NOTICE: This version of the NSF Unidata web site (archive.unidata.ucar.edu) is no longer being updated.
Current content can be found at unidata.ucar.edu.
To learn about what's going on, see About the Archive Site.
NOTICE: This version of the NSF Unidata web site (archive.unidata.ucar.edu) is no longer being updated.
Current content can be found at unidata.ucar.edu.
To learn about what's going on, see About the Archive Site.
Hi all, I'm interested in all of this for securing a pyDAP based service. This looks to be what we want in terms of the steps for SSL based authentication: http://www.unidata.ucar.edu/projects/THREDDS/tech/reference/HTTPsecurityChallenge.html Although in our case to enable single sign we would like the authentication to be based on the client certificate so that we can support single sign on using MyProxy. Have any of you done much in the way of authentication interoperability tests between different client and server implementations? Cheers, Phil > -----Original Message----- > From: thredds-bounces@xxxxxxxxxxxxxxxx > [mailto:thredds-bounces@xxxxxxxxxxxxxxxx] On Behalf Of Pauline Mak > Sent: 28 August 2009 22:05 > Cc: THREDDS THREDDS; Tech OPeNDAP > Subject: Re: [thredds] OPeNDAP authentication > > > Hi Thomas, Patrick, John, and James > > Thanks for the responses :) I give the documentation a go. > > Cheers, > > -Pauline. > > >> For TDS, you can use standard Tomcat authentication, see > >> authentication section of this: > >> > >> > http://www.unidata.ucar.edu/projects/THREDDS/tech/tds4.0/reference/in > >> dex.html > >> > >> > >> Im guessing same for Hyrax. OPeNDAP client libraries should support > >> this, as its based on standard HTTP mechanism. > > > > Yes, as both Patrick and John suggest, Hyrax depends on Tomcat for > > security. Here's the documentation on that: > > > http://docs.opendap.org/index.php/Hyrax_-_OLFS_Configuration#A uthentication_.26_Authorization > > > The C++ library and new C client-side library (and thus new netCDF DAP > access) support cookies which is, I believe, what is required for single > sign on systems, although more might be required on the server side. > > James >> _______________________________________________ >> thredds mailing list >> thredds@xxxxxxxxxxxxxxxx >> For list information or to unsubscribe, visit: >> http://www.unidata.ucar.edu/mailing_lists/ > > -- > James Gallagher > jgallagher at opendap.org > 406.723.8663 > > _______________________________________________ > thredds mailing list > thredds@xxxxxxxxxxxxxxxx > For list information or to unsubscribe, visit: > http://www.unidata.ucar.edu/mailing_lists/ -- Pauline Mak Assistant Manager, ARCS Data Services Ph: +61 3 6226 7518 Mob: +61 411 638 196 Email: pauline.mak@xxxxxxxxxxx Jabber: pauline.mak@xxxxxxxxxxx http://www.arcs.org.au/ TPAC Email: pauline.mak@xxxxxxxxxxx http://www.tpac.org.au/ _______________________________________________ thredds mailing list thredds@xxxxxxxxxxxxxxxx For list information or to unsubscribe, visit: http://www.unidata.ucar.edu/mailing_lists/ -- Scanned by iCritical.
thredds archives: