DISTRIBUTED AND PARALLEL SYSTEMS Grid Technologies - Practical Lab - - PowerPoint PPT Presentation

SELECTED TOPICS IN DISTRIBUTED AND PARALLEL SYSTEMS

Grid Technologies - Practical Lab

1

Lab 03 - Schedule

2

 Create new certificates requests  Discussion of Homework 01  Material required for next Assignment

 MyProxy  Java CoG Kit

 Overview on next homework sheet

Requesting a (new) Grid Certificate

3  Back up your ”~/.globus“ directory  Grid Certificate Request

 Go To http://ca.austriangridca.at/  Select Certificate Request  Select: Universität Innsbruck / Zentraler Informatikerdienst Innsbruck  Insert Personal Data (use mail address as seen by recipients)  Pick 1024bit  Download Script (to generate key pair locally)  Run Script, enter passphrase for private key

 Results are generated in “~/.globus” (if not otherwise specified):

 certreqXXXX.txt => certificate request,

 mail it to ra@dps.uibk.ac.at – use request as mail body (not attachment)

 userkey.pem – private key, keep secure, encrypted (!)

HW 01 – Local Batch Queuing Systems

4

 Sequential movie rendering (1-3)  Parallel movie rendering (4-5)  Interpreting Speedup and Efficiency (6)  Get familier with movie rendering problem (B2)

(subsection of grid-lecture slides – grid security)

Introduction to MyProxy

5

6

MyProxy Architecture

MyProxy server Credential repository Retrieve proxy Store proxy

Proxy delegation over private TLS channel

MyProxy client

7

MyProxy Features

 Improved security  Limits credential exposure with short-lived proxy credentials  Long-term credentials are always encrypted on a well-

secured server

 Improved Usability

 Retrieve proxy credentials when and where needed without

managing private key and certificate files

 Drawback  Single point of failure

8

Credential Mobility in Austrian Grid

agrid.uibk.ac.at schafberg.coma.sbg.ac.at altix1.uibk.ac.at altix1.jku.austriangrid.at your-laptop-dhcp.uibk.ac.at ca.austriangrid.at Obtain certificate Store proxy Retrieve proxy

9

MyProxy Commands

 myproxy-init

 store (or renew) proxy

 myproxy-get-delegation

 retrieve proxy

 myproxy-info

 query stored credentials

 myproxy-destroy

 remove credential

 myproxy-change-pass-phrase

 change password encrypting private key

10

Web Browsers and MyProxy

Grid Portal MyProxy Server Username Password Username Password Proxy Credential my-proxy-init Username, Password Workstation

Introduction to Java CoG Kit

11

Java CoG Kit

12

 Java API to the Globus services

 http://wiki.cogkit.org

 Download from

 http://wiki.cogkit.org/index.php/Table

 Configuration:

 ./bin/cog-setup => ~/.globus/cog.properties  Add: “tcp.port.range=40000,40500“ to cog.properties  Includes local IP => carful when changing node!!

 Usage:

 ./bin/* … includes useful scripts (e.g. grid-proxy-init)  ./lib/*.jar … java libraries (e.g. cog-jglobus-1.2-XXX.jar)