Hi Jane:

Good choice of ILS!

We set up a tunnel between our SIP self-checkout client and the Evergreen
SIP2 server, as documented here:
https://coffeecode.net/archives/219-Setting-up-secure-self-check-connections-using-SIP-tunneled-through-SSH.html

One small difference being that we now use autossh. If your EZProxy
instance is on a Linux box, it should go swimmingly for you; the biggest
pain for me was setting up Cygwin on Vista (silly 3M self check).

Good luck!

Dan
On Jan 23, 2015 1:24 PM, "Jane Sandberg" <[log in to unmask]> wrote:

> Hi all,
>
> I'd like to have our EZProxy server authenticate users using SIP2,
> which is totally supported and documented here:
> http://www.oclc.org/support/services/ezproxy/documentation/usr/sip.en.html
> .
>
> However, I am not enthusiastic about sending unencrypted patron login
> information over Telnet or raw sockets, and neither is our ILS
> sysadmin.  I'd like to figure out a way to perform the SIP2
> authentication/authorization check over SSH, but am not quite sure how
> best to do that.  Do either of these approaches make sense?
>
> * Installing stunnel on the EZProxy server to encrypt the outgoing and
> incoming SIP2 traffic.
>
> * Writing a custom external script that would handle the whole auth
> process: SSHing into our SIP server and seeing if the user is legit.
> Here's what EZProxy has to say about this type of option:
>
> http://www.oclc.org/support/services/ezproxy/documentation/usr/external.en.html
> -- I'd have to write some code to handle the SIP auth rather than
> using EZProxy's built-in option, but my ILS has pretty good
> documentation for its SIP implementation.
>
> Am I missing some simpler option?  Our EZProxy is running on a Windows
> machine, by the way, and we use Evergreen as our ILS.  I'd love any
> advice or suggestions that you seasoned EZProxy experts can share.
>
> Appreciatively,
>
>   -Jane
>
> --
> Jane Sandberg
> Electronic Resources Librarian
> Linn-Benton Community College
> [log in to unmask] / 541-917-4655
>