dcache-view Olufemi S. Adeyemi On behalf of the project team INDIGO DataCloud

Similar documents
dcache integration into HDF

Tutorial: Building the Services Ecosystem

Building the Modern Research Data Portal using the Globus Platform. Rachana Ananthakrishnan GlobusWorld 2017

API Gateway. Version 7.5.1

OAuth and OpenID Connect (IN PLAIN ENGLISH)

Single Sign-On for PCF. User's Guide

Azure Archival Installation Guide

How to social login with Aruba controller. Bo Nielsen, CCIE #53075 (Sec) December 2016, V1.00

SOCIAL LOGIN FOR MAGENTO 2 USER GUIDE

Building the Modern Research Data Portal. Developer Tutorial

WEB API. Nuki Home Solutions GmbH. Münzgrabenstraße 92/ Graz Austria F

Integrating with ClearPass HTTP APIs

WP Voting Plugin - Ohiowebtech Video Extension - Youtube Documentation

Creating relying party clients using the Nimbus OAuth 2.0 SDK with OpenID Connect extensions

Mobile Procurement REST API (MOBPROC): Access Tokens

Enhancing cloud applications by using external authentication services. 2015, 2016 IBM Corporation

Free Download Dev. Virto Workflow Activities Kit for SP2010 computer software free download ]

dcache: challenges and opportunities when growing into new communities Paul Millar on behalf of the dcache team

SBCC Web File System - Xythos

User Guide. Version 8.0

openid connect all the things

Check to enable generation of refresh tokens when refreshing access tokens

Microsoft Graph API Deep Dive

ReportPlus Embedded Web SDK Guide

Security. SWE 432, Fall 2017 Design and Implementation of Software for the Web

Integration of the platform. Technical specifications

INDIGO-Datacloud Identity and Access Management Service

DW File Management. Installation Manual. How to install and configure the component.

Google Sheets API Connection

Identity and Data Access: OpenID & OAuth

SOCIAL LOGIN FOR MAGENTO 2

Grandstream Networks, Inc. Captive Portal Authentication via Facebook

NIELSEN API PORTAL USER REGISTRATION GUIDE

Release 3.0. Delegated Admin Application Guide

Grandstream Networks, Inc. Captive Portal Authentication via Twitter

Leveraging the Globus Platform in your Web Applications. GlobusWorld April 26, 2018 Greg Nawrocki

Overview of Professional Quest Technologies

Quick Start Guide for Managers and Publishers. Adding a Document

Best Practices: Authentication & Authorization Infrastructure. Massimo Benini HPCAC - April,

WebDAV elockers Using WebDAV in Studywiz

Protect Your API with OAuth 2. Rob Allen

Authentication in the Cloud. Stefan Seelmann

GPII Security. Washington DC, November 2015

Identity Implementation Guide

Secure File Exchange End-User Web Access

Introduction to SSO Access Policy

Anchor User Guide. Presented by: Last Revised: August 07, 2017

dcache Introduction Course

Bambu API Documentation

Using Keycloak to Provide Authentication, Authorization, and Identity Management Services for Your Gateway

Grandstream Networks, Inc. Captive Portal Authentication via Facebook

ClickToCall SkypeTest Documentation

USER MANUAL. SalesPort Salesforce Customer Portal for WordPress (Lightning Mode) TABLE OF CONTENTS. Version: 3.1.0

REST API Operations. 8.0 Release. 12/1/2015 Version 8.0.0

penelope case management software AUTHENTICATION GUIDE v4.4 and higher

Installation Guide for antegma accallio OX Version 1.0

Table of Contents. Introduction to Store Locator v How to Install and Deactivate How to Configure How to Use...

Storgrid web client manual

Connect-2-Everything SAML SSO (client documentation)

SOCIAL LOGIN USER GUIDE Version 1.0

HTTP Mutual authentication protocol proposal. Yutaka OIWA RCIS, AIST

MailCore Pro Set-Up Guide - Android

Web Messaging Configuration Guide Document Version: 1.3 May 2018

Identity Implementation Guide

ForgeRock Access Management Customization and APIs

Advanced Configuration for SAML Authentication

DreamFactory Security Guide

Identity Implementation Guide

Identity Implementation Guide

Bootstrap your APEX authentication & authorisation. a presentation by

Attacks Against Websites. Tom Chothia Computer Security, Lecture 11

BlackBerry AtHoc Networked Crisis Communication. BlackBerry AtHoc API Quick Start Guide

BLACKBERRY SPARK COMMUNICATIONS PLATFORM. Getting Started Workbook

Salesforce Files Connect Implementation Guide

Sync User Guide. Powered by Axient Anchor

Building Block Installation - Admins

WebDAV. Overview. File Permissions and Management. Authentication Methods

NotifySCM Workspace Administration Guide

RSA SecurID Ready Implementation Guide. Last Modified: December 13, 2013

Identity Implementation Guide

API Security Management SENTINET

GRS Enterprise Synchronization Tool

Actual4Test. Actual4test - actual test exam dumps-pass for IT exams

FREE AJAX SUITE. User Guide FOR MAGENTO 2. Version: Release Date: Product Page: Ajax Suite. Support:

Gmail Integration for Salesforce and Dynamics 365

FenStar Document Management User Manual

Guidelines on non-browser access

BECOMING A DATA-DRIVEN BROADCASTER AND DELIVERING A UNIFIED AND PERSONALISED BROADCAST USER EXPERIENCE

Using BlueStep Data Vault with WebDAV

Managing Protected and Controlled Data with Globus. Vas Vasiliadis

** If you are having issues logging into , Contact **

Guest Service Changes

Installation & Configuration Guide Enterprise/Unlimited Edition

Beyond X.509: Token-based Authentication and Authorization with the INDIGO Identity and Access Management Service

Easily Secure your Microservices with Keycloak. Sébastien Blanc Red

Asana for bpm'online. User manual

TIBCO LiveView Web Getting Started Guide

WEB CREATOR FILE MANAGER

Using OAuth 2.0 to Access ionbiz APIs

Beginner s Guide to Cordova and Mobile Application Development

Transcription:

dcache-view Olufemi S. Adeyemi On behalf of the project team INDIGO DataCloud dcache-view Olufemi S. Adeyemi Umea 30 May 2017

dcache-view Olufemi S. Adeyemi Umea 30 May 2017

Useful flow chart Should I continue to use the webdav webpage?

No

But what if

OMG No!

Use the new user interface dcache-view Olufemi S. Adeyemi Umea 30 May 2017

Noticeable Changes 1. The Name dcache-view Olufemi S. Adeyemi Umea 30 May 2017

The name dcache Face = dface dcache-view Olufemi S. Adeyemi Umea 30 May 2017

Noticeable Changes 2. Cleaner Interface dcache-view Olufemi S. Adeyemi Umea 30 May 2017

dcache-view Olufemi S. Adeyemi Umea 30 May 2017

This image cannot currently be displayed. Hover context menu dcache-view Olufemi S. Adeyemi Umea 30 May 2017

dcache-view Olufemi S. Adeyemi Umea 30 May 2017

Noticeable Changes 3. In-house Third Party Components See: https://github.com/dcache-elements dcache-view Olufemi S. Adeyemi Umea 30 May 2017

dcache-namespace Element Represent the namespace operation HTML <dcache-namespace id= namespace ></dcache-namespace> let namespace = document.createelement('dcache-namespace'); let listresult; namespace.auth = window.btoa('anonymous:nopassword'); namespace.promise.then((req)=>{ listresult = req.response; }).catch((err)=>{ console.log(err.message); }); namespace.ls({ url: 'https://prometheus.desy.de:3880', path: '/Users', children: true }); JavaScript dcache-view Olufemi S. Adeyemi Umea 30 May 2017

Setting Up dcache-view dcache-view is part of frontend service Add frontend service to a dcache domain [SomeDomain/frontend] frontend.dcache-view.org-name= DESY frontend.dcache-view.endpoints.webdav= https://example.org:3769/ frontend.authz.anonymous-operations= (one-of?none READONLY FULL) frontend.authn.protocol= https frontend.authn.basic=true dcache-view Olufemi S. Adeyemi Umea 30 May 2017

Features Login with username and password List directories including home and root Rename Download Move Create File metadata dcache-view Olufemi S. Adeyemi Umea 30 May 2017

Newly added Features Context menu OpenID Connect Bulk Operation (?) User Info Upload Drag and Drop Quality of Service: Get backend info Change dcache-view Olufemi S. Adeyemi Umea 30 May 2017

dcache-view Olufemi S. Adeyemi Umea 30 May 2017

1 OpenID Connect See Anupam Ashish last year talk for details https://indico.desy.de/contributiondisplay.py?contribid=8&confid=13786

Brief Intro. to OpenID Connect OpenID Connect is a simple identity layer on top of OAuth 2.0 protocol (Authorisation framework). It allows Clients to verify the identity of the End-User based on the authentication performed by the an Authorisation Server. Source: http://openid.net/connect/

OpenID Connect with dcache - Configuration 1. Register (or set-up) OpenID Provider 2. webdav Ø webdav.oidc.client.ids!provider.hostname Ø webdav.oidc.client.id!accounts.google.com = <client id> webdav.oidc.client.secrets!provider.hostname webdav.oidc.client.secret!accounts.google.com = <client secret> 3. dcache-domain -> gplazma dcache.oidc.hostnames = accounts.google.com 4. gplazma.conf auth optional oidc map optional multimap èread more: https://github.com/dcache/dcache/wiki/openid-connect-with-dcache

How does it work with dcache-view? - Implicit Flow Yes. Allow? Like: Google, indigo, etc. OpenID Provider Server Permission Granted GET Resource with my OpenID Acct. End-User dcache view 1. Redirect User to

OpenID Connect & Frontend Service </Setup> 1. frontend.dcache-view.oidc-provider-name-list frontend.dcache-view.oidc-provider-name-list=google ebay 2. frontend.dcache-view.oidc-client-id-list frontend.dcache-view.oidc-client-id-list=<clientid1> <clientid2> 3. frontend.dcache-view.oidc-authz-endpoint-list frontend.dcache-view.oidc-authz-endpoint=<client_endpoint1> <client_endpoint2>

</Demo> Authentication & Authorisation with OpenID Connect

2 Uploads and Downloads in dcache-view

Files Upload and Download in dcache-view At the moment, dcache-view uses the webdav door for downloading and uploading files. Hence, both need to know how to talk to each other

Configuration for Download and Upload 1. Frontend Service Configuration frontend.dcache-view.endpoints.webdav frontend.dcache-view.endpoints.webdav= http://webdav.example.org:3335/ 2. Webdav Service Configuration webdav.allowed.origins webdav.allowed.orgins= http://dcache-view.example.org:3335 Cross-Origin Resource Sharing (CORS)

</Demo> 1. Uploads Files (using a button) 2. Uploads Files (using a drag and drop) 3. Downloads in dcache-view

</Demo> Change Quality of Service in dcache-view See Marina Sahakyan talk for details

</Demo> O t h e r S t u f f in dcache-view

dcache-view Olufemi S. Adeyemi Umea 30 May 2017