1. Introduction
Current status
The future
Roadmap
Wrapping up
Confusa The where, when and who
Henrik Austad & Thomas Zangerl
The Nordic Data Grid Facility (NDGF)
September 11, 2009
Henrik Austad & Thomas Zangerl Confusa: past, present and future
2. Introduction
Current status
Motivation
The future
What is Confusa?
Roadmap
Wrapping up
Layout
1 Introduction
Motivation
What is Confusa?
2 Current status
State of software development
current policy
Operational services
3 The future
Development effort
Operational
4 Roadmap
5 Wrapping up
Henrik Austad & Thomas Zangerl Confusa: past, present and future
3. Introduction
Current status
Motivation
The future
What is Confusa?
Roadmap
Wrapping up
Motivation
Grid authN nowadays requires the following:
1 Grid users need X.509 certificates
2 Grid initiatives need CAs to issue them
(1) is complicated, cumbersome and a pain for new users
(2) is costly, cumbersome and a pain for countries new to Grid
Both is time and energy consuming on both sides
Henrik Austad & Thomas Zangerl Confusa: past, present and future
4. Introduction
Current status
Motivation
The future
What is Confusa?
Roadmap
Wrapping up
Motivation cont’d
Currently an RA checks and forwards your identity upon
request generation
But your identity has been checked!
By your university, employer...
Idea: Automatically get that information and construct
certificate from it
Goal: Remove human processing from certificate issuing
Henrik Austad & Thomas Zangerl Confusa: past, present and future
5. Introduction
Current status
Motivation
The future
What is Confusa?
Roadmap
Wrapping up
Motivation cont’d
Change the process
sign request
classic CA when having time
RA RA ID check
user grid−cert−request receive cert
1 2 3 4 5 6 7
Time
(days)
Henrik Austad & Thomas Zangerl Confusa: past, present and future
6. Introduction
Current status
Motivation
The future
What is Confusa?
Roadmap
Wrapping up
Motivation cont’d
Change the process
CA Sign request
Confusa Check request User authN Provide cert
subject OK
Identity Get user
Federation identity
Browser Make cert request Install cert
1 2 3 4 5 6
Time
(minutes)
Henrik Austad & Thomas Zangerl Confusa: past, present and future
7. Introduction
Current status
Motivation
The future
What is Confusa?
Roadmap
Wrapping up
Layout
1 Introduction
Motivation
What is Confusa?
2 Current status
State of software development
current policy
Operational services
3 The future
Development effort
Operational
4 Roadmap
5 Wrapping up
Henrik Austad & Thomas Zangerl Confusa: past, present and future
8. Introduction
Current status
Motivation
The future
What is Confusa?
Roadmap
Wrapping up
What is Confusa?
1 ”Luzula Confusa”, a flower from
Spitsbergena
2 A web portal mapping attributes from
identity federations to X.509 certificates
a
Graphic credits: http://herba.msu.ru
Henrik Austad & Thomas Zangerl Confusa: past, present and future
9. Introduction
Current status State of software development
The future current policy
Roadmap Operational services
Wrapping up
Layout
1 Introduction
Motivation
What is Confusa?
2 Current status
State of software development
current policy
Operational services
3 The future
Development effort
Operational
4 Roadmap
5 Wrapping up
Henrik Austad & Thomas Zangerl Confusa: past, present and future
10. Introduction
Current status State of software development
The future current policy
Roadmap Operational services
Wrapping up
Software
Released v0.2, working hard to hit v0.3.
Henrik Austad & Thomas Zangerl Confusa: past, present and future
11. Introduction
Current status State of software development
The future current policy
Roadmap Operational services
Wrapping up
Layout
1 Introduction
Motivation
What is Confusa?
2 Current status
State of software development
current policy
Operational services
3 The future
Development effort
Operational
4 Roadmap
5 Wrapping up
Henrik Austad & Thomas Zangerl Confusa: past, present and future
12. Introduction
Current status State of software development
The future current policy
Roadmap Operational services
Wrapping up
Policy
The CP/CPS is undergoing review and will hopefully pass
accreditation soon.
Add some tentative dates for when this will/might happen,
EUGridPMA.
Henrik Austad & Thomas Zangerl Confusa: past, present and future
13. Introduction
Current status State of software development
The future current policy
Roadmap Operational services
Wrapping up
Layout
1 Introduction
Motivation
What is Confusa?
2 Current status
State of software development
current policy
Operational services
3 The future
Development effort
Operational
4 Roadmap
5 Wrapping up
Henrik Austad & Thomas Zangerl Confusa: past, present and future
14. Introduction
Current status State of software development
The future current policy
Roadmap Operational services
Wrapping up
Operational
We have no active production system running today, however, we
have one semi-official meta-stable system running both modes of
confusa.
https://beta.confusa.org/luzula (standalone)
https://beta.confusa.org/confusa (online)
Henrik Austad & Thomas Zangerl Confusa: past, present and future
15. Introduction
Current status
Development effort
The future
Operational
Roadmap
Wrapping up
Layout
1 Introduction
Motivation
What is Confusa?
2 Current status
State of software development
current policy
Operational services
3 The future
Development effort
Operational
4 Roadmap
5 Wrapping up
Henrik Austad & Thomas Zangerl Confusa: past, present and future
16. Introduction
Current status
Development effort
The future
Operational
Roadmap
Wrapping up
Planned development efforts
We have a few ideas as to what we would like to add to Confusa.
Once we go operational, we will enter a new cycle where a list of
new features will be drawn in parallel with maintenance/bugfixing
of the operational code-base.
Client application API (OAuth?)
Server-to-server API (bioportal, myproxy)
Henrik Austad & Thomas Zangerl Confusa: past, present and future
17. Introduction
Current status
Development effort
The future
Operational
Roadmap
Wrapping up
Layout
1 Introduction
Motivation
What is Confusa?
2 Current status
State of software development
current policy
Operational services
3 The future
Development effort
Operational
4 Roadmap
5 Wrapping up
Henrik Austad & Thomas Zangerl Confusa: past, present and future
18. Introduction
Current status
Development effort
The future
Operational
Roadmap
Wrapping up
Operational Roadmap
When is Confusa going to go operational at Tiljburg
Henrik Austad & Thomas Zangerl Confusa: past, present and future
19. Introduction
Current status
The future
Roadmap
Wrapping up
The road so far
What have we achieved at different dates
Henrik Austad & Thomas Zangerl Confusa: past, present and future
20. Introduction
Current status
The future
Roadmap
Wrapping up
The road ahead
Add some tentative dates to show planned progress.
Henrik Austad & Thomas Zangerl Confusa: past, present and future
21. Introduction
Current status
The future
Roadmap
Wrapping up
Software team
Henrik Austad & Thomas Zangerl
http://www.confusa.org/
git://git.assembla.com/confusa.git
Henrik Austad & Thomas Zangerl Confusa: past, present and future