|
|
|
|
|
|
|
NCSA runs a production MyProxy server for TeraGrid at myproxy.teragrid.org. The current software version running on myproxy.teragrid.org is v4.0 11 Jul 2007. We believe this server is compatible with the following clients:
The TeraGrid MyProxy server is integrated with the NCSA CA. TeraGrid users can enter their TeraGrid Portal/Kerberos password at the myproxy-logon (or myproxy-get-delegation or Java CoG myproxy anonget) password prompt to retrieve a short-lived certificate from the NCSA CA, without needing to run myproxy-init or ncsa-cert-request. The MyProxy server instance on the default MyProxy port (7512) supports both the CA and repository capability. A second server instance running on port 7514 provides a CA-only option, which is useful if you always want to perform TeraGrid Portal/Kerberos password authentication without supporting credential passphrase authentication. The MyProxy server is configured to enforce minimal passphrase quality, which will result in errors if you choose a passphrase that is too short or contains only dictionary words, for example. The MyProxy server will issue certificates good for up to one week (168 hours). To request a certificate with longer lifetime than the default, use the -t option such as myproxy-logon -t 168 or myproxy anonget -t 168. To use the TeraGrid MyProxy server, you must have the NCSA CA certificate installed on your client machine, so it can verify the server's host certificate. Download 4a6cd8b1.0 and 4a6cd8b1.signing_policy and place these two files in /etc/grid-security/certificates/. The MyProxy server will accept credentials from all TeraGrid Certificate Authorities accepted by TeraGrid. See the Accessing TeraGrid Overview for more information about using MyProxy and certificates on TeraGrid. Please contact help@teragrid.org with any questions about the TeraGrid MyProxy server.
Last modified
08/23/07. |
![[Valid CSS]](http://jigsaw.w3.org/css-validator/images/vcss)
![[Valid Atom 1.0]](http://myproxy.ncsa.uiuc.edu/valid-atom.png)
