This page contains information on how credential delegation works within EMI. It's a good place to start whenever you have a question about delegation.

This page is under construction. Information here may change.

Contact points

How to contact people when you have a question.

Mailing list

For implementation neutral questions about delegation, please write to emi-jra1-sec-delegation mailing list. Details about this list are available from the mailing list's list info page.

A description of GSD

GSD is the GridSite Delegation. It is an API that allows a client to create a public/private key-pair on some remote machine and have the client sign the public key, so forming a proxy certificate for that user. It does this securely; i.e., without transferring a private key over the network. The API also supports some operations to manage the delegated credential, such as renewing or deleting it.

The current version of GSD is 2.0.0.

The protocol is described more completely within the EGEE GSD page. The semantics of these operations are described in the interface documentation.

The WSDL for GSD is availabel from org.glite.security.delegation-interface package in the gLite repository.

Open issues in GSD

There are a number of issues that people have raised about GSD. The delegation questions page describes these questions with corresponding answers or current understanding.

Software libraries that implement GSD.

NB. This section is incomplete.

There are several projects in the gLite CVS repository (:pserver:anonymous@glite.cvs.cern.ch:/cvs/glite) that provide some support for GSD or delegation.

These projects provide support for GSD v2.0.0

-- PaulMillar - 01-Dec-2010


This topic: EMI > WebHome > EmiProjectStructure > JRA1 > EmiJra1 > EmiJra1T4Security > EmiJra1T4DelegationInEmi
Topic revision: r2 - 2010-12-08 - PaulMillar
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback