JIRA Issue

[#XCI-694] Add SciTokens support to SSH with OAuth

[XCI-694] Add SciTokens support to SSH with OAuth Created: 01/07/2020 Updated: 10/01/2020
Status:	Design
Project:	XSEDE Cyberinfrastructure Integration
Component/s:	Globus Auth SSH
Fix Version/s:	PY9 (Sep '19 - Aug '20)

Type:

XCI Enhanced Capability

Priority:

Major

Reporter:

Jim Basney

Assignee:

Jim Basney

Resolution:

Unresolved

Votes:

0

Issue Links:

Associated bugs and stories
associated with	XCI-751	OAuth based SSH login capability inte...	Cancelled
Blocks
is blocked by	XCI-496	SSH with OAuth (OIDC/OAuth SSH servic...	Design
Relates
relates to	XCI-713	Evaluate SciTokens for capability-bas...	Proposed

Sub-Tasks:

Key

Summary

Type

Status

Assignee

XCI-753

Add SciTokens support to SSH with OAu...

Sub-task

In Progress

Target Operator:

Campus Resource Operators, XSEDE Enterprise Services, XSEDE Service Providers

XSEDE Priority:

-

XSEDE Areas:

RACD Security

Public activity link:

https://software.xsede.org/display/xci-694

Devel Repository:

Hide

https://software.xsede.org/svn/xci/activities/xci-694/trunk/

Show

https://software.xsede.org/svn/xci/activities/xci-694/trunk/

Use Cases:

CAN-04: Open a command shell on a login server (web browser)

Effort and Costs:

Staff Name (Lastname, Firstname)	Effort (person weeks)	Roles or Contributions	Status
Basney, Jim	1	one week of effort to lead and implement the activity (required)	none
Liming, Lee	1	one week of effort to coordinate with overall OAuth-SSH effort	none
Makey, Jeff	1	one week of effort to help with implementation	none
Fleury, Terry	0.1	half day for security review	none
TBD (tester)	1	one week of effort to test the software	none

Deliverables:

Due by	Activity Deliverable
DSR	Design document*
TRR	Implemented Software Capability
TRR	Other type of deliverable
TRR	Deployment plan*
TRR	Test plan*
TRR	User documentation*
TRR (post)	TRR Baseline* (Shava)
Deployment	Deployment Baseline* (Shava)
Deployment	Test Report* (Shava)

Click on "Deliverables" tab for URL.

Planned Launch Date:

01/27/2020

Actual Launch Date:

02/05/2020

Planned Design Review Date:

02/27/2020

Planned Test Readiness Review Date:

03/27/2020

Planned Complete Date:

04/27/2020

Activity Lead:

Jim Basney

Lead Tester:

Shava Smallen

Description

SciTokens (https://scitokens.org/) is an NSF-funded project to implement capabilities-based authorization for distributed scientific computing. SciTokens software is Open Source, follows OAuth and JSON Web Token (JWT) standards, and conforms to WLCG Common JWT Profiles (https://doi.org/10.5281/zenodo.3460258).

Adding SciTokens support to SSH with OAuth (XCI-496) enables login using standard JWTs as an alternative to Globus Auth tokens. An initial implementation is complete (see: https://github.com/XSEDE/oauth-ssh/pull/69).

Comments

There are comments for XCI-694 that can be viewed with XSEDE authentication.

Search form

JIRA Issue

[XCI-694] Add SciTokens support to SSH with OAuth Created: 01/07/2020 Updated: 10/01/2020