1. E-Science Education Workshop, 1-2 Nov 2004 Teaching Grid Computing Dr Richard Sinnott Technical Director National e-Science Centre ||| Deputy Director Technical Bioinformatics Research Centre University of Glasgow ros@dcs.gla.ac.uk

2. E-Science Education Workshop, 1-2 Nov 2004 Overview Grid Computing module Student backgrounds Syllabus Review of DyVOSE project Brief summary of technical approach Plans for the future

3. E-Science Education Workshop, 1-2 Nov 2004 Grid Computing module Part of advanced MSc at Glasgow Started teaching on 30 th September Due to complete on 2 nd December Involves 20 lectures, 10 tutorials, 3 problem sets, 1 large programming assignment Taught by Richard Sinnott (NeSC, Course Director), Colin Perkins (DCS), John Watt (NeSC, DyVOSE researcher) 1 lecture by Seamus Ross (DCC) 1 lecture by David Fergusson (EGEE training team)

4. E-Science Education Workshop, 1-2 Nov 2004 Student Backgrounds Students UG4 MSci (UG5) Advanced MSc  First lecture had 50 students, now have 16 signed up for module Various pre-requisites in taking module Based on Glasgow course structures  DAS, DBIT, AC4, … Additional materials developed for students without necessary background XML, XML Schema, WSDL, …  Not planned for originally…

5. E-Science Education Workshop, 1-2 Nov 2004 Module Outline Week 1Lecture 1Introduction to Grid ComputingColin Perkins Lecture 2Scalability and HeterogeneityColin Perkins Week 2Tutorial 1Discussion of Seminal Grid PapersColin Perkins Lecture 3Open Standards and ArchitecturesRichard Sinnott Lecture 4Implementations of the Grid ArchitectureJohn Watt Week 3Lecture 5Resource Discovery/Information ServicesJohn Watt Lecture 6Web ServicesRichard Sinnott Lecture 7Technologies for Building GridsDavid Fergusson Week 4Tutorial 2Exploring Web Services Technologies with GT3John Watt Lecture 8Grid Security ConceptsRichard Sinnott Lecture 9Virtual OrganizationsRichard Sinnott Week 5Tutorial 3Exploring Web Services Technologies with GT3John Watt Lecture 10Security in PracticeJohn Watt Tutorial 4Lab work and Discussion of Grid SecurityRichard Sinnott Week 6Lecture 11Job Scheduling and Management - PracticeColin Perkins Tutorial 5Discussion of Job Scheduling PapersColin Perkins Lecture 12Workflow ManagementJohn Watt Taught today

6. E-Science Education Workshop, 1-2 Nov 2004 *National Digital Curation Centre Module Outline Week 7Lecture 13Data Access, Integration and ManagementJohn Watt Lecture 14Data Provenance and CurationSeamus Ross* Tutorial 6Discussion of Data Management/ProvenanceRichard Sinnott Week 8Lecture 15Data TransferColin Perkins Lecture 16Peer-to-Peer CommunicationColin Perkins Tutorial 7Discussion of Networking PapersColin Perkins Week 9Lecture 17Tools for CollaborationColin Perkins Tutorial 8Discussion on the Future of Grid ComputingRichard Sinnott Lecture 18The Future of Grid ComputingRichard Sinnott Week 10Lecture 19Sample ApplicationsRichard Sinnott Lecture 20Review of Major ConceptsAll Tutorial 9Q & AAll

7. E-Science Education Workshop, 1-2 Nov 2004 Timetable Week beginning…Monday 12:00-13:00Thursday 14:00-15:00Friday 09:00-10:00 27 SeptemberLecture 1Lecture 2 4 OctoberTutorial 1Lecture 3Lecture 4 11 OctoberLecture 5Lecture 6Lecture 7 18 OctoberTutorial 2Lecture 8Lecture 9 25 OctoberTutorial 3Lecture 10Tutorial 4 1 NovemberLecture 11Tutorial 5Lecture 12 8 NovemberLecture 13Lecture 14Tutorial 6 15 NovemberLecture 15Lecture 16Tutorial 7 22 NovemberLecture 17Tutorial 8Lecture 18 29 NovemberLecture 19Lecture 20Tutorial 9

8. E-Science Education Workshop, 1-2 Nov 2004 DyVOSE Project Participants Dynamic Virtual Organisations in e-Science Education (DyVOSE) team Principal Investigators  Dr Richard Sinnott (NeSC Glasgow)  Prof David Chadwick (Salford) Developers  Dr John Watt (NeSC Glasgow)  Dr Sassa Otenko (Salford)  Mr Tuan Anh Nguyen (Salford) Other Key People Involved  Dr David Berry (NeSC Edinburgh)  Dr Sandy Shaw (EDINA)

9. E-Science Education Workshop, 1-2 Nov 2004 Dynamic Virtual Organisations for e-Science Education (DyVOSE) project Two year project started 1 st May 2004 funded by JISC Exploring advanced authorisation infrastructures for security in context of education  University of Salford provide authorisation software (PERMIS) and security expertise  Applied in Grid Computing module part of advanced MSc at the University of Glasgow –Will provide insight into rolling out authorisation infrastructures/Grid to the masses –Exploration of current state of the art in authorisation infrastructures –Second phase of work will involve NeSC Edinburgh/EDINA –Extensions to the existing PERMIS infrastructure to provide dynamic delegation of authority and recognition of authority DyVOSE Overview

