GridCertLib: a Single Sign-on Solution for Grid Web Applications and Portals

摘要

This paper describes the design and implementation of GridCertLib, a Javalibrary leveraging a Shibboleth-based authentication infrastructure and theSLCS online certificate signing service, to provide short-lived X.509certificates and Grid proxies. The main use case envisioned for GridCertLib, isto provide seamless and secure access to Grid/X.509 certificates and proxies inweb applications and portals: when a user logs in to the portal usingShibboleth authentication, GridCertLib can automatically obtain a Grid/X.509certificate from the SLCS service and generate a VOMS proxy from it. We give anoverview of the architecture of GridCertLib and briefly describe itsprogramming model. Its application to some deployment scenarios is outlined, aswell as a report on practical experience integrating GridCertLib into portalsfor Bioinformatics and Computational Chemistry applications, based on thepopular P-GRADE and Django softwares.