[gin-auth] [Fwd: gsi proxy compatibility test]

[Erwin Laure]

Hi Olle,

OK - that would be the way forward. But what do we do for now where most 
Grids are not RFC compliant? Would it be useful to have such a 
compatibility test Alex is proposing? Does something like that exist?

Cheers,

-- Erwin

Olle Mulmo wrote:
> 
> I believe GIN-auth recommended that RFC compliant proxies should be  used.
> 
> In practice, this means that software from any GT2 or GT3  distributions 
> will _not_ be able to handle this proxy format, whereas  the same 
> libraries shipped with GT4 (and also native openssl 0.9.7g  and beyond) 
> can.
> 
> Note also that in GT4.0.x, the grid-proxy-init command line tool does  
> not  generate RFC-compliant proxies by default for backwards  
> compatibility reasons:
> 
> You have to type "grid-proxy-init -rfc"
> 
> /Olle
> 
> On Mar 16, 2006, at 08:49, Erwin Laure wrote:
> 
>> Not sure this message went through.
>>
>> Cheers,
>>
>> -- Erwin
>>
>> -------- Original Message --------
>> Subject:     gsi proxy compatibility test
>> Date:     Wed, 15 Mar 2006 12:45:28 -0800
>> From:     Alex Sim <asim at lbl.gov>
>> Reply-To:     <asim at lbl.gov>
>> Organization:     Lawrence Berkeley National Laboratory
>> To:     <gin-auth at ggf.org>
>> CC:     <asim at lbl.gov>, "'Erwin Laure'" <Erwin.Laure at cern.ch>
>>
>>
>>
>> I have not been subscribing to this mailing list, and I'm not sure
>> if this issue has been discussed previously.
>>  From GIN-DATA mailing list, we came across that GSI proxy format
>> compatibility testing needs to be addressed.
>> In many practices, gsi proxy format is not compatible and different
>> version and implementations of gridftp servers reject the  authentication
>> without too much clue. So, if it could be tested as gridftp
>> interoperability, it'll be great.
>>
>> --Alex
>>
>