[gt-user] MyProxy CA

2011-05-26 Thread Lukasz Lacinski
Hi, I would like to issue user credentials using a MyProxy server, MyProxy CA and PAM. But I would like to avoid adding a certificate of the MyProxy CA to /etc/grid-security/certificates. I am thinking of taking a user credential signed by a IGTF-accredited CA (most of GridFTP servers and

Re: [gt-user] MyProxy CA

2011-05-26 Thread Alan Sill
On May 26, 2011, at 11:51 AM, Lukasz Lacinski wrote: I would like to issue user credentials using a MyProxy server, MyProxy CA and PAM. But I would like to avoid adding a certificate of the MyProxy CA to /etc/grid-security/certificates. I am thinking of taking a user credential signed by a

Re: [gt-user] MyProxy CA

2011-05-26 Thread Jim Basney
On 5/26/11 10:59 AM, Alan Sill wrote: On May 26, 2011, at 11:51 AM, Lukasz Lacinski wrote: I would like to issue user credentials using a MyProxy server, MyProxy CA and PAM. But I would like to avoid adding a certificate of the MyProxy CA to /etc/grid-security/certificates. I am thinking of

Re: [gt-user] MyProxy CA

2011-05-26 Thread Jim Basney
You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the problem with adding it in? If someone manages a client grid workstation, users have to ask him to add a certificate of

Re: [gt-user] MyProxy CA

2011-05-26 Thread Lukasz Lacinski
On 5/26/11 12:24 PM, Jim Basney wrote: You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the problem with adding it in? If someone manages a client grid workstation, users have

Re: [gt-user] MyProxy CA

2011-05-26 Thread Jim Basney
On 5/26/11 11:50 AM, Lukasz Lacinski wrote: On 5/26/11 12:24 PM, Jim Basney wrote: You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the problem with adding it in? If someone

Re: [gt-user] MyProxy CA

2011-05-26 Thread Jim Basney
On 5/26/11 11:52 AM, Jim Basney wrote: On 5/26/11 11:50 AM, Lukasz Lacinski wrote: On 5/26/11 12:24 PM, Jim Basney wrote: You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the