1. 7-Mar-01D.P.Kelsey, User access, WP6, Amsterdam1 WP6: GRID mapfiles and Users access policy David Kelsey CLRC/RAL, UK d.p.kelsey@rl.ac.uk

2. 7-Mar-01D.P.Kelsey, User access, WP6, Amsterdam2 GRID mapfiles For Testbed 0 –Just the simple grid mapfile –No groups, roles, privs etc Maps X.509 certificate to a local user (uid, kerberos) Do we want to register individual users? How many? –Including signing of terms and conditions? –Who can use testbed resources? Or do we map to generic group accounts? –WP8/9/10 should specify what they need Tools for maintaining and distributing mapfiles? –Flat file? LDAP? Topic of general security group (not discussed yet)

3. 7-Mar-01D.P.Kelsey, User access, WP6, Amsterdam3 Discussion Concentrate on current issues, I.e. Testbed 0 How many users? How many groups? Who is allowed access to Testbed resources? –Everyone? –By prior negotiation? Map to individual accounts or groups? –Audit trail? Tools for maintaining/distributing mapfiles –Database of users? –Format of entries: Name, Institute, Expt, Group, Cert DN