[Planetlab-devel] Re: new PLC API

[david johnson]

On Fri, Feb 02, 2007 at 03:47:00PM -0700, david johnson wrote:
> On Thu, Feb 01, 2007 at 08:15:36AM -0500, David E. Eisenstat wrote:
> > The blob needs to be passed as the sole argument to a call made to 
> > Ticket() on NM's XMLRPC server, running on port 812. Since NM is running 
> > entirely in root context now, I've opted for security reasons to expose 
> > this server only to local connections. As an alternative to maintaining a 
> > slice everywhere, there is mechanism for creating accounts that act as ssh 
> > tunnels, though I'm not sure whether PLC exposes this yet.
> 
> I saw that the ssh tunnel mechanism was planned some weeks ago when preparing
> for the upgrade, but I don't see anything obvious after a CVS update of the

Is PLC going to add whatever functionality is necessary to create these
accounts for ssh tunnels before the new node image rollout?  If not, we're (the
Emulab PlanetLab portal) not going to be able to instantiate delegated slivers
in our slices on new nodes (i.e., nodes that we don't already have a PLC3-era
sliver on).

Thanks.

-- 
------------------------------------------------------------------
David Johnson <johnsond at flux.utah.edu>
Flux Research Group, University of Utah School of Computing
(http://www.flux.utah.edu, http://www.emulab.net)