SAML Holder-of-Key SSO Profile Handler

Today I updated the wiki on the SAML Holder-of-Key GSoC project. For those of you not familiar with the project, during the last few months I implemented a Holder-of-Key Single Sign-On profile handler for a SAML Identity Provider (the Shibboleth IdP). With this profile handler, a Shibboleth IdP can issue holder-of-key SAML assertions to property authenticated non-browser users.

In this scenario, a non-browser client (in my implementation, an HTTP User Agent written in Java) issues a SAML Request and sends it together with a self-signed X.509 certificate to the SAML IdP. The user behind the User Agent authenticates to the IdP with a username/password via HTTP basic auth. The IdP binds the key in the certificate to the SAML holder-of-key assertion, signs it and returns it to the User Agent. A demo of this message exchange is hosted at NCSA. Instructions for how to build and install the Holder-of-Key SSO profile handler are available at the project wiki. Any comments are most welcome.

As we approach the official end of the program, I must say it has been very exciting to work with Globus. The Globus developer community is friendly and helpful at all times. Also, Tom Scavo is the perfect mentor: he gives me freedom to be creative and proper guidance so I don't deviate too much from the right path :-)

gRavix service composition UI prototype

I just posted about the seeding of the gRavix gsoc svn repository, and thought I could follow up with a quick note on what this is built to accomplish in the long run, as well as give everyone a screenshot of what it looks like.

The idea is very simple - discover services which have already been deployed and use their different operations in order to compose a new, more complex workflow service. A simple idea, with potentially powerful outcomes.


What you see here is a filetree on the left which would be populated with both local (user owned) services and discovered (cloud) services, which can be dragged and dropped onto a new service in order to create a workflow.

Comments, suggestions and ideas are most welcome! And if you want help with getting it working, check out my previous post or just shoot me an email (narcvs@gmail.com).

SVN repo seeded with gRavix

I have seeded the Globus svn repository for the gsoc projects with a gravix repository. It is currently empty, but a first prototype should be in the "prototype" directory before the day ends.

Check out development at any point at http://svn.globus.org/repos/gsoc/gravix/.

It should be pretty straight forward to get it running by just pointing your browser to the index file, but more specific instructions will come up soon enough as well.

Update: Get a look at the first service composition UI prototype with:

svn co http://svn.globus.org/repos/gsoc/gravix/prototypes/gravix-proto-graph-1.0/

Then point your browser to gravix-proto-graph-1.0/index.html.

woo woo first commit! and first impressions.

I have just committed the first contribution from Milena who is working on type checking for Swift.

For what ended up as a very simple change (11 lines of pretty simple code) it has taken quite a long time to get it into our SVN - the basic code was written some weeks ago (before the official start) but we've had plenty of fun since then getting test cases to pass (this year I seem to be tripping on test cases more than I have in the past) and the like - new-to-the-project developer things that we won't have to do again for the rest of the summer.

I've helped mentor students before, but always students that "belong" to one academic researcher or another; it is an interesting and refreshing change to have a student working on a project that I suggested, rather than be supporting somebody else's project.

So I am pleased.

Diagnostic Administrator Interface Framework

Hello!

I'm Karl Norby, and I am current a second year undergraduate CS major at the University of Chicago. I will be working with Charles Bacon as my mentor on a Diagnostic Administrator Interface Framework, which should make configuration much simpler.

I keep a blog, which is not specific to this project, but I am sure to update it with my progress.

If you would like to get in touch, you can try my on gTalk (karl.norby {--at--} gmail {**dot**} com), on the MUD, or:

• my personal site
• facebook profile
• LinkedIn Profile

It should be a fun summer; I look forward to working with you all. Good luck to all!

Development of dynamic resource trading service for Virtual Workspaces

Hi,

First of all I would like to congratulate all accepted students !

I am Artem Harutyunyan, a first year PhD student at the Department of Computer Systems and Informatics at State Engineering University of Armenia in Yerevan, Armenia. My mentor is Tim Freeman and I will be working on the development of dynamic resource trading service for Virtual Workspaces.

I have set up a blog here, it's currently empty ;) , but I am planning to write there about the progress of my work, as well as other interesting technical stuff I will come around, so check it out from time to time :).

Needless to say, that I am very happy to be the part of community, and I hope to know everyone better. Feel free to drop me a line at hartem[at]gmail.com, alternatively one contact me via MSN or Jabber (ID's are the same as my email).

Here are links to my profiles on LinkedIn and Faceebook.

Cheers and fruitful coding,
Artem.

Type Checking and Inference for SwiftScript

Hi there!

I am Milena Nikolic, a CS student at the Faculty of Electronic Engineering, University of Nis, Serbia. I will be working with Ben Clifford as a mentor on Type Checking and Inference for SwiftScript. 

