Grid Security work in 2006 Andrew McNab Grid Security Research Fellow University of Manchester.

Slides:

Advertisements

Similar presentations

Lousy Introduction into SWITCHaai

Advertisements

30-31 Jan 2003J G Jensen, RAL/WP5 Storage Elephant Grid Access to Mass Storage.

Security middleware Andrew McNab University of Manchester.

WP2: Data Management Gavin McCance University of Glasgow November 5, 2001.

DataGrid is a project funded by the European Union CHEP 2003 – March 2003 – Grid-based access control – n° 1 Grid-based access control for Unix environments,

29 June 2006 GridSite Andrew McNabwww.gridsite.org GridSite Storage Andrew McNab University of Manchester.

29 June 2006 GridSite Andrew McNabwww.gridsite.org VOMS and VOs Andrew McNab University of Manchester.

The GridSite Toolbar Shiv Kaushal The University of Manchester All Hands Meeting 2006.

Andrew McNab - Manchester HEP - 2 May 2002 Testbed and Authorisation EU DataGrid Testbed 1 Job Lifecycle Software releases Authorisation at your site Grid/Web.

Andrew McNab - Manchester HEP - 31 January 2002 Testbed Release in the UK Integration Team UK deployment TB1 Job Lifecycle VO: Authorisation VO: GIIS and.

FP7-INFRA Enabling Grids for E-sciencE EGEE Induction Grid training for users, Institute of Physics Belgrade, Serbia Sep. 19, 2008.

Middleware technology and software quality issues Andrew McNab Grid Security Research Fellow University of Manchester.

Andrew McNab - EDG Access Control - 14 Jan 2003 EU DataGrid security with GSI and Globus Andrew McNab University of Manchester

The GridSite Security Framework Andrew McNab University of Manchester.

MTA SZTAKI Hungarian Academy of Sciences Grid Computing Course Porto, January Introduction to Grid portals Gergely Sipos

20 March 2007 VOMS etc Andrew McNabwww.gridsite.org VOMS etc Andrew McNab University of Manchester.

Andrew McNab - Manchester HEP - 6 November Old version of website was maintained from Unix command line => needed (gsi)ssh access.

WebFTS as a first WLCG/HEP FIM pilot

EGEE Security Area 13 May 2004 EGEE Security Area Stakeholders JRA3 middleware Architecture What we have for Unix and Java What.

10 May 2007 HTTP - - User data via HTTP(S) Andrew McNab University of Manchester.

Andrew McNab - GACL - 16 Dec 2003 Grid Access Control Language Andrew McNab, University of Manchester

3 May 2006 GridSite Andrew McNabwww.gridsite.org Web Services for Grids in Scripts and C using GridSite Andrew McNab University of.

Andrew McNab - EDG Access Control - 17 Jan 2003 EDG Site Access Control (ie Local Authorisation and Accounts) Andrew McNab, University of Manchester

Security Middleware and VOMS service status Andrew McNab Grid Security Research Fellow University of Manchester.

Tweaking the Certificate Lifecycle for the UK eScience CA John Kewley NGS Support Centre Manager & Service Manager for the UK e-Science CA

Andrew McNab - GridPP Security - 24 Feb 2003 GridPP Security Middleware Andrew McNab, University of Manchester

Andrew McNab - SlashGrid, HTTPS, fileGridSite SlashGrid, HTTPS and fileGridSite 30 October 2002 Andrew McNab, University of Manchester

Andrew McNab - GridSite/G-HTTPS - 17 Feb 2003 GridSite and G-HTTPS update Andrew McNab, University of Manchester

GT Components. Globus Toolkit A “toolkit” of services and packages for creating the basic grid computing infrastructure Higher level tools added to this.

Grid Security and VO Management Andrew McNab University of Manchester.

Federated Identity Management for HEP David Kelsey WLCG GDB 9 May 2012.

The GridSite Security System Andrew McNab and Shiv Kaushal University of Manchester.

2005 © SWITCH Perspectives of Integrating AAI with Grid in EGEE-2 Christoph Witzig Amsterdam, October 17, 2005.

PanDA Multi-User Pilot Jobs Maxim Potekhin Brookhaven National Laboratory Open Science Grid WLCG GDB Meeting CERN March 11, 2009.

Security Area in GridPP2 4 Mar 2004 Security Area in GridPP2 “Proforma-2 posts” overview Deliverables – Local Access – Local Usage.

Andrew McNab - Access Control - 28 May 2002 Access Control and User Management (ie Local Authorisation and Accounts) Andrew McNab, University of Manchester.

EU DataGrid (EDG) & GridPP Authorization and Access Control User VOMS C CA 2. certificate dn, ca, key 1. request 3. certificate 4. VOMS cred: VO, groups,

Andrew McNab - GGF Authz - 16 Dec 2003 GGF Authorization work Andrew McNab, University of Manchester

Communicating Security Assertions over the GridFTP Control Channel Rajkumar Kettimuthu 1,2, Liu Wantao 3,4, Frank Siebenlist 1,2 and Ian Foster 1,2,3 1.

