Introduction on Science Gateway

Introduction
on Science Gateway
Understanding access and
functionalities
Riccardo Rotondo
Tutorial on Science Gateways, Roma, 03.06.2013

Outline
§  What is a Science Gateway ?
§  The Catania Science Gateway Framework
§  General Architecture
§  Authentication, Authorisation and Roles
§  Catania Grid Engine
§  Roles

§  Use Case:
§  The DECIDE Science Gateway
§  The GARR Science Gateway
Riccardo Rotondo

Riccardo Rotondo

Reference Model
Scientific
Application

E-Collaboration
Science
Gateway

Social
Application

Standard Services

GRID

Local Cluster

Users of different
Institutions
members of GARR
and/or
international
CLOUD
partners involved
in European
Projects of the
Riccardo Rotondo
Consortium

Reference Model
Scientific
Application

E-Collaboration
Science
Gateway

Social
Application
Standard-based (SAGA)
middleware-independent
Grid Engine

Users of different
Institutions
members of GARR
and/or
international
partners involved
in European
Projects of the
Riccardo Rotondo
Consortium

Requirements
§  Authentication and Autorisation
§ 

SAML, LDAP

§  Application middleware indipendent
§ 

§ 
§ 

jSAGA, SAGA

§  Standard Technology
Standard Java Adoption
§  JSR 168/286
§  Reusability
Web Technology
§  Simplicity
§ 
Web CMS
§ 
§  Wiki, Blog, Messages Board, Vconf, Adobe Connect
Easy usage and access

§  Portal Framework

Riccardo Rotondo

Terena Identity Federations
http://www.terena.org/about/terena-membersmap.html
Riccardo Rotondo

Federated Identity Management (FIdM)
§  In the web technology arena many approaches
are available to federate authentication
§  A standard provided by OASIS defines the
Security Assertion Markup Language (SAML)
§  Several tools are available, e.g.:
§  Shibboleth
§  SimpleSAMLphp

§  Organisations can rely on traditional tools to
manage users:
§  LDAP, CAS, plain text, etc.

§  Free and Open Source
Riccardo Rotondo

Enabling SGs to FIdM
§  Access to e-Infrastructure services requires
authentication.
§  The distributed/cross-domain nature of
resources requires, in some case, strong
security mechanisms
§  SGs willing to provide easy access to these
services
§  Some institutions want to maintain the control
of their own users’ authentication

Riccardo Rotondo

So a federation is made of…

§  A collection of Identity Providers that follows a
defined set of rules and policy.
§  Identity providers (IdPs) are responsible for
authenticating a closed group of users (i.e. of
the same organisation)
§  Each IdPs regulate access to a set of Service
Providers (i.e. mail server of the mentioned
organisation)

Riccardo Rotondo

Federated
User

Science
Gateway

Riccardo Rotondo

Social
User

Science
Gateway

Riccardo Rotondo

Authorisation request

§  The first time users access the Science
Gateway their IdP authenticates them
§  LDAP server connected to the Service Provider
(SP) cannot authorise the users
§  SP leads users automatically to the registration
form
§  A part from them data, users can request for a
specific role

Riccardo Rotondo

Authorisation request

Riccardo Rotondo

Authorisation Managment

Riccardo Rotondo

Registration

§  Users not belonging to any of the enabled
federation can register to the catch all Identity
Provider of the GrIDP federation

Riccardo Rotondo

Integrated Services

JSR 168/286
JSR 168/286

JSR 168/286

JSR 168/286

Catania Science Gateway Framework

GRID

CLOUD

Local

Riccardo Rotondo
Tutorial on
Cluster Science Gateways, Roma, 03.06.2013

Grid Engine

Data On Grid
Services

Cloud Services

JSAGA
Adaptors

Riccardo Rotondo

Usage Workflow
eTokenServer

1. Sign in
2. Grid
Request

6. Getting
Results

5. Grid
Submission

GRID

5.
Tracking
User
Tracking
DB

Riccardo Rotondo

Access

Riccardo Rotondo

Applications accessing grid services

§  12 applications developed among 5 different
countries and 3 continents (Europe, Latin
America and Asia);
§  4 scientific domains:
§ 
§ 
§ 
§ 

Life Science;
Mathematic & Computer Science;
High Energy Physics;
Cultural Heritage.

Riccardo Rotondo

Job Submission

Riccardo Rotondo

My Workspace – Active Job List

Riccardo Rotondo

My Workspace - Done Job List

Riccardo Rotondo

My Workspace – MyJobsMap

Riccardo Rotondo

My Data

Sharing features
among users will
soon be added

Riccardo Rotondo

Roles & Privileges

§  Surfing a Science Gateway changes according
different roles
§  Mapping between Liferay roles and LDAP group
§  Similar mapping available on grid (i.e. voms
roles)
§  Liferay allows administrator to fully customize
users experience assigning different roles to
each components (pages, wikis, plugins, data)

Riccardo Rotondo

Facebook Integration

Riccardo Rotondo

References
§  GARR Science Gateway: https://sgw.garr.it
§  GARR Science Gateway Facebook Community
Page:
https://www.facebook.com/
GarrScienceGatewayCommunity
§  Training Material: https://gilda.ct.infn.it/wikimain
§  Catania Science Gateways:
http://www.catania-science-gateways.it

Riccardo Rotondo

Questions ?

Riccardo Rotondo

Introduction on Science Gateway

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Ähnlich wie Introduction on Science Gateway

Ähnlich wie Introduction on Science Gateway (20)

Mehr von riround

Mehr von riround (7)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Introduction on Science Gateway