Shibbolized GridSphere for UABgrid

| | | | |

As of this week, gridsphere V 2.1.4 and gridportlets are running. Tomcat version is 5.0.X. Apache version is 2.2.2


  • gridportlet as SP must be apache protected ->

    • install and configure mod_jk 4.1.30 (as ajp1.3)



      • Description of Connector Protocol
      • be sure mod_jk.so is installed (via RPM)
      • create mod_jk.conf in /etc/apache2 and Include in httpd.conf
          NOTE: skipped steps to secure WEB-INF Directory

    • Reconfigure gridsphere so that tomcat connector is used (5/10/06)
        works at address http://www.norton.lab.ac.uab.edu/gridsphere/gridsphere

        created mod_vhosts.conf which causes all tomcat-related content to be auto-forwarded to port 8080 along w. appropriate directory mappings.


    • Get SSL working (server level certificate)
    • install and configure Shib SP

    • replace login.jsp actions with Shibboleth authN

    • capture identity & store to internal DB; provision entry as necessary
    • obtain associated user certificate from myproxy

      • first in open mode
      • then requiring trust between gridsphere and myproxy
    • use gridftp