Walden: A Scalable Solution for Grid Account Management

Authors:
Beth A. Kirschner;Thomas J. Hacker;William A. Adamson;Brian D. Athey
Affiliations:
University of Michigan, Ann Arbor;University of Michigan, Ann Arbor;University of Michigan, Ann Arbor;University of Michigan, Ann Arbor
Venue:
GRID '04 Proceedings of the 5th IEEE/ACM International Workshop on Grid Computing
Year:
2004

Citing 6
Cited 4

All about administering NIS+

All about administering NIS+
The PERMIS X.509 role based privilege management infrastructure

Future Generation Computer Systems - Special section: Selected papers from the TERENA networking conference 2002
Security for Grid Services

HPDC '03 Proceedings of the 12th IEEE International Symposium on High Performance Distributed Computing
An Online Credential Repository for the Grid: MyProxy

HPDC '01 Proceedings of the 10th IEEE International Symposium on High Performance Distributed Computing
The PRIMA System for Privilege Management, Authorization and Enforcement in Grid Environments

GRID '03 Proceedings of the 4th International Workshop on Grid Computing
Kerberized credential translation: a solution to web access control

SSYM'01 Proceedings of the 10th conference on USENIX Security Symposium - Volume 10

Web-Enabled Grid Authentication in a Non-Kerberos Environment

GRID '05 Proceedings of the 6th IEEE/ACM International Workshop on Grid Computing
Security in grid computing: A review and synthesis

Decision Support Systems
Extending existing campus trust relationships to the grid through the integration of pubcookie and myproxy

ICCS'05 Proceedings of the 5th international conference on Computational Science - Volume Part I
The university of virginia campus grid: integrating grid technologies with the campus information infrastructure

EGC'05 Proceedings of the 2005 European conference on Advances in Grid Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

A large and diverse consortium of grid clusters, as can be found in a university setting, requires a flexible authorization model that is scalable, extensible and easy to administer. Current approaches to grid authorization suffer from administrative interfaces that don't scale, authorization models that don't provide needed functionality, or both. This paper proposes a solution with initial implementation that uses existing standards to support the requirements of such a consortium of grid clusters. Our solution eliminates the need to manage authentication and authorization on a per-host basis, and implements a mechanism to temporarily bind a grid user to a local guest account on grid resource.