Table of Contents
The Web Services portion of GT 4.2.0 uses SOAP over HTTP for communicating messages. C WS A&A implements the WS-Security standard and the WS-SecureConversation specification to provide message protection for SOAP messages. Features include:
- authentication of the sender
- encryption of the message
- integrity protection of the message
- replay attack protection
C WS A&A provide a secure channel by using HTTP over SSL/TLS (HTTPS) for transporting the messages. This security mechanism supports all of the security features provided by SSL/TLS with the addition of support for X.509 Proxy Certificates.
Features new in GT 4.2.0
None.
Other Supported Features
- Compliance with published IBM/Microsoft WS-Trust and WS-SecureConversation specifications
- Compliance with the Web Services Security 1.0 standard
- HTTPS support
- Message integrity protection.
Deprecated Features
- None.
The following problems and limitations are known to exist for C WS A&A at the time of the 4.2.0 release:
C WS A&A depends on the following GT components:
C WS Core
GSI
C WS A&A depends on the following 3rd party software:
C WS A&A should work on any platform that supports J2SE 1.3.1 or higher.
Tested Platforms for C WS A&A
- Linux (Red Hat 7.3)
- Windows 2000
- Solaris 9
Since GT 4.0.x release, some incompatible changes have been made:
- Security Descriptors: The security descriptor schema has changed since GT 4.0.x and the descriptors from GT 4.0.x cannot be used as is.
- Secure Conversation port type: The WS Addressing version in Java WS Core has been updated and the secure conversation port type has changed to reflect this. Therefore, GT 4.0.x secure conversation clients are incompatible with GT 4.2.x servers and vice versa.
See C WS A&A for more information about this component.
P
- proxy certificate
A short lived certificate issued using a EEC. A proxy certificate typically has the same effective subject as the EEC that issued it and can thus be used in its place. GSI uses proxy certificates for single sign on and delegation of rights to other entities.
For more information about types of proxy certificates and their compatibility in different versions of GT, see http://dev.globus.org/wiki/Security/ProxyCertTypes.