Re: [gt-user] MyProxy CA with LDAP

2014-02-20 Thread Fabio Moreira
Hi Jim, We decide to use the Global Catalog to search the user and validate its password. We've got this idea after reading the link below: http://technet.microsoft.com/en-us/library/cc978012.aspx Now the authentication is taking less than 1 second. Best Regards. On Wed, Feb 19, 2014 at 7:56

Re: [gt-user] MyProxy CA with LDAP

2014-02-19 Thread Fabio Moreira
Hi Jim, Thanks for the tip. I made the test and I still facing slow authentication. I intend to change the way I'm doing the authentication. Since I just need to check the user and his password, I will try to use PAM with Kerberos through pam_krb5. Later I'll send the results. Best Regards.

[gt-user] MyProxy CA with LDAP

2014-02-18 Thread Fabio Moreira
Hi, I have built a MyPoxy CA v5.9 server with authentication integrated with an Active Directory Server through PAM/LDAP to made the authentication of our grid environment. Although the certificate is issued, this authentication has been very slow with many time out before issuing the

Re: [gt-user] MyProxy CA with LDAP

2014-02-18 Thread Basney, Jim
Hello Fabio, Please try the following command as root on your MyProxy CA server: pamtester myproxy fabio authenticate You may need to first do 'yum install pamtester'. This will determine if the problem is due to myproxy-server or pam_ldap. If you experience slow authentication and timeouts

Re: [gt-user] MyProxy CA

2011-05-27 Thread Lukasz Lacinski
On 5/26/11 12:24 PM, Jim Basney wrote: You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the problem with adding it in? If someone manages a client grid workstation, users have

[gt-user] MyProxy CA

2011-05-26 Thread Lukasz Lacinski
Hi, I would like to issue user credentials using a MyProxy server, MyProxy CA and PAM. But I would like to avoid adding a certificate of the MyProxy CA to /etc/grid-security/certificates. I am thinking of taking a user credential signed by a IGTF-accredited CA (most of GridFTP servers and

Re: [gt-user] MyProxy CA

2011-05-26 Thread Alan Sill
On May 26, 2011, at 11:51 AM, Lukasz Lacinski wrote: I would like to issue user credentials using a MyProxy server, MyProxy CA and PAM. But I would like to avoid adding a certificate of the MyProxy CA to /etc/grid-security/certificates. I am thinking of taking a user credential signed by a

Re: [gt-user] MyProxy CA

2011-05-26 Thread Jim Basney
On 5/26/11 10:59 AM, Alan Sill wrote: On May 26, 2011, at 11:51 AM, Lukasz Lacinski wrote: I would like to issue user credentials using a MyProxy server, MyProxy CA and PAM. But I would like to avoid adding a certificate of the MyProxy CA to /etc/grid-security/certificates. I am thinking of

Re: [gt-user] MyProxy CA

2011-05-26 Thread Jim Basney
You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the problem with adding it in? If someone manages a client grid workstation, users have to ask him to add a certificate of

Re: [gt-user] MyProxy CA

2011-05-26 Thread Lukasz Lacinski
On 5/26/11 12:24 PM, Jim Basney wrote: You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the problem with adding it in? If someone manages a client grid workstation, users have

Re: [gt-user] MyProxy CA

2011-05-26 Thread Jim Basney
On 5/26/11 11:50 AM, Lukasz Lacinski wrote: On 5/26/11 12:24 PM, Jim Basney wrote: You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the problem with adding it in? If someone

Re: [gt-user] MyProxy CA

2011-05-26 Thread Jim Basney
On 5/26/11 11:52 AM, Jim Basney wrote: On 5/26/11 11:50 AM, Lukasz Lacinski wrote: On 5/26/11 12:24 PM, Jim Basney wrote: You can add any CA certificate to your server's certificate area, if you trust the way that CA is run. If not, you shouldn't be using its certificates; if so, what id the