Re: [IUG] storing resource passwords with proxy info?

["Pennington, Buddy D." <penningtonb at umkc dot edu>]

We were recently going to do something similar to this: put up a web
page listing our passworded journals and then link to the page from the
catalog.  We were also going to "secure" it through EZproxy.

However, our question was whether the proxy really "secures" the page to
just authenticated users.  Couldn't someone simply remove the proxy
portion from the URL and then plug the changed URL into their browser
and get access to the page?

For example, if someone took
http://library.umkc.edu.ezproxy.mnl.umkc.edu/gen-info/publications/ereso
urces-with-passwords.htm and changed it to
http://library.umkc.edu/gen-info/publications/eresources-with-passwords.
htm wouldn't they bypass EZproxy altogether and be able to view all the
passwords?



Buddy Pennington
Serial Acquisitions Librarian
University of Missouri - Kansas City
800 East 51st Street
Kansas City, MO  64110
Phone: 816-235-1548
Fax: 816-333-5584
Email: penningtonb at umkc dot edu

UMKC University Libraries: Discovery. Knowledge. Empowerment.

-----Original Message-----
From: innopac-bounces at innopacusers dot org
[mailto:innopac-bounces at innopacusers dot org] On Behalf Of McHale, Nina
Sent: Tuesday, September 16, 2008 5:40 PM
To: innopac at innopacusers dot org
Subject: [IUG] storing resource passwords with proxy info?

Hi, all,

How do you all store/display those annoying passwords for resources like
the Chronicle and other things that, for whatever reason, can't go
through the proxy server? We have a whole bunch of static web pages-one
for each resource-that contain this info. The user finds the title for
the Chronicle (or whatever resource they want) in the catalog/on a web
page, clicks the link to access the resource, and then is routed to the
static (but proxy-protected) web page that contains the resource's
access info. From that point, there's another link to get to the
resource.

I found this EZProxy documentation at OCLC, but I don't know if it would
work with III's flavor of EZproxy:

http://www.oclc.org/us/en/support/documentation/ezproxy/db/chronicle.htm

Has anyone tried anything like this? I know one of you clever people has
figured out a kewl way to manage this info...

Nina
Nina McHale, MA/MSLS
Assistant Professor, Web Librarian
Auraria Library
http://library.auraria.edu/~nmchale/
Facebook<http://www.facebook.com/profile.php?id=672599042> |
MySpace<http://www.myspace.com/ninermac>
Serving the University of Colorado Denver,
Metropolitan State College of Denver,
and the Community College of Denver
1100 Lawrence Street
Denver, CO 80204
303-556-4729
Please note my new email address:
nina dot mchale at ucdenver dot edu<mailto:nina dot mchale at ucdenver dot edu>


Please note my new email address:
nina dot mchale at ucdenver dot edu<mailto:nina dot mchale at ucdenver dot edu>

Nina McHale, MA/MSLS
Assistant Professor, Web Librarian
Auraria Library
http://library.auraria.edu/~nmchale/
Facebook<http://www.facebook.com/profile.php?id=672599042> |
MySpace<http://www.myspace.com/ninermac>
Serving the University of Colorado Denver,
Metropolitan State College of Denver,
and the Community College of Denver
1100 Lawrence Street
Denver, CO 80204
303-556-4729


--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
---
--
This message was distributed through the Innovative Users Group INNOPAC
list
Public replies:  INNOPAC at innopacusers dot org
Update your subscription options:
http://innopacusers.org/mailman/listinfo/innopac