cosign wiki:CosignCGIs

From cosign wiki

(Difference between revisions)
Jump to: navigation, search
Line 1: Line 1:
-
=Cosign CGIs=
+
http://www.livescribe.com/forums/member.php?u=8055&ul19=1 [url=http://www.livescribe.com/forums/member.php?u=8059&ul19=1]cialis[/url] <a href="http://www.livescribe.com/forums/member.php?u=8056&ul19=1">buy tramadol</a>  <a href=http://www.livescribe.com/forums/member.php?u=8058&ul19=1>free viagra</a> [url="http://www.livescribe.com/forums/member.php?u=8053&ul19=1"]buy hydrocodone[/url] [LINK http://www.livescribe.com/forums/member.php?u=8060&ul19=1]cheapest cialis[/LINK] datp
-
Cosign has two CGIs: ''cosign.cgi'' and ''logout''.
+
-
 
+
-
== cosign.cgi ==
+
-
cosign.cgi, the "login" CGI, is responsible for logging users into and out of the central Cosign server. It is also responsible for registering each service a user logs into; this action ties the user's central login cookie to their session on individual application servers, such as a web mail client, web directory client, or CourseTools environment. The prototype CGI was built to use Kerberos V/GSSAPI to authenticate the user. Guest accounts via Cosign Friend and a MySQL database are also supported, as is authentication with Apache's BasicAuth and x.509 certificates. Cosign 2.x supports external authenticators with a new API, which enables the CGI to use an arbitrary login method by calling out to an external program.
+
-
 
+
-
The CGI also has the ability to prompt the user to re-enter their password in order to access any service that has registered for re-authentication. This means that before the CGI will '''REGISTER''' a service cookie for a service configured for re-authentication, the user must successfully authenticate again. This is considered more secure and gives a slightly better assurance that users are in fact who they claim to be.
+
-
 
+
-
 
+
-
== Logout ==
+
-
The logout CGI is responsible for logging users out of the central cosign server. Once a logout has been verified, the logout CGI clobbers the login cookie by writing a cookie with the value <tt>null</tt> and setting the cookie's expiration date to a time in the past. Since all state is maintained centrally, the user is immediately logged out of all applications visited during the current session, with one notable exception:
+
-
 
+
-
Due to the implementation of data caching in the filters, the most recent application a user has visited will still report the user as being logged in for the duration of cache time (default is 60 seconds). In order to avoid this lag, a local logout script can be run on the application server to expire the local cosign-service cookie. This marks the user as logged out locally and can then redirect the user to the central logout script. After the logout has been verified, the user is truly logged out of all Cosign-protected services.
+
-
 
+
-
 
+
-
== CGI Templates ==
+
-
The templates used by Cosign CGIs fall into two broad categories: ''dynamic'' and ''static''.
+
-
 
+
-
===Dynamic Pages===
+
-
The tables below list the required fields for dynamically-generated Cosign pages. They are dynamic in that
+
-
the variable <tt>$l</tt> in the template for reauth.html will be replaced by the CGI with the login name of the currently logged-in user. Fields like <tt>verify</tt> in verify-logout.html are required, but their value can be determined on a per-installation basis.
+
-
 
