Fwd: Re: grid-proxy-init caveats

[Robert Olson]

>Date: Sat, 9 Nov 2002 13:41:00 -0800 (PST)
>From: Matthew Rodriguez DSD staff <mateo at george.lbl.gov>
>Reply-To: Matthew Rodriguez DSD staff <mateo at george.lbl.gov>
>To: Robert Olson <olson at mcs.anl.gov>
>cc: Matthew Rodriguez DSD staff <mateo at george.lbl.gov>
>Subject: Re: grid-proxy-init caveats
>X-Spam-Status: No, hits=-3.9 required=5.0 tests=IN_REP_TO,X_NOT_PRESENT 
>version=2.21
>X-Spam-Level:
>
>Thats a good question. I don't know a lot about gssapi-3.0 right
>now,I've only been using the 2.0 api. The thing to realize is that gssapi
>is a general security services so it is general enough to create different
>kinds of credentials.
>    The way I intend to tackle this problem is to see how the globus people
>wrote grid-proxy-init, using the 3.0 api. Anyway which globus are you
>intending to use if you have decided on that yet? Because I'll get the
>grid_proxy_init working with 2.2 first if that is what you are intending
>to use.
>
>Matt
>
>On Fri, 8 Nov 2002, Robert Olson wrote:
>
> > cool, thank you for the update.
> >
> > Does gssapi-3.0 export the functionality to create proxies via a library
> > call? (It's always seemed odd to me that grid-proxy-init has to go through
> > such gymnastics in user code).
> >
> > --bob
> >
> > At 08:05 PM 11/8/2002 -0800, Matthew Rodriguez DSD staff wrote:
> >
> > >So bob I was able to fix pyGlobus so that it could create a proxy.
> > >Unfortunately the memory to the credential handle cannot be freed. (The
> > >interpreter will crash.) Right now the best work around to this is to
> > >change the __del__ method in the GSSSCred class, to not release the
> > >credential. This is a memory leak, and a hack.
> > >
> > >Also pyGlobus can only do this if you are using globus-2.0. In globus-2.2
> > >the gssapi has been changed. globus-2.0 uses gssapi-2.0 and globus-2.2
> > >uses gssapi-3.0. gssapi-3.0 does not include sslutils.h which is needed to
> > >compile the shared library sslutilsc, which is needed for grid-proxy-init
> > >call.
> > >
> > >Anyway, I am not done with this problem. If you are creating many of these
> > >credentials and you need to release the memory I should be able to solve
> > >that problem before the end of next week(before SC). Please tell me if you
> > >are going to be using glous-2.2 because that is a whole other can of
> > >worms.
> > >
> > >Matt Rodriguez
> >
> >