[Pgi-wg] Sec: Agreement on attributetransportmechanismsforAttrAuthZ

[m.riedel at fz-juelich.de]

Hi,

>- What is for sure is that you can not use client based on normal TLS to talk with service which is based on GSSAPI, or vice versa.

I made this experience as well - but a few month ago...

Maybe things have been changed like within gLite then?

Take care,
Morris




--------------------------------------------------------------------------------
Morris Riedel
SW - Engineer
Distributed Systems and Grid Computing Division
Central Institute of Applied Mathematics
Research Centre Juelich
Wilhelm-Johnen-Str. 1
D - 52425 Juelich
Germany

Email:  m.riedel at fz-juelich.de
Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel

Phone: +49 2461 61 - 3651
Fax: +49 2461 61 - 6656

Skype: MorrisRiedel

'We work to improve ourselves and the rest of mankind.'

----- Original Message -----
From: weizhong qiang <weizhongqiang at gmail.com>
Date: Friday, March 20, 2009 3:41 pm
Subject: Re: [Pgi-wg] Sec: Agreement on attribute transportmechanismsforAttrAuthZ

> On Fri, Mar 20, 2009 at 3:00 PM, <m.riedel at fz-juelich.de> wrote:
> 
> > Howdy,
> >
> > >-PGI_TLS_PROXY (the notation is also in the virginia strawman)
> > >-PGI_GSI
> >
> >  so in this context what is the difference on TLS itself w/o 
> considering> different APIs?!
> >
> 
> Basically the globus implementation if GSSAPI is about a specific
> context-initiation negotiation, and some data-padding for 
> initiation and
> data-transferring. Also you can accomplish proxy-delegation via it.
> What is for sure is that you can not use client based on normal 
> TLS to talk
> with service which is based on GSSAPI, or vice versa.
> AFAIK, There is some grid service (WS compliant) such as some SRM 
> servicewhich uses GSSAPI. (SOAP + HTTP + GSS).
> 
> 
> Weizhong
> 
> 
> >
> > Good  point in checking this out - I'm still think its rather 
> the same.
> >
> > Thanks for clarification,
> > Morris
> >
> >
> >
> 



-------------------------------------------------------------------
-------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich

Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender),
Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt,
Dr. Sebastian M. Schmidt
-------------------------------------------------------------------
-------------------------------------------------------------------