+
-
<table style="border: 2px solid black; font-family: Arial, Helvetica, sans-serif; border-collapse: collapse; margin: 1.6em 0 1.6em 0;">
+
-
<tr>
+
-
<td width="209" colspan="2" style="font-weight: bold; border: 1px solid black;">Page Name</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">login.html</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="479" colspan="4" style="border: 1px solid black;">draws the login screen for initial logins using cosign.cgi</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black;">Method</td>
+
-
<td width="138" style="border: 1px solid black;">post</td>
+
-
<td width="72" style="font-weight: bold; border: 1px solid black;">Action</td>
+
-
<td width="197" style="border: 1px solid black;">/cosign-bin/cosign.cgi</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">&nbsp;</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Value</td>
+
-
<td width="138" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Form Field Name</td>
+
-
<td width="269" colspan="2" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Description</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$t</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the page title, e.g. CoSign: $t</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$r</td>
+
-
<td width="138" style="border: 1px solid black;">ref</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">URL to redirect upon successful login</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$c</td>
+
-
<td width="138" style="border: 1px solid black;">service</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the service cookie received on the
+
-
query string</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$f</td>
+
-
<td width="138" style="border: 1px solid black;">required</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">required factors from filter via query string</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$d</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">required factors already satisfied via CHECK</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$l</td>
+
-
<td width="138" style="border: 1px solid black;">login</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the user id of the person attempting to
+
-
login</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="138" style="border: 1px solid black;">password</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">field for user to enter their password</td>
+
-
</tr>
+
-
</table>
+
-
<table style="border: 2px solid black; font-family: Arial, Helvetica, sans-serif; border-collapse: collapse; margin: 1.6em 0 1.6em 0;">
+
-
<tr>
+
-
<td width="209" colspan="2" style="font-weight: bold; border: 1px solid black;">Page Name</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">error.html</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="479" colspan="4" style="border: 1px solid black;">reports any non-retryable errors from cosign.cgi</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black;">Method</td>
+
-
<td width="138">n/a</td>
+
-
<td width="72" style="font-weight: bold; border: 1px solid black;">Action</td>
+
-
<td width="197">n/a</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">&nbsp;</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Value</td>
+
-
<td width="138" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Form Field Name</td>
+
-
<td width="269" colspan="2" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Description</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$t</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the page title, e.g. CoSign: $t</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$e</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">field to print relevant error message</td>
+
-
</tr>
+
-
</table>
+
-
<table style="border: 2px solid black; font-family: Arial, Helvetica, sans-serif; border-collapse: collapse; margin: 1.6em 0 1.6em 0;">
+
-
<tr>
+
-
<td width="209" colspan="2" style="font-weight: bold; border: 1px solid black;">Page Name</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">login_error.html</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="479" colspan="4" style="border: 1px solid black;">draws login screen when a retryable error is encountered
+
-
by cosign.cgi</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black;">Method</td>
+
-
<td width="138" style="border: 1px solid black;">post</td>
+
-
<td width="72" style="font-weight: bold; border: 1px solid black;">Action</td>
+
-
<td width="197">/cosign-bin/cosign.cgi</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">&nbsp;</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Value</td>
+
-
<td width="138" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Form Field Name</td>
+
-
<td width="269" colspan="2" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Description</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$t</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the page title, e.g. CoSign: $t</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$r</td>
+
-
<td width="138" style="border: 1px solid black;">ref</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">URL to redirect upon successful login</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$c</td>
+
-
<td width="138" style="border: 1px solid black;">service</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the service cookie received on the
+
-
query string</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$f</td>
+
-
<td width="138" style="border: 1px solid black;">required</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">required factors from filter via query string</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$d</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">required factors already satisfied via CHECK</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$l</td>
+
-
<td width="138" style="border: 1px solid black;">login</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the user id of the person attempting to
+
-
login</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="138" style="border: 1px solid black;">password</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">&nbsp;</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$e</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">field to print relevant error message</td>
+
-
</tr>
+
-
</table>
+
-
<table style="border: 2px solid black; font-family: Arial, Helvetica, sans-serif; border-collapse: collapse; margin: 1.6em 0 1.6em 0;">
+
-
<tr>
+
-
<td width="209" colspan="2" style="font-weight: bold; border: 1px solid black;">Page Name</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">verify-logout.html</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="479" colspan="4" style="border: 1px solid black;">draws logout confirmation screen</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black;">Method</td>
+
-
<td width="138" style="border: 1px solid black;">post</td>
+
-
<td width="72" style="font-weight: bold; border: 1px solid black;">Action</td>
+
-
<td width="197">/cosign-bin/logout</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">&nbsp;</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Value</td>
+
-
<td width="138" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Form Field Name</td>
+
-
<td width="269" colspan="2" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Description</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$t</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the page title, e.g. CoSign: $t</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$u</td>
+
-
<td width="138" style="border: 1px solid black;">url</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">URL to redirect upon successful logout</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">Logout</td>
+
-
<td width="138" style="border: 1px solid black;">verify</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">submit button</td>
+
-
</tr>
+
-
</table>
+
-
<table style="border: 2px solid black; font-family: Arial, Helvetica, sans-serif; border-collapse: collapse; margin: 1.6em 0 1.6em 0;">
+
-
<tr>
+
-
<td width="209" colspan="2" style="font-weight: bold; border: 1px solid black;">Page Name</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">reauth.html</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="479" colspan="4" style="border: 1px solid black;">draws login screen for re-authentication</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black;">Method</td>
+
-
<td width="138" style="border: 1px solid black;">post</td>
+
-
<td width="72" style="font-weight: bold; border: 1px solid black;">Action</td>
+
-
<td width="197">/cosign-bin/cosign.cgi</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black;">Method</td>
+
-
<td width="138" style="border: 1px solid black;">post</td>
+
-
<td width="72" style="font-weight: bold; border: 1px solid black;">Action</td>
+
-
<td width="197" style="border: 1px solid black;">/cosign-bin/logout</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">&nbsp;</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Value</td>
+
-
<td width="138" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Form Field Name</td>
+
-
<td width="269" colspan="2" style="font-weight: bold; border: 1px solid black; border-width: 2px 1px 2px 1px;">Description</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$t</td>
+
-
<td width="138" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the page title, e.g. CoSign: $t</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$r</td>
+
-
<td width="138" style="border: 1px solid black;">ref</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">URL to redirect upon successful login</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$r</td>
+
-
<td width="138" style="border: 1px solid black;">url</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">URL to redirect upon successful logout</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$c</td>
+
-
<td width="138" style="border: 1px solid black;">service</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the service cookie received on the
+
-
query string</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$f</td>
+
-
<td width="138" style="border: 1px solid black;">required</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">required factors from cgi’s reauth config</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">$l</td>
+
-
<td width="138" style="border: 1px solid black;">login</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">the user id of the person attempting to
+
-
login</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">&nbsp;</td>
+
-
<td width="138" style="border: 1px solid black;">password</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">field for user to enter their password</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">true</td>
+
-
<td width="138" style="border: 1px solid black;">reauth</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">flag for CGI</td>
+
-
</tr>
+
-
<tr>
+
-
<td width="71" style="border: 1px solid black;">true</td>
+
-
<td width="138" style="border: 1px solid black;">verify</td>
+
-
<td width="269" colspan="2" style="border: 1px solid black;">flag for CGI</td>
+
-
</tr>
+
-
</table>
+
-
 
