GT 3.9.4 Component Fact Sheet: Pre-WS Authentication & Authorization

Brief component overview

The Globus Toolkit Pre-Web Services Authentication and Authorization component allows for the authentication of users and services using X.509 End Entity certificates as well as allow for delegation using X.509 Proxy Certificates. The authorization callouts enable the ability to perform access control based on the client credentials (i.e. the X.509 certificate chain), customize gridmap lookup (currently available in the Gatekeeper and GridFTP servers), and perform fine-grained authorization in the GRAM Jobmanager.

Summary of features

Features new in release 3.9.4

  • None

Other Supported Features

  • Authentication of user using standard X.509 End Entity and Proxy Certificates
  • Delegation using X.509 Proxy Certificates
  • Allow authorization based on client certificate chain for GridFTPD and Pre-WS GRAM
  • Allow authorization for Pre-WS GRAM based on RSL of job

Deprecated Features

  • None

Backward compatibility summary

Protocol changes in Pre-WS Authentication and Authorization since GT version 3.2

  • None

API changes since GT version 3.2

  • None

Exception changes since GT version 3.2

  • Not applicable

Schema changes since GT version 3.2

  • Not applicable

Technology dependencies

The Pre-WS Authentication and Authorization component depends on the following GT components:

  • C Common Libraries

The Pre-WS Authentication and Authorization component depends on the following 3rd party software:

  • OpenSSL

Tested platforms

Tested platforms for Pre-WS Authentication & Authorization:

  • i386 Linux