ALL NPPS Members

["Zhao, Xin" <xzhao AT bnl.gov>]

Hello,

Yes we can add the comanage authentication layer in front of the web server, 
as done for 
https://pandaserver02.sdcc.bnl.gov/.

Thanks,
Xin



________________________________________
From: phys-npps-members-l-request AT lists.bnl.gov 
<phys-npps-members-l-request AT lists.bnl.gov> on behalf of Torre Wenaus 
<wenaus AT gmail.com>
Sent: Wednesday, September 10, 2025 1:47 PM
To: Ye, Shuwei
Cc: NPPS members; Qian, Xin; Yu, Haiwang
Subject: Re: [[Phys-npps-members-l] ] Wed NPPS AI/ML agenda

Xin can probably relate npps0 setup to the machines like pandaserver02 which 
are inside the firewall but accessible after authentication? Then once you 
are authenticated it is transparent to use the service just like it was 
local, should work
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization.

ZjQcmQRYFpfptBannerEnd
Xin can probably relate npps0 setup to the machines like pandaserver02 which 
are inside the firewall but accessible after authentication? Then once you 
are authenticated it is transparent to use the service just like it was 
local, should work for ollama as it does for other things?
  Torre

On Wed, Sep 10, 2025 at 1:11 PM Ye, Shuwei 
<yesw AT bnl.gov<mailto:yesw AT bnl.gov>> wrote:
Hi Torre,

By default, Ollama servers do not require authentication when running locally.

The machine currently is behind the BNL campus firewall, so its IP address is 
only visible to the BNL campus.

We can use a reverse proxy (such as Caddy or Ngnix) to secure Ollama behind a 
proxy.

--Shuwei

________________________________
From: 
phys-npps-members-l-request AT lists.bnl.gov<mailto:phys-npps-members-l-request AT lists.bnl.gov>
 
<phys-npps-members-l-request AT lists.bnl.gov<mailto:phys-npps-members-l-request AT lists.bnl.gov>>
 on behalf of Torre Wenaus <wenaus AT gmail.com<mailto:wenaus AT gmail.com>>
Sent: Wednesday, September 10, 2025 12:57 PM
To: NPPS members 
<Phys-npps-members-l AT lists.bnl.gov<mailto:Phys-npps-members-l AT lists.bnl.gov>>;
 Qian, Xin <xqian AT bnl.gov<mailto:xqian AT bnl.gov>>; Yu, Haiwang 
<hyu AT bnl.gov<mailto:hyu AT bnl.gov>>
Subject: Re: [[Phys-npps-members-l] ] Wed NPPS AI/ML agenda

I was just talking in the ePIC S&C meeting about how we're setting up npps0 
as an LLM host people can use. The natural question of authentication came 
up. Can we put this machine behind the same federated authentication that the 
testbed
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization.

ZjQcmQRYFpfptBannerEnd
I was just talking in the ePIC S&C meeting about how we're setting up npps0 
as an LLM host people can use. The natural question of authentication came 
up. Can we put this machine behind the same federated authentication that the 
testbed etc. are behind? (No I'm not going to open its use to the whole EIC 
community :-) And once we do authenticate can tools like Aider operate 
against it from anywhere, ie point to it as the model used? I assume so but 
good to have a solid answer.
  Torre

On Mon, Sep 8, 2025 at 8:51 AM Torre Wenaus 
<wenaus AT gmail.com<mailto:wenaus AT gmail.com>> wrote:
Hi all,
A reminder of the agenda for this week's AI/ML focused NPPS meeting


  *   Standing agenda item - AI/ML news and 
tips<https://urldefense.com/v3/__https://docs.google.com/document/d/17yv9OrGkl9puzMXTvbPb8sHzOZ2K-lFMUr-0PI4lgYo/edit?tab=t.0*heading=h.2y3fggp160n2__;Iw!!P4SdNyxKAPE!GqKkeVzDplZ5T8hn5Gen8hRkgfl9Rh9dj41lFNsc5MDwq41h7fuzqIFLWeWZcVBtLTjPXsZEsqSMIIS9_b0HImuHCGoQCQ$>.
 Add your news and tips!

  *   Updating the BNL HEP AI/ML vision 
(2021)<https://urldefense.com/v3/__https://docs.google.com/document/d/1GgQBbblB71T_sefx2r0oZcsJREatvsUSjyFlp_teVx4/edit?usp=sharing__;!!P4SdNyxKAPE!GqKkeVzDplZ5T8hn5Gen8hRkgfl9Rh9dj41lFNsc5MDwq41h7fuzqIFLWeWZcVBtLTjPXsZEsqSMIIS9_b0HImvU4DupXA$>
 - Xin Qian

     *   Draft 
document:<https://indico.bnl.gov/event/28756/contributions/109632/attachments/63231/108564/BNL%20HEP%20AI_ML%20Vision%20DRAFT%20v1.pdf>

  *   Rucio MCP/RAG… and 
more<https://urldefense.com/v3/__https://docs.google.com/presentation/d/1cYXeAExKGAXDMBdBTgEicDcBZ4YDp5XSl47KAjx_ZlQ/edit?slide=id.p1*slide=id.p1__;Iw!!P4SdNyxKAPE!GqKkeVzDplZ5T8hn5Gen8hRkgfl9Rh9dj41lFNsc5MDwq41h7fuzqIFLWeWZcVBtLTjPXsZEsqSMIIS9_b0HImso0EIJMg$>
 - Cedric

  *   AI/ML tools, assistants, infrastructure update - Shuwei

  *   MCP in PanDA - Paul/Tadashi

  *   MCP in the ePIC streaming workflow testbed - Torre

  Torre


--
-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments
-- BNL 510A 1-222 | 631-681-7892


--
-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments
-- BNL 510A 1-222 | 631-681-7892


--
-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments
-- BNL 510A 1-222 | 631-681-7892