[Go-essp-tech] support for OpenDAP enabled clients?

[Cinquini, Luca (3880)]

Hi Jamie,
	the certificate must be obtained from a previous call to a MyProxy server, where you log in with your username and password.

Question for everybody: has anybody written instructions on how to download the MyProxy client and obtain a certificate ? We probably need a short tutorial on the ESGF wiki...

thanks, luca

On Jul 14, 2011, at 10:51 AM, Jamie Scott wrote:

> Thanks for the information.  I tried your wget example, but I must be missing something.  Where do I provide the authentication (user:password)?
> Is this user.pem a file I need to create?  
> 
> I'm not sure I understand what's going on with this syntax : "--certificate user.pem --private-key user.pem"
> 
> -Jamie
> 
> 
> On Jul 14, 2011, at 10:05 AM, Cinquini, Luca (3880) wrote:
> 
>> Hi Jamie,
>> 	we are working on that... the software is all there, but it needs to be deployed and configured uniformly across ESG. In short, what needs to happen is the following:
>> 
>> a) each Node exposes data via an Opendap server (typically, the TDS)
>> b) each Node is configured with the PKI-based security filters for authentication and authorization)
>> c) the client of choice needs to be relinked with a version of the library (Netcdf-python or pydap) that supports ESG security - essentially, following redirects, send certificates and cookies
>> 
>> For example, this is a working example of an opendap retrieval command via the wget client to the JPL TDS:
>> 
>> wget --certificate user.pem --private-key user.pem http://esg-datanode.jpl.nasa.gov/thredds/dodsC/esg_dataroot/obs4MIPs/observations/atmos/ta/mon/grid/NASA-JPL/AIRS/v20110608/ta_AIRS_L3_RetStd-v5_200209-201105.nc.dods?ta[0:1:0][0:1:0][0:1:0][0:1:0]
>> 
>> If you have a client that supports c), you could start trying to access the data from those nodes that have a) and b) configured already.
>> 
>> thanks, Luca
>> 
>> 
>> On Jul 14, 2011, at 9:45 AM, Jamie Scott wrote:
>> 
>>> Is there support for accessing data on ESG with OpenDAP enabled clients instead of downloading everything with a web browser or wget?
>>> 
>>> Thanks,
>>> 
>>> Jamie Scott
>>> 
>> 
>