EZproxy Adventures: No Passport Required
•Download as PPTX, PDF•
1 like•884 views
This document summarizes a presentation on using the EZproxy authentication system across multiple universities. It introduces the presenters from Clayton State University, Georgia Gwinnett College, Georgia Perimeter College, and Wesleyan College who discuss their experiences with EZproxy, including configurations, maintenance, security features, and upgrades. Advanced topics covered include proxy limitations, log files, LDAP authentication, intruder detection, usage limits, and group memberships.
Recommended
Recommended
More Related Content
What's hot
What's hot (13)
Viewers also liked
Viewers also liked (20)
Similar to EZproxy Adventures: No Passport Required
Similar to EZproxy Adventures: No Passport Required (20)
More from Georgia Libraries Conference (formerly Ga COMO).
More from Georgia Libraries Conference (formerly Ga COMO). (20)
Recently uploaded
Recently uploaded (20)
EZproxy Adventures: No Passport Required
- 1. EZproxy Adventures: No Passport Required
- 2. Kara Mullen Clayton State University karamullen@clayton.edu Serve 7,000 students Working with EZproxy for 3 years Who we are Kat Greer Georgia Gwinnett College kgreer1@ggc.edu @libtechkat Serve 11,000 students Working with EZproxy for 1.5 years Christina Yau Georgia Perimeter College christina@gpc.edu Serve 21,000 students Working with EZproxy for 9 years Melissa Roberts Wesleyan College mroberts@wesleyancollege.edu Serve 1,000 students Working with EZproxy for 1 year EZproxy Adventures: No Passport Required is licensed under a Creative Commons Attribution-Noncommercial-ShareAlike 3.0 United States License.
- 4. Melissa: OCLC Hosted Overview OCLC Hosted EZproxy includes: • An EZproxy server and IP address dedicated to your institution • All server maintenance, security checks, and 24/7/365 monitoring • All EZproxy enhancements, upgrades and bug fixes (automatically received) • Security certificate for your institution
- 5. OCLC Hosted Server Reports
- 6. Kara: Proxy by Port Limitations •Local Firewall Configuration •Users will receive page not found errors •Remote Firewall Issues •Users multitasking at work are usually blocked •Port Usage •One port required for each remote web server
- 7. Kara: Maintenance • MaxVirtual Hosts • Server Maintenance
- 8. Kara: Maintenance • Logs • Audit = basic monitoring, resolving security issues • EZproxy = usage, resolve potential security threats • Message.txt = troubleshooting problems, verifying system details • SPU (starting point URL) = how often users are accessing certain resources
- 9. Kat: Upgrade to v6.0.8 http://www.oclc.org/support/services/ezproxy/release-notes.en.html •Annual subscription model & WSKey •New server & authentication •v6.0 features •support for IPv6 addresses •v.6.0.8 bug fixes •v6.1 is out
- 10. Christina: EZproxy Advanced Features LDAP Authentication Config (https://www.oclc.org/support/services/ezproxy/documentation/usr/ldap.en.html) • LDAP info from campus IT • Attribute / Class metadata info depends on IT organization structure / mapping for LDAP • Enhanced security • user.txt use obscure password
- 11. Christina: Security Concern Features OCLC documentation "Securing Your EZproxy Server" (http://www.oclc.org/support/services/ezproxy/documentation/example/securing.en.html) • Encryption: Option ForceHTTPSLogin • Monitoring Security • Audit Most: enable access to use details on admin page • IntruderAttempts: identify and automatically suspend / block users with repeatedly failed attempts • Option LogUser: record username in log, for trobleshooting and needed for UsageLimit monitoring • UsageLimit • resource(s) specific: a position-dependent config.txt directive • for complying content provider requests, minimize the potential for the illicit download of large amounts of content, and limit reductions in access speed.
- 12. Christina: Advanced Features • Group Membership • To limit resource access to specific groups of users / with specific attribute value • Group assign in user.txt, specify resources for the group in config.txt • Group assignment depends on LDAP class / temp username (IfTest condition, can use wildcard) • Temporary User Accounts • For vendor testing • For users outside LDAP • Can specify valid period (IfBefore, IfAfter) • More conditions (http://www.oclc.org/support/services/ezproxy/documentation/usr/common.en.html) • IfCountry • IfUser • non LDAP format -- e.g. ::User=*2014, Group=+hs
- 14. Image Attributions • https://pixabay.com/en/map-of-the-world-compass-antique-429784/ • https://pixabay.com/en/animal-owl-eagle-owl-wisdom-483860 • https://pixabay.com/en/road-sign-attention-right-of-way-63983/
Editor's Notes
- Q&A Handout Support Group?