WebMPI a Secure Cluster Web Interface using Shibboleth

1
WebMPI - a Secure Cluster Web Interface using
Shibboleth

• Thesis by
• Kurt Alan Landrus
• May 2005
• University of Arkansas

2
WebMPI Overview

• Use Shibboleth to provide access control to a
  cluster of computers
• For example, we want to provide access to a UA
  cluster to the students in the Parallel Computing
  class at LewisClark College
• WebMPI a cluster web interface has been
  developed.
• http//webmpi.csce.uark.edu

3
WebMPI Overview

• Uses Shibboleth technology to provide
  Authentication and Authorization.
• Web Interface to Beowulf Cluster resource
• HTML and CGI Python scripts
• Maps Web users to local account using Apache
  suEXEC feature.

4
WebMPI Design
Hey! I can run my MPI programs Now !
5
WebMPI - Use-case flow
Upload
Start
Compile
Shibboleth Authentication
Execute
Results
6
WebMPI Attributes Use

• eduPersonAffiliation - active member of
  community
• faculty, student, staff, member
• EPPN - Identity (can be scoped)
• kal_at_uark.edu
• eduPersonEntitlement - An agreed upon opaque URI
• urnmacegreatplains.netuark.eduwebmpi
• eduPersonTargetedID - A unique identifier that
  cannot easily be connected with identity owner
• ed1000956720

7
WebMPI Demonstration
http//webmpi.csce.uark.edu
8
References

• Great Plains Network
• http//archie.csce.uark.edu/gpn
• Internet2 Shibboleth
• http//shibboleth.internet2.edu
• Inqueue Federation
• http//inqueue.internet2.edu/
• Incommon Federation
• http//www.incommonfederation.org