Skip to main content

SideCar FAQ

Topics on this page:

Why is SideCar going away?

SideCar was tightly coupled to Kerberos 4 which is being retired. A review of the SideCar architecture as well as the proliferation of Network Address Translators (NATs) has shown that a solution similar to SideCar would not have acceptable functionality or security for Kerberos 5.

When will this happen?

SideCar will be retired after the switch to Kerberos 5. All application owners currently using SideCar are aware of the upcoming change and have made alterations to accomodate the switch.

The Fall '08 release of Bear Access will not include SideCar. It will be replaced by Kerberos Viewer, a program that allows you to view your current credentials. When Kerberos 4 shuts down (December 2008), existing SideCar clients will cease to operate.

How do I check my Kerberos ticket without SideCar?

If you use SideCar to view your Kerberos tickets, you can switch to the Kerberos Viewer, an application being released in the Fall '08 version of Bear Access.

Do I need to use SideCar?

SideCar has two main uses. Both are being addressed before SideCar is retired.

  • Extend Kerberos protection to applications. The Identity Management group has identified all services and applications on campus that are currently using SideCar. Some of these applications will migrate to Kerberos 5. Others will begin using CU WebAuth in place of SideCar. Before SideCar is retired, all campus applications and services will have an alternative in place.

  • View Kerberos tickets. If you use SideCar to view your Kerberos tickets, you will be able to use the Kerberos Viewer, an application being released in the Fall '08 version of Bear Access.

What will happen to applications that use SideCar?

The Identity Management group has identified all the applications and services on campus that currently use SideCar. Some of them will make the switch to Kerberos 5 and will no longer need SideCar. Others will begin using CU WebAuth instead of SideCar. If you are an application owner and have questions about the move away from SideCar, contact the Identity Management group by sending an email to aadssuppport@cornell.edu.