The GILDA t-Infrastructure and the GENIUS portal Domenico Vicinanza, CERN EELA Tutorial, Santiago, September 2006

Outline Motivation The GILDA t-Infrastructure How to join GILDA Services Tools Applications How to join GILDA The GENIUS web portal Summary and conclusions Location, Meeting, dd.mm.yyyy

The t-Infrastructure Why t-infrastructure? e-Infrastructure for production training infrastructure (t-Infrastructure) for training Need guaranteed response for tutorials; limit the vulnerability of production systems use training grid have training CA able to change middleware to prepare participants for future releases on production system Also: need safe resources for installation training easy entry point for new communities Location, Meeting, dd.mm.yyyy

The GILDA project (https://gilda.ct.infn.it) Location, Meeting, dd.mm.yyyy

The GILDA Test-bed (https://gilda.ct.infn.it/testbed.html) 20 sites in 3 continents ! Location, Meeting, dd.mm.yyyy

All gLite services on GILDA Location, Meeting, dd.mm.yyyy

The GILDA Certification Authority (https://gilda.ct.infn.it/CA) Location, Meeting, dd.mm.yyyy

The GILDA Certification Authority Location, Meeting, dd.mm.yyyy

The GILDA VOMS (https://voms.ct.infn.it:8443/voms/gilda/) Location, Meeting, dd.mm.yyyy

The GILDA Monitoring System (http://alifarm7.ct.infn.it:50080/gridice) Location, Meeting, dd.mm.yyyy

The gLite Tutor (https://glite-tutor.ct.infn.it) Location, Meeting, dd.mm.yyyy

The Genius portal project At the beginning of 2002 the Italian INFN GRID Project started the GENIUS Portal Project in conjunction with the Italian web technology company NICE srl The present implementation of the GENIUS grid portal described here is carried out on the top of the gLite middleware services Location, Meeting, dd.mm.yyyy

GENIUS GRID portal features 1/2 It can be accessed from everywhere and by “everything” (desktop, laptop, PDA, cell phone). The same user interface to several back-ends. All available grid services incorporated in a logic way, just “one mouse click away”. Layout easily understandable and user friendly. Location, Meeting, dd.mm.yyyy

GENIUS GRID portal features 2/2 Secure at all levels: 1) secure for web transactions 2) secure for user credentials 3) secure for user authentication 4) secure at VO level. Location, Meeting, dd.mm.yyyy

Applications on GENIUS Location, Meeting, dd.mm.yyyy

GENIUS on PDA Home Page Services Remote file browsing inspection Location, Meeting, dd.mm.yyyy

GENIUS for cell phone Location, Meeting, dd.mm.yyyy

High level GRID middleware The GENIUS Model GENIUS® (Grid Enabled web eNvironment for site Independent User job Submission) INFN/NICE srl collaboration GENIUS web portal OS & Net services Basic Services High level GRID middleware HEP Biomed Other apps Applications’ specific layer Other apps GLOBUS toolkit EDG/LCG architecture Location, Meeting, dd.mm.yyyy

GENIUS: The 3 Tiers model 3-tier model https+java/xml WEB Browser GENIUS Local WS EnginFrame Apache the Grid M/W+GSI UI Location, Meeting, dd.mm.yyyy

myproxy-get-delegation Grid authentication UI MyProxy Server grid-proxy-init myproxy-init myproxy-get-delegation GENIUS Server (UI) WEB Browser the Grid execution From a ”trusted” machine the user can, using the private key of his X.509 personal certificate, create a temporary certificate issuer (a myproxy) and store it, for a defined amount of time, on a MyProxy Server When the user asks the GENIUS portal to invoke a Grid service, the portal contacts the MyProxy Server and tries to get a temporary proxy certificate on the user’s behalf . If the life time of the myproxy is not expired, temporary user credentials are retrieved, the action is performed and the output is rendered back into the user’s web browser. So, the three-tier architecture of MyProxy’s credentials delegation avoids the private key of the user’s certificate to be sent over the network, avoiding a security hole. Local WS output any grid service Location, Meeting, dd.mm.yyyy

Services File Services Job Submission Services Monitoring Data Services Location, Meeting, dd.mm.yyyy

