9–11 May 2007
Manchester, United Kingdom
Europe/Zurich timezone

A VO-oriented AuthN/AuthZ approach

11 May 2007, 14:00
20m
Manchester, United Kingdom

Manchester, United Kingdom

oral presentation Training and Support for Grid Users User/VO community support

Speaker

Dr Vincenzo Ciaschini (INFN CNAF)

Report on the experience (or the proposed activity). It would be very important to mention key services which are essential for the success of your activity on the EGEE infrastructure.

Our experience with the management of the INFN T1 at CNAF shows that an integrated
solution for policy management and attribute authority administration is needed to
simplify the daily setup and operation of the grid infrastructure. Currently, no
available Grid middleware provides a similar service to VO and site administrators.
This results in administrators being required to go manually from site to site in
order to adjust the local setups to new VO requirements. This is especially
cumbersome when there is no conceptual need to change a configuration at the site
level, e.g. when a VO just wants to change the way its groups map into usage classes.

Describe the added value of the Grid for the scientific/technical activity you (plan to) do on the Grid. This should include the scale of the activity and of the potential user community and the relevance for other scientific or business applications

We are creating an integrated administration service for authentication and
authorization targeted at VO and site administrators. An integrated solution allows
for easier management of authorization decisions and policies on grid resources at
the VO and site level. The solution we are proposing is implemented on top of a few
well-defined interfaces that group the administration work and will be discussed in
detail in the talk.

Describe the scientific/technical community and the scientific/technical activity using (planning to use) the EGEE infrastructure. A high-level description is needed (neither a detailed specialist report nor a list of references).

The grid infrastructure is used by Virtual Organizations (VOs). VOs group together
real organizations or businesses that are willing to share resources to gain
computational power or provide services that would be unobtainable otherwise.
Currently, most VOs belong to the field of High energy physics, however applications
in other fields are emerging (e.g., bionformatics, astronomy, etc...)

With a forward look to future evolution, discuss the issues you have encountered (or that you expect) in using the EGEE infrastructure. Wherever possible, point out the experience limitations (both in terms of existing services or missing functionality)

In this talk, we present a set of interfaces for policy management, targeted at VO
and site administrators, that simplify the writing, validation and distributed
deployment of complex authorization policies and does not have the shortcomings
(e.g., policy propagation delays and inconsistency, manual configuration, etc..) of
the currently available solutions.

Authors

Dr Alessandro Italiano (INFN CNAF) Dr Andrea Ceccanti (INFN CNAF) Dr Andrea Ferraro (INFN CNAF) Dr Antonia Ghiselli (INFN CNAF) Dr Davide Salomoni (INFN CNAF) Dr Sergio Andreozzi (INFN CNAF) Dr Valerio Venturi (INFN CNAF) Dr Vincenzo Ciaschini (INFN CNAF)

Presentation materials