Changes between Version 23 and Version 24 of RemoteJob

Timestamp:

Feb 23, 2011, 6:50:50 AM (14 years ago)

Author:

tonig

Comment:

security

RemoteJob

@@ -79 +79 @@
  * Customize the WU and result template files, as directed below. This will RBoinc-enable Boinc ''applications'' of your choice.
  * If desired, install the SQL stored procedures (monitoring components).
+
+
+=== Security considerations ===
+
+Servers and scientist's workstation should be on
+the same intranet and the RBoinc server ports should be firewalled. RBoinc is not meant
+to be exposed to the Internet. It should be however easy
+to modify the software to implement the two following protection mechanisms:
+
+ * Generic access control, i.e. only allowing authorized users to upload files to the DAV server. This is achieved by setting an access list to the WebDAV directory, with one entry per user. The rboinc clients should then use HTTP-based authentication to gain access to it. 
+ * Scientist isolation. Currently, scientists can use the "-user" parameter to impersonate each other and work on a shared project. If this is not desired, the client should send a per-user authentication token (ideally the usual BOINC authenticator), and the rboinc server should check this against the requested group.
 
 
@@ -298 +309 @@
 
 
-(Many thanks to B.D.).
+(Many thanks to Boris Dayma).