资源描述
Click to edit Master title style,Click to edit Master text styles,Second level,Third level,Fourth level,Fifth level,SC04 11/9/04,*,The,MyProxy,Online Credential Repository,Jim BasneyNCSA,What is MyProxy?,A new component in Globus Toolkit 4.0,Independent Globus Toolkit add-on since 2000,A repository for storing long-lived private keys,Keys encrypted with user-chosen password,Keys never leave MyProxy server,A service for retrieving proxy credentials,Supporting mobility, delegation, and renewal,A commonly-used service for grid portal security,Integrated with OGCE, GridSphere, and GridPort,MyProxy System Architecture,MyProxy server,Credentialrepository,Retrieve proxy,Store proxy,(over private TLS channel),MyProxy client,Proxy Delegation,Server,Client,Generate new key pair,Proxy certificate request,Sign proxy certificate with private key,CA,User,Proxy,A,signs,signs,Proxy,B,signs,Proxy,Proxy,UserCert,MyProxy: Credential Mobility,myproxy.teragrid.org,tg-login.uc.teragrid.org,tg-login.caltech.teragrid.org,tg-login.sdsc.teragrid.org,tg-login.ncsa.teragrid.org,ca.ncsa.uiuc.edu,Obtain certificate,Store proxy,Retrieve proxy,MyProxy: Credential Renewal,MyProxy server,Condor-G,Submit job,Globus,gatekeeper,Submit job,Fetch proxy,Refresh proxy,MyProxy and Grid Portals,CHEF portal,MyProxy server,Grid,Login,Fetch proxy,Access data,MyProxy: User Registration,MyProxy server,Registration portal,Certificate authority,Request account,Obtain usercertificate,Load users,credentials,Retrieve,proxy,Gridportal,Login with username/password,Set username/password,ESG,MyProxy Installation (Unix),As an add-on component to GT 3.x,$ gpt-build myproxy*.tar.gz ,Set $MYPROXY_SERVER environment variable to myproxy-server hostname,$ export MYPROXY_SERVER=myproxy.ncsa.uiuc.edu,Set Globus Toolkit environment,$ . $GLOBUS_LOCATION/etc/globus-user-env.sh,Client installation/configuration complete!,MyProxy Commands,myproxy-init,: store proxy,myproxy-get-delegation,: retrieve proxy,myproxy-info,: query stored credentials,myproxy-destroy,: remove credential,myproxy-change-pass-phrase,: change password encrypting private key,MyProxy Server Administration,Install server certificate,Configure /etc/myproxy-server.config policy,Template provided with examples,Optionally:,Configure password quality enforcement,Install cron script to delete expired credentials,Install boot script and start server,Example boot script provided,Use myproxy-admin commands to manage server,Reset passwords, query repository, lock credentials,MyProxy CoG Clients,Commodity Grid (CoG) Kits,Provide portable (Java and Python) MyProxy client tools & APIs,Support Windows,For more information:,MyProxy Community Support,myproxy- mailing list,Bug tracking:,Anonymous CVS access,:pserver:/CVS/myproxy,Contributions welcome!,Feature requests, bug reports, patches, etc.,Thank you!,Contact:,Questions/Comments?,
展开阅读全文