From: Prakashan Korambath <ppk@ats.ucla.edu>
To: Arlene Allen <arlene.allen@isc.ucsb.edu>
Cc: David H Walker <dhwalker@ucdavis.edu>, Labate, Bill <labate@ats.ucla.edu>, Jin, Kejian <kjin@ats.ucla.edu>, Kathleen M Beyer <kmbeyer@ucdavis.edu>, Wu, Albert <albertwu@ucla.edu>
Subject: Re: UC-wide authentication for UC Grid
Date: Mon, 9 Feb 2009 14:53:03 -0800
Hi All,
We are meeting in room 3909, Math Sciences Bldg. on Wednesday, 2/18/09
between 1:00 PM and 3:00 PM. The URL below will give directions to the
Math Sciences building
http://www.ats.ucla.edu/location.htm
Please let me know if anyone needs parking slot reservation.
A brief description of current UC Grid certiicate creation process is
available here.
http://www.ucgrid.org/wiki/index.php/Register_Service
http://www.ucgrid.org/wiki/index.php/Site_Map
Currently, we are using UCLA Shibboleth just to authenticate the users
first time when they apply for the grid account. We sign the X509
based certificate and store it in our myproxy server. Each time users
come back to login they are asked to input the username and the passwd
used to create the certificate. We retrieve the short lived credentials
from the myproxy machine to the portal machine. All transactions
between the portal and the compute clusters are done using the X509
based credentials.
Prakashan
310-825-7422