ISO login - Revision history

Jon787 at 16:01, 6 September 2005

2005-09-06T16:01:17Z

← Older revision		Revision as of 16:01, 6 September 2005
Line 3:		Line 3:
	Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and [[User:Dark-Fx\|Brian McPherson]] found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes\|xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.		Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and [[User:Dark-Fx\|Brian McPherson]] found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes\|xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.

			As of the end of August 2005 the old login system has been completely replaced by a newer and more secure version that resembles an attempt to implement kerberos with cookies.
	The ISO login system is currently being upgraded to resemble something closer to Kerberos.

	[http://www.login.mtu.edu/docs/public/mtuiso/ ISO Documentation]		[http://www.login.mtu.edu/docs/public/mtuiso/ ISO Documentation]

Techieb0y at 03:31, 15 April 2005

2005-04-15T03:31:49Z

← Older revision		Revision as of 03:31, 15 April 2005
Line 1:		Line 1:
	ISO Login is a ~~page~~ at http://www.login.mtu.edu/ ~~that~~ gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.		The ISO Login System, formerly Campus Password, (see http://www.login.mtu.edu/) gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA certificate]. The certificate expires 8 hours after you login and contains only your username, not your password.

	Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and [[User:Dark-Fx\|Brian McPherson]] found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes\|xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.		Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and [[User:Dark-Fx\|Brian McPherson]] found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes\|xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.

Techieb0y at 03:14, 15 April 2005

2005-04-15T03:14:30Z

← Older revision		Revision as of 03:14, 15 April 2005
Line 1:		Line 1:
	ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.		ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.

	Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes\|xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.		Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and [[User:Dark-Fx\|Brian McPherson]] found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes\|xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.

	The ISO login system is currently being upgraded to resemble something closer to Kerberos.		The ISO login system is currently being upgraded to resemble something closer to Kerberos.

Techieb0y at 03:14, 15 April 2005

2005-04-15T03:14:09Z

← Older revision		Revision as of 03:14, 15 April 2005
Line 1:		Line 1:
	ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.		ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.

	Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.		Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes\|xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.

	The ISO login system is currently being upgraded to resemble something closer to Kerberos.		The ISO login system is currently being upgraded to resemble something closer to Kerberos.

Techieb0y at 03:13, 15 April 2005

2005-04-15T03:13:57Z

← Older revision		Revision as of 03:13, 15 April 2005
Line 1:		Line 1:
	ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.		ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.

	Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx]] and [[User:xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.		Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx\|Dark-Fx]] and [[User:xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.

	The ISO login system is currently being upgraded to resemble something closer to Kerberos.		The ISO login system is currently being upgraded to resemble something closer to Kerberos.

Techieb0y at 03:13, 15 April 2005

2005-04-15T03:13:37Z

← Older revision		Revision as of 03:13, 15 April 2005
Line 1:		Line 1:
	ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.		ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.

	Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[Dark-Fx]] and [[xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.		Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[User:Dark-Fx]] and [[User:xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.

	The ISO login system is currently being upgraded to resemble something closer to Kerberos.		The ISO login system is currently being upgraded to resemble something closer to Kerberos.

Techieb0y at 03:12, 15 April 2005

2005-04-15T03:12:35Z

← Older revision		Revision as of 03:12, 15 April 2005
Line 1:		Line 1:
	ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.		ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.

	Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], Dark-Fx, and xobes on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.		Around the begining of the Spring 2005 semester [[User:Jon787\|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], and vanity userids for [[Dark-Fx]] and [[xobes]] on the [[Barkboard\|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.

	The ISO login system is currently being upgraded to resemble something closer to Kerberos.		The ISO login system is currently being upgraded to resemble something closer to Kerberos.

Jon787 at 02:44, 15 April 2005

2005-04-15T02:44:49Z

New page

ISO Login is a page at http://www.login.mtu.edu/ that gives you a cookie that allows websites all over MTU to authenticate you. This system generates an x509 certificate signed by MTU's [http://www.login.mtu.edu/downloads/public/mtuca.crt CA] certificate. The certificate expires 8 hours after you login and contains only your username, not your password.

Around the begining of the Spring 2005 semester [[User:Jon787|Jon DeVree]] and Brian McPherson found a flaw in the system that allowed any self-signed certificate to be authenticate by the system. This allowed them to generate cookies that expired in years instead of hours and even cookies that were for other users. They utilized this to create phony users like [[EERC_Tree]], Dark-Fx, and xobes on the [[Barkboard|Barkboards]]. DCS fixed the flaw shortly after Jon and Brian reported it.

The ISO login system is currently being upgraded to resemble something closer to Kerberos.

[http://www.login.mtu.edu/docs/public/mtuiso/ ISO Documentation]