Kerberos a Grid

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F63839172%3A_____%2F07%3A00000603" target="_blank" >RIV/63839172:_____/07:00000603 - isvavai.cz</a>

Výsledek na webu

—

DOI - Digital Object Identifier

—

Jazyk výsledku

angličtina

Název v původním jazyce

Kerberos and Grid systems

Popis výsledku v původním jazyce

Grid computing provides a computational model for solving complex problems. While current Grid systems are most often based on PKI providing a scalable authentication mechanism, a lot of domains connected to Grid system use Kerberos as their local authentication protocol that is based on different principles. In this presentation we will describe our experiences with combining the Kerberos and Grid environment. We will present user-side tools that can be used for easy handling of Kerberos and Grid credentials (a plugin for the NetIDMgr framework) and their use in ssh clients. Server-side part will be described too, demonstrated on GSI-ssh server based on the mechglue library. We will also desribe how VOMS (a grid attribute service) can be integrated with Kerberos services to provide an efficient access control mechanism. An overall use-case will be presented, which provides a gateway for sending computational jobs between our Kerberos domain and the EGEE grid environment.

Název v anglickém jazyce

Kerberos and Grid systems

Popis výsledku anglicky

Grid computing provides a computational model for solving complex problems. While current Grid systems are most often based on PKI providing a scalable authentication mechanism, a lot of domains connected to Grid system use Kerberos as their local authentication protocol that is based on different principles. In this presentation we will describe our experiences with combining the Kerberos and Grid environment. We will present user-side tools that can be used for easy handling of Kerberos and Grid credentials (a plugin for the NetIDMgr framework) and their use in ssh clients. Server-side part will be described too, demonstrated on GSI-ssh server based on the mechglue library. We will also desribe how VOMS (a grid attribute service) can be integrated with Kerberos services to provide an efficient access control mechanism. An overall use-case will be presented, which provides a gateway for sending computational jobs between our Kerberos domain and the EGEE grid environment.

Druh

A - Audiovizuální tvorba

CEP obor

JC - Počítačový hardware a software

OECD FORD obor

—

Projekt

—

Návaznosti

Z - Vyzkumny zamer (s odkazem do CEZ)

Rok uplatnění

2007

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

ISBN

—

Místo vydání

Stanford, Kalifornie, USA

Název nakladatele resp. objednatele

—

Verze

AFS & Kerberos Best Practices Workshop 2007

Identifikační číslo nosiče

—