Outline n Introduction Proxy Dynamic Delegation in Grid Gateway n Is - PowerPoint PPT Presentation

Outline n Introduction Proxy Dynamic Delegation in Grid Gateway n Is there the need for a Web portal to access Grid? n Grid Gateway (L-GRID) n Architecture n Dynamic Delegation inside GRID GW n Access Grid via Web n Job management: submission, check, output retrieval n Features n Performances and Security n References n Sourceforge, Screen movie demo n Conclusions n Who uses L-GRID? 2011/3/31 Daniele Licari, Federico Calzolari 1

Introduction Is there the need for a Web portal to access Grid? Proxy Dynamic Delegation in Grid Gateway This is the old way to submit a job, check its status, retrieve the output. Too complex for a newbie! n Create a JDL n Get the WMS list n lcg-infosites --vo VO wms n Search for a compliant Computing Element n glite-wms-job-list-match -a -e https://<WMS>:7443/glite_wms_wmproxy_server JDL n Submit the job n glite-wms-job-submit -a -e https://<WMS>:7443/glite_wms_wmproxy_server -o ID JDL n Save the job identifier n Check the job status n glite-wms-job-info --jdl jobID n Retrieve the output n glite-wms-job-output jobID 2011/3/31 Daniele Licari, Federico Calzolari 2

L-GRID Architecture L-GRID is a portal based on a client-server architecture Proxy Dynamic Delegation in Grid Gateway n Client side n Java applet (< 5 MB) working on Web browser n Certificate management, secure communications, X.509 personal certificate does not get out from local machine n JDL editor n Job submission, check status, output retrieval n No Registration n Server side n Relies on a gLite User Interface, exposing an Apache / Tomcat server n Dynamic delegation mechanism n Job management Services 2011/3/31 Daniele Licari, Federico Calzolari 3

L-GRID Architecture Proxy Dynamic Delegation in Grid Gateway 4 3 1 2 1 L-GRID client-server architecture 2011/3/31 Daniele Licari, Federico Calzolari 4

Dynamic Delegation inside GRID Gateway Proxy Dynamic Delegation in Grid Gateway The Dynamic Delegation mechanism to create a Proxy certificate on the server side – as from Kesselman, Foster et al., “ X.509 Proxy Certificates for Dynamic Delegation” 2011/3/31 Daniele Licari, Federico Calzolari 5

L-GRID: access Grid via Web A new way to access EGEE/EGI Grid resources Proxy Dynamic Delegation in Grid Gateway JDL editor n o s i m i s b u b s o J 2011/3/31 Daniele Licari, Federico Calzolari 6

L-GRID: Job monitoring Proxy Dynamic Delegation in Grid Gateway Job status check Output retrieval 2011/3/31 Daniele Licari, Federico Calzolari 7

L-GRID Features n Java code and Opensource server [Apache2 licensed] Proxy Dynamic Delegation in Grid Gateway n Compliant to the EGI and CA certificate policies n The X.509 personal certificate does not get out from the local machine n User needs only his own X.509 personal certificate n The portal can be surely used from an Internet point n No-need of user registration on the server (UI, portal) n The user is trusted via X.509 certificate and VOMS credentials n Highly customizable 2011/3/31 Daniele Licari, Federico Calzolari 8

L-GRID Performances and Security Credential delegation Proxy Dynamic Delegation in Grid Gateway MyProxy server OLD way Credential Get s Dynamic NEW way Delegation UI + GRID GW Credentials Job submission time An extra security improvement has been achieved implementing on site a dynamic delegation mechanism, according to the Grid Security Infrastructure. Time saving for the job submission 2011/3/31 Daniele Licari, Federico Calzolari 9

References n L-GRID Portal: https://gridui.sns.it [hosted @SNS-PISA] Proxy Dynamic Delegation in Grid Gateway n Sourceforge: http://sourceforge.net/projects/l-grid/ n Screenmovie demo: http://www.youtube.com/watch?v=uGnmMiLqJ0s n Wiki page: http://wiki.sns.it/wiki/L-GRID n Authors email n Daniele Licari <daniele.licari@sns.it> n Federico Calzolari <federico.calzolari@sns.it> 2011/3/31 Daniele Licari, Federico Calzolari 10

Conclusions n It works! Proxy Dynamic Delegation in Grid Gateway n Chosen by the Theophys VO to access parallel cluster via Grid [1024 core, hosted @INFN-PISA] A 3 minutes pre-recorded screen movie demo will be shown 2011/3/31 Daniele Licari, Federico Calzolari 11

Acknowledgments and Questions Proxy Dynamic Delegation in Grid Gateway Thanks for your attention Please feel free to send questions, [criticisms], suggestions to the authors 2011/3/31 Daniele Licari, Federico Calzolari 12