Re: SSH access to XSEDE
Derek Weitzel
I’m CC’ing Jim who would know more about XSEDE’s support of SciTokens.
I think the only “third party” file transfer mechanisms supported by XSEDE is globus. I could be wrong though, Jim would know more.
- Derek
> On Nov 19, 2021, at 3:19 PM, Engin Arslan <ear...@unr.edu> wrote:
>
> Non-NU Email
>
> Hi Derek,
>
> Thanks for answering my question. SciTokens looks like a great initiative! Is it currently supported y XSEDE sites?
>
> I saw server support is implemented and merged into XSEDE/oauth-ssh page but not sure if it is installed anywhere to issue login access to XSEDE sites.
>
> Finally, do you think we can use JWT+OAuth to authorize file transfers between two XSEDE facilities? I think I’m trying to understand if JWT can be used to initiate third party transfers?
>
> Thanks
> Engin Arslan
> Assistant Professor
> Computer Science and Engineering
> University of Nevada, Reno
> https://urldefense.com/v3/__https://www.cse.unr.edu/*earslan/__;fg!!PvXuogZ4sRB2p-tU!Rro940_H0nHMIp7g-IU_rhm3lWE7rUj3fkH5id6W7edo4Uh-rLBRNt9cl3uyytwM$
>
Basney, Jim
SciTokens SSH isn't supported by XSEDE sites yet, but XSEDE is starting an OAuth SSH pilot soon. If you're interested in participating, please let me know.
Derek is correct that Globus is XSEDE's supported data transfer method (see: https://portal.xsede.org/data-management). Globus uses OAuth for authorization and OIDC (JWT) for authentication.
I read with interest the paper that you and Arif presented last week at SC21 [1] about the Falcon system for high performance scientific data transfers, including experiments on XSEDE. I'm excited that Arif will be one of our SciAuth Student Fellows starting in January. I think that will provide us a good opportunity to collaborate further on JWT+OAuth for third party transfers, but of course we don't need to wait until January to continue our discussion, so please don't hesitate to post follow-up comments/questions to the mailing list.
Regards,
Jim
[1] https://doi.org/10.1145/3458817.3476208
________________________________________
From: Derek Weitzel <dwei...@unl.edu>
Sent: Monday, November 22, 2021 1:04 PM
To: Engin Arslan
Cc: SciAuth Discussion; Basney, Jim
Subject: Re: SSH access to XSEDE