CUWebAuth Information

CUWebLogin Server Redundancy

There are two servers ready to authenticate users via CUWebLogin--"cuweblogin.cit.cornell.edu" and "cuweblogin2.cit.cornell.edu".

You can list both CUWebLogin servers in your httpd.conf (Apache/UNIX) or CUWebAuth.conf (Windows/IIS) files so that if one server is down, the next server will be used. To do this, use the CUWAcuwlServerSRL directive twice, like this:

Unix/Linux:

CUWAcuwlServerSRL "ipHost=cuweblogin.cit.cornell.edu
               ipPort=1010 a.netid=erpcd.webster
               a.protocol=k4">

CUWAcuwlServerSRL "ipHost=cuweblogin2.cit.cornell.edu
               ipPort=1010 a.netid=erpcd.webster2
               a.protocol=k4"

Windows/IIS:

CUWAcuwlServerSRL ipHost=cuweblogin.cit.cornell.edu
               ipPort=1010 netid=erpcd.webster
               authent=k4

CUWAcuwlServerSRL ipHost=cuweblogin2.cit.cornell.edu
               ipPort=1010 netid=erpcd.webster2
               authent=k4

Note: If you don't normally use quotation marks around this directive, you may omit them.

Please note that if you are using any version of CUWebAuth prior to 1.0.12fc3, your server might try to redirect the user to ports 1011 or 1012 on the CUWebLogin servers. To prevent this, add

 webPort=80 webPortSSL=443

...inside the closing end-quote of the SRL.

CUWebAuth Notes