Updated README and TODO files to reflect the current state of the

project.

CASA-auth-token/server/README

@@ -82,113 +82,10 @@ The auth_token client/service protocol allows for the authentication of the clie
 auth_token relies in the server authentication mechanisms of SSL to verify the identity
 of the ATS.
 
-IMPLEMENTATION STRATEGY AND CURRENT STATUS
-
-auth_token is currently under development and is not ready to be used in production.
-The implementation strategy has been to first complete the framework with all of its
-modules, APIs, and packaging to allow application writters to start developing to it.
-Once this is done, then the implementation focus will switch to completing the plumbing.
-
-As of this time, a lot of the framework has been completed and there are sample
-applications that can be utilized to exercise it. For a more complete picture of where
-we are, look at the various TODO lists present in the child folders.
-
-The schedule for completing auth_token is agressive.
-
-REQUIREMENTS FOR BUILDING THE SOFTWARE PACKAGE ON WINDOWS
-
-  - Install Visual Studio .NET 2003
-  - Install Windows Platform SDK for Windows Server 2003 SP1
-  - Register the platform sdk with VS - Start/All Programs/Windows Platform SDK for Windows Server 2003 SP1/Visual Studio Registration/Register PSDK Directories with Visual Studio
-  - Install Cygwin - See instructions below.
-  - Extract Expat-2.0.0.zip in casa source directory parent
-  - Install Casa
-
-Download and start cygwin install:
-Browse to http://sources.redhat.com/cygwin/ 
-
-Click on "Install or update now!" or "Install Cygwin now"
-
-Cygwin Setup:
-Next
-
-Cygwin Setup - Choose Installation Type:
-Install from Internet
-Next
-
-Cygwin Setup - Choose Installation Directory:
-Root Directory: C:\cygwin
-Install For:  "All Users"
-
-Default Text File Type: DOS
-
-Cygwin Setup - Select Local Package Directory:
-  Local Package Directory: C:\cygwin-packages
-
-Cygwin Setup - Select Connection Type:
-  Direct Connection
-
-Choose A Download Site:
-  ftp://ftp.nas.nasa.gov 
-
-Cywin Setup - Select Packages:
-  Base:
-    defaults
-
-  Devel:
-    autoconf
-    automake
-    libtool
-    make
-    pkgconfig
-    cvs
-    gcc
-    gcc-g++
-
-  Editors:
-    vim (optional)
-
-  Net:
-    openssh
-    openssl
-
-  Text:
-    more
-
-  Utils:
-    clear (optional)
-
-Cygwin Setup - Create Icons:
-Finish
-
-Edit cygwin.bat (c:\cygwin\cygwin.bat) to add a call to
-%VS71COMNTOOLS%\vsvars32.bat (see example below). This sets up the
-Visual Studio tools in Cygwin.
-
-Sample cygwin.bat:
-
-@echo off
-
-call "%VS71COMNTOOLS%\vsvars32.bat" > NUL
-
-C:
-chdir C:\cygwin\bin
-
-bash --login -i
-
-
-REQUIREMENTS FOR BUILDING THE SOFTWARE PACKAGE ON LINUX
-
-Install latest mono and mono-devel RPM - Obtain RPMs from
-www.go-mono.org.
-
-
 BUILDING THE SOFTWARE PACKAGE
 
-Windows:  Start at Step 1.
-Linux:  Skip to Step 2.
-
-1. Run cygwin.bat to start up Cygwin.
+1. Install needed RPMs. Look at BuildRequires line in CASA_auth_token_server.spec.in file
+in package/linux folder to see a list of RPM build dependencies.
 
 2. Generate autotools files:
 ./autogen.sh --prefix=/<install_dir>  [--enable-debug]
@@ -222,7 +119,7 @@ source distribution (configure, Makefile.in files, and other distributed
 autotools files are not removed)
 
 make maintainer-clean - removes files to return state back to same as
-the CVS checkout (you will need to run ./autogen.sh again before running
+the SVN checkout (you will need to run ./autogen.sh again before running
 make again)
 
 SECURITY CONSIDERATIONS
@@ -231,6 +128,10 @@ CASA Authentication Tokens when compromised can be used to either impersonate
 a user or to obtain identity information about the user. Because of this it is
 important that the tokens be secured by applications making use of them. It is
 recommended that the tokens be transmitted using SSL.
+
+Token validation requires the installation of the certificate used by ATSs to
+sign the tokens. The software assumes that any certificate installed by the
+administrator is valid.