Dartmouth College Status Report This presentation will probably involve audience discussion, which will create action items. Use PowerPoint to keep track of these action items during your presentation In Slide Show, hold down the control key and click the mouse button Select “Meeting Minder” Select the “Action Items” tab Type in action items as they come up Click OK to dismiss this box This will automatically create an Action Item slide at the end of your presentation with your points entered. Dartmouth College Status Report Robert Brentrup, Computing Service Larry Levine, Computing Services John James, Library 11/23/2018
Identification Procedures All members identified through hiring or enrollment processes Automatically added to and removed from directory Feeds from Human Resources (faculty and staff) and Student Registration. Employees accounts expire Students are moved to alumni system 11/23/2018
Directories Lists Individual’s status Enables Network “account” Department or class (not in Certificates) White pages Enables Network “account” Starter password assigned and communicated Regular changes encouraged Managed by Computing Services LDAP, X.500 11/23/2018
Authenticated Applications Secure single “sign-on” process Kerberos or AppleShare protocols No passwords on network Authorization is application decision Mail, Dialup, Library Access, Proxy Server, Web Authentication Private Web sites, Fileserver, Calendar 11/23/2018
PKI Applications Planned Payroll Authorization, Grant applications, Expense reports Signed, time-stamped and secure documents and e-mail Delegation of roles, Rights management Pre-existing Authenticated applications 11/23/2018
PKI Status Entrust System in production Campus wide build out underway Limited faculty and staff enrollment Signed documents and secure e-mail available Campus wide build out underway For authentication and e-mail Upgrading Entrust Implementing iPlanet CMS Developing additional applications Baltimore and CDSA also used 11/23/2018
Content Providers JSTOR member Current Access controls: Kerberos, Proxy server, login scripts, authenticated login web pages, IP address Most resources available to members from all locations Too many methods, firewalls cause problems 11/23/2018
Project Next Steps Library - Computing planning CREN pilot CREN CA certification in progress Ready to issue end user certificates Test with content provider(s) Investigating Attribute certificates 11/23/2018