Re: [gridsam-discuss] ***[Possible UCE]*** Re: GridSAM security question

[Garry S. <gar...@co...>]

Hi Dawid,

>
> I did some experiment - I changed in authorization.xml deny and allow 
> rules to <false/>. So I understad that nobody should be able to submit 
> jobs?
> But after I changed this and restart server I still can submit jobs. 
> So maybe I have something wrong with my configuration? It works for you?

Yes I had this working. Check the file at 
http://acet.rdg.ac.uk/~gms/authorisation.xml
I remember experiencing some problems so kept the badguys group defined. 
Don't quite remember what the issue was now.

>
> And the question about this authorization mechanism:
>
> What is taken into account? The principle DN from the keystore used to 
> create connection between client and server? or the DN is taken from 
> user's globus proxy?

Should be the DN from user's globus proxy.

Garry