所有网格组件的介绍.pptVIP

Grid Components Grid School 2004 Grid Components Components in Globus Toolkit 3.0 Components in Globus Toolkit 3.2 Planned Components in GT 4.0 Component to be covered Credential management and authorization Job submission and management Data discovery and data transfer GSI Implementation KX.509 and KCA Institutions that already have a Kerberos realm can use KX.509 and KCA to provide local users with Grid proxy certificates without using a Certificate Authority. When users authenticate with Kerberos, they may obtain proxy certificates in addition to their Kerberos tickets. KCA is a Kerberized certification service, and KX.509 is a Kerberized client that generates and stores proxy certificates. Unlike MyProxy, KX.509 and KCA create credentials for users, so remote sites must be configured to trust the local KCA service’s certification authority. PKINIT PKINIT is a service that allows users to use Grid certificates to authenticate to a Kerberos realm. For sites that use Kerberized services (like AFS), this allows remote Grid users to obtain the necessary Kerberos tickets to use the site’s local facilities properly. PKINIT replaces the Kerberos “klog” command and uses the user’s Grid certificate to eliminate the need for a Kerberos passphrase. Effective Policy GoverningAccess Within A Collaboration Community Authorization Service Question: How does a large community grant its users access to a large set of resources? Community Authorization Service (CAS) Outsource policy admin to VO sub-domain Enables fine-grained policy Resource owner sets course-grained policy rules for foreign domain on “CAS-identity” CAS sets policy rules for its local users Requestors obtain capabilities from their local CAS that get enforced at the resource Community Authorization Service MyProxy MyProxy is a remote service that stores user credentials. Users can request proxies for local use on any system on the network. Web Portals can request user proxies for use with back-end Grid services.