[Pgi-wg] Sec: Agreement on attribute transportmechanismsforAttrAuthZ

[weizhong qiang]

On Fri, Mar 20, 2009 at 3:00 PM, <m.riedel at fz-juelich.de> wrote:

> Howdy,
>
> >-PGI_TLS_PROXY (the notation is also in the virginia strawman)
> >-PGI_GSI
>
>  so in this context what is the difference on TLS itself w/o considering
> different APIs?!
>

Basically the globus implementation if GSSAPI is about a specific
context-initiation negotiation, and some data-padding for initiation and
data-transferring. Also you can accomplish proxy-delegation via it.
What is for sure is that you can not use client based on normal TLS to talk
with service which is based on GSSAPI, or vice versa.
AFAIK, There is some grid service (WS compliant) such as some SRM service
which uses GSSAPI. (SOAP + HTTP + GSS).


Weizhong


>
> Good  point in checking this out - I'm still think its rather the same.
>
> Thanks for clarification,
> Morris
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.ogf.org/pipermail/pgi-wg/attachments/20090320/5a8d1e5a/attachment.html