• Uses PKI (Public Key Infrastructure) X.509 certificates
• Users have a public and private key
• Dartmouth Grid Uses Dartmouth Signing Authority
• Use getcert program to obtain a certificate
• User certificates in .globus subdirectory

Contents of $HOME/.globus

•  userkey.pem (private key readable only by you)
•   usercert.pem (public key)         

Grid Server files: located in /etc/grid-security

• grid-mapfile
• certificates /
• hostcert.pem
• hostkey.pem

Grid Servers use a grid-mapfile to map authorized grid users to an existing account.

"/DC=edu/DC=dartmouth/C=US/O=Dartmouth College/UID=29846/CN=Susan A. Schwarz/emailAddress=Susan.A.Schwarz@Dartmouth.EDU" grid