1 / 5

DataGrid WP6 Security 4 July 2001

This update discusses the progress made in WP6 Security, including agreeing on CP/CPS standards and configuration via WP6 distribution/installation. It also covers instructions for users, open issues, and authorization for Testbed1.

nmackin
Download Presentation

DataGrid WP6 Security 4 July 2001

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. DataGrid WP6 Security4 July 2001 David KelseyCLRC/RAL, UKd.p.kelsey@rl.ac.uk D.P.Kelsey, EDG WP6 Security

  2. CA sub-group • WP6 CA group meeting 5th June (CERN) • Progress is good • Work on agreeing each others CP/CPS • Agreed list of minimum standards for a CA • For current list of CA’s see WP6 web • Discussions under way with Russia • Configuration via WP6 distribution/installation • Aim to phase out use of Globus certs before Testbed1 • Next meeting – end August/NIKHEF – continue work on agreeing CP/CPS D.P.Kelsey, EDG WP6 Security

  3. Instructions for Users • Request a certificate from their own national CA • Request to WP8-10 for a GRID “account” • Stating resources/sites required • Application must be approved by WP8-10 • Cannot support unlimited users at M9 • WP8-10 forwards to WP6 (Sophie Nicoud) • WP6 will arrange for the appropriate accounts to be created • Sites should agree with WP6 what forms are required D.P.Kelsey, EDG WP6 Security

  4. Open issues • What if no national CA? • User needs to find a CA that will issue certs • CERN for CERN users? (ask CERN) • Who can issue host certificates? • ESA (via CNRS?) • USA (investigating for Globus) • What about GriPhyN, PPDG? • Operational issues • Audit, log, track incidents, report problems D.P.Kelsey, EDG WP6 Security

  5. Authorisation for Testbed1 • WP Executive has proposed formation of an Authorisation Group • Roberto Cecchini/INFN as leader • Solutions for Testbed1 • LDAP directory of Users/Groups and tool to fill grid mapfile (Francesco Giacomini) • Patch to Globus code to support dynamic user accounts in mapfile (Andrew McNab) • See Security session 1 yesterday afternoon D.P.Kelsey, EDG WP6 Security

More Related