1. R-GMA Security Stephen Hicks UK Cluster Security
Middleware Security Group Meeting, 15/10/04
R-GMA Security Stephen Hicks UK Cluster Security
EGEE is a project funded by the European Union under contract IST

2. Contents Current progress Obstacles Priorities
Middleware Security Group Meeting, 15/10/

3. Current progress Time spent on Not much on Security in R-GMA API
User interfaces to security in R-GMA
General ideas in R-GMA
Not much on
Design/implementation of R-GMA specific security
Integration with security infrastructure (Web Services, VOMS etc)
Security in R-GMA API
Defined access rules for R-GMA tables (based on views).
Decided upon use of multiple VO’s in Producers and Consumers.
Currently setting up basic Web Service infrastructure
No security yet
Middleware Security Group Meeting, 15/10/

4. Obstacles Main obstacle has been complexity of R-GMA Design
Interfaces to security infrastructure (VOMS, etc.)
Multiple VO’s
Delegation
Implementation
Streaming using Java NIO
JSSE in JDK1.5
Middleware Security Group Meeting, 15/10/

5. Priorities Finalise authorization rules
Do they need to be in a common format?
Understand interfaces to the security infrastructure for detailed authorization design.
Understand use of multiple VO’s
Can hierarchies exist?
Understand the delegation portType
Does it meet our requirements?
Is delegation vital for R-GMA to be secure?
WS security code for Java, C, C++ and Python
Authentication sooner rather than later
May not be installed without authentication
Guidance on what libraries are required and how to integrate them
Security code for Java NIO
Middleware Security Group Meeting, 15/10/