7093 2010-08-19 13:44 globus_gsi_proxy_handle_set_is_limited doesn't handle rfc proxies 2010-08-20 14:10:41 1 1 1 Unclassified GSI C Credentials and Proxies 5.0.1 All All RESOLVED FIXED P3 normal --- 1 jfrey@cs.wisc.edu bester@mcs.anl.gov kettimut@mcs.anl.gov mlink@mcs.anl.gov jfrey@cs.wisc.edu 2010-08-19 13:44:04 The function globus_gsi_proxy_handle_set_is_limited() doesn't handle rfc proxies properly. If you try to use it when creating an rfc proxy from an existing rfc proxy, it sets the new proxy type to a legacy proxy. A subsequent call to globus_gsi_proxy_sign_req() will fail because the new proxy's type doesn't match the source proxy's type. I will a patch. jfrey@cs.wisc.edu 2010-08-19 13:44:53 --- gt5.0.1-all-source-installer/source-trees/gsi/proxy/proxy_core/source/library/globus_gsi_proxy_handle.c 2008-09-15 10:06:26.000000000 -0500 +++ gt5.0.1-all-source-installer.patched/source-trees/gsi/proxy/proxy_core/source/library/globus_gsi_proxy_handle.c 2010-08-19 12:06:24.000000000 -0500 @@ -1809,7 +1809,13 @@ if(is_limited == GLOBUS_TRUE) { - if(GLOBUS_GSI_CERT_UTILS_IS_GSI_3_PROXY(handle->type)) + if(GLOBUS_GSI_CERT_UTILS_IS_RFC_PROXY(handle->type)) + { + result = globus_gsi_proxy_handle_set_type( + handle, + GLOBUS_GSI_CERT_UTILS_TYPE_RFC_LIMITED_PROXY); + } + else if(GLOBUS_GSI_CERT_UTILS_IS_GSI_3_PROXY(handle->type)) { result = globus_gsi_proxy_handle_set_type( handle, @@ -1824,7 +1830,13 @@ } else { - if(GLOBUS_GSI_CERT_UTILS_IS_GSI_3_PROXY(handle->type)) + if(GLOBUS_GSI_CERT_UTILS_IS_RFC_PROXY(handle->type)) + { + result = globus_gsi_proxy_handle_set_type( + handle, + GLOBUS_GSI_CERT_UTILS_TYPE_RFC_IMPERSONATION_PROXY); + } + else if(GLOBUS_GSI_CERT_UTILS_IS_GSI_3_PROXY(handle->type)) { result = globus_gsi_proxy_handle_set_type( handle, mlink@mcs.anl.gov 2010-08-20 14:10:41 Thanks Jamie. This is committed to globus_5_0_branch and HEAD. An update package for 5.0.x is available here until it gets moved to the update dir: http://www.mcs.anl.gov/~mlink/globus_gsi_proxy_core-4.6.tar.gz Mike