Programmer – Software Developer (DSS)

Natural Resources Canada requires help of a Seasoned Software Developer to add support to the open-source software package DACS: Distributed Access Control System for GCKey Authentication using OpenID Connect Protocol (OIDC). The DACS software will need to be enhanced to support the OpenID Connect Protocol and any enhancements under this contract will be made open source.

Mandatory requirements

• Minimum five years’ experience programming in C
• Minimum five years’ experience developing and maintaining Apache HTTPD Modules
• Minimum five years’ experience using the open-source software package “The distributed Access Control System (DACS)”

General tasks

• Create a DACS authentication module that functions as an OpenID Connect Relying Party. This new functionality, together with DACS and Apache configurations and appropriate web page flows, will leverage GCKey’s OpenID Connect Prover capabilities.
• During development, testing can be performed against any OpenID Connect Provider, but eventually access to the GCKey service will be required. Implementation will be based on the current release of DACS, 1.4.50 or a later DACS release, if mutually agreed:
  Sign-on and Sign-out/logout will be implemented and tested.
  A DACS identity logout will trigger a GCKey logout.
• Create a simple demonstration by setting up a server with Apache and DACS with authentication using GCKey. OpenID Prover Configuration information for GCKey can be obtained programmatically or via on out -of-band mechanism. This includes various OpenID
• Prover metadata values (e.g. signing keys and endpoint URLS) that a Relying Party needs for its configuration before it can authenticate users using GCKey.
• Integration with DACS. Once the new DACS authentication module prototype has been successfully tested, it will be fully integrated with the DACS code base, its documentation, and configuration / build procedures, and a new release of DACS will be prepared. Beta version of the release will be made available to the National Forest Information System Project Office.