On Wed, 11 Dec 2002, Janusz Martyniak wrote:
> On Wed, 11 Dec 2002, Andrew McNab wrote:
>
> > I do agree with this though. Janusz, what's your application trying to do?
> > What kind of application is it: is it something people use along with a
> > lot of others on their desktop, or is it a meant to be a complete
> > environment?
> >
> > Cheers,
> >
> > Andrew
>
> It's a BaBar job submitter. A set of command line tools at the moment.
> Since it uses dg-job-submit in a loop, I wanted to check a passphrase
> before. I'm using grid-proxy-info to check the proxy and call
> grid-proxy-init to ask for a passphrase, if necesary.
> It is of course also possible to force a user to call grid-proxy-init
> beforehand (manually, so to say), so the submitter will never ask for a
> passphrase, but only check it.
That's probably the best way to go. The whole credentials side of things
is going to get more complicated in the near future, once Globus CAS and
EDG VOMS are deployed. These will involve the user doing, say, a
voms-proxy-init which not only creates a proxy, but also fetches and
includes attribute certificates in the proxy. This allows certificates
specifying things like group membership and the user's current role.
If your application is going to take responsibility for accepting the
passphrase, it will also need to know how to ask what attributes the user
will need to run the job, and to know how to create such a proxy
programmatically.
I suspect that users are going to end up with some kind of credential
manager on their desktop (near the clock and pager?), and that is a
dedicated program that knows how to handle all the subtleties of these
various credential systems.
Cheers,
Andrew
------------------------------------------------------------------------
[log in to unmask] http://www.hep.man.ac.uk/~mcnab/ +44-161-275-4227
"/C=UK/O=eScience/OU=Manchester/L=HEP/CN=Andrew McNab"
Grid Research, High Energy Physics Group, University of Manchester, UK
------------------------------------------------------------------------
|