GT 3.9.4 Development Release Notes for WS A&A CAS

Component Overview

CAS allows a virtual organization to express policy regarding resources distributed across a number of sites. A CAS server issues assertions to the virtual organization users, granting them fine-grained access rights to resources. Servers recognize and enforce the assertions. CAS is designed to be extensible to multiple services and is currently supported by the GridFTP server.

Feature Summary

Features new in release 3.9.4

  • None

Other Supported Features

  • File-level access control for GridFTP
  • Issuance of SAML authorization decisions

Deprecated Features

  • None

Changes Summary

Transport security is used by default

The transport security (HTTPS) mechanism is now assumed as a default security mechanism. The CAS service clients will now automatically use this mechanism and will fall back to GSI Secure Message if pointed at a HTTP endpoint.

Internationalization

The CAS service code has been internationalized.

Bug Fixes

  • Bug 2261: poor default postgres hostname
  • Bug 2262: Make CAS RPs publicly accessible for MDS purposes.

Known Problems

Technology Dependencies

The CAS service depends on the following GT components:

  • WS Authentication and Authorization
  • Java WS Core

The CAS GridFTP authorization module depends on the following GT components:

  • Pre-WS Authentication and Authorization

The CAS service depends on the following 3rd party software:

  • OpenSAML

The CAS GridFTP authorization module depends on the following 3rd party software:

  • libxml

Tested Platforms

Tested Platforms for CAS

  • Windows XP
  • Linux (Red Hat 7.3)

Backward Compatibility Summary

Protocol changes in CAS since GT version 3.2

  • There is no backward compatibility with 3.2 because of the port from OGSI to WSRF.

API changes since GT version 3.2

  • None

Exception changes since GT version 3.2

  • None

Schema changes since GT version 3.2

  • WSDL reflects the port to WSRF from OGSI.

For More Information

Click here for more information about this component.