October Pre-GDB: AuthZ and IAM Workshop

Name: October Pre-GDB: AuthZ and IAM Workshop
Start: 2022-10-10T13:00:00+02:00
End: 2022-10-11T18:00:00+02:00
Location: CERN

10 Oct 2022, 13:00 → 11 Oct 2022, 18:00 Europe/Zurich

513/R-068 (CERN)

513/R-068

CERN

Show room on map

Description

This month's pre-GDB will focus on the INDIGO IAM and the Authentication and Authorization work done by both the WLCG Authz WG and the wider community.

The meeting will be split over two days, starting the afternoon of Monday 10th October and continuing through Tuesday 11th October.

Contributions to the agenda on both technical and policy topics are warmly welcome.

We will organise a dinner on Monday at Bain des Paquis on the lake in Geneva where you can have Fondue or a small range of other options. If you would like to attend, please indicate so on the registration form. Please bring cash in Swiss francs.

Registration

Participants

Alastair Basden
Alessandra Forti
Alison Packer
David Crooks
Dimitrios Christidis
Doug Benjamin
Emmanouil Vamvakopoulos
Enrico Vianello
Francesco Giacomini
Hannah Short
Ian Collier
Josh Drake
Linda Ann Cornwall
Maarten Litmaath
Marcelo Vilaca Pinheiro Soares
Mario Lassnig
Matt Doidge
Michel Jouvin
Narendra Kumar Reddy Challa
Nick Evangelou
Petr Vokac
R. Florian von Cube
Robert Hancock
Roberta Miccoli
Stefano Dal Pra
Tom Dack
Vincent Garonne

61554826915

Zoom room for WLCG AuthZ Call

Tom Dack

Hannah Short, Maarten Litmaath

Join via phone

Monday 10 October
- Mon 10 Oct
- Tue 11 Oct
- 13:00 → 18:00
  Monday afternoon 5h 513/1-024
  
  513/1-024
  
  CERN
  
  50
  Show room on map
  
  Speakers: Hannah Short (CERN), Michel Jouvin (Université Paris-Saclay (FR))
  - Experience Sharing 50m
    
    Who is using IAM? General time for discussion to kick us off
    
    20221010 - IAM@IJCLab.pdf
    
    2022_10_IAM_USERS_MEETING_WLCG.pptx.pdf
    
    ExperienceSharing.zip
  - IAM Status 50m
    
    Speaker: Enrico Vianello
    
    IAMDiscussion.zip
    
    IAMUpdate.zip
    
    October 2022 Pre-GDB Authz and IAM workshop.pdf
- 19:00 → 21:00
  
  Dinner at Bains des Paquis 2h 513/R-068
  
  513/R-068
  
  CERN
  
  19
  Show room on map
  
  Please bring cash in Swiss francs. Fondue is 25 chf per person, plus you may want to share some plates of meat.
  Easiest directions: catch the tram 18 down to Bel Air and walk along the lake front.
  https://www.buvettedesbains.com
Tuesday 11 October
- Mon 10 Oct
- Tue 11 Oct
- 09:00 → 17:00
  Tuesday 8h 513/R-068
  
  513/R-068
  
  CERN
  
  19
  Show room on map
  - Submission Tokens 50m
    
    How to express capabilities in a submit token vs how to configure a [HTCondor] CE to handle them
    
    Speaker: Stefano Dal Pra (Universita e INFN, Bologna (IT))
    
    HTC-CE_and_tokens.pdf
    
    Submission.zip
    
    Summary:
    Having a surrogate of LCMAPS that works with tokens would be good.
    Having an ordered list of groups would be useful for HT Condor use case. -> others disagree, though perhaps primary being first one makes sense
    Should explore expanding the compute.create scope to include more information e.g. compute.create:/opportunistic or compute.create:/gpu
    The WLCG Auth Working Group should come up with some guidelines about when it makes sense for authorization logic to live in IAM and when it should be service/client side.
    There is an existing "Compute Scopes" working document, which can be found here: https://docs.google.com/document/d/1J85iNV1gIn4HX3owVrP4DdhTZKH7dzq11nv7Qv0Wj3U/edit?usp=sharing - notes on further discussion should go here as well.
  - Discussion: migrating to tokens from proxies 50m
    
    How have people done or are planning to do the transition? Are workflows being modified to roughly replace proxies with tokens or is there more?
    
    Speaker: Francesco Giacomini (INFN CNAF)
    
    Migration.zip
  - Supporting the wider community 50m
    
    How should we be supporting the wider community to reuse our findings? Are we framing things in a way that is friendly to non-HEP user communities?

October Pre-GDB: AuthZ and IAM Workshop

513/R-068

CERN

513/1-024

CERN

513/R-068

CERN

513/R-068

CERN