Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[geclipse-dev] New method: IVirtualOrganization.getDefaultTokenDescription()

Hello!

Now when user start g-Eclipse with VOMS VO, and expand GridFTP connection, we ask him for Globus Proxy. Then when user submit job we ask him again for proxy, but this time for VOMS Proxy. Additionally if user belongs to many VO, and uses Globus Proxy during GridFTP operation, it's very probably that he get „access denied”, because GridFTP server always maps this user to first VO in configuration file (VOMS proxy works fine in this case).

To avoid above problems, we could ask in GridFTP plugin for VOMS Proxy instead of Globus Proxy. But in this case we would add dependency GridFTP -> VOMS, what we want to avoid.

As another solution I'd like to add to interface IVirtualOrganization following method:
IAuthenticationTokenDescription getDefaultTokenDescription();

For VO implementations this mehod will return:
GenericVirtualOrganization - null
VomsVirtualOrganization - VomsProxyDescription
GriaVirtualOrganization - GriaKeyStoreDescription

Then GridFTP can use this method in following way:

IAuthenticationTokenDescription description = vo.getDefaultTokenDescription();
if( !description instanceof GlobusProxyDescription ) {
	description = new GlobusProxyDescription();
}
AbstractAuthTokenProvider.staticRequestToken( description );

In this solution during GridFTP operation we will ask user to create VOMS Proxy for VOMS project, and Globus Proxy for Generic VO.


Does anybody have objection to add method IVirtualOrganization.getDefaultTokenDescription() to our model?


Regards,
--
Mariusz Wojtysiak


Back to the top