gx-map

$Id: index.html,v 1.49 2007/04/25 02:59:06 kst Exp $

gx-map is a set of Perl programs designed to automate the maintenance of files in the /etc/grid-security directory, including the grid-mapfile, CA certificates, signing_policy files, and CRLs.

The latest release is 0.5.3.3 which you can download here.
md5sum: 1b9a7c0aa840ce15c7a5bcc72de75214
sha1sum: 05f1b0fb3f6cd710baa036bc59bc267bd71dbf2b
GPG signature: gx-map-0.5.3.3.tar.gz.sig.

This release is also available via http, along with the GPG signature.

IMPORTANT SECURITY NOTE:

gx-map 0.5.3.3 is a security update to gx-map 0.5.3.2. Release 0.5.3.2, and all earlier releases, were recently found to have serious security vulnerabilities that could allow a malicious user to insert arbitrary grid-mapfile entries. If you're currently running release 0.5.3.2, you can download the 0.5.3.3 release and use the provided patch-gx-map-0.5.3.2 script to upgrade your 0.5.3.2 installation to 0.5.3.2p1. Otherwise, you should install release 0.5.3.3. (Versions 0.5.3.2p1 and 0.5.3.3 are functionally equivalent.)

Release 0.5.3.2 is now supported only if it is upgraded to 0.5.3.2p1. All releases earlier than 0.5.3.2 are unsupported.

Releases 0.5.2 and later include a new mechanism for cross-site propagation of grid-mapfile entries, as well as a number of other improvements. They also include an optional TGCDB subsystem that's specific to the TeraGrid.

• README
• Relnotes
• LICENSE
• README.TeraGrid
• README.Upgrade

NOTE: The man pages here have not yet been updated to the 0.5.3.2 release. I'll do that in the next few days. In the meantime, you can download the release itself and read the documentation included with it.

• System overview:
  • gx-map.7
• User commands:
  • gx-request.1
• Administrative commands:
  • gx-check-requests.8
  • gx-propagate.8
  • gx-gen-mapfile.8
  • gx-ca-update.8
  • gx-cron-job.8
• Auxiliary commands:
  • gx-ingest.8
  • gx-admins.8
  • gx-convert-log.8
  • gx-cleanup-logs.8
  • gx-remove-locks.8
  • gx-watch-locks.8
  • gx-check-index.8
  • gx-install-cadesc.8
  • gx-util-test.8
• Modules and file formats:
  • gx-map-gridmap-utils.3
  • gx-map-cadesc.5
  • gx-map-requests-log.5
• Security considerations:
  • gx-map-security.7
• TGCDB subsystem (TeraGrid only):
  • gx-db-check-requests.8
  • gx-db-request.8.
  • gx-db-dump.8. (for debugging only)
  • gx-map-db-config.5

gx-map 0.4.5 was included in NMI release 8.0, available for download here.
gx-map 0.5.1 is included in NMI release 9.0, available for download here.
But remember that releases 0.4.5 and 0.5.1 are unsupported.

More files, including older unsupported releases, can be found in the ftp directory.

Several TeraGrid sites are currently using gx-map 0.5.3.2p1 or 0.5.3.3.

I gave a short presentation on gx-map at the GRIDS Center Community Workshop in Chicago, IL, 2005-06-24.
You can see the presentation slides in PowerPoint, OpenOffice, or PDF format; also with two slides per page.

You can subscribe to the gx-map mailing list.
You can also view the list archives.

For more information, contact the author, Keith Thompson, kst @ sdsc.edu (the "mailto:" link is spam-proofed).

Keith Thompson's home page