scholarly journals Secure Command Line Solution for Token-based Authentication

2021 ◽  
Vol 251 ◽  
pp. 02036
Author(s):  
Dave Dykstra ◽  
Mine Altunay ◽  
Jeny Teheran

The WLCG is modernizing its security infrastructure, replacing X.509 client authentication with the newer industry standard of JSON Web Tokens (JWTs) obtained through the Open ID Connect (OIDC) protocol. There is a wide variety of software available using the standards, but most of it is for Web browser-based applications and doesn’t adapt well to the command line-based software used heavily in High Throughput Computing (HTC). OIDC command line client software did exist, but it did not meet our requirements for security and convenience. This paper discusses a command line solution we have made based on the popular existing secrets management software from Hashicorp called vault. We made a package called htvault-config to easily configure a vault service and another called htgettoken to be the vault client. In addition, we have integrated use of the tools into the HTCondor workload management system, although they also work well independent of HTCondor. All of the software is open source, under active development, and ready for use.

2012 ◽  
Vol 10 (4) ◽  
pp. 17-25
Author(s):  
Miroslav Minovic ◽  
Miloš Milovanovic ◽  
Jelena Minovic ◽  
Dušan Starcevic

The authors present a learning platform based on a computer game. Learning games combine two industries: education and entertainment, which is often called “Edutainment.” The game is realized as a strategic game (similar to Risk™), implemented as a module for Moodle CMS, utilizing Java Applet technology. Moodle is an open-source course management system (CMS), which is widely used among universities as an eLearning platform. Java Applet enables development of rich-client applications which are executed in web browser environment. During the game, players receive questions from specified Moodle quiz, and all answers are stored back into Moodle system. Students can later verify their score and answers, and examine the test that they actually worked on during the game. This system supports synchronous as well as asynchronous interaction between players.


2018 ◽  
Author(s):  
Franziska Metge ◽  
Robert Sehlke ◽  
Jorge Boucas

AbstractSummary:AGEpy is a Python package focused on the transformation of interpretable data into biological meaning. It is designed to support high-throughput analysis of pre-processed biological data using either local Python based processing or Python based API calls to local or remote servers. In this application note we describe its different Python modules as well as its command line accessible toolsaDiff,abed,blasto,david, andobo2tsv.Availability:The open source AGEpy Python package is freely available at:https://github.com/mpg-age-bioinformatics/AGEpy.Contact:[email protected]


2019 ◽  
Vol 214 ◽  
pp. 03024
Author(s):  
Vladimir Brik ◽  
David Schultz ◽  
Gonzalo Merino

Here we report IceCube’s first experiences of running GPU simulations on the Titan supercomputer. This undertaking was non-trivial because Titan is designed for High Performance Computing (HPC) workloads, whereas IceCube’s workloads fall under the High Throughput Computing (HTC) category. In particular: (i) Titan’s design, policies, and tools are geared heavily toward large MPI applications, while IceCube’s workloads consist of large numbers of relatively small independent jobs, (ii) Titan compute nodes run Cray Linux, which is not directly compatible with IceCube software, and (iii) Titan compute nodes cannot access outside networks, making it impossible to access IceCube’s CVMFS repositories and workload management systems. This report examines our experience of packaging our application in Singularity containers and using HTCondor as the second-level scheduler on the Titan supercomputer.


2020 ◽  
Vol 245 ◽  
pp. 03015
Author(s):  
Dave Dykstra ◽  
Shreyas Bhat ◽  
Dennis Box ◽  
Hyun Woo Kim ◽  
Tanya Levshina

The CernVM FileSystem (CVMFS) is widely used in High Throughput Computing to efficiently distributed experiment code. However, the standard CVMFS publishing tools are designed for a small group of people from each experiment to maintain common software, and the tools are not a good fit for publishing software from numerous users in each experiment. As a result, most user code, such as code to do specific physics analyses, is still sent with every job to the place the job is run. That process is relatively inefficient, especially when the user code is large. To overcome these limitations, we have built a CVMFS user code publication system. This publication system enables users to still submit their code with their jobs but the code is distributed and accessed through the standard CVMFS infrastructure. The user code is automatically deleted from CVMFS after a period of no use. Most of the software for the system is available as a single self-contained open source rpm called cvmfs-user-pub and is available for other deployments.


2010 ◽  
Vol 11 (1) ◽  
Author(s):  
Andrew N Tolopko ◽  
John P Sullivan ◽  
Sean D Erickson ◽  
David Wrobel ◽  
Su L Chiang ◽  
...  

Author(s):  
Elly Mufida ◽  
David Wardana Agus Rahayu

The VoIP communication system at OMNI Hospital Alam Sutera uses the Elastix 2.5 server with the Centos 5.11 operating system. Elastix 2.5 by the developer has been declared End of Life. The server security system is a serious concern considering that VoIP servers can be accessed from the internet. Iptables and fail2ban applications are applications that are used to limit and counteract those who try to attack the VoIP server. One application that can be used as an open source VoIP server is the Issabel Application version 4.0. The migration process from Elastix 2.5 application to Issabel 4.0 by backing up all configurations in the Elastix 2.5 application through a web browser including the configuration of endpoints, fax, e-mail, asterisk. After the backup file is downloaded then upload the backup file to the Issabel 4.0 application then run the migration process. Adding a backup path as a failover connection is needed because the VoIP communication protocol between the OMNI Hospitals Group still uses one path so that when there is a problem in the connection path, the communication protocol will stop. The tunnel EoIP is a protocol used as a backup path between the OMNI Hospitals Group site.


1990 ◽  
Author(s):  
DEPARTMENT OF THE ARMY WASHINGTON DC

Sign in / Sign up

Export Citation Format

Share Document