Gridification

1
Gridification

• LCAS Local Centre AuthZ Service
• Policy-based authorization
• Plug-able framework
• Separate daemon
• LCMAPS Local Credential MAPping Service
• Maps credentials and roles to local accounts and
  capabilities
• Support for AFS, Kerberos tokens
• Library implementation
• Enhances gridmapdir
• Requires modified Gatekeeper
• Improved errorstatus handling
• Getting a useful message to the user
• Job repository, FLIDS, FABNAT gt EDG 2.x

Gatekeeper
LCAS
config
TLS auth
ACL
IPC
timeslot
LCAS client
gridmap
LCMAPS lib
LCMAPS
config
apply creds
role2uid
Jobmanager-
role2afs
And store in job repository