Appendix C. PIP Reference

1. Introduction

[introduce PIPs]

If you have a PIP you'd like to contribute to the Globus Toolkit, use the following template:

[Note]Note

The above files are in DocBook XML format. Simply save the link to your hard drive, edit the file in a text or xml editor and email to ?. Don't worry about getting the tags exactly right, it's enough to enter the information where it makes sense and we'll clean up the tags where necessary.

2. X509Bootstrap

2.1. Class name

org.globus.wsrf.impl.security.authorization.X509BootstrapPIP

2.2. Overview

This implements the BootstrapPIP interface [PIP-glossary] which is used when X509 Certificates are used during authentication scheme. It collects peer entities' attributes obtained from the certificates presented by the peer.

2.3. Configuration

No configuration is required.

2.4. Attributes Collected

This PIP collects two attributes described in the following tables:

Table C.1. Attribute I

Description of attributePeer's Subject object
Identity attributeIdentity attribute
Attribute IDConstants.SUBJECT_ATTRIBUTE_ID
DatatypeConstants.SUBJECT_DATATYPE_URI
IssuerContainer
Validity fromCurrent time
Validity toInfinity

Table C.2. Attribute II

Description of attributePeer's principals
Identity attributeIdentity attribute
Attribute IDConstants.PRINCIPAL_ATTRIBUTE_ID
DatatypeConstants.PRINCIPAL_DATATYPE_URI
IssuerContainer
Validity fromCurrent time
Validity toInfinity

2.5. Related interceptors

If X509 Certificates are used for authentication, this bootstrap is used by the Authorization Framework by default.