AW: [geclipse-dev] New method:IVirtualOrganization.getDefaultTokenDescri

["Stuempert, Mathias IWR" <mathias.stuempert@xxxxxxxxxx>]

Have to think about it ...

-----Ursprüngliche Nachricht-----
Von: geclipse-dev-bounces@xxxxxxxxxxx [mailto:geclipse-dev-bounces@xxxxxxxxxxx] Im Auftrag von Mariusz Wojtysiak
Gesendet: Dienstag, 4. März 2008 12:26
An: geclipse-dev@xxxxxxxxxxx
Betreff: [geclipse-dev] New method:IVirtualOrganization.getDefaultTokenDescription()

Hello!

Now when user start g-Eclipse with VOMS VO, and expand GridFTP 
connection, we ask him for Globus Proxy. Then when user submit job we 
ask him again for proxy, but this time for VOMS Proxy.
Additionally if user belongs to many VO, and uses Globus Proxy during 
GridFTP operation, it's very probably that he get "access denied", 
because GridFTP server always maps this user to first VO in 
configuration file (VOMS proxy works fine in this case).

To avoid above problems, we could ask in GridFTP plugin for VOMS Proxy 
instead of Globus Proxy. But in this case we would add dependency 
GridFTP -> VOMS, what we want to avoid.

As another solution I'd like to add to interface IVirtualOrganization 
following method:
IAuthenticationTokenDescription getDefaultTokenDescription();

For VO implementations this mehod will return:
GenericVirtualOrganization - null
VomsVirtualOrganization - VomsProxyDescription
GriaVirtualOrganization - GriaKeyStoreDescription

Then GridFTP can use this method in following way:

IAuthenticationTokenDescription description = 
vo.getDefaultTokenDescription();
if( !description instanceof GlobusProxyDescription ) {
	description = new GlobusProxyDescription();
}
AbstractAuthTokenProvider.staticRequestToken( description );

In this solution during GridFTP operation we will ask user to create 
VOMS Proxy for VOMS project, and Globus Proxy for Generic VO.


Does anybody have objection to add method 
IVirtualOrganization.getDefaultTokenDescription() to our  model?


Regards,
-- 
Mariusz Wojtysiak
_______________________________________________
geclipse-dev mailing list
geclipse-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/geclipse-dev