1. Viet Tran Institute of Informatics Slovakia
Useful grid services
Viet Tran
Institute of Informatics
Slovakia

2. Grid security infrastructure (GSI) GridFTP MDS4
Content
Grid security infrastructure (GSI)
Authentication and authorization framework
GridFTP
File transfer
MDS4
Monitoring and discovery
Medigrid meeting Bratislava March 10-11

3. Globus Toolkit 4
Medigrid meeting Bratislava March 10-11

4. Grid security infrastructure
Service provider must be protected from unauthorized access
Authentication: who is the user?
Authorization: Is he permitted to do it ?
Medigrid meeting Bratislava March 10-11

5. Certificates
A digital certificate is a digital document that certifies that a certain public key is owned by a particular user. This document is signed by a third party called the certificate authority (or CA).
Medigrid meeting Bratislava March 10-11

6. Authentication
When users want to access a grid service, they send their certificates (more accurately, proxy certificate) to the service
The service can check the sign and prove that the users are who they claim to be
Grid service
Client
Medigrid meeting Bratislava March 10-11

7. Authorization
Certificates only prove that who are the users (authentication)
Authorization methods
Gridmap
Authorization service
Medigrid meeting Bratislava March 10-11

8. Gridmap A list of authorized persons
Can be configured for each service individually
Client
Authorized: Peter, Borja, Bill
Grid service
Medigrid meeting Bratislava March 10-11

9. Gridmap Advantage: simplicity, easy to use
Disadvantage: difficult to manage for large numbers of services/users
Medigrid meeting Bratislava March 10-11

10. Authorization service
The service contacts to central authorization service to ask if the user can perform the action
Authorization service
Grid service
Client
Medigrid meeting Bratislava March 10-11

11. Delegation and single sign-on
The certificates can be used to delegate some tasks to do in behalf of the users
Once users have valid proxy certificates, they can use them to access all services (single sign-on)
Medigrid meeting Bratislava March 10-11

12. Grid security infrastructure
Authentication and authorization mechanism are automatically integrated into grid services
Simply turn on/off security options
Besides certificates, other authentication/authorization methods are also supported (username/password, Kerberos)
Medigrid meeting Bratislava March 10-11

13. Grid security infrastructure (GSI) GridFTP MDS4
Content
Grid security infrastructure (GSI)
Authentication and authorization framework
GridFTP
File transfer
MDS4
Monitoring and discovery
Medigrid meeting Bratislava March 10-11

14. GridFTP
File transfer protocol supported grid authentication and authorization mechanism
Use: from command-line or in scripts
globus-url-copy fromURL toURL
Example:
>globbus-url-copy
gsiftp://cluster.ui.sav.sk/home/viet/sourcefile
file:///tmp/destfile
Medigrid meeting Bratislava March 10-11

15. GridFTP Use: in Java code UrlCopy uc = new UrlCopy();
uc.setSourceUrl(from);
uc.setDestinationUrl(to);
uc.copy();
Medigrid meeting Bratislava March 10-11

16. Grid security infrastructure (GSI) GridFTP MDS4
Content
Grid security infrastructure (GSI)
Authentication and authorization framework
GridFTP
File transfer
MDS4
Monitoring and discovery
Medigrid meeting Bratislava March 10-11

17. Monitoring and discovery
Collect recent state information from registered Grid resources
Provide browser-based interfaces, command line tools, and Web service interfaces that allow users/machines to query and access the collected information
Medigrid meeting Bratislava March 10-11

18. MDS services
MDS-Index, which is the main component for collecting structured data from information sources and making the information available via a Web Services interface
MDS-Trigger, which passes this information to an executable (configured by the administrator), which may take an action such as sending
Medigrid meeting Bratislava March 10-11

19. Collecting information
Medigrid meeting Bratislava March 10-11

20. Publishing information
Medigrid meeting Bratislava March 10-11

21. Searching information
MDS provides interface for searching information in Index service (using XPath)
Using MDS, Grid services don’t have to use traditional UDDI register
Medigrid meeting Bratislava March 10-11

22. The full picture User interface level Collective level
Portal (JSR-168)
User interface level
Information service (MDS4)
Authorization service (CAS)
Workflow service (?)
Metadata service (?)
Collective level
Data services (OGSA-DAI)
Job services (WSRF)
Web service level
Grids
Clusters
PCs
Storages
File
Database
Model
GIS
Physical level
Medigrid meeting Bratislava March 10-11