Authorization and account management in the Open Science Grid

Lorch, Markus; Kafura, Dennis; Fisk, I.; Keahey, K.; Carcassi, Gabriele; Freeman, Tim; Peremutov, T.; Rana, Abhishek

doi:10.1109/grid.2005.1542719

Cited by 21 publications

(14 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…On OSG resources, gLExec is configured to interface to the GUMS [7] authorization and mapping system, and is using a OSG-specific monitoring process that is launched at user job startup. The monitoring process logs both the information involved in the authorization and the information …”

Section: Accounting and Auditing Information Provided By Glexec Monitmentioning

confidence: 99%

Pilot job accounting and auditing in Open Science Grid

Sfiligoi

Quinn

Green

et al. 2008

2008 9th IEEE/ACM International Conference on Grid Computing

View full text Add to dashboard Cite

show abstract

Section: Accounting and Auditing Information Provided By Glexec Monitmentioning

confidence: 99%

Pilot job accounting and auditing in Open Science Grid

Sfiligoi

Quinn

Green

et al. 2008

2008 9th IEEE/ACM International Conference on Grid Computing

View full text Add to dashboard Cite

show abstract

“…Previous VO research focuses on only part of the above functionality, such as CAS [12]/VOMS [1] for VO management, VOMRS [2] for user registration, Permis [5] for authorization, and GUMS [10] for user registration and user mapping. However, there is no commonly accepted VO functionality for all VO research, and none of them provides all the above functions.…”

Section: Introductionmentioning

confidence: 99%

A layered Virtual Organization architecture for grid

et al. 2010

View full text Add to dashboard Cite

Virtual Organizations (VOs) are dynamic collections of individuals, institutions, and resources. VOs are widely accepted in grid and other distributed computing environments. Previous VO research produces several separate tools to provide part of the functionality including user registration, user mapping, authentication, authorization, and VO management. However, none of the work covers all the functionality or focuses on non-functional properties. This paper formally defines virtual organization in terms of three functional requirements and four non-functional properties. The functional requirements are user management, resource management, and VO management. The non-functional properties are decentralization, flexibility, simplicity, and efficiency. The problem is formulated as designing a VO architecture to satisfy the functional requirements and achieve the non-functional properties at the same time.This paper presents a layered architecture with GNode abstraction to construct Agora, an implementation of VOs. In Agora architecture, all the entities including users, resources, and agoras are abstracted as GNodes. A naming layer is constructed to manage these GNodes. At the top, there is a logic layer implementing all Agora functionality based on GNode and managing the physical layer resources. 334 Y. Zou et al.The Agora architecture has been implemented in the Vega Grid Operating System. Agora is deployed in the China National Grid and other grid platforms with more than 27 sites and 19 applications. The evaluations through real applications, high performance computing VO scenarios, and micro benchmarks show that the Agora architecture provides complete VO functionality, while achieving decentralization, flexibility, simplicity, and efficiency.

show abstract

“…For those resource gateways that do not natively implement the Authorization Interoperability profile, the project offers a PEP call-out module for computing gateways, called PRIMA [13], and a call-out module and server for storage gateways, called gPlazma [3]. In addition, the project provides a PDP implementation, called GUMS [13].…”

Section: Osg Implementation Of the Security Modelmentioning

confidence: 99%

“…Before the Authorization Interoperability activity, the communication protocol was a modified version of the SAML 1.0 Authorization Decision Query and Statement standard [13]. Currently, both PRIMA and GUMS support the new Authorization Interoperability protocol.…”

Section: Osg Implementation Of the Security Modelmentioning

confidence: 99%

“…The activity limited its scope to the EGEE and OSG security model, whereby identities are described via X509 certificates and identity attributes via VOMS [9] attribute certificates. It also targeted a limited set of authorization systems for implementation, namely, the Grid User Mapping Service (GUMS) [13] for OSG and the Site Central Authorization Service (SCAS) [27] for EGEE.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation