- ogsa-wg - lists.ogf.org

Taverna workflows
by Donal K. Fellows 05 Jul '07

05 Jul '07

It's been an action on me to find out about Taverna. Since the workflow session today was cancelled (national holidays? pah!) I'll report what I've learned so far here before I forget due to vacation. :-) Taverna is a data-oriented workflow system (as opposed to control-oriented, though it also supports control links between processors) for automating tasks as seen from the client-side; it's intended to replace "human workflows" which involved cutting and pasting chunks of text between web pages (previously a time-consuming and error-prone process). It's not designed to handle cases with complex recovery from failures, but is instead focussed on automated handling of sets of data. It's GUI-oriented (though there is a command-line execution module) and as such it has got a number of features to enable scaling of the complexity of workflows to scientifically-useful levels: in particular, it has recursive decomposition and a way to mark processing nodes as "not interesting" and hence normally hidden. One limitation is that Taverna essentially assumes that the processing nodes are free to use (both by the user *and* by anyone else) which has a consequence in terms of its (non-existent) security model[*]. It's also not designed with dynamic instantiation of services in mind (there's a plugin for service discovery, but it's not integrated into the workflow system itself, just the GUI design tool). In short, if you're doing scientific workflows that use local components and free static services available over the web, Taverna is very good. But it's got substantial weaknesses for domains where services are secured, costly or dynamic. Far more information than I've mentioned is available online at http://taverna.sourceforge.net/index.php?doc=docroot.html I hope this is informative. :-) Donal. [* I understand that there's work ongoing to add some kind of security support, but I don't know how that's progressing. It's not in the latest production release for sure. ]

3 3

WS-SecurityPolicy becomes an OASIS Standard
by Hiro Kishimoto 04 Jul '07

04 Jul '07

Hi all, As I mentioned at the OGSA Express Authentication Profile call, WS-SecurityPolicy becomes an OASIS Standard. ---------------------------------------------------------------------- WS-SecurityPolicy becomes an OASIS Standard Members have approved version 1.2 of WS-SecurityPolicy as an OASIS Standard. WS-SecurityPolicy defines a base set of assertions that describe how messages are to be secured in the WS-Policy framework. Congratulations to Web Services Secure Exchange (WS-SX) TC co-chairs, Kelvin Lawrence of IBM and Chris Kaler of Microsoft, and to all WS-SX TC members for this accomplishment. http://lists.oasis-open.org/archives/tc-announce/200707/msg00001.html -- Hiro Kishimoto

1 0

No OGSA call on July 5
by Hiro Kishimoto 03 Jul '07

03 Jul '07

Hi all, June 4th is US holiday and many US folks have vacation on July 5th. Thus I would propose to have NO call on July 5th. If you want to have a call on this Thursday (Service Level Terms or Workflow), please let me know. Thanks, -- Hiro Kishimoto

1 0

Teleconference minutes - 2 July 2007 - Security / Logistics
by Andreas Savva 03 Jul '07

03 Jul '07

Teleconference minutes are on gridforge: Security (M. Behrens) https://forge.gridforum.org/sf/go/doc14654?nav=1 Logistics (A. Savva) https://forge.gridforum.org/sf/go/doc14655?nav=1 -- Andreas Savva Fujitsu Laboratories Ltd

1 0

Re: [ogsa-wg] Open Science Grid: TIGRE site does not show up in ReSS ISSUE=3712 PROJ=71
by Alan Sill 02 Jul '07

02 Jul '07

Hmm. Idle batch queue was supposed to be open to all grid users. Does TIGRE have its own queue? WIll have to review this again tomorrow... On Jul 2, 2007, at 4:23 PM, Chaffin, David wrote: > I mentioned previously that there aren't any tigre users defined to > lsf. > cms appears to be the only grid users that are defined. > > David

1 0

Re: [ogsa-wg] Open Science Grid: TIGRE site does not show up in ReSS ISSUE=3712 PROJ=71
by Alan Sill 02 Jul '07