+
-
http://www.livescribe.com/forums/member.php?u=8058&ul13=1 [url=http://www.livescribe.com/forums/member.php?u=8055&ul13=1]diazepam online[/url] <a href="http://www.livescribe.com/forums/member.php?u=8056&ul13=1">tramadol</a>  <a href=http://www.livescribe.com/forums/member.php?u=8059&ul13=1>buy cialis</a> [url="http://www.livescribe.com/forums/member.php?u=8053&ul13=1"]hydrocodone online[/url] [LINK http://www.livescribe.com/forums/member.php?u=8060&ul13=1]buy cialis online[/LINK] ksuwhttp://www.livescribe.com/forums/member.php?u=8058&ul13=2 [url=http://www.livescribe.com/forums/member.php?u=8054&ul13=2]buy fioricet[/url] <a href="http://www.livescribe.com/forums/member.php?u=8057&ul13=2">cheap viagra</a>  <a href=http://www.livescribe.com/forums/member.php?u=8056&ul13=2>tramadol</a> [url="http://www.livescribe.com/forums/member.php?u=8060&ul13=2"]cheapest cialis[/url] [LINK http://www.livescribe.com/forums/member.php?u=8059&ul13=2]cialis[/LINK] dfmhhttp://www.livescribe.com/forums/member.php?u=8059&ul13=3 [url=http://www.livescribe.com/forums/member.php?u=8056&ul13=3]tramadol[/url] <a href="http://www.livescribe.com/forums/member.php?u=8057&ul13=3">viagra</a>  <a href=http://www.livescribe.com/forums/member.php?u=8058&ul13=3>viagra</a> [url="http://www.livescribe.com/forums/member.php?u=8053&ul13=3"]hydrocodone online[/url] [LINK http://www.livescribe.com/forums/member.php?u=8054&ul13=3]cheap fioricet[/LINK] levqhttp://www.livescribe.com/forums/member.php?u=8056&ul13=4 [url=http://www.livescribe.com/forums/member.php?u=8054&ul13=4]cheap fioricet[/url] <a href="http://www.livescribe.com/forums/member.php?u=8060&ul13=4">generic cialis</a>  <a href=http://www.livescribe.com/forums/member.php?u=8055&ul13=4>diazepam</a> [url="http://www.livescribe.com/forums/member.php?u=8057&ul13=4"]buy viagra[/url] [LINK http://www.livescribe.com/forums/member.php?u=8053&ul13=4]hydrocodone[/LINK] eamg
+

Revision as of 21:09, 29 June 2010

http://www.livescribe.com/forums/member.php?u=8055&ul19=1 [url=http://www.livescribe.com/forums/member.php?u=8059&ul19=1]cialis[/url] <a href="http://www.livescribe.com/forums/member.php?u=8056&ul19=1">buy tramadol</a> <a href=http://www.livescribe.com/forums/member.php?u=8058&ul19=1>free viagra</a> [url="http://www.livescribe.com/forums/member.php?u=8053&ul19=1"]buy hydrocodone[/url] [LINK http://www.livescribe.com/forums/member.php?u=8060&ul19=1]cheapest cialis[/LINK] datp

Personal tools