New Tutorial: Integrating with caGrid from Jython on Django

This tutorial is the third in our "Integrating with caGrid using another programming language" series.

Goals of These Projects

These projects are intended to provide examples of how a developer can interact with caGrid services from within a programming language or framework that is not directly coded using Java. We are focusing our initial attention on languages that will run on the Java Virtual Machine. This allows these languages to depend upon the Java artifacts provided by caGrid.

Desired functionality

1. Created application must be a web application.
2. Application must use SyncGTS, preferably in a background thread, to establish a trust relationship with a deployed grid.
3. Application must allow user registration and authentication against Authentication Services and Dorian.
   1. Web Application must not record the user's password.
4. Application must allow discovery of services from the Index Service.
5. Application must allow users to submit CQL queries against a data service (secure and non-secure).

Jython and Django

Jython is an implementation of the high-level, dynamic, object-oriented language Python seamlessly integrated with the Java platform.

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design.

Tutorial: caGrid Client on Django on Jython

  caGrid News

November caGrid User Group Teleconference

The monthly caGrid User Group meeting is scheduled for Thursday, November 17 at 11AM Eastern. Call info is provided, below.

Creating a Jython-based Web Application backed by caGrid

On this call, Saba Bokhari will walk us through a tutorial that teaches web application developers how to build a web application using the Jython language and Django framework that consumes the following caGrid functionality:

SyncGTS: for establishing trust with the grid
Dorian Service: for user authentication
Index Service: for discovering services on the grid
Data Service Querying: for retrieving data from secure and non-secure services

Jython is an implementation of the high-level, dynamic, object-oriented language Python seamlessly integrated with the Java platform.

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design.

Jython/Django Tutorial

PowerPoint Presentation

Presenter:
Saba Bokhari, Software Engineer, caGrid Knowledge Center

Agenda:

1. Update on caGrid
   1. JBoss Worm is attacking JBoss 4.* servers.
2. Target Discussion
   1. Creating a Jyhton-based Web Application backed by caGrid
3. Open Floor: Issues, concerns, and questions on caGrid

Meeting info:

When: Thursday, November 17 at 11:00am Eastern

Adobe Connect: http://cbiit.acrobat.com/cagridkc/

• Select: "Enter as a Guest"
• Provide your name and click the "Enter Room" button

Phone number: 1-877-939-0845
Passcode: 8983390

caGrid Users,

Update:
Our IT department has instructed us to remove the "jmx-console.war" from the JBoss container to avoid the worm.

We have performed this action on the Portal and verified that it continues to be functional to the end user.

Original News Item:

A worm has been reported as infecting unpatched JBoss 4 application servers. The worm exploits and older configuration in JBoss, which only enabled authentication on GET and POST requests. The vulnerability makes it possible to use other methods to execute arbitrary code on the server without authentication. The problem was fixed last year, but there are apparently still a number of vulnerable installs out there.

The version of JBoss installed by the caGrid Installer suffers from this vulnerability.

If you do run JBoss, please make sure to read the instructions posted by RedHat here:

http://community.jboss.org/blogs/mjc/2011/10/20/statement-regarding-security-threat-to-jboss-application-server

Analysis of the worm:

http://www.infoq.com/news/2011/10/jboss-worm

Thanks,
Bill Stephens
caGrid KC Operations Manager