I am really thrilled about this project because I have major interest in grammars and compilers. Also I am happy I'll be working with this community during summer!

If you have any comment/idea/anything about my project or anything else please contact me via mail, IM or MUD. Here are some links more:

- My homepage, unfortunately in Serbian

- My Facebook profile

- My Blog

Best wishes to all the GSoC students and mentors! Happy hacking this summer!

gRavi User Interface Project

Hi,

I will be working with Ravi Madduri as my mentor, to create a browser-based user interface for gRavi. [GSOC page, detailed project description]

My name is Marcus, and I'm a CS theory student, but have a much greater appreciation for concrete implementation and coding than theoretical stuff. The last 2 years I've spent much of my spare time learning the myriad of tech's that make up good web programming: xhtml, css, javascript etc for the server side, and java, ruby on rails, mysql, comet etc on the server side (and been appropriately damaged - my programming language of preference is javascript).

I'm also from Sweden (we've got two! :), but spend most of my time in the US. I've got my own blog at http://feeds.feedburner.com/MarcusWestin, where I cover mostly javascript, OS X and random tech news of interest.

It's exhilarating to be part of the team! I'm looking forward to get to know everyone better, and to create something good over the summer.

Hi everyone!

Hi!

My name is Mattias Lidman, and I'm an undergrad student at the Department of Computer Science at Umeå University in Sweden.

I'll be working on the XIO Compression Driver this summer. This will be the first major project that I work on, so I'm pretty excited about it!

I've also set up a personal blog here. The primary purpose of it will be to as a semi-formal journal about my project, so check it out if you're curious about my progress!

Cheers and good luck to you all!

Hello everyone!

Hi,

My name is William Voorsluys. I'm a first year PhD student in the University of Melbourne, Australia, working in the Gridbus project.
My current research interests are grid computing and virtualization.
Prior to coming to Melbourne, I have worked for three years with grid computing in the OurGrid project, in Brazil.

This is my first participation in the Google Summer of Code. My work will be adding market-based resource management to the Globus Workspace Service, which includes some work on integrating it with OpenNebula.

Good luck for us all.

Cheers,

William.

Hi there!

Hi there!

My name is Joana Matos Fonseca da Trindade, and I am a Computer Science undergraduate student at UFRGS, Brazil. As mentioned by Borja in the previous post, this summer I will be working with SAML Holder-of-key Authentication for Single Sign-On in GridShib.

This topic is of particular interest to me, as I have been working with SAML and other OASIS security standards since November 2007. Before getting accepted on GSoC, I finished a 5-month internship in the Security & Trust Research Group at SAP Labs France, in the context of the SERENITY project. As part of this work, I implemented a library built on top of the Apache Rampart project providing support for XML-Encryption/Signature, as well as SAML-based brokered authentication for SERENITY's workflow prototypes.

Please feel free to send me an email, or to check the links below:

• My Homepage
• My Profile at LinkedIn
• The beautiful city of Porto Alegre, Brazil

Congratulations to all students accepted, and good luck on your summer projects! :-)

Welcome to the Globus/GSoC 2008 blog

As Ben eloquently expressed in the first post, Globus has set up this blog for its Google Summer of Code 2008 students and mentors. The students will soon be posting to introduce themselves and to talk about all the cool and exciting stuff that they will be working on this summer. For now, here is the list of Globus GSoC students, with links to the proposal abstracts:

Diagnostic Administrator Interface Framework
by Karl Norby
Mentored by Charles Bacon.

Implementing a KVM backend to the Globus workspace service
by Michael Fenn
Mentored by Kate Keahey.

Development of dynamic resource trading service for Virtual Workspaces
by Artem Harutyunyan
Mentored by Tim Freeman.

Integration of GridFTP with Freeloader storage system
by Hesam Ghasemi
Mentored by Rajkumar Kettimuthu.

SAML Holder-of-Key Authentication for HTTP Single Sign-On in GridShib
by Joana Matos Fonseca da Trindade
Mentored by Tom Scavo.

gRavi UX
by Marcus Westin
Mentored by Ravi K Madduri.

XIO Compression Driver
by Mattias Lidman
Mentored by John Bresnahan.

Credential Translation Service
by Mehran Ahsant
Mentored by Rachana Ananthakrishnan.

Type Checking and Inference for SwiftScript
by Milena Nikolic
Mentored by Ben Clifford.

Enabling market-based scheduling on OpenNebula and its integration with the Globus Workspace Service
by William Voorsluys
Mentored by Borja Sotomayor.

WOO WOO FIRST POST!!!

This is the blog for students and mentors involved in the ten Globus projects in Google Summer of Code 2008!