Hi all,
I'm interested in all of this for securing a pyDAP based service. This looks
to be what we want in terms of the steps for SSL based authentication:
http://www.unidata.ucar.edu/projects/THREDDS/tech/reference/HTTPsecurityChallenge.html
Although in our case to enable single sign we would like the authentication to
be based on the client certificate so that we can support single sign on using
MyProxy.
Have any of you done much in the way of authentication interoperability tests
between different client and server implementations?
Cheers,
Phil
> -----Original Message-----
> From: thredds-bounces@xxxxxxxxxxxxxxxx
> [mailto:thredds-bounces@xxxxxxxxxxxxxxxx] On Behalf Of Pauline Mak
> Sent: 28 August 2009 22:05
> Cc: THREDDS THREDDS; Tech OPeNDAP
> Subject: Re: [thredds] OPeNDAP authentication
>
>
> Hi Thomas, Patrick, John, and James
>
> Thanks for the responses :) I give the documentation a go.
>
> Cheers,
>
> -Pauline.
>
> >> For TDS, you can use standard Tomcat authentication, see
> >> authentication section of this:
> >>
> >>
> http://www.unidata.ucar.edu/projects/THREDDS/tech/tds4.0/reference/in
> >> dex.html
> >>
> >>
> >> Im guessing same for Hyrax. OPeNDAP client libraries should support
> >> this, as its based on standard HTTP mechanism.
> >
> > Yes, as both Patrick and John suggest, Hyrax depends on Tomcat for
> > security. Here's the documentation on that:
> >
> http://docs.opendap.org/index.php/Hyrax_-_OLFS_Configuration#A
uthentication_.26_Authorization
>
>
> The C++ library and new C client-side library (and thus new netCDF DAP
> access) support cookies which is, I believe, what is required for single
> sign on systems, although more might be required on the server side.
>
> James
>> _______________________________________________
>> thredds mailing list
>> thredds@xxxxxxxxxxxxxxxx
>> For list information or to unsubscribe, visit:
>> http://www.unidata.ucar.edu/mailing_lists/
>
> --
> James Gallagher
> jgallagher at opendap.org
> 406.723.8663
>
> _______________________________________________
> thredds mailing list
> thredds@xxxxxxxxxxxxxxxx
> For list information or to unsubscribe, visit:
> http://www.unidata.ucar.edu/mailing_lists/
--
Pauline Mak
Assistant Manager, ARCS Data Services
Ph: +61 3 6226 7518
Mob: +61 411 638 196
Email: pauline.mak@xxxxxxxxxxx
Jabber: pauline.mak@xxxxxxxxxxx
http://www.arcs.org.au/
TPAC
Email: pauline.mak@xxxxxxxxxxx
http://www.tpac.org.au/
_______________________________________________
thredds mailing list
thredds@xxxxxxxxxxxxxxxx
For list information or to unsubscribe, visit:
http://www.unidata.ucar.edu/mailing_lists/
--
Scanned by iCritical.