Security Middleware in GridPP2 5 Feb 2004 Security Middleware in GridPP2 Current Status – GridSite GridPP2 Themes – libgridsite.

Andrew McNab - GridSite/EDG/GGF - 29 Sept 2003 GridSite, EDG and GGF Andrew McNab, University of Manchester

EDG Security European DataGrid Project Security Coordination Group

Grid Security in a production environment: 4 years of running Andrew McNab University of Manchester.

Andrew McNab - Security - 1 July 2003 Security: Authorization, Access Control and Usage Control Andrew McNab, University of Manchester

Andrew McNab - Grid HTTP/HTTPS extensions Grid HTTP/HTTPS extensions 18 November 2002 Andrew McNab, University of Manchester

GridSite Web Servers for bulk file transfers & storage Andrew McNab Grid Security Research Fellow University of Manchester, UK.

Security, Accounting, and Assurance Mahdi N. Bojnordi 2004

Next Steps: becoming users of the NGS Mike Mineter

Andrew McNab - EDG Access Control - 4 Dec 2002 EDG Access Control and User Management (ie Local Authorisation and Accounts) Andrew McNab, University of.

Andrew McNabSecurity Middleware, GridPP8, 23 Sept 2003Slide 1 Security Middleware Andrew McNab High Energy Physics University of Manchester.

Glite. Architecture Applications have access both to Higher-level Grid Services and to Foundation Grid Middleware Higher-Level Grid Services are supposed.

Shibboleth & Grid Integration STFC and University of Oxford (and University of Manchester)

Andrew McNabGrid in 2002, Manchester HEP, 7 Jan 2003Slide 1 Grid Work in 2002 Andrew McNab High Energy Physics University of Manchester.

Andrew McNab - EDG Access Control - 17 Jun 2003 EU DataGrid and GridPP Authorization and Access Control Andrew McNab, University of Manchester

Grid Security work in 2004 Andrew McNab Grid Security Research Fellow University of Manchester.

Security Middleware 3 June 2004 Security Middleware Current Status – GridSite deployments – Architecture GridPP2 – Web services.

1 AHM, 2–4 Sept 2003 e-Science Centre GRID Authorization Framework for CCLRC Data Portal Ananta Manandhar.

The GridPP DIRAC project DIRAC for non-LHC communities.

Security Middleware Andrew McNab University of Manchester.

Andrew McNab - HTTP/HTTPS extensions HTTP/HTTPS as Grid data transport 6 March 2003 Andrew McNab, University of Manchester

Ákos FROHNER – DataGrid Security n° 1 Security Group TODO

The GridPP DIRAC project DIRAC for non-LHC communities.

DataGrid Security Wrapup Linda Cornwall 4 th March 2004.

CERN IT Department CH-1211 Geneva 23 Switzerland t OIS Operating Systems & Information Services CERN IT Department CH-1211 Geneva 23 Switzerland.

Overview of the New Security Model Akos Frohner (CERN) WP8 Meeting VI DataGRID Conference Barcelone, May 2003.

Andrew McNabSlashGrid/GFS BOF, GGF9, 7 Oct 2003Slide 1 SlashGrid = “/grid” Andrew McNab High Energy Physics University of Manchester

GridSite status Andrew McNab University of Manchester.

Third Party Transfers & Attribute URI ideas

Shiv Kaushal, University of Manchester

Presentation transcript:

Grid Security work in 2006 Andrew McNab Grid Security Research Fellow University of Manchester

21 December 2006A.McNab – Grid Security December 2005 Security Group had started GridPP2 and JISC funded work GridSite had been taken up by several HEP / Grid projects for managing web pages GridSiteWiki in use by GridPP (New Scientist mention etc) Big push was still to get GridSite into “programmatic” use. GridSite web service hosting and delegation taken up by EGEE Workload Management htcp bulk file transfers used by EGEE WMS Had designed SiteCast file location system

21 December 2006A.McNab – Grid Security GridSite ● GridSite is our key piece of grid security technology ● Adds support for grid security “objects” to Apache web server ● Identity certificates and GSI proxies ● VOMS attribute certificates for group membership ● GACL policy language ● Credentials from Shibboleth ● Allows Apache to host Web Services for Grids. ● Library functions can be reused in other services – including GridSite proxy delegation used by EGEE

21 December 2006A.McNab – Grid Security “New for 2006” EGEE File Transfer System has taken up GridSite delegation protocol and library for C/C++ components SlashGrid resurrected and rewritten – provides an HTTP(S) network filesystem, with the option to use multicast to find replicas of files. With Joseph, Shibboleth added to credentials framework – Distributed password-based authentication – NIST Level of Assurance added to policy language Support for access control for 3 rd party virtual “websites” – eg the Subversion version control system

21 December 2006A.McNab – Grid Security Summary Continue to support GridPP website and Wiki – Also used by other Grid websites, and NGS Wiki Continue to track agreed changes in delegation protocol, VOMS attributes etc and update library in response EGEE FTS has adopted GridSite components – WMS continues to use GridSite to host services SlashGrid bulk file storage system produced and being finalised Shibboleth support added to GridSite framework – for when JISC uses Shibboleth to replace ATHENS