02 Jul '07

Queue rearrangements appear to have been destructive to all except CMS OSG jobs: alansill@tigretest ~]$ globusrun-ws -submit -F https:// antaeus.hpcc.ttu.edu:9443 -Ft LSF -streaming -c /usr/bin/id Delegating user credentials...Done. Submitting job...Done. Job ID: uuid:ab39016c-28de-11dc-ba50-003018a434f4 Termination time: 07/03/2007 20:56 GMT Current job state: Failed Destroying job...Done. Cleaning up any delegated credentials...Done. globusrun-ws: Job failed: The executable could not be started. idle: User cannot use the queue. Job not submitted. I get this when mapped as wither a TIGRE or CDF user, but not when I assert a CMS proxy. On Jul 2, 2007, at 3:44 PM, Alan Sill wrote: > Don't knwo why OSG monitoring is failing on antaeus, will check it > out. Alan Sill, Ph.D TIGRE Senior Scientist, High Performance Computing Center Adjunct Professor of Physics TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0

Notes from Joint OGSA WG AuthN/AuthZ call
by Alan Sill 02 Jul '07

02 Jul '07

OGSA AuthN/AuthZ joint call Chris David Mark Morgan Andrew Grimshaw FrankSiebenlist Jack Hiro Kishimoto Alan Sill Andreas Savva Stephen Agenda items: OGSA-AuthZ update (David Chadwick) OGSA-AuthN update (Alan Sill) David summarized the current state of the OGSA-AuthZ work. No progress or changes have taken place since OGF-20 on the document set from the AuthZ work groupl Jargon for below: PDP = policy decision point PEP = policy enforcement point PIP = policy information point GFD-66 and 67 (65?) status GFD-66 was intended to describe the relation between PDPs and PEPs Previous version of GFD-66 based on SAML 1.1 was implemented by several groups and found to be insufficient. An architecture document was written by David and others to propose 3 protocols: one for pull of credentials from an IdP or AA according to any of several protocols profiled by OASIS and others, an XACML protocol, and a credential validation service profile defined according to WS-trust. Alan requested that David get a document number for this architecture document and David agreed to move this along the path to formalization. It would be good to publish this as an informational document, with the 3 protocols pulled into separate documents. Frank said that progress at Argonne on this has been slowed by work being done for GT4.2 - all security programmers have been pulled onto that work and have not had sufficient time available for standards work. GFD-66 had value but does not extend to sufficiently realistic complex real-world use case requirements, for example validating signed credentials, interactions with PIPs, etc. For requirements gathering, David put up a wiki but got very few submissions. Stephen points out that people see a need for security but do not see the relevance of the work done here, and socialization of the work being done here is not sufficiently seen as connected to real-world needs. Alan agreed that this is an important component of the work and is exactly what Duane, mark and Andrew have been trying to do in the requirements-gathering work they have been doing for the short-term AuthN documentation work they have been done. Frank did not understand the disconnect, as the XACML work for example has been driven by strong communication between developers and community segments that have requested this work. Andrew says that the exercise of writing a use-case document has proven itself even in circumstances in which the use cases are thought to be well- known. Stephen and Alan felt this to be true even though writing such documents can be a chore. People are often stuck on simple cases when the community doing work on standards is often focused on more advanced use cases. Andrew pointed out that documenting even the simple use cases is of value and must be written down to get rid of this barrier for users; some of the work being done for the HPC profile was driven by this need. Last week David sent out a document written from the point of view of Authorization meant to match some of the current "simple AuthN" work. Mark more or less simultaneously requested such a document. Discussion followed as to whether AuthZ can be folded into the current security profile "express" documentation work being done, or instead whether another document to address "express authZ" should be written. Andrew prefers simple short documents over grand scheme documents at this stage. Another document in this series entitled "OGSA Security Profile 2.0 - Authorization" would be helpful. David agreed to look at this and will go through the current set from this perspective. Moving on to authentication topics Alan is ready now to restart work on the OGSA-AuthN topics. Motivations here include examining the technical requirements of implementations and ensuring that the documentation and standards set offered by OGSA is sufficiently flexible and well-specified to allow interoperable implementations based on different technologies. As an example, Alan asks why Ws- Security is so SOAP-oriented, when grid implementations can be written based on the same WSDL and XML that could provide code using different RPC methods? Other motivations include ensuring that Shibboleth grid integration can be done on a well-defined standards basis within OGSA, and while this is largely an AuthZ question, we need to make sure that the OGSA-AuthN pieces and basis for this work are sufficiently documented, understood and specified. A documentation call series will be started sometime in July to get this work going. Simultaneously, work should be continued to complete the "express profile" documentation series. Hiro asked about the timing of the next joint call. David has Sep. 13 down as the next joint call. Hiro offered time at the Sunnyvale F2F Aug. 13-16. Alan Sill, Ph.D TIGRE Senior Scientist, High Performance Computing Center Adjunct Professor of Physics TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

