CoSign: Collaborative Single Sign-On  
AnnouncementsDiscussion
 

Cosign: Development Roadmap
including UM weblogin service rollout.
 
2.1 and beyond
  • New service registration mechanism
  • SPNEGO support
  • tokencache API for filesystem or oracle backend (?)
2.0.2 - Current Release
  • External authenticators in the CGI
  • Multifactor authentication in the CGI
  • New Cosign v2 protocol
  • New version of libcgi, no more lex/yacc!
  • IP changes trigger re-auth events
1.9 - December 2005
  • dbhash support for filter and daemons
  • removal of k4 support for filters
  • bug fixes
1.9 - October 2005
  • kx.509 & kct integration
  • cgi Re-Auth
  • greater configuration flexibilty in filters
  • friend enhancements - separate release
1.8.5 - May 2005
  • better integration with apache filters and native authZ
  • minor bug fixes/feature enhancements
1.8 - March 2005
  • runtime config for cgi and daemon
  • major code review and some restructure
  • improvements to replication
1.7 - November 2004
  • unified rate logging paradigm
  • new cookies issued after 24 hours to address long lived browsers
  • authN optional mode, cedes authN decisions to application
1.6 - August 2004
  • n-tier cosign proxy authentication
  • cosign protection for http/https
  • arbitrary site entry policy
1.5 - March 2004
  • Friend
  • Replication
  • Apache 2.0 support
1.1 - September 2003
  • BasicAuth capabilities in the cgi
  • Cookie and ticket clean up program
1.0 - June 2003
  • docs
  • improved http compatibility
0.9.0 - April 2003
  • kerberos ticket passing
  • portability enhancements
  • various bug fixes
0.8.0 - mid November 2002
  • autoconf
  • improved cgi & html
  • first release of isapi authentication filter
0.7.0 - early October 2002
  • basic functionality
  • kerberos/gssapi authentication
  • Apache 1.3.x authentication filter
  • ssl encrypted connections with cosignd
  • universal logout

 

Weblogin: UM Rollout Roadmap
 

cosign 0.7.0 - early October 2002
  • first pass at service menu
    ( finished 10/05/2002 )
  • create weblogin.umich.edu
    ( finished 10/12/2002 )
cosign 0.8.0 - October 2002
  • isapi filter to windows clients for testing
    ( distributed: 10/18/2002 )
  • move service to weblogin.umich.edu
    ( finished 10/14/2002 )
  • enable 24x7 monitoring via nefu
    ( finished 10/14/2002 )
cosign 0.9.0
  • refined service menu available for testing and comment by campus community
    ( released 12/11/2002 )
  • rollout for services that do not require pts authorization or kerberos tickets ( e.g. cow, www.umce, development, mprint, etc. )
    ( finished 1/22/2003 )
  • investigate pts authorization
    ( solution prepared 11/12/2002 )
cosign 1.0.0 - Current Release
  • full campus rollout ( directory, mail, etc. )
  • deployed replicated servers
  • full user documentation available.
  • moved kpasswd.cgi and hint functionality to weblogin.umich.edu
post 1.0
  • complete/merge-in kx.509 changes
  • maintenance, bug fixes, feature enhancements.

 

 
Copyright © 2002 - 2004 Regents of the University of Michigan :  Page last updated 29-January-2010