1. 4 December 2002 Grid Resource Access Workshop, NeSC 1 Managing Access to Resources on the Grid David Boyd CLRC e-Science Centre d.r.s.boyd@rl.ac.uk http://www.e-science.clrc.ac.uk/

2. 4 December 2002 Grid Resource Access Workshop, NeSC 2 Background This is the third in a series of workshops at NeSC to address issues at the interface between Grid developers and computing service providers Making the Grid work in a Computing Service Environment –1 May 2002 UK Grid Firewalls Workshop –5 November 2002 Talks and reports from these are available on the NeSC web site http://www.nesc.ac.uk/ and follow the link to eSI events http://www.nesc.ac.uk/ We would like copies of todays talks for the same reason

3. 4 December 2002 Grid Resource Access Workshop, NeSC 3 Purpose of the workshop... to bring together those building Grid environments and those in the university IT community with responsibility for managing access to computing resources to review current work on authentication and authorisation and to identify practical workable solutions for use with the Grid

4. 4 December 2002 Grid Resource Access Workshop, NeSC 4 Programme 10:30Welcome and introduction to the workshopMalcolm Atkinson David Boyd 10:35Authentication for the UK e-Science GridAlistair Mills 11:00Digital Certificate Operation in a Complex EnvironmentMatthew Dovey 11:25Open Source Certificate AuthorityEd Carter 11:50Technologies for Information Environment SecurityAlan Ferguson/ Sandy Shaw 12:15Discussion 12:30Lunch 13:30Common Acceptable Use Conditions for the GridBrian Gilmore 13:55The Akenti authorisation systemAlan Robiette 14:20The Community Authorisation Service - CASSteven Newhouse 14:45Policy driven role-based access controlsDavid Chadwick - results of the EC PERMIS project 15:10Discussion 15:30Coffee/tea 15:50User account management in the DataGrid projectAndrew McNab 16:15Discussion and summing upPaul Jeffreys 16:30End of workshop

5. 4 December 2002 Grid Resource Access Workshop, NeSC 5 Some pointers to issues In the morning... authentication –how the e-Science programme issues digital certificates does your organisation have an RA yet? –3 projects just starting with JISC funding to evaluate various approaches to using digital certificates in universities are there parallels with issues in your organisation? In the afternoon... authorisation –user registration for Grid resources is it is practical to have a single set of acceptable use conditions? –3 systems offering authorisation services which might be useful to the Grid how implementable and workable are these? –a working process for mapping Grid users into local accounts would this be acceptable in your environment?

6. 4 December 2002 Grid Resource Access Workshop, NeSC 6 The access management matrix Agrees Wants Virtual Organisation Resource owner Users Resources Manages Knows Adapted from John Paschoud

7. 4 December 2002 Grid Resource Access Workshop, NeSC 7 The access management matrix Agrees Wants Virtual Organisation Resource owner Users Resources Manages Knows Adapted from John Paschoud