Blog

testign 123

Today we are happy to celebrate the 1-year birthday of Globus Auth, our authentication and authorization platform.

In the year since its launch, Globus Auth has supported over 52,000 users, including nearly 18,000 new users in the past year, using one of 300 identity providers (with over 1,800 more coming soon). Counting all linked identities the number rises to over 64,000 identities.

We are deprecating the OAuth 2.0 service provided by Globus Nexus (also known as GOAuth). Authentication interfaces in Globus Nexus are deprecated and will be discontinued April 30, 2017. Globus Auth was recently added to the Globus platform and includes support for the OAuth 2.0 and OpenID Connect (OIDC) protocols, along with richer and more fine-grained identity and access management.

Several users have requested a native command line client to Globus services that can be installed on a local machine and used for simple scripting. We have just released a beta version of a new command line client that you can download and use with the Globus file transfer and sharing service. This is a native Python client application, and is available to all users. Documentation for this beta release is available in our Github repo. We invite you to try the new client and send any questions and feedback to support@globus.org.

We're excited to announce that we're taking GlobusWorld on the road! Over the next few months we will be conducting a series of workshops at university campuses and national facilities around the country.

Globus subscriptions have changed. Based on feedback from, and discussions with, existing subscribers we have moved away from a usage-based model to unlimited-use subscriptions with access to different sets of premium features. This change was motivated primarily by two recurring themes that came up in our conversations:

The certificate used by Globus Connect Personal endpoints to securely connect to Globus expires on August 9, 2016. We released updated packages with new certificates a few weeks ago. If you have not yet updated your Globus Connect Personal installation, you must do so before August 9th so that your endpoint continues to work.

Late last year we deprecated the scp command in the Globus command line interface (CLI), and provided features in the transfer command for parity. In the nine months since it was deprecated, most users have moved to using the transfer command and there is little use of the scp command.

The certificate authority used to issue service certificates for Globus Connect Server installations will expire on August 9, 2016. We have released an updated version of Globus Connect Server that contains the new certificate authority. Please update your installation prior to August 9th for uninterrupted use of your Globus endpoint(s). Click here for instructions on updating your endpoint.

On February 16, 2016 a new critical vulnerability CVE-2015-7547 - "glibc getaddrinfo() stack-based buffer overflow" was announced. We have reviewed the severity and impact to Globus services, partner services and users, and posted details of our findings in a new security bulletin. We recommend corrective action for users who are operating Globus endpoints on Linux systems - please read the security bulletin for further details.