Best practices of user account management with virtual organization based access to grid

Authors:
Jiří Denemark;Michał Jankowski;Aleš Křenek;Luděk Matyska;Norbert Meyer;Miroslav Ruda;Paweł Wolniewicz
Affiliations:
Faculty of Informatics, Masaryk University, Brno, Czech Republic;Poznań Supercomputing and Networking Center, Poznań, Poland;Institute of Computer Science, Masaryk University, Brno, Czech Republic;Institute of Computer Science, Masaryk University, Brno, Czech Republic;Poznań Supercomputing and Networking Center, Poznań, Poland;Institute of Computer Science, Masaryk University, Brno, Czech Republic;Poznań Supercomputing and Networking Center, Poznań, Poland
Venue:
PPAM'05 Proceedings of the 6th international conference on Parallel Processing and Applied Mathematics
Year:
2005

Citing 4
Cited 1

Using Virtual User Account System for Managing Users Account

HPCN Europe 2001 Proceedings of the 9th International Conference on High-Performance Computing and Networking
Virtual User Account System for Distributed Batch Processing

HPCN Europe '99 Proceedings of the 7th International Conference on High-Performance Computing and Networking
From Sandbox to Playground: Dynamic Virtual Environments in the Grid

GRID '04 Proceedings of the 5th IEEE/ACM International Workshop on Grid Computing
The Anatomy of the Grid: Enabling Scalable Virtual Organizations

International Journal of High Performance Computing Applications

Virtual environments: framework for virtualized resource access in the grid

Euro-Par'06 Proceedings of the CoreGRID 2006, UNICORE Summit 2006, Petascale Computational Biology and Bioinformatics conference on Parallel processing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Scalable and fine-grained Grid authorization requires the move away from gridmap-file based access control and 1-to-1 mappings to individual operating system user accounts. This is recognized and addressed by virtual organization authorization services and user management systems e. g. Virtual Organization Membership Service (VOMS), Local Centre Authorization System (LCAS), Local Credential MAPping Service (LCMAPS) and Community Authorization Service (CAS). They do, however, not address user operating system account management and isolation/sandboxing requirements, such as flexible pooling of accounts while maintaining auditing records. In this paper we compare existing systems which solve the above shortcomings and are currently used in real production grids.