GT 3.9.5 Development Release Notes for Delegation Service

Component Overview

The Delegation Service is a new component in Globus Toolkit version 3.9.5. This component provides an exposed interface for delegation of credentials to a host. This enables a single delegated credential to be shared across multiple invocations of services on that host (e.g. it could be used for multiple GRAM job submissions or across GRAM and RFT submissions.) It also provides a means for credential renewal.

Feature Summary

Features new in release 3.9.5

  • Provides an interface for the delegation and renewal of credentials to a host.
  • Allows for a single delegated credential to be reused across multiple service invocations (e.g. GRAM jobs)

Other Supported Features

  • The Delegation Service is a new component in GT 4.0

Deprecated Features

  • The Delegation Service is a new component in GT 4.0

Changes Summary

New command line client names

The command line scripts have changed names to "globus-credential-delegate" and "globus-credential-refresh".

API Changes

  • The function getTokenFromRequest() was removed from the public API.
  • A function for delegating a credential whose lifetime is equal to that of the issuing was added to the DelegationUtil class.
  • Function signatures were changed to take a client security descriptor parameter

Transport security is used by default

The transport security (HTTPS) mechanism is now assumed as a default security mechanism. The delegation service clients will now automatically use this mechanism and will fall back to GSI Secure Message if pointed at a HTTP endpoint.

Internationalization

The delegation service has been internationalized.

Bug Fixes

Known Problems

None

Technology Dependencies

The Delegation Service depends on the following GT components:

  • WS Authentication and Authorization Message-Level Security

The Delegation Service depends on the following 3rd party software:

  • Apache Axis

Tested Platforms

Tested Platforms for Delegation Service

  • Windows XP
  • Linux (Red Hat 7.3)

Backward Compatibility Summary

The Delegation Service is a new component in GT version 4.0

For More Information

Click here for more information about this component.