FP6−2004−Infrastructures−6-SSA E-infrastructure shared between Europe and Latin America Wrote by Jorge Gomes and presented by Bruno Silva Task 2.2 Status Certification authorities and Virtual organizations Jorge Gomes LIP -Lab de Instrumentação e Física Experimental de Partículas EELA Workshop June 2006

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Certification Authorities - Plan Resuming the plan for certification authorities support in EELA –Establish certification authorities in as many EELA countries as possible  Establish an EELA catchall CA for countries without a CA  Obtain international IGTF recognition for these CAs through the TAGPMA  Use the French CNRS catchall CA to obtain certificates until the EELA CAs deployment is complete  European partners obtain the certificates from their national CAs

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, CNRS CA Registration Authorities In order to obtain certificates from the French CNRS CA it is necessary to establish Registration Authorities (RA) of this CA in EELA organizations –The RAs perform the verification and authentication of certificate requests and authorize them –The following RAs have been established:  UFF – Brazil  UFRJ – Brazil  ICN-UNAM – Mexico  ULA – Venezuela  UDEC – Chile  UTFSM – Chile  REUNATEC – Chile

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, CNRS CA Registration Authorities To request a certificate from the CNRS CA: –identify your nearest Registration Authority  use the CNRS CA web interface to make a request:  The web interface is available at:  This information is also available at the task 2.2 web pages at:

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Certification Authorities EELA has been presented to IGTF during the EUgridPMA meeting held in Vienna and again briefly introduced during the Budapeste meeting. –The IGTF accreditation process will be performed within the TAGPMA  This PMA was fully stopped until the EELA request for recognition of new CAs was performed EELA is now an official member of TAGPMA in the quality of relying party  The first face-to-face meeting of TAGPMA was held in Rio de Janeiro and organized by RNP The future EELA CA managers, and several WP2 members participated in the Rio meeting The future EELA CAs were presented during the meeting

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Certification Authorities The process is being more difficult than expected and certainly with more difficulties than when conducted by EUgridPMA –Procedural objections have been used to delay the accreditation –Some reviewers have been quite slow in providing their input –We must confess some disappointment in this regard –However we still expect to achieve full accreditation of most CAs during the next face-to-face meeting to be held in Canada:  Financial support will be necessary to support the travelling costs of the CA managers to attend this meeting –Currently the CAs are improving the CP/CPSs and working in the actual deployment of the CA infrastructures

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Certification Authorities Overall we can say than the outcome of the Brazil meeting was positive to EELA –Several CP/CPS we considered quite good –Anyway even if approved during the Brazil meeting we would have to wait for the final deployment of the CAs for then to become fully operational  Which would take several months –Until the Brazil F2F meeting we focused in writing the CP/CPS documents that describe the CAs operation policies and practices  Most fundamental document for the CA accreditation and review –RedIris is providing their own CA management software solution to EELA and it is being adopted by some CAs

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Candidate CAs CAs under deployment and that can obtain TAGPMA approval during the next meeting: –Argentina  UNLP - Universidad Nacional de La Plata Javier Diaz –Brazil  UFF – Universidade Federal Fluminense Vinod Rebello –EELA Catchall  UFF – Universidade Federal Fluminense Vinod Rebello –Chile  REUNA – Red Universitaria Nacional Juan Carlos Martínez –México  UNAM – Universidad Nacional Autónoma de México Juan Carlos Guel

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Candidate CAs What about the other initial candidate CAs :  Cuba CUBAENERGIA - Centro de Gestión de la Información y Desarrollo de la Energía oLACK OF ADEQUATE CONDITIONS TO OPERATE THE SERVICE  Peru SENAMHI – Servicio Nacional de Meteorología e Hidrología del Perú oNEVER SUBMITTED A CP/CPS  Venezuela ULA – Universidad de los Andes oA CP/CPS WAS SUBMITTED FOR INTERVAL REVIEW WITHIN EELA oMAJOR PROBLEMS WERE DETECTED AND REPORTED BACK oWAITING FOR A NEWER CP/CPS

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Authorization A virtual organizations authorization system based on VOMS was deployed and is in operation –The server is supporting two EELA VOs:  EELA – for users  EDTEAM – site managers and infrastructure management team –More VOs can be created if necessary –Many problems have been affecting the stability of the VOMS service  Several bugs affecting the service  Several upgrades to correct the issues  Expecting that the last upgrade to the gLite 3.0 VOMS will solve the most important problems affecting stability  Still at CERN VOMS servers are automatically rebooted every night

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Authorization The VOMS server is hosted and operated by LIP in Lisbon – Portugal: –voms.lip.pt –The URLs for the VOs web user interface:   –From these URLs the user registration forms can be reached:   –Ports for the VO services  eela ->  edteam -> –Support contact:  –More information at:

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Authorization Due to all stability problems a backup/snapshot system was deployed to get database information and keep versions of the database information for recovery –Currently developing a statistics/metrics system to provide metrics on VOMS related parameters  Registered users / Vo  Registered users vs active users  Proxy generations / Vo /domain  Etc –Plan to deploy a second VOMS server in LA and implement a database replication  Both servers would be configured on worker nodes  Fault tolerance

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, VO specific services Currently an LFC (LHC File Catalogue) has been deployed at LIP for the EELA VOs –lfc01.lip.pt Some problems with previous version that wasn’t VOMS enabled.

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, User interfaces Currently a user interface server is being installed at REUNA to provide access to EELA users. –Mainly interesting for users that don’t have a local user interface and that are giving the first steps in the grid –Also interesting when the connectivity of the user site is not enough to transfer data –Plan to install more user interfaces operate as core services in other LA countries –The European partners already have this kind of service –At LIP a user interface is also available for supporting new users

E-infrastructure shared between Europe and Latin America FP6−2004−Infrastructures−6-SSA Task 2.2 Status Itacuruçá, EELA WS, Thank you! Contacts at : or