NOTES

new os x pkg for 2.0
sourceforge
----
keyword notauth for cosign.conf(5)
----

email addresses can be 256 wes sez
MODULE:

    unhappy with cookieparsing in cosign_auth().
    unhappy with cookie_valid/read_scookie division. 

    TODO:
    cookie obscuring - post 1.0


CGI:
    conf file

COSIGND:
    actual load prob is number of cookies
    more conf file
    4) cert matching

post 1.0
	not doing much with cosign-[name]

Protocol:

cosign.cgi:
    LOGIN login_cookie ip princ realm "kerberos"
    LOGOUT login_cookie ip
    REGISTER login_cookie ip service_cookie
    CHECK login_cookie

mod_cosign:
    CHECK service_cookie
    RETRIEVE service_cookie ip tkt 

cosignd:
    POLL timestamp

everyone:
    STARTTLS
    NOOP: no op.
    QUIT: quit

Misc notes:
    -request creds again per service ( during register )
    -warning when using sso ( during register )

configuration files:

    cosignd: has a list ( in /usr/local/etc/cosign.conf? ) of
	    services, which tickets they can request.

    cosign.cgi: service menu top of site,
	    top of site policy, name of service for display ( e.g.
	    "Conferencing on the Web" ), name of service for cookies
	    minus cosign- ( e.g.  "cow" ), is include in service list?.

FILE FORMAT:

cosign=
v1.0
s<0/1>
i141.211.164.2
pcanna
rUMICH.EDU
t<secondssince1970>
[k<path_to_k5_tfile>]

cosign-service=
l<path_to_login_cookie>

conf file:
keyword[ cgi, daemon, service ], hostname[ subject cn ], get_tickets[ 0/1 ]