ALL NPPS Members

[Torre Wenaus <wenaus AT gmail.com>]

Great! On Wed, Sep 10, 2025 at 1: 59 PM Zhao, Xin <xzhao@ bnl. gov> wrote: Hello, Yes we can add the comanage authentication layer in front of the web server, as done for https: //pandaserver02. sdcc. bnl. gov/. Thanks, Xin ________________________________________

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

 

ZjQcmQRYFpfptBannerEnd

Great!

On Wed, Sep 10, 2025 at 1:59 PM Zhao, Xin <xzhao AT bnl.gov> wrote:

Hello,

Yes we can add the comanage authentication layer in front of the web server, as done for
https://pandaserver02.sdcc.bnl.gov/.

Thanks,
Xin



________________________________________
From: phys-npps-members-l-request AT lists.bnl.gov <phys-npps-members-l-request AT lists.bnl.gov> on behalf of Torre Wenaus <wenaus AT gmail.com>
Sent: Wednesday, September 10, 2025 1:47 PM
To: Ye, Shuwei
Cc: NPPS members; Qian, Xin; Yu, Haiwang
Subject: Re: [[Phys-npps-members-l] ] Wed NPPS AI/ML agenda

Xin can probably relate npps0 setup to the machines like pandaserver02 which are inside the firewall but accessible after authentication? Then once you are authenticated it is transparent to use the service just like it was local, should work
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization.

ZjQcmQRYFpfptBannerEnd
Xin can probably relate npps0 setup to the machines like pandaserver02 which are inside the firewall but accessible after authentication? Then once you are authenticated it is transparent to use the service just like it was local, should work for ollama as it does for other things?
  Torre

On Wed, Sep 10, 2025 at 1:11 PM Ye, Shuwei <yesw AT bnl.gov<mailto:yesw AT bnl.gov>> wrote:
Hi Torre,

By default, Ollama servers do not require authentication when running locally.

The machine currently is behind the BNL campus firewall, so its IP address is only visible to the BNL campus.

We can use a reverse proxy (such as Caddy or Ngnix) to secure Ollama behind a proxy.

--Shuwei

________________________________
From: phys-npps-members-l-request AT lists.bnl.gov<mailto:phys-npps-members-l-request AT lists.bnl.gov> <phys-npps-members-l-request AT lists.bnl.gov<mailto:phys-npps-members-l-request AT lists.bnl.gov>> on behalf of Torre Wenaus <wenaus AT gmail.com<mailto:wenaus AT gmail.com>>
Sent: Wednesday, September 10, 2025 12:57 PM
To: NPPS members <Phys-npps-members-l AT lists.bnl.gov<mailto:Phys-npps-members-l AT lists.bnl.gov>>; Qian, Xin <xqian AT bnl.gov<mailto:xqian AT bnl.gov>>; Yu, Haiwang <hyu AT bnl.gov<mailto:hyu AT bnl.gov>>
Subject: Re: [[Phys-npps-members-l] ] Wed NPPS AI/ML agenda

I was just talking in the ePIC S&C meeting about how we're setting up npps0 as an LLM host people can use. The natural question of authentication came up. Can we put this machine behind the same federated authentication that the testbed
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization.

ZjQcmQRYFpfptBannerEnd
I was just talking in the ePIC S&C meeting about how we're setting up npps0 as an LLM host people can use. The natural question of authentication came up. Can we put this machine behind the same federated authentication that the testbed etc. are behind? (No I'm not going to open its use to the whole EIC community :-) And once we do authenticate can tools like Aider operate against it from anywhere, ie point to it as the model used? I assume so but good to have a solid answer.
  Torre

On Mon, Sep 8, 2025 at 8:51 AM Torre Wenaus <wenaus AT gmail.com<mailto:wenaus AT gmail.com>> wrote:
Hi all,
A reminder of the agenda for this week's AI/ML focused NPPS meeting


  *   Standing agenda item - AI/ML news and tips<https://urldefense.com/v3/__https://docs.google.com/document/d/17yv9OrGkl9puzMXTvbPb8sHzOZ2K-lFMUr-0PI4lgYo/edit?tab=t.0*heading=h.2y3fggp160n2__;Iw!!P4SdNyxKAPE!GqKkeVzDplZ5T8hn5Gen8hRkgfl9Rh9dj41lFNsc5MDwq41h7fuzqIFLWeWZcVBtLTjPXsZEsqSMIIS9_b0HImuHCGoQCQ$>. Add your news and tips!

  *   Updating the BNL HEP AI/ML vision (2021)<https://urldefense.com/v3/__https://docs.google.com/document/d/1GgQBbblB71T_sefx2r0oZcsJREatvsUSjyFlp_teVx4/edit?usp=sharing__;!!P4SdNyxKAPE!GqKkeVzDplZ5T8hn5Gen8hRkgfl9Rh9dj41lFNsc5MDwq41h7fuzqIFLWeWZcVBtLTjPXsZEsqSMIIS9_b0HImvU4DupXA$> - Xin Qian

     *   Draft document:<https://indico.bnl.gov/event/28756/contributions/109632/attachments/63231/108564/BNL%20HEP%20AI_ML%20Vision%20DRAFT%20v1.pdf>

  *   Rucio MCP/RAG… and more<https://urldefense.com/v3/__https://docs.google.com/presentation/d/1cYXeAExKGAXDMBdBTgEicDcBZ4YDp5XSl47KAjx_ZlQ/edit?slide=id.p1*slide=id.p1__;Iw!!P4SdNyxKAPE!GqKkeVzDplZ5T8hn5Gen8hRkgfl9Rh9dj41lFNsc5MDwq41h7fuzqIFLWeWZcVBtLTjPXsZEsqSMIIS9_b0HImso0EIJMg$> - Cedric

  *   AI/ML tools, assistants, infrastructure update - Shuwei

  *   MCP in PanDA - Paul/Tadashi

  *   MCP in the ePIC streaming workflow testbed - Torre

  Torre


--
-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments
-- BNL 510A 1-222 | 631-681-7892


--
-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments
-- BNL 510A 1-222 | 631-681-7892


--
-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments
-- BNL 510A 1-222 | 631-681-7892

--

-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments

-- BNL 510A 1-222 | 631-681-7892