10. E-Science Education Workshop, 1-2 Nov 2004 Phase 1 Looking at applying existing PERMIS technology to establish static Privilege Management Infrastructure at GU DyVOSE Workplan ScotGrid Authorisation decisions Authorisation checks PERMIS based authorisation Education VOpolicies GU Condor pool Other (known!) Grid resources

11. E-Science Education Workshop, 1-2 Nov 2004 Phase 1 Deliverables D1.1 Design of Educational Case Studies D1.2 Installation of Software Infrastructure for Static Delegation Based PMI D1.3 Detailed Design for Dynamic Delegation and Recognition of Authority Development of course material  Major effort for first time… DyVOSE Phase 1

12. E-Science Education Workshop, 1-2 Nov 2004 Current PERMIS based PMI approach PERMIS allows to Define roles for who can do what on what  Policy = { Role x Target x Action } –Can user X invoke service Y and access or change data Z? »Policies created with PERMIS PolicyEditor (output is XML file)

13. E-Science Education Workshop, 1-2 Nov 2004 PERMIS based Authorisation

14. E-Science Education Workshop, 1-2 Nov 2004 PERMIS based Authorisation...ctd PERMIS Privilege Allocator then used to associate roles with specific users  Signed policies are stored as attribute certificates in LDAP server Exploiting the GGF AuthZ specification  Generic way to authorise access to Grid services using SAML callouts –Based on GT3.3 – PERMIS »Grid service (WSDD) has policy information associated with it »DN of clients, target and actions checked when attempts made to invoke services  BRIDGES and DyVOSE only projects exploiting this API right now (Von Welch at AHM 2004)

15. E-Science Education Workshop, 1-2 Nov 2004 Explorations in Course Students applying Policy Editor to develop security policy for use in their assignment Sorting/searching “works of Shakespeare” … run on single PC, … using training lab Condor pool, … * as GT3.3/Condor service, … as GT3.3 service using GSI,  To see how authorisation at service level achieved –Service should be accessible by themselves and lecturing staff only … using * for GT3.3-PERMIS authorised service  To see how authorisation at method level achieved –Students split into groups (Gp1, Gp2) »Sort method available to their group and lecturers only »Search method available to all Performance aspects investigated throughout…

16. E-Science Education Workshop, 1-2 Nov 2004 Phase 2  D2.1 Report on Practical Experiences and Best Practices in Static Delegation Based PMI  D2.2 Software implementing Dynamic Delegation and Authority Recognition in PERMIS Phase 3  D3.1 User Manuals and Administrator Guides on Using and Setting up and Managing Dynamic Delegation Infrastructures  D3.2 Report on Practical Experiences in Using Dynamic Delegation Infrastructures as Part of e-Science Education  D 3.3 NMI release of PERMIS that supports dynamic Delegation and Recognition of Authority DyVOSE Phase 2 and 3

17. E-Science Education Workshop, 1-2 Nov 2004 DyVOSE Phase 2/3 ScotGrid PERMIS based Authorisation checks/decisions Glasgow Education VO policies Condor pool Edinburgh Education VO policies Shibboleth Blue Dwarf GlasgowEdinburgh Dynamically established VO resources/users Delegated VO policies

18. E-Science Education Workshop, 1-2 Nov 2004 Majority of lecture materials completed Infrastructure established in NeSC Glasgow training laboratory Initial design of dynamic PMI complete Input to wider UK security requirements document (Being drafted by Howard Chivers) Work Progress

19. E-Science Education Workshop, 1-2 Nov 2004 Long time wrestling with GT3.3-PERMIS integration Some delays due to version issues with GT3.3  Also required some debugging of GT3.3 (commenting out code) Continued feedback on PERMIS tools  Policy editor refinements –Numerous discussions/meetings with Salford team on sorting out PERMIS-GT3.3 issues Certificate dependencies in using PERMIS  Expects certificates created using openSSL Work Progress …ctd

20. E-Science Education Workshop, 1-2 Nov 2004 Work Progress …ctd Web site established http://www.nesc.ac.uk/hub/projects/dyvose Dissemination Poster at JISC meeting in Brighton Poster at AHM 2004 in Nottingham Paper in preparation to European Grid Conference, Amsterdam Course materials to be made available to those interested Some already provided to EGEE training team

21. E-Science Education Workshop, 1-2 Nov 2004 Future plans Feed experiences into wider Grid community (ETF AAA work) Continued input to wider security requirements/scenario documents (and to STF?) Applying experiences in other projects (VOTES, BRIDGES) Conduit for information from JISC Core Middleware projects and wider UK e-Science activities It would be nice to think that the majority of the lecture materials had a life of over 1 year Tried to achieve in course design  not focused on Grid technologies explicitly, more on underlying principles/challenges Inevitable that refinements needed though…  Community needs to address this

22. E-Science Education Workshop, 1-2 Nov 2004 Questions?