| Time |
S |
Nick |
Message |
| 00:48 |
|
|
zodbot joined #dvn |
| 00:51 |
|
|
zodbot joined #dvn |
| 03:31 |
|
|
zodbot_ joined #dvn |
| 13:36 |
|
pdurbin |
I worked a bit on https://github.com/dvn/shibpoc yesterday, as I mentioned here: Shibboleth/Dataverse Network integration - http://shibboleth.net/pipermail/users/2013-February/008095.html |
| 14:17 |
|
pdurbin |
I really need to start thinking about how we would incorporate Shibboleth into the DVN |
| 14:18 |
|
pdurbin |
especially since I'm hosting a meeting tomorrow: http://irclog.iq.harvard.edu/dvn/2013-02-07#i_515 |
| 14:21 |
|
pdurbin |
https://dvn.iq.harvard.edu/dvn/faces/login/LoginPage.xhtml (for example) is backed by https://github.com/IQSS/dvn/blob/3.3/src/DVN-web/web/login/LoginPage.xhtml and https://github.com/IQSS/dvn/blob/3.3/src/DVN-web/src/edu/harvard/iq/dvn/core/web/login/LoginPage.java |
| 14:23 |
|
pdurbin |
as i mentioned at the shib mailing list link above, I'm thinking about looking at this for inspiration: websso - Web Single Sign-On (SSO) Toolkit from CRT - Google Project Hosting - http://code.google.com/p/websso/ |
| 14:24 |
|
pdurbin |
I'm also wondering if I can get a #shibboleth channel going: http://irclog.perlgeek.de/ilbot/2013-02-12#i_6442579 |
| 15:11 |
|
pdurbin |
ok, i just started a new channel: Announcing ##shibboleth, a new IRC channel on irc.freenode.net (publicly logged) - http://shibboleth.net/pipermail/users/2013-February/008097.html |
| 15:22 |
|
|
bnsnwork joined #dvn |
| 15:35 |
|
sbmarks |
yeah, tbh the biggest feature I can think of for shib integration with dataverse would be auto-account creation |
| 15:35 |
|
|
sbmarks left #dvn |
| 15:35 |
|
pdurbin |
sbmarks: hmm. ok. thanks |
| 15:35 |
|
|
sbmarks joined #dvn |
| 15:36 |
|
sbmarks |
otherwise, it's pretty much all covered by the existing rights model |
| 15:37 |
|
sbmarks |
i guess you could do institution authentication if you can pass institutional affiliation through shib, but the case for that being useful where it's not already covered by IP authentication seems like an edge case to me |
| 15:38 |
|
sbmarks |
but I would like to be able to tell users to just log in using their institutional ID and that's your account. the separate signup step is a bit of a pain |
| 15:38 |
|
pdurbin |
yeah, it would be a big win for sites with shib |
| 15:47 |
|
sbmarks |
any idea how many of those there are? |
| 15:47 |
|
sbmarks |
like, have you gotten a lot of interest in the meeting? |
| 15:52 |
|
pdurbin |
well, the main site i know of that has Shibboleth is Odum ( http://www.irss.unc.edu/odum/home2.jsp ) ... as i understand it they would auth against http://its.unc.edu/service-catalog/shibboleth/ |
| 15:53 |
|
pdurbin |
http://arc.irss.unc.edu/dvn/ is their DVN installation. it's listed at http://thedata.org |
| 15:59 |
|
pdurbin |
I'm re-invigorated to look at http://openam.forgerock.org since one of our devs has gotten it working with glassfish. He just said he's going to try to be in the meeting tomorrow |
| 16:16 |
|
pdurbin |
"I'd like to implement a SP using OpenAM with SAML2, and I want to test the implemetation with testshib.org" from http://lists.forgerock.org/pipermail/openam/2012-June/006831.html sounds like more or less what I'd like to try next |
| 16:31 |
|
pdurbin |
a bit of administrivia for this channel... previously links were shorted at 50 characters but I just raised it to 200. i still need to commit the change: change to allow longer links not commited · Issue #1 · dvn/iqirclog-vagrant - https://github.com/dvn/iqirclog-vagrant/issues/1 |
| 16:43 |
|
pdurbin |
going to look at https://blogs.oracle.com/identityfever/entry/connect_opensso_as_a_shibboleth via https://wikis.forgerock.org/confluence/display/openam/Integrate+OpenAM+with+Shibboleth via http://lists.forgerock.org/pipermail/openam/2012-June/006820.html |
| 19:34 |
|
pdurbin |
hmm, added dvn/src/DVN-web/src/edu/harvard/iq/dvn/core/web/servlet/AttrView.java ... now to actually connect it to a shib IdP somehow |
| 20:11 |
|
pdurbin |
sbmarks: datacite? |
| 20:12 |
|
pdurbin |
DataCite | Helping you to find, access, and reuse research data - http://datacite.org |
| 20:12 |
|
sbmarks |
yah, it's another unique identifier minting service |
| 20:12 |
|
sbmarks |
yeah, that one |
| 20:12 |
|
sbmarks |
though I am of course interested in DataCite Canada but same deal |
| 20:12 |
|
sbmarks |
issues DOIs instead of handles |
| 20:12 |
|
pdurbin |
huh. ok. for anyone else we're talking about https://groups.google.com/d/topic/dataverse-community/TFMCCrDwmaM/discussion |
| 20:12 |
|
sbmarks |
but they are pretty much the same thing |
| 20:13 |
|
sbmarks |
http://cisti-icist.nrc-cnrc.gc.ca/eng/services/cisti/datacite-canada/index.html |
| 20:16 |
|
pdurbin |
hmm. ok |
| 20:17 |
|
pdurbin |
sbmarks: if you'd like to make an official feature request, please email dvn_support help.hmdc.harvard.edu |
| 20:21 |
|
sbmarks |
I've been meaning to do that for ages. Or just try to get it puzzled out myself. Would you guys be open to pull requests from end users? |
| 20:46 |
|
pdurbin |
sbmarks: absolutely! |
| 20:46 |
|
sbmarks |
cool =) |
| 20:46 |
|
pdurbin |
sorry, was actually helping another dev with our move to git just now :) |
| 20:46 |
|
sbmarks |
i have some minor metadata quibbles that I would like to get my feet wet on |
| 20:46 |
|
pdurbin |
and... this just in... an attempt to convert dvn from ant to maven: https://github.com/akio-sone/dvn-maven |
| 20:47 |
|
pdurbin |
which is practically a pull request |
| 20:47 |
|
pdurbin |
i should mention it in our maven ticket: https://redmine.hmdc.harvard.edu/issues/2738 |
| 21:21 |
|
pdurbin |
looking at http://weblogs.java.net/blog/amyroh/archive/2012/02/15/running-glassfish-312-apache-http-server after it was mentioned at http://irclog.perlgeek.de/shibboleth/2013-02-12#i_6444574 |
| 21:31 |
|
pdurbin |
they're calling it apache+mod_shib+ajp |
