[seek-dev] myproxy

[Rod Spears]

At the Edinburgh meeting John M. said that MyProxy would be the easiest 
way for non-technical folks like scientists (and myself ;-) ) who would 
have issues with creating and maintaining certs.

Rod


dave thau wrote:

>Yeah, that's pretty much what it does.  Plus it helps maintain your
>certificates, automatically renewing them when necessary.  When I tried to
>install globus at home I got a certificate saying that it expired in two
>months.  I was having a hard time with the install, and for some reason,
>that really bummed me out.  It got me thinking that I've rarely had a
>pleasant experience with any software which required me to get and install
>a certificate.  So... if we're ever in a situation where we're asking
>partners to install globus, it might be something to keep in mind.
>
>Dave
>
>  
>
>>Dave,
>>
>>I've looked at MyPorxy before, and its a neat idea, but it seems to nme
>>it just returns the certificate system back to a password system.  Its
>>not clear how using it is any better than just using a password based
>>system, except i guess that the passwords need not be passed around.
>>
>>Matt
>>
>>dave thau wrote:
>>
>>    
>>
>>>A guy I met at a bar tonight told me about this:
>>>
>>>http://grid.ncsa.uiuc.edu/myproxy/
>>>
>>>-----
>>>
>>>MyProxy Online Credential Repository
>>>
>>>MyProxy is a credential repository for the Grid. Storing your Grid
>>>credentials in a MyProxy repository allows you to retrieve a proxy
>>>credential whenever and wherever you need one, without worrying about
>>>managing private key and certificate files. Using a standard web
>>>browser,
>>>you can connect to a Grid portal and allow the portal to retrieve a
>>>proxy
>>>credential for you to access Grid resources on your behalf. You can also
>>>allow trusted servers to renew your proxy credential using MyProxy, so,
>>>for example, your long-running tasks don't fail because of an expired
>>>proxy credential. A professionally managed MyProxy server can provide a
>>>more secure storage location for Grid credentials than typical end-user
>>>systems.
>>>
>>>MyProxy provides a set of flexible authorization mechanisms for
>>>controlling access to the repository. Server-wide policies allow the
>>>MyProxy administrator to control how the repository may be used.
>>>Per-credential policies allow users to specify how each credential may
>>>be
>>>accessed. Passphrase and/or certificate-based authentication is required
>>>to retrieve credentials from MyProxy. If a credential is stored with a
>>>passphrase, the private key is encrypted with the passphrase in the
>>>MyProxy repository.
>>>
>>>The MyProxy project is currently supported by:
>>>
>>>NSF Middleware Initiative
>>>NSF Partnership for Advanced Computational Infrastructure
>>>
>>>-----
>>>
>>>Looks interesting, anyone play with it?
>>>
>>>Dave
>>>
>>>
>>>
>>>_______________________________________________
>>>seek-dev mailing list
>>>seek-dev at ecoinformatics.org
>>>http://www.ecoinformatics.org/mailman/listinfo/seek-dev
>>>      
>>>
>>
>>    
>>
>
>_______________________________________________
>seek-dev mailing list
>seek-dev at ecoinformatics.org
>http://www.ecoinformatics.org/mailman/listinfo/seek-dev
>  
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mercury.nceas.ucsb.edu/ecoinformatics/pipermail/seek-dev/attachments/20040525/9d57ab5a/attachment.htm