7 19

Primer v2
by Andrew Grimshaw 02 Jul '07

02 Jul '07

All, I've uploaded the latest draft to gridforge. A http://forge.ogf.org/sf/go/doc14652?nav=1

1 0

Call for Book Chapters: Market-Oriented Grid Computing
by Rajkumar Buyya 01 Jul '07

01 Jul '07

Dear All: Considering the recent collection of use-cases on "Resource Barter Services" and pricing grid services, I thought some of you might be interested in contributing a chapter for the proposed book on: Market-Oriented Grid Computing We have been interacting with Wiley who have shown strong interest in publishing the proposed book. A formal Call for Chapters is enclosed. Those untested in contributing a chapter, please contact me directly. Also, if you know a colleague who might be interested in this topic, please share the attached documents. Best regards Raj ------------------------------------------------------------------------ Dr. Rajkumar Buyya Associate Professor and Reader Grid Computing and Distributed Systems (GRIDS) Lab Dept. of Computer Science and Software Engineering The University of Melbourne ICT Building, 111, Barry Street, Carlton Melbourne, VIC 3053, Australia Phone: +61-3-8344 1344 (office); +61-0431385688 (home) Fax: +61-3-9348 1184; Email: raj(a)csse.unimelb.edu.au URL: http://www.buyya.com | http://www.gridbus.org/~raj ------------------------------------------------------------------------

1 0

Teleconference minutes - 28 June 2007 - Info model
by Hiro Kishimoto 01 Jul '07

01 Jul '07

Minutes for Info model session attached. Gridforge: https://forge.gridforum.org/sf/go/doc14651 Thanks Donal for taking nodes, -- Hiro Kishimoto OGSA Teleconference - 28 June 2007 - Info model =============================================== * Participants Chris Kantarjiev (Oracle) Laurence Field (CERN) Felix Ehm (CERN) Ellen Stokes (IBM) Balazs Konya (Lund University) Donal Fellows (UMAN) Sergio Andreozzi (INFN) Hiro Kishimoto (Fujitsu) Andreas Savva (Fujitsu) ZackK Minutes: Donal Fellows * June 7 minutes accepted * action items review See GLUE-WG minutes from 14 June - http://www.ogf.org/pipermail/glue-wg/2007-June/000070.html 1: draft use case docs: DONE, uploaded to Glue Wiki 2: Ellen to speak to rm-wg: NOT DONE 3: pull jds & ogsa on opening storage discussion: DONE but no response 4: upload Glue 1.3: DONE 5: coordinator(==Felix) introduce himself to telecon: DONE worries about SE schema being driven by SRM transfer relevant ogsa AIs to GlueWG: Agreed and closed at OGSA-WG side. * AI-0607a: Doug or Chris S to look at the use cases template and consider mapping the SAS use cases to this template. - Can be added to the wiki or mailed to the group. * AI-0607b: Doug to test if attributes on the Execution Environment can address the need for boolean capabilities. * Ellen's CIM doc progress draft 8 reflects progress so far now being balloted hoping for a "slam dunk" major change: how to define a container model object use Computer System specialize with profile (open Q: where to do profiling work, DMTF or OGF) on target for publish in Aug/Sept doc to go to WG Final Call; end date: July 12, 2007 please get comments to Ellen by EOB July 9, 2007 * glue 2.0 discussion getting comments/feedback need more work on storage element ALL: please send suggestions for places to advertise the use-case doc 2.0 draft: some questions about how to communicate which Computing Share (queue) to use during submission some bugs with picture rendering WGs to contact re storage element schema: OGSA-DATA OGSA-DMI OGSA-ByteIO What about relationship with CIM schema? Extension? Ellen is best person to talk to first Sergio is going to do presentation on Glue to DMTF Alliance Parter Technology Summit (July 17-21 Portland Oregon)

1 0