David McBride wrote:
> Steve Traylen wrote:
>
>> A delegated one which is not accepeted at the GK.
>
>
> I believed that delegated credentials *are* accepted by Globus
> gatekeepers, just as they are by GridFTP servers and other GSI-secured
> systems. However, I would want to check before making any authoritative
> statements.
The gatekeeper limits the proxy made available to the user job and does
not accept proxies that have thus been limited, to prevent pyramid schemes
of jobs submitting other jobs.
(The gatekeeper in GT 4.0.0 had a bug by which proxies were not limited,
but that has been fixed in 4.0.1, and we are not yet using GT 4 anyway.)
|