-----BEGIN PGP SIGNED MESSAGE-----
On Apr 27, 2006, at 8:30 AM, johanna bromberg craig wrote:
> A) In what ways does your site use cosign? Examples include
> "production", "evaluation", etc. Please include all uses of cosign
> at your institution that you are aware of.
We use Cosign in production to secure a handful of web applications,
mostly relating to email and account management. Our web team has
expressed an interest in having an easy way to extend Cosign to more
of their systems, however, so we expect our usage to expand
significantly in the next year.
We're also currently testing at least two applications (a lightly-
modified version of UMich Filedrawers for AFS browsing, and an in-
house mailing list management tool) for future production roll-out.
> B) Please estimate the total number of cosign users in your
Most of our users on campus (approx. 2000) interact with one or more
Cosign-protected sites, though the tools see fairly light use.
> C) Please estimate the total number of distinct services ( service
> cookie names ) protected by cosign.
I think there are eight production services and a handful of testing
instances active at the moment.
> D) Please estimate the total number of people with cosign expertise
> at your site.
At the moment, probably just myself and our UNIX systems
administrator have sufficient expertise to actually roll out new
> E) Please give a brief description of any local cosign
> modifications you are maintaining.
We have the usual template modifications, as well as one patch
developed by OpenSourcery under contract to us which fixed support
for using an older version of Cosign in combination with mod_proxy,
which was submitted upstream some time ago and in fact may now be
part of the mainline sources.
> F) Please give a brief description of where you work/who you work
> for at your institution ( multiple responses from the same
> instituion are great, the more data the better )
I work in the Technology Infrastructure Services group here at Reed
College, which provides networking, telecom, and server
administration support for the entire academic community. In
addition, we maintain several services (Kerberos, LDAP, IMAP)
utilized by the administrative staff, as well.
> (If you'd like some scripts that can help collect some of this
> data, we're happy to provide, just send me an email.)
> We will aggregate the responses and post a summary on http://
> weblogin.org Thanks for taking the time to help us out!
You're welcome -- thanks for providing Cosign to all of us!
System Support Specialist
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
-----END PGP SIGNATURE-----