Re: [gt-user] Security Descriptors

[Tom Scavo]

This is GT 4.0, right?  Start by doing the following google search:

site:globus.org "security descriptor"

Briefly, in the security descriptor (my-security-descriptor.xml), you
would write something like:

<securityConfig xmlns="http://www.globus.org";>
  <auth-method>
    <GSITransport/>
    <GSISecureMessage/>
  </auth-method>
  <authz 
value="someScope:org.globus.wsrf.impl.security.authorization.LocalConfigPDP"/>
</securityConfig>

Then in the service descriptor (server-config.wsdd), write:

<?xml version="1.0" encoding="UTF-8"?>
<deployment name="SecurityContextEchoServiceConfig"
  xmlns="http://xml.apache.org/axis/wsdd/";
  xmlns:java="http://xml.apache.org/axis/wsdd/providers/java";
  xmlns:xsd="http://www.w3.org/2001/XMLSchema";>

  <service name="MyService" provider="Handler"
    use="literal" style="document">

    <!-- various parameters omitted here -->

    <parameter name="securityDescriptor"
               value="/path/to/my-security-descriptor.xml"/>

    <parameter name="someScope-authzConfigFile"
               value="/path/to/config/file" />

    <!-- additional parameters omitted here -->

  </service>

</deployment>

Hope this helps,
Tom

On Mon, Jun 2, 2008 at 7:25 AM, BRACHET Maxime <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I wanted to use security descriptor to restraint the access of one service.
> To be simple I wanted to use
> "someScope:org.globus.wsrf.impl.security.authorization.LocalConfigPDP"
> But I cant find any information about The property authzConfigFile and where
> to put the SecirityConfig part, in which file ?
> Is there any complete example of how to use Security descriptors ?
>
> Regards,
> Maxime.
>