GridShib for Globus Toolkit
Version 0.6.0 (April 30, 2008)

Welcome to GridShib!

GridShib is an NSF-funded project to allow interoperability between Globus Toolkit^® and Shibboleth.^® Visit the GridShib web site (http://gridshib.globus.org/) for more information about the GridShib Project.

GridShib distributes four software components:

1. GridShib for Globus Toolkit
2. GridShib for Shibboleth
3. GridShib Certificate Authority
4. GridShib SAML Tools

These software components help bridge the gap between SAML federations based on Shibboleth and Grid federations based on Globus Toolkit. Visit the GridShib Deployment Scenarios to see how the various GridShib components might be used.

Overview

GridShib for Globus Toolkit is an addon package for Globus Toolkit (GT). GridShib for GT is an implementation of a Grid Service Provider, a software component analogous in function to the Shibboleth Service Provider but for X.509-based Grids.

Important features of GridShib for GT include the following:

• Introduces attribute-based authorization into the GT authorization framework
• Leverages the GridShib Security Framework (as implemented in the GridShib SAML Tools)
• Exposes a single comprehensive policy decision point (PDP) called the GridShibPDP
• Implements an easy to deploy Attribute Push model
• Restricts access based on blacklists of IP addresses and/or name identifiers
• Provides attribute-based account mapping (analogous to the classic identity-based account mapping provided by gridmap files)
• Supports optional gridmap short-circuiting (which leverages a resource provider's existing investment in gridmap files)
• Defines an attribute-based authorization policy language (in XML)
• Includes a SecurityContextEchoService for testing and debugging
• Has an extensive logging capability
• Is 100% compatible with GridShib SAML Tools v0.3.x
• Requires Java 1.4 (or later), Ant 1.6 (or later), and Globus Java WS Core 4.0

Download

You can download the GridShib for GT (GS4GT) software distribution from the GridShib Downloads page:

GS4GT Download

Download the software in GZIP or ZIP format, or browse the online CVS repository.
http://gridshib.globus.org/download.html#gridshib-gt

Please review the licensing terms of the GridShib License before using this software. GridShib is licensed under the Apache License, Version 2.0. Additional licensing information will be found on the GridShib Downloads page.

Documentation

Available documentation for GridShib for GT (GS4GT) includes the following:

GS4GT Admin Guide

This is the administrator documentation for GS4GT.
http://gridshib.globus.org/docs/gridshib-gt/admin/

GS4GT API documentation

This is Java API documentation for the interceptors and configuration parameters implemented by GS4GT.
http://gridshib.globus.org/docs/gridshib-gt/api/

GS4GT Change Log

This text file documents the changes between GS4GT versions.
http://gridshib.globus.org/docs/gridshib-gt/CHANGES.txt

To illustrate how GridShib for GT is used in conjunction with GridShib SAML Tools and the GridShib CA, a comprehensive Quick Start is provided:

GridShib Quick Start

The Quick Start provides step-by-step instructions for various deployment and configuration options for all GridShib components.
http://gridshib.globus.org/docs/gridshib/quick-start.html

Globus Toolkit (http://www.globus.org/toolkit/) is an open-source toolkit for grid computing. Shibboleth (http://shibboleth.internet2.edu/) is an open-source implementation of the SAML browser profiles. Globus Toolkit^® and Shibboleth^® are registered trademarks of the University of Chicago and Internet2, respectively.