1. 1 Egrid portal Stefano Cozzini and Angelo Leto

2. 2 Egrid portal Based on P-GRADE Portal 2.3 –LCG-2 middleware support: broker, CEs, SEs, BDII –MyProxy support –Workflow manager portlet Extended for Egrid user needs by Egrid/ICTP: –Direct private key upload into MyProxy using GSI API –Data management portlet

3. 3 Direct private key upload into MyProxy: why? Problem: –Private key needs protection –Do not expose it to third parties (portal server provider) Solution: –Send the private key from the client directly to the MyProxy server using the MyProxy API –Implement the cert. upload component as a Java Web Start application running on client side

4. 4 Usage of the private key upload application 1/6 Userename: Identifies the user key on the MyProxy server, if this field is left blank the subject of the certificate is used instead

5. 5 CredentialName: Identifies the credential name, the user can upload more than one credential. This field can be left blank. Usage of the private key upload application 2/6

6. 6 Credential Lifetime: The lifetime of the credential on the MyProxy server (in seconds). Usage of the private key upload application 3/6

7. 7 Passphrase: The passphrase for the user private key Usage of the private key upload application 4/6

8. 8 MyProxy Password: The password to retrieve the proxy Usage of the private key upload application 5/6

9. 9 PutMyProxy: Store the credentials on MyProxy server Usage of the private key upload application 6/6 InfoMyProxy: Retrieve and show information on previously uploaded credentials Destroy MyProxy: Remove the credentials from a MyProxy Server

10. 10 Data management Egrid File Browser Portlet gives a transparent access to the grid storage space. The data management portlet is based on ELFI which is a FUSE implementation using LCG data management API (RFIO, LFC) An Elfi instance is mounted in the private space of each user on the portal

11. 11 Portlet Functionality: The file browser portlet allows the user to browse the grid storage space and it provides also a set of effective tools for data management. The ELFI root directory contains two types of objects 1)LFC: it represents the LCG logical file catalog. This directory shows all the logical files names registered. 2) The storage elements: are identified by their hostnames and show the same directory tree present in LFC.

12. 12 Portlet Functionality: Elfi Root Directory LFC directory: The Logical File Catalog Directory. SE directories: The other directories represent the storage elements of the GRID

13. 13 Upload a file The upload function allows to put a file from the user’s local file system (where the web browser is running) to the grid storage and automatically register it into the LFC. If the upload is done to the LFC directory, ELFI automatically chooses the SE where to physically store the file. Otherwise the file is stored on the specifically chosen SE.

14. 14 Portlet Functionality: Upload

15. 15 Download It is possible to download a file from the Grid storage system to the user’s local machine LFC takes care automatically about which SE will provide the actual file( in case of different replicas)

16. 16 Portlet Functionality: Download

17. 17 Remove When a file is removed from the LFC directory all related replicas are deleted. When a file is removed from a specific SE the other physical files are not removed. When the last replica is removed from a SE the logical file name gets also deleted.

18. 18 Move/Copy It is possible to move/copy a file from one directory to another using both areas of the portlet’s split panel. Choose the source file from one of the panels, choose the destination in the other panel, and press the Move/Copy button.

19. 19 Portlet Functionality: View: Display a file in grid storage Upload: Upload a local file to grid storage Download: Download a file from grid storage to the user local space Delete: Remove the selected file

20. 20 View View: Is possible to display on screen and edit online the contents of a file without first downloading it on the portal.

21. 21 Thanks!