Bug 5514 - Error in subject creation in LocalInvocationHelper
: Error in subject creation in LocalInvocationHelper
: unspecified
: Macintosh All
: P3 normal
: 4.0.6
Assigned To:
  Show dependency treegraph
Reported: 2007-08-30 20:25 by
Modified: 2007-11-22 23:12 (History)



You need to log in before you can comment on or make changes to this bug.

Description From 2007-08-30 20:25:39
LocalInvocationHelper enables direct Java calls from WS-GRAM
to RFT without going the WS way. Therefore a MessageContext
is created with all information a service (in this case RFT)
needs. Part of this is a subject.
However: i did an error in the subject creation by adding the
DN of the caller by
subject.getPrincipals().add(new UserNamePrincipal(userSubject));
But it must be
subject.getPrincipals().add(new GlobusPrincipal(userSubject));

RFT gets along with this error (that's why it didn't show up),
but it's technically wrong. If the change is done also a local
username must be added, because RFT requires it (funnily that
works currently too). For this the UserNamePrincipal must be
subject.getPrincipals().add(new UserNamePrincipal(localUserId));

This requires an interface change in the LocalInvocationHelper,
but since it's currently for WS_GRAM internal use only that's ok.
Plans are to move that functionality to Core, maybe for 4.2.
Probably some issues that may currently not be perfect get
improved then.
------- Comment #1 From 2007-11-22 23:11:02 -------
fixed and committed.