GRIDportal RFC01 : authentication mechanism
pages:
01 |
02 |
03 |
04
User interface
Log in to GRIDportal
Provide a valid username and password to log into GRIDportal.
NOTE: the login procedure assumes you already have stored your certificate on the server, otherwise you must complete that procedure first.
Design
The user supplies a username/password, which is used to query myProxy for a proxy. Once a proxy is available, the authentication is deemed successful. The proxy is now used to interact with NorduGrid/ARC. The session is managed on GRIDportal rules (default WebKit session timeout is 1h). GRIDportal renews the proxy if necessary (if it were to expire before the session).
Implementation
We can use the
Authentication.pm perl module from
gridport and write a simple client to query myProxy.