File Services: View/Edit Location, Meeting, dd.mm.yyyy

File Services: View/Edit Location, Meeting, dd.mm.yyyy

Job Subm: JDL file selection Location, Meeting, dd.mm.yyyy

Inspecting the Job Queue Logging information by clicking on the Globus JobID Location, Meeting, dd.mm.yyyy

Job completed successfully Location, Meeting, dd.mm.yyyy

Retrieving Job results Location, Meeting, dd.mm.yyyy

Interactive Services: VNC terminal Location, Meeting, dd.mm.yyyy

DAG management: TRIANA project Location, Meeting, dd.mm.yyyy

How to join GILDA: the Gilda Homepage https://gilda.ct.infn.it Location, Meeting, dd.mm.yyyy

How to join GILDA: instructions Location, Meeting, dd.mm.yyyy

GILDA CA certificate download https://gilda.ct.infn.it/CA/mgt/getCA.php Location, Meeting, dd.mm.yyyy

How to get a personal GILDA certificate (1/5) Location, Meeting, dd.mm.yyyy

How to get a personal GILDA certificate (2/5) Location, Meeting, dd.mm.yyyy

How to get a personal GILDA certificate (3/5) Location, Meeting, dd.mm.yyyy

VOMS registration (2/5) This page will be only accessible if you have imported successfully the received certificate Location, Meeting, dd.mm.yyyy

How to start using the GILDA testbed 1) Log via SSH in glite-tutor.ct.infn.it (or grid-tutor.ct.infn.it) But you have to provide us the IP address of the machine you want to login from. 2) Install the GILDA VM UI Combined on your laptop/desktop You can download the GILDA VM UI Combined from: https://gilda.ct.infn.it/VirtualServices.html Location, Meeting, dd.mm.yyyy

The GILDA Video Tutorials (https://gilda.ct.infn.it/video.html) Location, Meeting, dd.mm.yyyy

GILDA summary numbers 20 sites in 3 continents > 4200 certificates issued, 15% renewed at least once > 120 tutorials and demos performed in 15 months > 1,500,000 hits (> 60,000 visits) on (of) the web site from 10’s of different countries > 1.5 TB of videos and UI’s downloaded from the web site Location, Meeting, dd.mm.yyyy

EGEE Applications and GILDA 8 Virtual Organizations supported: Biomedicine (Biomed) Earth Science Academy (ESR) Earth Science Industry (CGG) Astroparticle Physics (MAGIC) Computational Chemistry (GEMS) Grid Search Engines (GRACE) Astrophysics (PLANCK) Computation Archaeology (ARCHAEOGRID) Development of complete interfaces with GENIUS for 3 Biomed Applications: GATE, hadronTherapy, and Friction/Arlecore Development of complete interfaces with GENIUS for 4 Generic Applications: EGEODE (CGG), MAGIC, GEMS, and CODESA-3D (ESR) (successfull demos of EGEODE and GEMS at EGEE review) Development of complete interfaces with GENIUS for 16 demonstrative applications available on the GILDA Grid Demonstrator (https://grid-demo.ct.infn.it) Development of complete interface with CLI for NEMO Location, Meeting, dd.mm.yyyy

Summary and Conclusions GILDA is a virtual laboratory for dissemination of grid computing: It is a “de facto” standard t-Infrastructure adopted both by EGEE and many EU-FP6 projects (EELA, EUCHINAGRID, EUMEDGRID, ICEAGE, etc.) It is a complete suite of grid elements (test-bed, CA, VO, monitoring system, web portal, user interfaces, support system) and applications fully dedicated to dissemination purposes and pre-porting of new applications to EGEE Infrastructure GILDA runs latest production version of the gLite middleware to make the transition from the t-Infrastructure to the e-Infrastructure easy and transparent Location, Meeting, dd.mm.yyyy

References GILDA home page GILDA Certification Authority https://gilda.ct.infn.it GILDA Certification Authority https://gilda.ct.infn.it/CA/ GILDA Virtual Organization https://voms.ct.infn.it:8443/voms/gilda/ Certificate Management Guide http://grid-it.cnaf.infn.it/fileadmin/users/certmgr/certmgr.pdf Certificate Management Video https://gilda.ct.infn.it/video/Certification/Allproxy.html Location, Meeting, dd.mm.yyyy

Questions Location, Meeting, dd.mm.yyyy