GridSite Service Reference Card

Functional description

GridSite uses X.509 certificates loaded into unmodified versions of web browsers like Internet Explorer, Netscape or Mozilla to authenticate users, and then grants read and write authorization on this basis. HTML and text files can be edited within a browser window, or pages and binary files can be uploaded from local disk.

Daemons running

None

Init scripts and options (start|stop|restart|...)

None

Configuration files location with example or template

.gacl file in a web-accessible directory whose access should be controlled.

Logfile locations (and management) and other useful audit information

• /var/log/httpd/httpd-gridsite-access
• =/var/log/httpd/httpd-gridsite-errors*

Open ports

Non by GridSite. There are ports open by httpd.

Possible unit test of the service

N/A

Where is service state held (and can it be rebuilt)

N/A – The service is stateless

Cron jobs

None

Security information

Access control Mechanism description (authentication & authorization)

.gacl file in a web-accessible directory whose access should be controlled.

How to block/ban a user

Set .gacl contents accordingly

Network Usage

None by itself

Firewall configuration

Allow ports open by httpd.

Security recommendations

N/A

Security incompatibilities

N/A

List of externals (packages are NOT maintained by Red Hat)

None

Other security relevant comments

N/A

Utility scripts

• /usr/bin/findproxyfile
• /usr/bin/htcp
• /usr/bin/htfind
• /usr/bin/htll
• /usr/bin/htls
• /usr/bin/htmkdir
• /usr/bin/htmv
• /usr/bin/htping
• /usr/bin/htrm
• /usr/bin/urlencode

Location of reference documentation for users

http://www.gridsite.org/doc/

Location of reference documentation for administrators

http://www.gridsite.org/doc/

-- ZdenekSustr - 23-Mar-2011