Outline n Introduction Proxy Dynamic Delegation in Grid Gateway n Is - - PowerPoint PPT Presentation

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 1 n Introduction

n Is there the need for a Web portal to access Grid?

n Grid Gateway (L-GRID)

n Architecture n Dynamic Delegation inside GRID GW n Access Grid via Web n Job management: submission, check, output retrieval n Features n Performances and Security

n References

n Sourceforge, Screen movie demo

n Conclusions

n Who uses L-GRID?

Outline

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 2

Introduction

Is there the need for a Web portal to access Grid? This is the old way to submit a job, check its status, retrieve the output. Too complex for a newbie!

n Create a JDL n Get the WMS list

n lcg-infosites --vo VO wms

n Search for a compliant Computing Element

n glite-wms-job-list-match -a -e https://<WMS>:7443/glite_wms_wmproxy_server JDL

n Submit the job

n glite-wms-job-submit -a -e https://<WMS>:7443/glite_wms_wmproxy_server -o ID JDL

n Save the job identifier n Check the job status

n glite-wms-job-info --jdl jobID

n Retrieve the output

n glite-wms-job-output jobID

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 3

L-GRID Architecture

L-GRID is a portal based on a client-server architecture

n Client side

n Java applet (< 5 MB) working on Web browser n Certificate management, secure communications, X.509 personal certificate

does not get out from local machine

n JDL editor n Job submission, check status, output retrieval n No Registration

n Server side

n Relies on a gLite User Interface, exposing an Apache / Tomcat server n Dynamic delegation mechanism n Job management Services

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 4

L-GRID Architecture

L-GRID client-server architecture

4 3 1 2 1

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 5

Dynamic Delegation inside GRID Gateway

The Dynamic Delegation mechanism to create a Proxy certificate on the server side – as from Kesselman, Foster et al., “X.509 Proxy Certificates for Dynamic Delegation”

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 6

L-GRID: access Grid via Web

A new way to access EGEE/EGI Grid resources

JDL editor J

• b

s u b m i s s i

• n

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 7

L-GRID: Job monitoring

Job status check Output retrieval

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 8

L-GRID Features

n Java code and Opensource server [Apache2 licensed] n Compliant to the EGI and CA certificate policies

n The X.509 personal certificate does not get out from the local machine

n User needs only his own X.509 personal certificate

n The portal can be surely used from an Internet point

n No-need of user registration on the server (UI, portal)

n The user is trusted via X.509 certificate and VOMS credentials

n Highly customizable

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 9

L-GRID Performances and Security

Dynamic Delegation Credentials

Get Credential s

OLD way NEW way MyProxy server UI + GRID GW

An extra security improvement has been achieved implementing on site a dynamic delegation mechanism, according to the Grid Security Infrastructure.

Job submission time Credential delegation

Time saving for the job submission

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 10

References

n L-GRID Portal: https://gridui.sns.it [hosted @SNS-PISA] n Sourceforge: http://sourceforge.net/projects/l-grid/ n Screenmovie demo: http://www.youtube.com/watch?v=uGnmMiLqJ0s n Wiki page: http://wiki.sns.it/wiki/L-GRID n Authors email n Daniele Licari <daniele.licari@sns.it> n Federico Calzolari <federico.calzolari@sns.it>

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 11

Conclusions

n It works! n Chosen by the Theophys VO to access parallel cluster via Grid

[1024 core, hosted @INFN-PISA]

A 3 minutes pre-recorded screen movie demo will be shown

Proxy Dynamic Delegation in Grid Gateway

2011/3/31 Daniele Licari, Federico Calzolari 12

Acknowledgments and Questions

Thanks for your attention

Please feel free to send questions, [criticisms], suggestions to the authors