Changes between Version 1 and Version 2 of T12_Security/OMII-UK/20080716


Ignore:
Timestamp:
18/07/08 16:39:21 (11 years ago)
Author:
pjkersha
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • T12_Security/OMII-UK/20080716

    v1 v2  
    55=== Summary === 
    66 1. Completion of Deployments: 
    7    * BADC is updated 
    8    * BODC - the firewall problem has been resolved.  It was actually a problem with python SSL clients and Apache mod_rewrite  
     7   * BADC is updated.  One additional step is to complete integration with the Perl based BADC data browser.  This would open up many more datasets to NDG Security based access. 
     8   * BODC - the firewall problem has been resolved.  It was actually a problem with Python SSL clients and Apache mod_rewrite  
    99   * NOCS is updated. 
    10    * PML: updated.   
    11  1. OpenID: 
    12    * We've just done trials with some of the Earth System Grid team in the US.  We were able to do a login with an ESG account into NDG.  Further work is needed to enable passing of authorisation attributes and NDG itself needs an OpenID provider interface - At the moment we can act as OpenID Relying Party ie. we can accept credentials from OpenID users.  We need to add to this the capability for BADC's NDG site to act as an OpenID provider: BADC users would have OpenID accounts to use to login at other sites.  This is beyond the scope of what we planned for the OMII-UK work but will be needed for our collaboration with ESG. 
    13  1. Java Client Interface: 
    14    * We've got time for a Jabva developer to help with this.  I've made a lot more progress with the integration of !ElementTree into the ZSI web service package.   
     10   * PML: updated.  Cross-site access testing is needed to confirm everything is configured OK e.g. PML user accessing BADC data via PML account and NDG Single Sign On. 
     11 1. #931 OpenID: 
     12   * We've just done trials with some of the Earth System Grid team in the US as part of work for the IPCC AR5.   
     13    * ESG have a prototype OpenID Provider interface (i.e. an IdP) 
     14    * We were able to use this to login to NDG with an OpenID ESG account.   
     15   * The next step would be to add an OpenID Provider interface to NDG.  - At the moment NDG has the functionality to act as an OpenID Relying Party ie. we can accept credentials from OpenID users.   
     16   * Enabling NDG as an OpenID Provider would enable BADC users to login to ESG sites in the US.  This is beyond the scope of what we planned for the OMII-UK work.  We'd like to request a no cost extension to fit this work in. 
     17 1. #938 Java Client Interface: 
     18   * A Java developer is now helping with this.  He will focus on getting an example WSS4J based client working with a Python based service.   
     19 1. #940 WS-Security for ZSI: the !ElementTree based Signature Handler is now work and has tested OK against the previous xml.dom based implementation.   
     20 1. AHM Demo: I've made enquiries to get ideas for a demo based on a grid processing job accessing NDG secured data.  Grid based data access can be demonstrated but it's more difficult to find examples involving computational grids. 
    1521