The Grid Security Infrastructure (GSI) has been gaining ground as a supported security architecture for the use of computational Grids. GSI is layered on top of SSL and mutual authentication is performed via X.509 certificates. GSI includes additional provisions for single sign-on and the creation of limited credentials (proxies) that can be used by a remote process on a users behalf.
The Simple Object Access Protocol (SOAP) is used to enable webservices by providing a remote procedure call messaging protocol. Typically SOAP implementations rely on HTTP or HTTPS (HTTP over top SSL) as the underlying transfer protocol of SOAP messages. The GSI client and soap implementations based on Apache Java software provide enhancements to support GSI as the underlying security library.
The Java CoG toolkit provides GSI capabilities using the IAIK security libraries. Both of the modified client and servers use the Java CoG API to add GSI.
The Apache SOAP implementation supports the HTTP/HTTPS protocol. The GSI SOAP enhances Apache SOAP by providing a GSI enabled HTTP protocol and providing GSI delegation and authentication capabilities. The modified GSI Apache SOAP client version is based on the Apache Soap client out of CVS.
More information on compiling and using the GSI Apache SOAP distribution can be found in the README.GSI file.
The Jakarta Tomcat application server is a servlet container providing a reference implementation of the Java
Servlet v2.2 and Java Server Pages v1.1 specifications. The latest version of Tomcat 3.2 out of CVS was modified to support GSI.
More information on compiling and using the GSI Tomcat distribution can be found in the README.GSI file.
Client: Download GSI Apache SOAP at ftp://george.lbl.gov/pub/globus/gsi-soap-src-latest.tar.gz
Server:
CVS access:
You can obtain all the source code off cvs by performing the following:
cvs -d :pserver:anonymous@portnoyc.lbl.gov:/home/g5/repository login
(hit return)
cvs -d :pserver:anonymous@portnoyc.lbl.gov:/home/g5/repository co "project-name"
where "project-name" is one of "gsi-xml-soap", "jakarta-gsi-tomcat" for the modified Tomcat 3.x source code, "jakarta-gsi-tomcat-4.0" for the modified Tomcat 4.x source code out of CVS, and "jakarta-gsi-tomcat-4.0.1-src" for the modified final Tomcat 4.0.1 source code release.
Patch files to existing Tomcat source distributions are on the way!
Last modified: Sun Nov 4 17:02:37 PST 2001
