, LDAP, or NIS), and it limits the exposure of end-user passwords by ensuring they're only sent to a trusted login service.

Software Components

Pubcookie currently includes a login server component as well as modules for Apache and Microsoft IIS servers that host content and applications. It also comes with tools for managing and distributing encryption keys.

Project History

Pubcookie was originally developed at the University of Washington in 1998. In 2001, it was bundled up and made available to others in conjunction with efforts at Internet2 to better define web-based initial sign-on (WebISO) systems like Pubcookie itself. Later that same year, developers at Carnegie Mellon, Wisconsin, and elsewhere joined the effort to make Pubcookie more generally useful and this activity moved the project into the realm of the open-source project where it lives on today.

Requirements:
Apache 1.3, 2.x

What's New in This Release:
Highlights of this release include a fix for duplicate HTTP Header values in the ISAPI filter, a fixed AES mode with inactivity timeout in the Apache module, checks to improve handling of reauthentication requests, a new PubcookieCatenateAppIDs directive in the Apache module, and a clear_username_at_logout site policy in the login CGI. New default HTML login templates were included.