perfsonar development work

[Loukik Kudarimoti <>]

Candido is the best person to answer these questions...

Herbert Souza wrote:
> Hi Loukik,
>
> I have some doubts about the AS:
>
> I have read the documents "X.509 token profile" and "Web Services
> Security specification", but I couldn't solve my doubts. What kind of
> encryption is used in communication between the client and perfSONAR
> Service (Public-key cryptography (SSL) or Symmetric-key cryptography)?
>
> The RNP doesn`t have a IdP yet, but I`d like to know what the
> requirements beyond softwares like Shibb and PAPI, to deploy a IdP
> compatible to operate with eduGAIN?
>
> Other questions:
>
> We pretend to deploy the perfSONAR MDM 3.0 in RNP, but we are afraid
> about the AS.  so, when the pSR 3.0 will be released?
> Is it possible to use the pSR 3.0 without AS (a option AS disable )?
>
> I am still talking whit the RNP CEO to verify whether there is an
> effort to deploy a IdP in RNP, that we can use in the deployment of
> pSR 3.0.
>
> In the test I can use the GIdP.
>
> Thanks and regards.
>
> Herbert
>
>
> On Jan 18, 2008 2:55 PM, Loukik Kudarimoti
> <>
>  wrote:
>   
> > Herbert Souza wrote:
> >     
> > > Hi Loukik,
> > >
> > > Will these tests also cover the AS? If the answer is Yes, I am
> > > interested on it, but I'm still studying the service.  I am interested
> > > in AS because the RNP is checking the possibility of deploy the
> > > perfSONAR with security features this quarter. Can you tell me
> > > something about that?
> > >
> > >       
> > Hi Herbert, hope you are doing fine.
> >
> > Yes, the tests will cover AS as well as other services. There are three
> > parts to the picture
> >
> > 1. The identity provider (IdP) - which provides identities to users.
> > 2. The Authentication Service - which verifies identities
> > 3. The perfsonar web service (or resource) - which requires identities
> > to be supplied so that it can verify the user with the AS before doing
> > the task that it is being asked to do.
> >
> > The perfSONAR MDM bundle will include parts 2 and 3. For part 1, you can
> > either install your own IdP or use the GIdP (Geant Identity Provider)
> > which has been set up to help early users.
> >
> > Let me know if you need more information.
> >
> > Shall I put down your name on my list of testers?
> >
> > thanks,
> > Loukik.
> >
> >     
> > > Thanks and regards!
> > >
> > > Herbert Monteiro
> > > RNP
> > >
> > >       
> > --
> >
> > ---------------------------------------------------------------
> > L o u k i k   K u d a r i m o t i
> >
> >       * *              Network Engineer
> >     *     *            City House, 126 - 130, Hills Road
> >    *                   Cambridge CB2 1PQ, United Kingdom
> >    *                   WWW: http://www.dante.net
> > D  A  N  T  E          Tel:+44 1223 371300 Fax:+44 1223 371371
> >
> >
> >