1. John Gordon EDG Conference Barcelona, May 2003
WP5 Progress Report
John Gordon
EDG Conference
Barcelona, May 2003

2. Outline Status of release 2.0 Testing and support structures
Priorities up to TB3
Open issues

3. Status of release 2.0 Core SE Software CLI Web Service
Interfaces to various MSS
CLI
Built from C programme creating and transferring XML to core via Apache
Web Service
Developed using AXIS and Tomcat
Now using WP2 build system
Java API, CLI, demo Reptor interface
getSEcosts for Optor
Prototype via MDS, now a webservice
GLUE Storage Schema information providers

4. Release 2.0 SRM-like API Layered beneath Replica Manager
Needs more work before it will interwork with other implementations of SRM
Layered beneath Replica Manager
API and CLI can be used directly by users
Not a simple interface
eg create/getTURL/copy/commit cache/getTURL/copy/abandon
Wrapped by rm-commands

5. Release 2.0 MSS supported Coming soon Started discussions with
Castor, RAL DataStore, Disk
Coming soon
HPSS via RFIO (CC-IN2P3)
Started discussions with
ESA/ESRIN, SARA, (INSA/WP10)
Ready to talk to other Castor sites

6. Testing and support structures
Handlers unit tested
Test harness for individual functions
Uses curl to send sample XML without client
Webservice test suite for API
Dedicated test SEs at CERN (Castor), RAL(ADS)
Limited performance tests
Create=0.3sec using CLI on modest PC
Total transaction time dominated by data transfer
Need stress tests

7. Testing and support structures
Q staff months delivered to WP5
~ 7FTE of which 2 working on Castor

8. WP5 roles WP Manager ATF Iteam - 2 people now QAG Internal roles
PTB, WPM, emergency meetings, crisis meetings, emergency crisis meetings.
ATF
Iteam - 2 people now
Packaging, configuration, CVS, autobuild
QAG
Internal roles
Documentation, maintaining web site
Not much left for coding or support from 5 FTE

9. Testing and support structures
Q staff months delivered to WP5
~ 7FTE of which 2 working on Castor
Support structure is
Owen assigns Bugzilla reports
Individuals support an area of SE
Security (Jens), Handlers (Regina), Core (Owen) Information providers (Regina), webservice (Glen), API (Jens)
No guarantee we have a second person

10. Priorities up to TB3 Address some deficiencies now Rest for TB3.0
Would like release 2.1 for LCG1
Rest for TB3.0

11. TB2.1 Secure Mode Improve error handling RFIO TURL Non-blocking calls
Generate request_id and GetStatus
SRM v1.1 single file use
For LCG1
Native data transfer
Eg GridFTP support in Castor allows SE to return a TURL that points direct to Castor

12. TB3.0
Security
Fuller SRM
File instance metadata
Required for pinning

13. Security
Webservice will use edg-trust-manager (+authorisation manager)
Gives access to user DN now
…and VOMS credentials later
Implement file and transaction level ACLs
Can this user access this file in this mode?
Can this user perform this action?
Intend to use GACL

14. GACL From Andrew McNab V0.1.5 supports VOMS credentials in ACLs
ACL can use DN, groups, roles
Already have a hook in file metadata for ACL/file
Implemented a prototype handler with GACL library but it didn’t make TB2.0 cut
Just add check_ACL handler to sequence of handlers called for each function
Initial step to implement checking only
sysadmins can add ACLs to VO tree by hand (or rpm)
Later add API to manipulate ACLs

15. Open issues Webservice only? SRMcopy requires proxy delegation.
Data transfer? Posix I/O?
SRMcopy requires proxy delegation.
Can we do this?
How do we replicate ACLs with files?
Where do we get default ACLs for a VO?
What is the trust tree for ACLs?
Ie who do we allow to define ACLs for a VO?
When does the emergency stop?