Have you already addressed this with OIT?  What was the resolution and who
gave it to you?  I would assume you spoke with ETS instead of STS because
you are an employee.  This should cause some eyebrows to be raised,
especially in operations and operations securities because that list of
netids to macs is one of the first we go to when we notice strange behavior
coming from a host.  We ask "Who's logged into the machine?"  That's a
definite security risk if these machines are supposed to be lab machines yet
are required to authenticate.  It's the normal policy that lab machines
don't need to authenticate (they're restricted enough already).

There are viable options to fix that.  One would be to add the MACs to a
list in the system that is refreshed more often than the once-a-day system
(say, once per hour).  I don't know if that's possible but will be happy to
ask around when I get to work tomorrow.

The other option would be for the McKay building run their own wireless
signal with a WEP key for those laptops specifically, and connect that
router to a port on a lab vlan.  Set the router to an access-point only
configuration and you will have a group of laptops that are treated as lab
machines (restrictive enough to not have to authenticate).  I don't know
which is more viable, but either could be better than allowing a student to
have their NETid associated with a laptop for the rest of the day.


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of jb
Sent: Saturday, December 03, 2005 4:13 PM
To: BYU Unix Users Group
Subject: Re: [uug] BYU net authentication.

As long as we're bashing the system. I teach two morning classes in the 
McKay's wireless lab. So, at 8 or 9 in the morning on the days I teach, 
my students are the first to get the pb's and dells from the cart and 
they have to authenticate. For the rest of the day, that MAC is 
associated with their Route Y ID.

I understand BYU's desire to save campus resources for members of the 
campus community, but I would also appreciate a little more thought 
sometimes.

-jb

Michael Moore wrote:

>>Isn't it now once a day?  That's what I thought.  "You will be required to
>>authenticate daily." is what I think it reads.
>>    
>>
>
>I think wireless is once a day, per building. Wired is once a week in
>on-campus housing, don't know about elsewhere.
>
>--
>Michael Moore
>-------------------------------
>www.stuporglue.com -- Articles, software and computer tutorials.
>www.stuporglue.org -- Donate your used computer to a student that needs it.
>
>--------------------
>BYU Unix Users Group 
>http://uug.byu.edu/ 
>
>The opinions expressed in this message are the responsibility of their
>author.  They are not endorsed by BYU, the BYU CS Department or BYU-UUG. 
>___________________________________________________________________
>List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list
>
>  
>


--------------------
BYU Unix Users Group 
http://uug.byu.edu/ 

The opinions expressed in this message are the responsibility of their
author.  They are not endorsed by BYU, the BYU CS Department or BYU-UUG. 
___________________________________________________________________
List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list


--------------------
BYU Unix Users Group 
http://uug.byu.edu/ 

The opinions expressed in this message are the responsibility of their
author.  They are not endorsed by BYU, the BYU CS Department or BYU-UUG. 
___________________________________________________________________
List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list

Reply via email to