1. Delegation methods in EMI
Delegation methods in EMI
Aleksandr Konstantinov (University of Oslo)

2. Delegation methods in EMI
Outline
Definition
Consumers
Conclusions
22/11/2010
Delegation methods in EMI 2

3. Delegation definition
Full impersonation
X.509 proxy – RFC 3820
Intermediaries are anonymous
Acceptable by most EMI services
Explicit delegation
SAML token
Trackable and limited
Currently in use by UNICORE only
22/11/2010
Delegation methods in EMI 3

4. Delegation methods in EMI
Delegation consumers
SRM (dCache and StoRM)
Currently uses GSI
Needs new delegation procedure due to GSI being dropped.
Work in progress
22/11/2010
Delegation methods in EMI 4

5. Delegation consumers (cont.)
Execution services
CREAM (gLite)
GridSite WS interface – 2 steps X.509 delegation wrapped into SOAP
UNICORE
SAML
A-REX (ARC)
GridSite-like WS interface – same with last step merged with job submission
22/11/2010
Delegation methods in EMI
Delegation methods in EMI 5

6. Delegation consumers (cont.)
Execution services
Common Execution Service interface effort
Includes delegation part
Work in progress
22/11/2010
Delegation methods in EMI
Delegation methods in EMI 6

7. Delegation consumers (cont.)
Delegation services
GridSite from CESNET
Is it service or interface?
MyProxy
Not EMI component but part of dependencies
Own delegation protocol
22/11/2010
Delegation methods in EMI
Delegation methods in EMI 7

8. Conclusions
There is work going on to achieve similar functionality in different fields
Danger of duplication/triplication
Effort is needed to have unified solution
Or just give up and forget
22/11/2010
Delegation methods in EMI
Delegation methods in EMI 8

9. Delegation methods in EMI
Thank you
EMI is partially funded by the European Commission under Grant Agreement INFSO-RI
22/11/2010
Delegation methods in EMI 9