Adapting Globus and Kerberos for a Secure ASCI Grid

Proceedings of the International Conference on Supercomputing

Volumn , Issue , 2001, Pages 21-

  Moore, Patrick C ^a   Johnson, Wilbur R ^a   Detry, Richard J ^a  

^a SANDIA NATIONAL LABORATORIES   (United States)

Author keywords

ASCI; globus; grid; GSSAPI; kerberos; security

Indexed keywords

APPLICATION PROGRAMS; AUTHENTICATION; GRID COMPUTING; NETWORK SECURITY;

APPLICATION PROGRAM INTERFACES; ASCI; GENERIC SECURITY SERVICE APPLICATION PROGRAM INTERFACE; GLOBUS; GRID; GRID SECURITY INFRASTRUCTURE; KERBEROS; SECURITY; SECURITY SERVICES; SERVICES APPLICATIONS;

PUBLIC KEY CRYPTOGRAPHY;

EID: 0012380264     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/582034.582055     Document Type: Conference Paper

References (22)

1. Beiriger, J. et. al, Constructing The ASCI Grid, Proceedings of 9th High Performance and Distributed Computing Conference, Pittsburgh, PA, August 2000.
2. Bivens, H., Beiriger, J., GALE: Grid Access Language for High Performance Computing Environments. Work in progress, hpbiven@sandia. gov, Sandia National Laboratories, 2001.
3. Brunett, S., Czajkowski, K., Fitzgerald, S., Foster, I., Johnson, A., Kesselman, C., Leigh, J. and Tuecke, S., Application Experiences with the Globus Toolkit. In Proc. 7th IEEE Symp. on High Performance Distributed Computing, 1998, IEEE Press, 81-89.
4. Burati, M. Pato, J., User-to-User Authentication-Functional Specification. OpenGroup RFC 91. 1 1996. http://www. opengroup. org/tech/rfc/rfc91. 0. html
5. Butler, R., Engert, D., Foster, I., Kesselman, C., Tuecke, S., Volmer, J. and Welch, V. Design and Deployment of a National-Scale Authentication Infrastructure. IEEE Computer, 33 (12): 60-66. 2000.
6. Detry. R., Kleban, S., Moore, P., and Berg R., The Generalized Security Framework. Presented at CSCORE 2000. http://www. ccs. bnl. gov, Brookhaven National Laboratory, NY.
7. Entrust Inc., The EntrustSession™ Toolkit FAQ. Online documentation. 2001, https://www. entrust. com/developer/session/faqs. htm
8. Foster, I., and. Kesselman, C., Globus: A Metacomputing Infrastructure Toolkit, International Journal of Supercomputer Applications, 1997.
9. Foster, I. and Kesselman, C. (eds.). The Grid: Blueprint for a New Computing Infrastructure. Morgan Kaufmann, 1999.
10. Kohl, John T., Neuman, B. Clifford, T'so, Theodore Y. The Evolution of the Kerberos Authentication System. In Distributed Open Systems, pages 78-94. IEEE Computer Society Press, 1994.
11. J. Kohl, J., C. Neuman, C., The Kerberos Network Authentication Service (V5), IETF RFC 1510. 1993. http://www. ietf. org/rfc/rfc1510. Txt
12. Linn, J., The Kerberos Version 5 GSS-API Mechanism, IETF RFC 1964. 1996, http://www. ietf. org/rfc/rfc1964. Txt
13. Linn, J., Generic Security Service Application Program Interface Version 2, Update 1, IETF, RFC 2743, 2000. http://www. ietf. org/rfc/rfc2743.
14. Mealling, M., A URN Namespace of Object Identifiers. IETF RFC 3061, 2001. http://www. ietf. org/rfc/rfc3061
15. The Microsoft Corporation. Answers to Frequently Asked Kerberos Questions. Online documentation Q266080, 2000. http://support. microsoft. com/support/kb/articles/Q266/0/80. A SP
16. Myers, J, SASL GSSAPI Mechanisms. IETF Draft (Work in progress, 2001), http://search. ietf. org/ID. html
17. Neuman, B. Clifford and Ts'o, Theodore. Kerberos: An Authentication Service for Computer Networks, IEEE Communications, 32 (9): 33-38. September 1994.
18. Rosenberry, W., Ed., DCE Today-An Indispensable Guide to DCE. The Open Group 1998. http://www. opengroup. org/publications
19. Swift, M., Brezak, J., Moore, P., User to User Kerberos Authentication using GSS-API. IETF Informational Draft (work in progress, 2001), http://search. ietf. org/ID. html
20. Tung, B. et. al, Public Key Cryptography for Initial Authentication in Kerberos. IETF Draft (Work in progress, 2001) http://search. ietf. org/ID. html
21. Welch, V, Tuecke, S, Engert, D. GSS-API Extensions, GGF Draft (work in progress, 2001)
22. Wray, J., Generic Security Service API Version 2,: CBindings. IETF, RFC 2744, 2000. http://www. ietf. org/rfc/rfc2744.