CILogin

[Douglas E Engert]

Well, maybe you should contact the CiLogon people, as CiLogon
is designed to issue certificates based on some other authentication,
such as using Shibboleth from some InCommon IDP.

These certificates can then be used with Globus, including
GSI-OpenSSH.

I am now retired, but had used our IDP to get certificates from CiLogon.
I was involved with Globus and GSI in the pass too.

I never did try using a CiLogon certificate with our IDP, which has
the X509-login-handler. The IDP only trusted the local enterprise CA and
PIV smart cards. With any certificate the IDP still needed to map the
certificate to some local user for authorization.

(Also see RFC 3280 that defines the proxy certificates used with GSI.)

So it is still not clear what you are trying do with Shibboleth and CiLogin.

But your IDP may already be setup to work with CiLogon as the SP to
get certificates.



















On Fri, Feb 28, 2014 at 7:57 PM, Douglas E Engert <deengert at gmail.com>wrote:

> Let me also add, that if you have CiLogon certificates, you could use them
> for authentication to an IDP, using the X509-login-handler.
>
>
> On Fri, Feb 28, 2014 at 4:06 PM, Douglas E Engert <deengert at gmail.com>wrote:
>
>> CiLogon is in InCommon, So if your IDP is in InCommon, CiLogon
>> should be all set to issue you certificates.
>>
>> http://www.cilogon.org/
>>
>> How you use the certificates may be outside of Shibboleth.
>>
>>
>>
>> On Thu, Feb 27, 2014 at 6:57 PM, Bryan E. Wooten <bryan.wooten at utah.edu>wrote:
>>
>>>  So I have been asked to participate in the CC*IIE grant. CILogin is
>>> part of the whole supercomputer IDM space and this grant. Think ECP, which
>>> I have exactly zero experience.
>>>
>>>  Any direction, help, guidance, resources is most appreciated.
>>>
>>>  What do I need to do as an IDP?
>>>
>>>  Cheers,
>>>
>>>  Bryan
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140302/63e68a81/attachment.html