Table of Contents
The Delegation Service provides an interface for the delegation of credentials to a hosting environment. This enables a single delegated credential to be shared across multiple invocations of services on that hosting environment (e.g. it could be used for multiple GRAM job submissions or across GRAM and RFT submissions.) It also provides a means for credential renewal.
Features new in GT 4.2.1:
- Added support for GetResourceProperties and QueryResourceProperties interface.
Other Supported Features:
- Provides an interface for the delegation and renewal of credentials to a host.
- Allows for a single delegated credential to be reused across multiple service invocations (e.g. GRAM jobs).
Deprecated Features:
- None.
No changes have been made since last stable release, 4.2.0.
The following problems and limitations are known to exist for the Delegation Service at the time of the 4.2.1 release:
- Bug 2354 Query the delegated credentials
- Bug 4717 Delegation Resources need to provide more flexibility in the selection of the persistence mechanism
- Bug 5078 Support for cascading refresh and renewal in the Delegation Service
- Bug 5256 Persist DS information to a database.
- Bug 6291: globus-credential-delegate
The Delegation Service depends on the following GT components:
- WS Authentication and Authorization
- Java WS Core
The Delegation Service depends on all third party software Java WS Core depends on.
Tested Platforms for Delegation Service:
- Windows XP
- Linux (Red Hat 7.3)
Tested Containers for Delegation Service:
- Java WS Core container
- Tomcat 5.0.30
Delegation Service has been updated to use the latest version of Java WS Core, which now supports the final version of WSRF/WSN specification. This service is not compatible with the previous stable versions, GT 4.0.x.
The Java WS Authentication and Message component has been updated to support RFC 3820 proxies by default as described here. This implies that credentials delegated in the previous stable version are incompatible with this version.
- WS-Security
- WS-Security: X.509 Certificate Tokens
- WS-Trust
- RFC 3820 Proxy Certificates
See Delegation Service for more information about this component.