--- trunk/grid-mw-security/ees/thesis/grid_auth.tex 2009/10/20 12:17:31 945 +++ trunk/grid-mw-security/ees/thesis/grid_auth.tex 2009/10/20 12:26:31 946 @@ -340,9 +340,9 @@ \begin{description} %\item[Gridlist]{A plug-in that maps allowed users to pool accounts using the gridmapfile \cite{gridmapfile}} -\item[Timeslots]{A plug-in that makes authorization decisions based on the time of day a job request is received \cite{timeslots}} -\item[Userban]{A plug-in that checks a file that contains a list of Subject DNs of users to be banned from the site \cite{userban}} -\item[Userallow]{A plug-in that checks a file that contains a list of Subject DNs of users to be allowed to the site. \cite{userallow}} +\item[Timeslots]{A plug-in that makes authorization decisions based on the time of day a job request is received \cite{lcas_apidoc}} +\item[Userban]{A plug-in that checks a file that contains a list of Subject DNs of users to be banned from the site \cite{lcas_apidoc}} +\item[Userallow]{A plug-in that checks a file that contains a list of Subject DNs of users to be allowed to the site. \cite{lcas_apidoc}} \item[Check executable]{A plug-in that checks if the executable requested is whitelisted by the service.} % TODO reference Check executable \item[LCAS VOMS]{Works like the userallow plug-in, except it verifies the FQANs present in a proxy certificate instead of the Subject DN. These were added to the certificate by a VOMS service. With this plug-in, more complex policies for authorization can also be expressed in the GACL \cite{gaclsite:home} language.} @@ -394,11 +394,11 @@ \begin{description} %\item[Gridlist]{A plug-in that maps users to pool accounts using the gridmapfile \cite{gridmapfile}} -\item[Local account]{Maps the supplied user credentials (i.e. a Subject DN or VOMS-signed FQANs) to a local user account on a target system \cite{localaccount}} -\item[Pool account]{Maps the supplied user credentials (i.e. a Subject DN or VOMS-signed FQANs) to a pool account on a target system \cite{poolaccount}} -\item[POSIX enforcement]{A plug-in that applies acquired credential information to procure a Unix user account on a target system. Verifies that the account was successfully attained. \cite{posix_enf}} -\item[LDAP enforcement]{A plug-in that applies acquired credential information in a target LDAP database \cite{ldap_enf}} -\item[Verify proxy]{This plug-in can verify the validity and authenticity of the incoming Grid credentials, and enforce life time constraints on the proxy} +\item[Local account]{Maps the supplied user credentials (i.e. a Subject DN or VOMS-signed FQANs) to a local user account on a target system \cite{lcmaps_apido}} +\item[Pool account]{Maps the supplied user credentials (i.e. a Subject DN or VOMS-signed FQANs) to a pool account on a target system \cite{lcmaps_apidoc}} +\item[POSIX enforcement]{A plug-in that applies acquired credential information to procure a Unix user account on a target system. Verifies that the account was successfully attained. \cite{lcmaps_apidoc}} +\item[LDAP enforcement]{A plug-in that applies acquired credential information in a target LDAP database \cite{lcmaps_apidoc}} +\item[Verify proxy]{This plug-in can verify the validity and authenticity of the incoming Grid credentials, and enforce life time constraints on the proxy \cite{lcmaps_apidoc}} \end{description} \subsection{SCAS}