From gridmap-file to VOMS: Managing authorization in a Grid environment

Future Generation Computer Systems

Volumn 21, Issue 4, 2005, Pages 549-558

  Alfieri, R ^a   Cecchini, R ^b   Ciaschini, V ^c   Dell'Agnello, L ^d   Frohner, A ^e   Lorentey, K ^f   Spataro, F ^c  

^a UNIVERSITY OF PARMA   (Italy)

^b INFN SEZIONE DI FIRENZE   (Italy)

^c INFN SEZIONE DI ROMA   (Italy)

^d INFN SEZIONE DI BOLOGNA   (Italy)

^e CERN   (Switzerland)

^f EÖTVÖS LORÁND UNIVERSITY   (Hungary)

Author keywords

Attributes; Authorization; Grids

Indexed keywords

COMPUTATIONAL METHODS; COMPUTER OPERATING SYSTEMS; ELECTRONIC COMMUNITIES; INFORMATION SERVICES; SERVERS; TELECOMMUNICATION SERVICES;

ATTRIBUTES; AUTHORIZATION; GRIDS; VIRTUAL ORGANIZATION MEMBERSHIP SERVICE (VOMS);

TELECOMMUNICATION NETWORKS;

EID: 14544292384     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2004.10.006     Document Type: Article

References (27)

1. M. Draoli, G. Mascari, R. Piccinelli, Project Presentation, DataGrid-11-NOT-0103-_1.
2. http://www. datatag. org/.
3. R. Alfieri Managing Dynamic User Communities in a Grid of Autonomous Resources TUBT005, in: Proceedings of CHEP 2003 2003
4. I. Foster, C. Kesselman. The globus project: a status report, in: Proceedings of the IPPS/SPDP'98 Heterogeneous Computing Workshop, 4-18, 1998.
5. I. Foster, C. Kesselman, and S. Tuecke The anatomy of the Grid Int. J. High Perform. Comput. Appl. 15 2001 3
6. I. Foster, C. Kesselman, G. Tsudik, and S. Tuecke A security architecture for computational grids Proceedings of the Fifth ACM Conference on Computer and Communications Security Conference 1998 83 92
7. R. Housley, T. Polk, W. Ford, D. Solo, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, RFC 3280, 2002.
8. L. Cornwall, J. Jensen, D. Kelsey, A. McNab, EU DataGrid and GridPP authorization and access control, in: Proceedings of the UK e-Science All Hands Meeting 2003, pp. 382-384, EPSRC 2003 (ISBN 1-904425-11-9).
9. The Grid2003 Project. The Grid2003 Production Grid: Principles and Practice, GriPhy N-2004-23, Grid3 2004-19.
10. http://www.uscms.org/s&c/VO/doc/doc.html.
11. http://lcg.web.cern.ch/lcg/.
12. http://public.eu-egee.org/.
13. D. Kelsey, L. Cornwall, Security Requirements and Testbed-1 Security Implementation, DataGrid-07-D7.5-0111-4-0, 2002.
14. Á. Frohner, V. Ciaschini, VOMS Credential Format, EDG Draft, 2004.
15. S. Farrel, R. Housley, An Internet Attribute Certificate Profile for Authorization, RFC 3281, 2002.
16. L. Pearlman, V. Welch, I. Foster, K. Kesselman, S. Tuecke, A community authorization service for group collaboration, in: IEEE Workshop on Policies for Distributed Systems and Networks, 2002
17. D.W. Chadwick, O. Otenko, The PERMIS X.509 role based privilege management infrastructure, Fut. Gen. Comput. Syst. 19(2), Elsevier Science Publishers B.V., 2003, pp. 277-289.
18. M. Widenius, D. Axmark, MySQL Reference Manual, 2002 (ISBN 0-596-00265-3).
19. S. Tuecke, D. Engert, I. Foster, V. Welch, M. Thompson, L. Pearlman, C. Kesselman, Internet X.509 Public Key Infrastructure Proxy Certificate Profile, draft-ggf-gsi-proxy-04, 2002.
20. Architectural design and evaluation criteria: WP4 Fabric Management, DataGrid-04-D4.2-0119-2-1, 2001.
21. European DataGrid, Security Coordination Group: Security Design, DataGrid-07-D7.6-0112, 43-45, 2003.
22. D. Box, D. Ehnebuske, G. Kakivaya, A. Layman, N. Mendelsohn, H. Nielsen, S. Thatte, D. Winer, Simple Object Access Protocol (SOAP) 1.1, Note 20000508, 2000.
23. I. Foster, C. Kesselman, J. Nick, S. Tuecke, The physiology of the grid: an open grid services architecture for distributed systems integration, Open Grid Service Infrastructure WG, Global Grid Forum, 2002.
24. J. Viega, M. Messier, P. Chandra, Network Security with OpenSSL Cryptography for Secure Communications, 2002 (ISBN: 0-596-00270-X).
25. M. Thompson, A. Essiari, and S. Mudumbai Certificate-based authorization policy in a PKI environment ACM Trans. Inform. Syst. Secur. 6 4 November 2003 566 588
26. A.S. Grinshaw, Wm. A. Wulf and the whole legion team, Legion - A view From 50,000 Feet., in: Proceedings of the Fifth IEEE International Symposium on High Performance Distributed Computing, 1996
27. M. Lorch The PRIMA system for privilege management Proceedings of Fourth International Workshop on Grid Computing: Grid 2003 Authorization and enforcement in grid environments 2003