[Go-essp-tech] BADC PyDAP Service Secured with PCMDI CMIP5 Roles

[philip.kershaw at stfc.ac.uk]

Hi all,

 

Some of you have asked me about using PyDAP with ESG security.   I've made a new test deployment of this at the BADC which for the first time secures data with the CMIP5 access role managed by PCMDI.  The data (CMIP3 for the purposes of this test), is available here:

 

http://pampero.badc.rl.ac.uk/dap/badc/cmip3_drs/

 

The directory structure can be browsed without any restrictions but to download files you need to apply at the PCMDI Gateway for 'CMIP5 Research' membership:

 

http://pcmdi3.llnl.gov

 

and then go to 'Account', login and apply for Group Membership for 'CMIP5 Research'.

 

The PyDAP service is secured with the latest version of the Python ESGF security implementation.  This uses an Authorisation Service which calls out to PCMDI's Attribute Service to query users' entitlement to CMIP5 access roles.   It is the first end-to-end test with PyDAP of the complete federated security: single sign on with OpenID/PKI based authentication and authorisation service linking to PCMDI.

 

I'd be interested to hear from you especially if you have entitlement to the 'CMIP5 Research' role and can try out access. 

 

Cheers,

Phil

 

 


-- 
Scanned by iCritical.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ucar.edu/pipermail/go-essp-tech/attachments/20101109/d319f7b3/attachment.html