General Security Product Team

This is the "general security PT" that contains components that are either quite "small" or used generally elsewhere throughout the middleware stacks.

Components

  • (Trustmanager/Util-java (HIP)) -replaced by common authentication library as of EMI-3

  • LCAS/LCMAPS, glexec, SCAS, LCMAPS-plugins-c-pep (NIKHEF)

  • Delegation Java (HIP)

Let's wait and see what the AAI for DCIs WS tells for these

Working Groups

EMI JRA1 Security Working Groups:

LCAS/LCMAPS EMI 2 packaging changes

  • lcas-lcmaps-gt4-interface - moved to ETICS externals
  • lcas-interface - produced by emi.sac.lcas
  • lcmaps-interface - provided by lcmaps-globus-interface rpm. The original lcmaps-interface is split into lcmaps-basic-interface, lcmaps-openssl-interface and lcmaps-globus-interface. All three are build from the lcmaps src.rpm and hence should build from the emi.sac.lcmaps during mock/pbuilder.

  • new plugin location of LCAS and LCMAPS plugins to comply with EPEL and Debian guidelines: ${libdir}/lcas and ${libdir}/lcmaps
  • when a relative path is specified for plugin locations it's assumed w.r.t. ${libdir}. When no path is specified, plugin is searched in env vars LCAS_MODULES_DIR or LCMAPS_MODULES_DIR or when unset ${libdir}/lcas and ${libdir}/lcmaps

(mail 10.01.2012): - solution:

  • the easiest is to just set a build-time dependency on lcas and/or lcmaps itself
  • In a spec file build-time dependencies on lcas-interface & lcmaps-interface should work fine. So in mock builds there should not be any problem.

LCAS/LCMAPS EMI 3 packaging changes

  • lcmaps-without-gsi:
    • the etics configuration is the same as for lcmaps itself, so a build-time dependency should be set to emi.sac.lcmaps.
    • In the spec file this should typically be a BuildRequires: lcmaps-without-gsi-devel

Move from java-security to CANL in EMI-3

-- JohnWhite - 02-Jul-2010

Edit | Attach | Watch | Print version | History: r13 < r12 < r11 < r10 < r9 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r13 - 2013-01-18 - HenriMikkonen
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    EMI All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback