caGrid Architecture Version 0.5 Globus API Specification Review August 16, 2005

1
caGrid Architecture Version 0.5Globus API
Specification ReviewAugust 16, 2005

• Stephen Langella
• Ohio State University
• langella_at_bmi.osu.edu

2
Agenda

• Globus Client API
• Globus Client API and Security

3
Globus Client API

• Globus Client API
• Globus provides a method for generating a client
  API for each grid service.
• Provides a well defined interface for interacting
  with the grid service.
• Example EchoService
• EchoServiceLocator locator new
  EchoServiceLocator()
• EchoServicePortType echoService
  locator.get EchoServicePortTypePort(gsh)
• String echoResponse
  echoService.echo(Hello World)

4
Globus Client API Enabling Security

• Security is enabled by setting security
  properties on the client stub.
• Stub stub (Stub)echoService
• stub._setProperty(PROPERTY, VALUE)
• Communication Properties
• Constants.GSI_SEC_CONV Specifies the use of
  secure communication.
• Constants.ENCRYPTION Guarantees privacy and
  integrity between sender and receiver
• Constants.SIGNATURE - Open Communication,
  guarantees integrity of message between sender
  and receiver.
• Constants.GSI_SEC_CONV_ANON Specifies the use
  of anonymous secure communication between client
  and server. (Use the servers certificate for
  communication)
• True if Enabled, false if disabled.
• GSIConstants.GSI_CREDENTIALS Specifies the
  Credentials to use, by default the proxy in the
  users default proxy location is used.
• Instance of GSSCredential

5
Globus Client API Enabling Security

• Authorization Properties
• Constants.AUTHORIZATION Specifies the client
  side authorization class to use for client side
  authorization.
• org.globus.ogsa.impl.security.authorization.NoAuth
  orization - Specifies that no authorization is to
  be performed
• org.globus.ogsa.impl.security.authorization.HostAu
  thorization - Specifies that host authorization
  in which the peer host name is compared to the
  peer name in the certificate chain is to be
  performed.
• org.globus.ogsa.impl.security.authorization.Identi
  tyAuthorization Specifies that identity
  authorization in which the peer ID is compared
  to the given ID is to be performed
• org.globus.ogsa.impl.security.authorization.SelfAu
  thorization - Specifies that self authorization
  is to be performed
• Instance of org.globus.ogsa.impl.security.authoriz
  ation.Authorization

6
Globus Client API Enabling Security

• Delegation Properties
• GSIConstants.GSI_MODE Specifies the delegation
  mode to use
• GSIConstants.GSI_MODE_NO_DELEG No delegation
• GSIConstants.GSI_MODE_LIMITED_DELEG (Default)
  Limited Delegation
• GSIConstants.GSI_MODE_FULL_DELEG Full
  Delegation

7
Globus Client API Enabling Security

• Example
• EchoServiceLocator locator new
  EchoServiceLocator()
• EchoServicePortType echoService
  locator.get EchoServicePortTypePort(gsh)
• Stub stub (Stub)echoService
• stub._setProperty(Constants.GSI_SEC_CONV
  , Constants.ENCRYPTION)
• stub._setProperty(Constants.AUTHORIZATIO
  N, NoAuthorization.getInstance())
• String echoResponse
  echoService.echo(Hello World)