＂One cant believe impossible things＂UK OGSA Evaluation ...课件.pptVIP

Grid Security - What we found Interactions between security for multiple installations For testing may want multiple versions, or duplicates (with different configurations) of same versions. One container with no security, and another container with security May want test/production environments 精品 Grid Security - What we found Essential to test non-secure interoperability first Trying to test interoperability and security simultaneously wasn’t fun 精品 Grid Security - What we found Windows client-side security Still havn’t got it working Not obvious exactly what parts of Globus are needed for client side code with security (no “client plus security” package). 精品 Grid Security - What we found Testing and viewing security configuration Need to be able to view/edit and check security configuration for containers and services Confusion about hierarchical security settings Virtual Organisations, clusters, servers, containers, factories, services, methods, and instances. Remotely Validate security deployment before run-time 精品 Grid Security - What we found Debugging secure calls (or any stateful service) Proxy interceptor approach (e.g. TCPMON) won’t work with stateful services As grid handle returned to client contains the port number of the instance, not the proxy But proxies are an important design pattern for SOAs… GT4/WS-RF may be different Handle resolvers, WS-Addressing and WS-RenewableReferences 精品 Grid Security - What we found Client side security is programmatic Client side code modifications required to call services/methods with required protocols Should be declarative Sensitive to server side security credentials 精品 Grid Security - What we found Security management scalability Construction and maintenance of user accounts and grid-map file entries. For each server, each user needs an account, and an entry in the container gridmap file (mapping client certificate to account) May also need service specific gridmap files Not scalable for large numbe