Skip to main content
U.S. Department of Energy
Office of Scientific and Technical Information

Toward SVOPME, a scalable virtual organization privileges management environment

Conference · · J.Phys.Conf.Ser.
Grids enable uniform access to resources by implementing standard interfaces to resource gateways. In the Open Science Grid (OSG), privileges are granted on the basis of the user's membership to a Virtual Organization (VO). However, user privilege definitions and enforcements are administered separately by VOs and Grid sites. Such partitioning can potentially introduce inconsistent user privileges throughout the Grid and break the Grid paradigm of uniform access to resources. There is a need for an automated privilege management mechanism for a VO to codify privilege policies granted to its users, to propagate the policies to grid sites, to identity and suggest remedies for non-supported VO privileges at individual sites. The Scalable Virtual Organization Privileges Management Environment (SVOPME) addresses the challenge under the context of the Open Science Grid (OSG). The SVOPME provides tools for VOs to define and publish desired privileges. At a site, SVOPME tools help analyze access policies defined for VO users and verify policy consistency between VOs and sites, and suggest site configurations changes. This paper presents the designs and features of SVOPME tools and the lessons learned in applying SVOPME tools for OSG VOs and sites. Furthermore, we will outline future improvements to SVOPME tools to adapt to a range of different site configurations and new privilege policies.
Research Organization:
Fermi National Accelerator Laboratory (FNAL), Batavia, IL (United States)
Sponsoring Organization:
USDOE Office of Science (SC), High Energy Physics (HEP) (SC-25)
DOE Contract Number:
AC02-07CH11359
OSTI ID:
1433874
Report Number(s):
FERMILAB-CONF-11-864-CD; 1111403
Conference Information:
Journal Name: J.Phys.Conf.Ser. Journal Volume: 331
Country of Publication:
United States
Language:
English

Similar Records

SVOPME: A scalable virtual organization privileges management environment
Journal Article · Fri May 01 00:00:00 EDT 2009 · Submitted to Journal of Phys. Conf.Ser. · OSTI ID:957071

XACML profile and implementation for authorization interoperability between OSG and EGEE
Journal Article · Fri May 01 00:00:00 EDT 2009 · Submitted to Journal of Physics Conf.Ser. · OSTI ID:957069

VOMS/VOMRS utilization patterns and convergence plan
Journal Article · Thu Dec 31 23:00:00 EST 2009 · J.Phys.Conf.Ser.219:062006,2010 · OSTI ID:986998