Before we go overboard here I'd better check. Like mine your
information may be out of date. This is definitely how rfio used to
work. There was an attempt in EDG to produce a GSI version which never
appeared. GFAL or gLite_io may contain something different.
John
> -----Original Message-----
> From: Testbed Support for GridPP member institutes
> [mailto:[log in to unmask]] On Behalf Of Kostas Georgiou
> Sent: 29 April 2005 19:53
> To: [log in to unmask]
> Subject: Re: Questions about LCG-2_4_0 installation
>
> On Fri, Apr 29, 2005 at 05:31:26PM +0100, Gordon, JC (John) wrote:
>
> > I seem to remember it assumes a common uid/gid domain. That is its
> > security, There was talk of adding GSI again though.
>
> Although it's been a while since i last looked at rfio here is how it
> works:
>
> The client sends a uid/gid and the server simply uses that uid/gid for
> file access. It's *trivial* to abuse, you just send a different uid.
>
> Kostas
>
|