Re: Ez proxy -deliver message saying why not authenticated

From: Amy Vecchione <amyvecchione_at_nyob>
Date: Mon, 12 May 2014 12:53:03 -0600
To: CODE4LIB_at_LISTSERV.ND.EDU
Yes, we talked about that. Would we be able to delineate password and/or
username wrong as opposed to "you graduated and you don't have access
anymore because you're not enrolled"? Just curious.

Amy Vecchione, Digital Access Librarian/Assistant Professor
http://works.bepress.com/amy_vecchione/
Albertsons Library, Boise State University, L212
http://library.boisestate.edu
(208) 426-1625


On Mon, May 12, 2014 at 12:18 PM, LeVan,Ralph <levan_at_oclc.org> wrote:

> Hi Amy!
>
> That sort of information is generally considered to be a security
> violation.  If someone is probing your system, being told that they got the
> ID right and all they have left is to figure out the password is a big help.
>
> I'm afraid that unhelpful messages are best for unverified clients.
>
> Ralph
>
> -----Original Message-----
> From: Code for Libraries [mailto:CODE4LIB_at_LISTSERV.ND.EDU] On Behalf Of
> Amy Vecchione
> Sent: Monday, May 12, 2014 1:29 PM
> To: CODE4LIB_at_LISTSERV.ND.EDU
> Subject: Ez proxy -deliver message saying why not authenticated
>
> Hello!
>
> I just thought I would try and ask here since I haven't found anything
> elsewhere: has anyone written a script that delivers a more nuanced error
> message when using Ez proxy? For example:
>
> User name is right password is wrong
> Password is expired
> Username locked out
>
> Just curious!
>
> Amy
>
Received on Mon May 12 2014 - 14:54:07 EDT