DGC Paris Spitfire A Relational DB Service for the Grid Leanne Guy Peter Z. Kunszt Gavin McCance William Bell European DataGrid Data Management CERN Database Group

DGC Paris Spitfire Architecture OracleDB2PostGresMySQL Atomic RDBMS is always consistent No local replication of data Role-based authorization XSQL Servlet as one access mode for ‘simple’ web access Web/Grid Services Paradigm –SOAP interfaces –JDBC interface to RDBMS Pluggability and extensibility OracleLayerDB2LayerPGLayerMyLayer Local Spitfire Layer Connecting Layer Global Spitfire Layer SOAP

DGC Paris The Local Layer Required from the local Site: Any JDBC-enabled RDBMS backend. (PostGreSQL, Oracle,..) Any Servlet Container. (Tomcat, Oracle Application Server, WebSphere…) SSL Provides: SOAP & WSDL interface Role-based Authorization Simple Persistency Expiration based on a timestamp

DGC Paris Local Layer Functionality DB Administration –Create Database –Delete Database –Create Table –Drop Table Role Administration –Create Role –Delete Role –Update Role DB Information –Quotas –Memory, Disk space –User Info –Schemata Core Functionality –Insert –Update –Delete –Select Timestamps –Set Table Timestamp –Set Row Timestamp Connections –Open Dedicated Connection –Close Connection

DGC Paris Planning Release 1.2 (end of March) Integrated XSQL-Spitfire : all security works XSQL version of a Replica MetaData Catalog –Schema is given –Roles are fixed –Queries are predefined –No SOAP, just XML over http Installation decoupled from Tomcat & MySQL SOAP interfaces designed and we have a basic understanding of the technology

DGC Paris Planning Release 1.3 (end of May) Alpha release of SOAP interface –Schema Management –User Management –Connection Management (PoolMan) Test-suite –designed –JUnit tests implemented Test-driven by Biology Applications, maybe by HEP- Atlas

DGC Paris Planning Release 1.4 (end of July) Beta1, all functionality available Security fully integrated Installation works with more than just Tomcat and MySQL Test-suite completely implemented Working Replication Metadata Catalog using this Beta –Some integration with replica manager Working Bio-App.

DGC Paris Planning Testbed 2 (end of September) Version 1.0: Full integration of all components More running applications

DGC Paris Security Mechanism Servlet Container SSLServletSocketFactory TrustManager Security Servlet Does user specify role? Map role to connection id Authorization Module HTTP + SSL Request + client certificate Yes Role Trusted CAs Is certificate signed by a trusted CA? No Has certificate been revoked? Revoked Certs repository Find default No Role repository Role ok? Connection mappings Translator Servlet RDBMS Request and connection ID Connection Pool