[Go-essp-tech] MyProxy Clients for ESG

Thu Oct 22 07:52:32 MDT 2009

Hi Rachana,

I've literally just finished developing it hence my question.  - I don't want to take it further at this stage if there's something else that will do the same thing.

The application simply fronts a MyProxy logon call with a HTTPS interface.  The client sends a HTTP GET call to a web server hosting an application which fronts a MyProxy server translating the HTTP request into a MyProxy logon call. 

HTTP client --<HTTP Basic Auth over HTTPS>--> Proxy Application --<MyProxy logon>--> MyProxy server

Username and password are passed in the HTTP header using HTTP Basic Auth.   The proxy application is configured to receives the request and passes it on to a MyProxy service to perform the usual logon process.   The application receives the response back from MyProxy and passes certificate(s) and key back to the HTTP client in plain/text format.   As it's over SSL, HTTP client and server can authenticate each other. 

Cheers,
Phil

> -----Original Message-----
> From: Rachana Ananthakrishnan [mailto:ranantha at mcs.anl.gov] 
> Sent: 21 October 2009 17:18
> To: Kershaw, Philip (STFC,RAL,SSTD)
> Cc: go-essp-tech at ucar.edu
> Subject: Re: [Go-essp-tech] MyProxy Clients for ESG
> 
> 
> Hi Phil,
> 
> This sound interesting. Can you send out pointers to this work?
> 
> Thanks,
> Rachana
> 
> On Oct 21, 2009, at 9:57 AM, <philip.kershaw at stfc.ac.uk> 
> <philip.kershaw at stfc.ac.uk 
>  > wrote:
> 
> > Hi all,
> >
> > Dean mentions a improved MyProxy client below.  I'd be interested to
> > find out more about it.
> >
> > We had some discussion about the ease of use of MyProxy clients at
> > GO-ESSP.  I've been looking at this and have developed an 
> add on to  
> > our interface here to enable MyProxy logon via a https call.  It  
> > would mean the logon step could be carried out with something like  
> > wget without the need for a specialist client.  Does anyone else  
> > know of any similar work?  Are you looking to add an specific  
> > utilities in the Gateway for MyProxy integration?
> >
> > Cheers,
> > Phil
> >
> >> -----Original Message-----
> >> From: go-essp-tech-bounces at ucar.edu 
> >> [mailto:go-essp-tech-bounces at ucar.edu] On Behalf Of Dean 
> N. Williams
> >> Sent: 20 October 2009 14:41
> >> To: Pascoe, Stephen (STFC,RAL,SSTD)
> >> Cc: go-essp-tech at ucar.edu
> >> Subject: Re: [Go-essp-tech] next telco: ESG data node 
> progress, 4pm 
> >> UT,20th October
> >>
> >>
> >> Hi Stephen,
> >>
> >> 	Bob and Gavin will be on the call today, so these
> >> questions will be
> >> answered in great detail. Gavin, Eric, and Neill are working to 
> >> include GridFTP and a new improved MyProxy client. Bob 
> will point you
> >> to the publisher commands. Bob and Gavin will discuss the 
> testing of
> >> the publication installation and process. Finally, we will discuss
> >> updated material on the DN development, deployment, and publication
> >> timelines.
> >>
> >> Best regards,
> >> 	Dean
> >>
> >> On Oct 20, 2009, at 6:21 AM, <stephen.pascoe at stfc.ac.uk> wrote:
> >>
> >>>
> >>> Some items I'd like to discuss at the telco. today:
> >>>
> >>> * datanode deployment update
> >>> * Data publication timelines -- I can report on our expected 
> >>> publication timeline of UKMO data.
> >>> * Testing the publication process.  How should testing 
> "esgpublish" 
> >>> work?  Are the constraints on what metadata we give our
> >> test datasets?
> >>> How do we unpublish test datasets, including removal from
> >> the gateway?
> >>> * Documentation.  Is there any documentation on the 
> esgcet command- 
> >>> line tools ($CDAT_HOME/bin/esg*)?  If not lets we start a wiki
> >> page on it.
> >>> * GridFTP -- I'm not clear how this is meant to be 
> configured on the 
> >>> node.
> >>>
> >>> Cheers,
> >>> Stephen.
> >>>
> >>> ---
> >>> Stephen Pascoe  +44 (0)1235 445980
> >>> British Atmospheric Data Centre
> >>> Rutherford Appleton Laboratory
> >>>
> >>> -----Original Message-----
> >>> From: badc-nmwg-bounces at zonda.badc.rl.ac.uk
> >>> [mailto:badc-nmwg-bounces at zonda.badc.rl.ac.uk] On Behalf Of Bryan 
> >>> Lawrence
> >>> Sent: 19 October 2009 14:55
> >>> To: go-essp-tech at ucar.edu
> >>> Subject: [badc-nmwg] [Go-essp-tech] next telco: ESG data node 
> >>> progress,4pm UT, 20th October
> >>>
> >>> Hi Folks
> >>>
> >>> As announced, the next telco will be 4pm UT, 20th of October.
> >>>
> >>> (Yes, that's 0300 in Canberra, 0900 in San Francisco, 
> 1000 Denver, 
> >>> 1200 in NYC, 1700 in the UK, 1800  in Europe, and the time will
> >> change for
> >>> most of us the following week).
> >>>
> >>> The telco will be limited to one hour in duration.
> >>>
> >>> Telco number is US +1-925-424-8105 access code 305757#.
> >>>
> >>> Because of the antisocial hour in the Antipodes, we're 
> planning to 
> >>> record the meeting ...  so that we don't get sued because
> >> of potential
> >>> damage from massive caffeine spikes ... if anyone has a
> >> problem with
> >>> that (the recording that is), please speak out asap.
> >>>
> >>> Topic of the day: progress on installing and configuring
> >> the ESG data
> >>> node. I think the actual agenda will be constructed in the
> >> first five
> >>> minutes of the call.
> >>>
> >>> Dean has produced the attached document which will 
> eventually appear 
> >>> on the CMIP5 site.  Do feel free to provide constructive
> >> criticism, so
> >>> the
> >>> document can be as useful as possible for those following
> >> us down this
> >>> road.
> >>>
> >>> Cheers
> >>> Bryan
> >>>
> >>> --
> >>> Bryan Lawrence
> >>> Director of Environmental Archival and Associated Research (NCAS/ 
> >>> British Atmospheric Data Centre and NCEO/NERC NEODC) STFC,
> >> Rutherford Appleton
> >>> Laboratory Phone +44 1235 445012; Fax ... 5848;
> >>> Web: home.badc.rl.ac.uk/lawrence
> >>> --
> >>> Scanned by iCritical.
> >>> _______________________________________________
> >>> GO-ESSP-TECH mailing list
> >>> GO-ESSP-TECH at ucar.edu
> >>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
> >>>
> >>
> >> _______________________________________________
> >> GO-ESSP-TECH mailing list
> >> GO-ESSP-TECH at ucar.edu 
> >> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
> >>
> > --
> > Scanned by iCritical.
> > _______________________________________________
> > GO-ESSP-TECH mailing list
> > GO-ESSP-TECH at ucar.edu
> > http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
> 
> 
-- 
Scanned by iCritical.