Hello,

During the development of PRIMA, Peter Lane informed us that in order to have
Globus use the authorization callout successfully, we have to comment out code
in GRAM that checks the gridmap file. This is what he said:

2) Until we get some sort of plugin system going for sudo callouts,
you will have to edit the GRAM code to disable the use of the
globus-gridmap-and-execute app:
        2a) cvs co ws-gram
        2b) cd ws-gram/service/java/source
        2c) Edit
src/org/globus/exec/service/exec/JobManagerScript.java
        and comment out lines 146 throw 142. It should look like this:

        /*
        commandVector.add(
             new File(globusLocation +
GLOBUS_GRIDMAP_AND_EXECUTE).toString());
        if (gridMapFile != null)
        {
            commandVector.add("-g");
            commandVector.add(gridMapFile);
        }
        */
2e) Edit src/org/globus/exec/service/utils/UserProxyCreator.java and
comment out lines 101-117 as well as lines 123 and 129.  The code should
look like the following:

                    /*
                    if (gridMapFile != null)
                    {
                        command = new String[] {
                            sudo,
                            "-u",
                            this.credential.localUserId,
                            "-S",
                            gridMapAndExecute,
                            "-g",
                            gridMapFile,
                            proxyTool,
                            factoryHomeConfiguration.getGlobusLocation
(),
                            "-write",
                            this.credential.userProxyFile.getPath()
                        };
                    } else
                    {
                    */
                        command = new String[] {
                            sudo,
                            "-u",
                            this.credential.localUserId,
                            "-S",
                            //gridMapAndExecute,
                            proxyTool,
                            factoryHomeConfiguration.getGlobusLocation
(),
                            "-write",
                            this.credential.userProxyFile.getPath()
                        };
                    //}
        2e) ant


Is it possible to make a modification to Globus that will skip the gridmap file
if the authorization callout is defined, but use it if the authorization callout
is not defined? This would allow us to ship a single version of Globus in the
VDT that works whether or not the authorization callout is in use. 

Stu Martin tell us that this should be doable, and fairly quickly. That's great
news! Let us know how it goes. 

If you are able to make such a change, could you provide us with a patch file
for Globus 4.0.1, so that we can quickly distribute it?

Thanks!
-alain