X.509 Authentication/Authorization in FermiCloud

Conference · Tue Nov 11 00:00:00 EST 2014

OSTI ID:1294526

Kim, Hyunwoo ^[1]; Timm, Steven ^[1]

---

1. Fermilab

We present a summary of how X.509 authentication and authorization are used with OpenNebula in FermiCloud. We also describe a history of why the X.509 authentication was needed in FermiCloud, and review X.509 authorization options, both internal and external to OpenNebula. We show how these options can be and have been used to successfully run scientific workflows on federated clouds, which include OpenNebula on FermiCloud and Amazon Web Services as well as other community clouds. We also outline federation options being used by other commercial and open-source clouds and cloud research projects.

• Research Organization: Fermi National Accelerator Lab. (FNAL), Batavia, IL (United States)
• Sponsoring Organization: USDOE Office of Science (SC), High Energy Physics (HEP)
• DOE Contract Number: AC02-07CH11359
• OSTI ID: 1294526
• Report Number(s): FERMILAB-CONF-14-469-CD; 1480140
• Country of Publication: United States
• Language: English