{
  "port": 2119,
  "protocol": "tcp",
  "service": "Globus GRAM gatekeeper",
  "oneLiner": "The Globus gatekeeper — GSI-authenticated job submission on grid computing clusters.",
  "whatItIs": "globus-gatekeeper is the front door of Globus GRAM: it authenticates an incoming TCP connection with GSI (X.509 proxy certificates over GSSAPI), maps the client's distinguished name to a local Unix account through the grid-mapfile, and then starts the requested service, normally a job manager that submits work to the site's batch scheduler. Running as root it defaults to port 2119. You find it on academic and national-lab compute clusters, alongside the GRIS information service on 2135. The Globus Toolkit itself is retired; surviving deployments run the community-maintained Grid Community Toolkit.",
  "exposure": {
    "verdict": "careful",
    "note": "It is designed to be reachable between grid sites, but it runs jobs as local users on the strength of your CA trust and grid-mapfile. Only expose it with those maintained and the software patched — an abandoned gatekeeper is remote job execution on unsupported code."
  },
  "checkCommand": "nc -vz TARGET 2119",
  "links": [
    {
      "title": "Grid Community Toolkit — GRAM5 Administrator's Guide (globus-gatekeeper, default port 2119)",
      "url": "https://gridcf.org/gct-docs/latest/gram5/admin/index.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}