Toward SVOPME, a scalable virtual organization privileges management environment
- Tech-X, Boulder
- Fermilab
Grids enable uniform access to resources by implementing standard interfaces to resource gateways. In the Open Science Grid (OSG), privileges are granted on the basis of the user's membership to a Virtual Organization (VO). However, user privilege definitions and enforcements are administered separately by VOs and Grid sites. Such partitioning can potentially introduce inconsistent user privileges throughout the Grid and break the Grid paradigm of uniform access to resources. There is a need for an automated privilege management mechanism for a VO to codify privilege policies granted to its users, to propagate the policies to grid sites, to identity and suggest remedies for non-supported VO privileges at individual sites. The Scalable Virtual Organization Privileges Management Environment (SVOPME) addresses the challenge under the context of the Open Science Grid (OSG). The SVOPME provides tools for VOs to define and publish desired privileges. At a site, SVOPME tools help analyze access policies defined for VO users and verify policy consistency between VOs and sites, and suggest site configurations changes. This paper presents the designs and features of SVOPME tools and the lessons learned in applying SVOPME tools for OSG VOs and sites. Furthermore, we will outline future improvements to SVOPME tools to adapt to a range of different site configurations and new privilege policies.
- Research Organization:
- Fermi National Accelerator Laboratory (FNAL), Batavia, IL (United States)
- Sponsoring Organization:
- USDOE Office of Science (SC), High Energy Physics (HEP) (SC-25)
- DOE Contract Number:
- AC02-07CH11359
- OSTI ID:
- 1433874
- Report Number(s):
- FERMILAB-CONF-11-864-CD; 1111403
- Conference Information:
- Journal Name: J.Phys.Conf.Ser. Journal Volume: 331
- Country of Publication:
- United States
- Language:
- English
Similar Records
SVOPME: A scalable virtual organization privileges management environment
XACML profile and implementation for authorization interoperability between OSG and EGEE
VOMS/VOMRS utilization patterns and convergence plan
Journal Article
·
Fri May 01 00:00:00 EDT 2009
· Submitted to Journal of Phys. Conf.Ser.
·
OSTI ID:957071
XACML profile and implementation for authorization interoperability between OSG and EGEE
Journal Article
·
Fri May 01 00:00:00 EDT 2009
· Submitted to Journal of Physics Conf.Ser.
·
OSTI ID:957069
VOMS/VOMRS utilization patterns and convergence plan
Journal Article
·
Thu Dec 31 23:00:00 EST 2009
· J.Phys.Conf.Ser.219:062006,2010
·
OSTI ID:986998