Grid Account Management: A Case Study GGF 9 PGM-RG Chicago, IL October 5-8, 2003 Doru Marcusiu Assistant Director Grid and Security Technologies, NCSA A partnership to prototype an advanced computational infrastructure for the 21st century

2 Questions to be addressed What is Grid account management? What is Grid accounting? Are there any existing solutions? What does the future hold?

A partnership to prototype an advanced computational infrastructure for the 21st century 3 What is Grid Account Management? The coordination, tracking, and managing of allocations, conventional user accounts, and grid related files on Grid resources

A partnership to prototype an advanced computational infrastructure for the 21st century 4 How does Grid Account Mgmt. differ from conventional Account Mgmt? X509 certificate management Grid map file management Possible distributed, cross domain resources Possible multiple account management systems

A partnership to prototype an advanced computational infrastructure for the 21st century 5 What are the implementation goals for Grid Account Management? Scalability Non Intrusive Dynamic Secure Extensible Automation

A partnership to prototype an advanced computational infrastructure for the 21st century 6 What is Grid Accounting? The collection, consolidation, and reporting of resource usage on Grid resources

A partnership to prototype an advanced computational infrastructure for the 21st century 7 How does Grid Accounting differ from conventional Accounting? Multiple accounting systems Tracking usage by Distinguished Name Distributed, cross domain resources

A partnership to prototype an advanced computational infrastructure for the 21st century 8 What are the implementation goals for Grid Accounting? Scalability Non Intrusive Dynamic Secure Extensible Automation

A partnership to prototype an advanced computational infrastructure for the 21st century 9 Do Account Management solutions exist? Yes, for single organization Grids No, for virtual organization Grids

A partnership to prototype an advanced computational infrastructure for the 21st century 10 Single Organization vs. Virtual Grids Single Organization Grids –Grids whose resources are allocated as a single virtual resource Virtual Organization Grids –Grids whose resources are allocated individually

A partnership to prototype an advanced computational infrastructure for the 21st century 11 Example: Single Organization Grid Transaction system model Handles request and notification transactions Uses central, authoritative data base Provides management of X509 certificate distinguished name Provides API to existing account management systems

A partnership to prototype an advanced computational infrastructure for the 21st century 12 Transaction System Model: Transactions Well defined, extensible transaction types Transaction file interpreter Account management request initiation Account management action acknowledged Transaction receipt acknowledgement

A partnership to prototype an advanced computational infrastructure for the 21st century 13 Transaction System Model: Central Data Base Unique Distinguished names for X509 certificates Mapping of DNs to user accounts on multiple systems Provides means for account usage consolidated reporting for Grid resources

A partnership to prototype an advanced computational infrastructure for the 21st century 14 Transaction System Model: X509 certificates Manages distinguished names for X509 user certificates Provides mapping of DNs to user accounts on multiple systems

A partnership to prototype an advanced computational infrastructure for the 21st century 15 Transaction System Model: API Non intrusive to local account management system Uses transaction file interpreter Extensible to support new transaction types

A partnership to prototype an advanced computational infrastructure for the 21st century 16 What are the Virtual Organization Grid Acct Mgmt issues? Must respect existing site account management systems and policies Must work without a central authoritative source of information Must use standard, extensible information exchange mechanism Must support management of x509 certificate Distinguished Names

A partnership to prototype an advanced computational infrastructure for the 21st century 17 What does the future hold? Maybe virtual organization, cross domain resources will never be considered a single virtual resource Maybe only solutions for single organization Grids such as TeraGrid are needed Maybe a dynamic, economic model representing a pay as you go scenario is needed

A partnership to prototype an advanced computational infrastructure for the 21st century 18 What should current best practices be? Focus effort on supporting a single organization Grid Implement and integrate additional functionality for supporting Grids Keep informed about possible development of standards