org.apache.airavata.gfac.bes.security

Class GSISecurityContext

java.lang.Object

org.apache.airavata.gfac.AbstractSecurityContext

org.apache.airavata.gfac.bes.security.GSISecurityContext

All Implemented Interfaces:

SecurityContext

public class GSISecurityContext
extends AbstractSecurityContext

Handles GRID related security.

Field Summary

Fields

Modifier and Type	Field and Description
static int	CREDENTIAL_RENEWING_THRESH_HOLD
static String	GSI_SECURITY_CONTEXT
protected static org.slf4j.Logger	log

Constructor Summary

Constructors

Constructor and Description
GSISecurityContext(Cluster pbsCluster)
GSISecurityContext(CredentialReader credentialReader, RequestData requestData)

Method Summary

Methods

Modifier and Type	Method and Description
GSSCredential	getCredentialsFromStore() Reads the credentials from credential store.
GSSCredential	getDefaultCredentials() Gets the default proxy certificate.
GSSCredential	getGssCredentials() Gets GSSCredentials.
Cluster	getPbsCluster()
GSSCredential	getProxyCredentials() Gets a new proxy certificate given current credentials.
static String	getTrustedCertificatePath() Gets the trusted certificate path.
GSSCredential	renewCredentials() Renews credentials.
GSSCredential	renewCredentialsAsATrustedHost() Renew GSSCredentials.
void	setPbsCluster(Cluster pbsCluster)
static void	setUpTrustedCertificatePath(String trustedCertificatePath)

Methods inherited from class org.apache.airavata.gfac.AbstractSecurityContext

getCredentialReader, getRequestData

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected static final org.slf4j.Logger log

GSI_SECURITY_CONTEXT

public static final String GSI_SECURITY_CONTEXT

See Also:

Constant Field Values

CREDENTIAL_RENEWING_THRESH_HOLD

public static int CREDENTIAL_RENEWING_THRESH_HOLD

Constructor Detail

GSISecurityContext

public GSISecurityContext(CredentialReader credentialReader,
                  RequestData requestData)

GSISecurityContext

public GSISecurityContext(Cluster pbsCluster)

Method Detail

setUpTrustedCertificatePath

public static void setUpTrustedCertificatePath(String trustedCertificatePath)

getTrustedCertificatePath

public static String getTrustedCertificatePath()

Gets the trusted certificate path. Trusted certificate path is stored in "X509_CERT_DIR" system property.

Returns:

The trusted certificate path as a string.

getGssCredentials

public GSSCredential getGssCredentials()
                                throws GFacException,
                                       org.apache.airavata.common.exception.ApplicationSettingsException

Gets GSSCredentials. The process is as follows; If credentials were queried for the first time create credentials. 1. Try creating credentials using certificates stored in the credential store 2. If 1 fails use user name and password to create credentials If credentials are already created check the remaining life time of the credential. If remaining life time is less than CREDENTIAL_RENEWING_THRESH_HOLD, then renew credentials.

Returns:

GSSCredentials to be used.

Throws:

GFacException - If an error occurred while creating credentials.

org.apache.airavata.common.exception.ApplicationSettingsException

renewCredentials

public GSSCredential renewCredentials()
                               throws GFacException,
                                      org.apache.airavata.common.exception.ApplicationSettingsException

Renews credentials. First try to renew credentials as a trusted renewer. If that failed use user name and password to renew credentials.

Returns:

Renewed credentials.

Throws:

GFacException - If an error occurred while renewing credentials.

org.apache.airavata.common.exception.ApplicationSettingsException

getCredentialsFromStore

public GSSCredential getCredentialsFromStore()
                                      throws Exception

Reads the credentials from credential store.

Returns:

If token is found in the credential store, will return a valid credential. Else returns null.

Throws:

Exception - If an error occurred while retrieving credentials.

getDefaultCredentials

public GSSCredential getDefaultCredentials()
                                    throws GFacException,
                                           org.apache.airavata.common.exception.ApplicationSettingsException

Gets the default proxy certificate.

Returns:

Default my proxy credentials.

Throws:

GFacException - If an error occurred while retrieving credentials.

org.apache.airavata.common.exception.ApplicationSettingsException

getProxyCredentials

public GSSCredential getProxyCredentials()
                                  throws GFacException,
                                         org.apache.airavata.common.exception.ApplicationSettingsException

Gets a new proxy certificate given current credentials.

Returns:

The short lived GSSCredentials

Throws:

GFacException - If an error is occurred while retrieving credentials.

org.apache.airavata.common.exception.ApplicationSettingsException

renewCredentialsAsATrustedHost

public GSSCredential renewCredentialsAsATrustedHost()
                                             throws GFacException,
                                                    org.apache.airavata.common.exception.ApplicationSettingsException

Renew GSSCredentials. Before executing we need to add current host as a trusted renewer. Note to renew credentials we dont need user name and password. To do that execute following command > myproxy-logon -t -s -l E.g :- > myproxy-logon -t 264 -s myproxy.teragrid.org -l us3 Enter MyProxy pass phrase: A credential has been received for user us3 in /tmp/x509up_u501. > myproxy-init -A --cert /tmp/x509up_u501 --key /tmp/x509up_u501 -l ogce -s myproxy.teragrid.org

Returns:

Renewed credentials.

Throws:

GFacException - If an error occurred while renewing credentials.

org.apache.airavata.common.exception.ApplicationSettingsException

getPbsCluster

public Cluster getPbsCluster()

setPbsCluster

public void setPbsCluster(Cluster pbsCluster)