> the delegated credential is written as a file with in the user account

yes, but ...

do these delegated credentials also contain a job-related private key (and
the corresponding pubkey) to create the job-proxy-file you mentioned, or is
this information passed to the service by some other means? a private key
*is* necessary to create a sub-certificate, right?

in the:

                ResourceContext ctx;
                ctx=ResourceContext.getResourceContext();
                System.out.println("ResourceContext="+ctx);
                Object objPrincipal=ctx.getProperty(Constants.PEER_SUBJECT);
                System.out.println("ctx.PEER_SUBJECT="+objPrincipal);
                
System.out.println("ctx.PEER_SUBJECT.Class="+objPrincipal.getClass().toString());
                Subject sub;
                sub=(Subject)ctx.getProperty(Constants.PEER_SUBJECT);

there are only:

                Set set;
                set=sub.getPublicCredentials();
                System.out.println("pubCred.set="+set);

public credentials present, while the "getPrivateCredentials()" return an empty
set.

is passing a private key done using the delegation-service?


kind regards,
H.Rosmanith

Reply via email to