1.0 Release Notes
From GCube System
Revision as of 17:11, 4 February 2010 by Manuele.simi (Talk | contribs) (→Changes Related to the gHN)
gCore 1.0
introduces the following changes:
Changes Related to the gHN
- distribution: there are now two distributions of the gHN, secure and standard distribution
- the secure distribution includes Local Services and Libraries from the standard onf plus:
- enhanced
Delegation
service, in charge for providing local services with delegated credentials - enhanced
Security
library, with support for authentication and authorisation of gCube calls and policies management. - new
gcore-stop-container
script, to shutdown a secure container
- enhanced
- configuration: a set of new configuration settings is available:
- the
GHNConfig.xml
has been extended with two additional configuration parameters:
- allowedScopes, letting the Site Manager to decide to which VOs the gHN can be joined in the future (upon VO Manager decisions)
- trustedGHNSynchInterval, how often the gHN refreshes the list of trusted gHNs (in seconds).
- the
Security descriptor ($GLOBUS_LOCATION/etc/globus_wsrf_core/global_security_descriptor.xml)
for the gHN must be enabled (by removing the comment surrounding the containerSecDesc element in the $GLOBUS_LOCATION/etc/globus_wsrf_core/server-config.wsdd) and configured to load the appropriate host credentials -
$X509_USER_PROXY
environment variable is now exploited to contact the gContainer from outside the process. It is expected to contain a valid proxy accepted by the local gContainer process.
- the
- All of these above are taken into consideration only in case of secure distribution.
-
$START_OPTIONS
has been renamed to$GCORE_START_OPTIONS
. It can be now either set in the external environment or in thegcore-start-container
script
-
Changes Related to Services
None
Changes Related to the Documentation
- new/revised sections in the Administrator's Guide.
- Administrator's Guide has an enriched configuration section on how to setup a secure gHN.