[seek-dev] myproxy

[Matt Jones]

Dave,

I've looked at MyPorxy before, and its a neat idea, but it seems to nme 
it just returns the certificate system back to a password system.  Its 
not clear how using it is any better than just using a password based 
system, except i guess that the passwords need not be passed around.

Matt

dave thau wrote:

> A guy I met at a bar tonight told me about this:
> 
> http://grid.ncsa.uiuc.edu/myproxy/
> 
> -----
> 
> MyProxy Online Credential Repository
> 
> MyProxy is a credential repository for the Grid. Storing your Grid
> credentials in a MyProxy repository allows you to retrieve a proxy
> credential whenever and wherever you need one, without worrying about
> managing private key and certificate files. Using a standard web browser,
> you can connect to a Grid portal and allow the portal to retrieve a proxy
> credential for you to access Grid resources on your behalf. You can also
> allow trusted servers to renew your proxy credential using MyProxy, so,
> for example, your long-running tasks don't fail because of an expired
> proxy credential. A professionally managed MyProxy server can provide a
> more secure storage location for Grid credentials than typical end-user
> systems.
> 
> MyProxy provides a set of flexible authorization mechanisms for
> controlling access to the repository. Server-wide policies allow the
> MyProxy administrator to control how the repository may be used.
> Per-credential policies allow users to specify how each credential may be
> accessed. Passphrase and/or certificate-based authentication is required
> to retrieve credentials from MyProxy. If a credential is stored with a
> passphrase, the private key is encrypted with the passphrase in the
> MyProxy repository.
> 
> The MyProxy project is currently supported by:
> 
> NSF Middleware Initiative
> NSF Partnership for Advanced Computational Infrastructure
> 
> -----
> 
> Looks interesting, anyone play with it?
> 
> Dave
> 
> 
> 
> _______________________________________________
> seek-dev mailing list
> seek-dev at ecoinformatics.org
> http://www.ecoinformatics.org/mailman/listinfo/seek-dev