Troubleshooting grid authentication from the client side
This presentation is the property of its rightful owner.
Sponsored Links
1 / 8

Troubleshooting Grid authentication from the client side PowerPoint PPT Presentation


  • 41 Views
  • Uploaded on
  • Presentation posted in: General

Troubleshooting Grid authentication from the client side. By Adriaan van der Zee Big Grid meeting 2008-01-19. Contents. Introducing myself The project X.509 certificates, proxies and delegation Possible authentication problems Involved Grid components Problem identification tool.

Download Presentation

Troubleshooting Grid authentication from the client side

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -

Presentation Transcript


Troubleshooting grid authentication from the client side

Troubleshooting Grid authentication from the client side

By Adriaan van der Zee

Big Grid meeting 2008-01-19


Contents

Contents

  • Introducing myself

  • The project

  • X.509 certificates, proxies and delegation

  • Possible authentication problems

  • Involved Grid components

  • Problem identification tool


About me

About me

  • 2004-2008: bachelor Information Technology(INHOLLAND Diemen)

  • Currently: one-year master System and Network Engineering(UvA Amsterdam)

    • First of two four-week research projects


The project

The Project

To what extent can authentication failures in the Grid be identified and resolved from the client side?

  • What are the possible causes of GSI authentication failures?

  • Which Grid components are involved in GSI authentication for standard job submission and execution?

  • How can a client determine which systems are probable causes of authentication failure for a job?

  • Is it possible for a client to test authentication by contacting such systems directly?


X 509 certificates proxies and delegation

X.509 certificates, proxies and delegation

  • Proxy certificates are used for single sign-on and delegation

    • Not protected with a passphrase, but short-lived

    • Single sign-on: user can submit multiple jobs without re-entering passphrase

    • Delegation: a job can be sent further into the Grid on the user’s behalf

    • A MyProxy service can be used by a Grid component to renew a proxy


Possible authentication problems

Possible authentication problems

  • Proxy or host certificate has expired

  • Certificate Revocation List (CRL) out of date

  • Unknown CA

  • VOMS attribute certificates missing

  • Failure to map user to a local account


Involved grid components

Involved Grid components

  • UI

  • VOMS

  • MyProxy

  • WMS

  • CE


Problem identification tool

Problem identification tool

  • A command line tool for the UI

  • Used when (suspected) authentication failures are experienced

  • To identify the cause and system responsible for the authentication failure

  • Should aid problem resolution


  • Login