Privilege%20Project%20Status%20Report

1
Privilege ProjectStatus Report

• Gabriele Garzoglio
• Fermilab CD/CCF

2
Current Activities

• Support PRIMA and GUMS code for 32/64 bits for
  GT2 and GT4 for CMS T12 OSG VO (best effort)
  (50 Vikram)
• Deploy and support gPlazma infrastructure for CMS
  Tier 12 (important for SRM v2 deployment)(50
  Ted for 3 mo)
• Fix GUMS memory management problems (John Hover
  et al. up to .5 FTE for 3 weeks)
• Stress test of the GT4 PRIMA call-out (John W.
  5 FTE days)
• GT4 PRIMA packaging in VDT (Vikram Done)
• Integration of gLexec with Privilege (8.5 FTE
  weeks)
• Integrate GUMS with a monitoring/alarm
  infrastructure (.2 FTE for 2 mo)

3
Possible future activities

• Simplify / Aggregate architecture
• Streamline gPlazma infrastructure (direct
  connection to GUMS)
• Reorganization of PDP services (GUMS talking to
  SAZ)
• Update communication protocols (from extended
  SAML v1.1 to SAML v2.0)
• Improve PRIMA build process
• Publication of role-based privilege policy (with
  EGEE)
• Extend privilege enforcing to network management
• Long term directions
• Investigate direct DN rights enforcement (no UID
  mapping)
• Integrate Privilege Project with Policy Discovery
  Services
• Extend privilege enforcing to include privacy
• Executable integrity

4
VOMRS

• Release 1.2.3 improvements to the Web UI, bug
  fixes, internal info management (DONE)
• Release 1.3.0 (.4 FTE for 6 mo)
• Redesign of group and group role handling
• Multiple Acceptable User Policy doc. per VO
• Support / Maintenance (.15 FTE for 6 mo)
• Fermilab / OSG
• LCG (gt 500 user, 200 of which CMS)