Jan 10, 20091/16 VO Services Project – Stakeholders’ Meeting Gabriele Garzoglio VO Services Project Stakeholders’ Meeting Jan 10, 2009 Gabriele Garzoglio Computing Division, Fermilab Overview AuthZ Interop: packaging and ITB testing VOMRS / VOMS-admin convergence Closing out activities for the VO Services project

Jan 10, 20092/16 VO Services Project – Stakeholders’ Meeting Gabriele Garzoglio ComponentTest PDP Component Old GUMS New GUMS SCAS WS-Gatekeeper (Out of Scope) Test call-out component NOYES Run job w/o Delegation or File Transfer NOYES out of scope Run job with Delegation and File Transfer NOYES out of scope SCAS / PRIMA cmd line tool (OOS) AuthZ call via Legacy protocol call-outYES NO AuthZ call via XACML protocol call-outNOYES Pre-WS Gatekeeper (VTB-TESTED) Run job. AuthZ via Legacy protocolYES NO Run job. AuthZ via XACML protocolNOYES GridFTP (VTB-TESTED) Transfer file. AuthZ via Legacy protocol YES NO Transfer file. AuthZ via XACML protocol NOYES gLExec (REL. Jan 20) Run pilot job. AuthZ via Legacy protocol YES NO Run pilot job. AuthZ via XACML protocol NOYES SRM/dCache gPlazma (REL. Jan 20) Transfer file. AuthZ via Legacy protocol YES NO Transfer file. AuthZ via XACML protocol NOYES

Jan 10, 20093/16 VO Services Project – Stakeholders’ Meeting L&L Legenda: Component or dependency foreseen by 01/2010 Cmpnt Component foreseen dropped by 01/2010 PRIMA Pre-WS GK GUMS SAML1 XACML2 SCAS XACML2 SAZ Internal XACML2 GridFTPgLExecWS GK v4.2WS GK v4.0SRM/dCache L&L SAML1 lib XACML2 gLite lib GT4.2 Security PRIMA WS SAML1 lib PRIMA SAML1 lib XACML2 gLite lib PRIMA SAML1 lib XACML2 gLite lib gPlazma SAML1 priv. lib XACML2 priv. lib SAZ Clnt SAZ Clnt SAZ Clnt SAZ Clnt XACML2 GT4.2 PEP Authorization Interoperability: OSG Middleware Depl. L&L To SAZ clnts WN CE SE

Jan 10, 20094/16 VO Services Project – Stakeholders’ Meeting VOMRS / VOMS-admin convergence Status of convergence discussed on Dec 9, 2008 Presented complete set of features Survey with VO Admins shows that all features are used Features fall under 2 overlapping categories: –Required by JSPG –Required by VO Admins VOMS-Admin development team will provide JSPG- required features soon (~ Mar ‘09) Other features may be delayed up until Spring 2010 Gabriele Garzoglio

Jan 10, 20095/16 VO Services Project – Stakeholders’ Meeting Closing out activities (1) After the next OSG v1.0 update (Feb 09), gLExec will be managed by the GlideIn WMS project. The projects acknowledged the importance of ATLAS as well as CMS use cases. Gabriele Garzoglio will act as a contact person to redirect inquires to the appropriate component project and maintain a list of “small” requests. Mailing list will be maintained. Changes to the infrastructure as a whole are managed as independent projects. Testing with new request: “Study on throttling in VO Services”. Gabriele Garzoglio

Jan 10, 20096/16 VO Services Project – Stakeholders’ Meeting Closing out activities (2) These activities will become independent projects –GUMS (John H. / Jay P.) –Prima (Igor S. / Dave D.) Bringing in Dave D. as a backup –gLExec (Burt H. / Igor S. / Dave D.) –VO Policy / SVOPME (Gabriele G.) –VOM(R)S convergence (Tanya L.) –AuthZ RSV Validation Probes (Jay P.) Gabriele Garzoglio

Jan 10, 20097/16 VO Services Project – Stakeholders’ Meeting Conclusions AuthZ Interop is undergoing ITB testing. OSG v1.0 update planned for Feb 09. VOM(R)S convergence may face delays Closing out the project after OSG v1.0 update. Gabriele Garzoglio

Jan 10, 20098/16 VO Services Project – Stakeholders’ Meeting Gabriele Garzoglio Architecture (the OSG case) AuthZ Components Legend VO Management Services Grid Site GUMS Site Services SAZ CE Gatekeeper Prima Is Auth? Yes / No SE SRM gPlazma / Prima ID Mapping? Yes / No + UserName VO Services VOMRSVOMS synch register get voms-proxy Submit request with voms-proxy synch WN gLExec Prima Storage Batch System Submit Pilot OR Job (UID/GID) Access Data (UID/GID) 8 8 Schedule Pilot OR Job 9 Pilot SU Job (UID/GID) 10 VO A Common Protocol for OSG and EGEE integrated with the GT