[seek-dev] myproxy
Matt Jones
jones at nceas.ucsb.edu
Fri May 14 01:01:15 PDT 2004
Dave,
I've looked at MyPorxy before, and its a neat idea, but it seems to nme
it just returns the certificate system back to a password system. Its
not clear how using it is any better than just using a password based
system, except i guess that the passwords need not be passed around.
Matt
dave thau wrote:
> A guy I met at a bar tonight told me about this:
>
> http://grid.ncsa.uiuc.edu/myproxy/
>
> -----
>
> MyProxy Online Credential Repository
>
> MyProxy is a credential repository for the Grid. Storing your Grid
> credentials in a MyProxy repository allows you to retrieve a proxy
> credential whenever and wherever you need one, without worrying about
> managing private key and certificate files. Using a standard web browser,
> you can connect to a Grid portal and allow the portal to retrieve a proxy
> credential for you to access Grid resources on your behalf. You can also
> allow trusted servers to renew your proxy credential using MyProxy, so,
> for example, your long-running tasks don't fail because of an expired
> proxy credential. A professionally managed MyProxy server can provide a
> more secure storage location for Grid credentials than typical end-user
> systems.
>
> MyProxy provides a set of flexible authorization mechanisms for
> controlling access to the repository. Server-wide policies allow the
> MyProxy administrator to control how the repository may be used.
> Per-credential policies allow users to specify how each credential may be
> accessed. Passphrase and/or certificate-based authentication is required
> to retrieve credentials from MyProxy. If a credential is stored with a
> passphrase, the private key is encrypted with the passphrase in the
> MyProxy repository.
>
> The MyProxy project is currently supported by:
>
> NSF Middleware Initiative
> NSF Partnership for Advanced Computational Infrastructure
>
> -----
>
> Looks interesting, anyone play with it?
>
> Dave
>
>
>
> _______________________________________________
> seek-dev mailing list
> seek-dev at ecoinformatics.org
> http://www.ecoinformatics.org/mailman/listinfo/seek-dev
More information about the Seek-dev
mailing list