Intra-VO and individual user level accounting in EGEE
Presented by Mr. Sergio DíAZ MONTES on 23 Sep 2008 from 16:09 to 16:09
Session: Demos and Posters
Description of the activity
A new level of detail is now possible in the usage accounting in EGEE. The collection of encrypted individual user DN information and User Fully Qualified Attribute Name (userFQAN) is now possible in the EGEE accounting infrastructure. With this new information, for example, VOs can analyse how their production is done between the different groups and roles that they have defined and any user can see the distribution of his/her jobs between ROCs and sites and the CPU,... in each site/ROC.
Using the user DN it is possible to create statistics about the accounting at the individual user level. To access the accounting per user statistics pages a user needs to authenticate using a X.509 certificate signed by an IGTF approved CA. Once the user is authenticated, the authorization could be granted according to the following roles:VO Resource Manager, VO Member, Site Administrator, User and GOC Developer. Each role has associated a different view in the EGEE Accounting Portal. In the site local database this information is kept in clear text. However, the R-GMA network supports Authentication so anyone with a certificate issued by an IGTF approved CA can access the data. To protect the users identity and maintain confidentiality,APEL performs on-the-fly encryption before streaming the data into R-GMA and storing it into the central APEL Accounting Repository. To achieve the intra-VO level, it is necessary to get the UserFQAN, which contains the VOMS role and group information.
The new views make more versatile the Accounting Portal, providing dynamic statistics about individual users. VOs can analyse how their production is done between the different groups and roles that they have defined. The VO manager view allows to see the Top 10 User ordered by #jobs, CPU,.. and displayed at the global level or at the ROC level. The VO Member view allows to have an overview of the status of the VO at a lower level of detail than the global view grouping by users VOMS roles and groups so allowing a VO to analyse the usage of the groups and roles that it has defined. The site Admin View shows the contribution of each of the Top 10 Users that executed jobs in the site and the average WCT for all jobs belonging to each User,... The User View allows any user to see the distribution of his/her jobs between ROCs and sites and the CPU, WCT, normalized CPU time consumed in each site/ROC. These views have greatly improved the management of sites, VOs, and individual users work.
In the demo we will show the new views to VO managers, VO users and site admins. Each of them will be able to see how the new functionalities can help them to improve their productivity in their particular tasks. For example, VO managers will be able to see the Top 10 users ordered by #jobs, CPU,... and they will also be able to analyse the usage of the different groups and roles of their VO. We will give the opportunity to the users to interact with these new views of the Accounting Portal and test them. Also, they will see their personal accounting data if they load their user certificate on the browser. The new views allows to dynamically generate visual statistics using many different types of plots, including Gantt charts, all of them with a high visual impact. A demo is a good opportunity to show our work to the users. They could test the usefulness of the new views and give us their opinions and suggestions for making more useful, usable and adjustable to the users these views.