DOSAR VOMS

1
DOSAR VOMS
2
DOSAR VOMS Server

• What is the DOSAR VOMS?
• What data is stored in VOMS?
• What does it do?
• Why do we need it?
• How is it used?

3
What is the DOSAR VOMS?

• Virtual Organization Membership Service
• Packages of SW created by EDG
• Available in the VDT
• Apache, Tomcat, MySQL
• DOSAR VOMS
• https//thegrid.dpcc.uta.edu8443/edg-voms-admin/d
  osar
• May require that your certificate is loaded in
  your browser

4
What data is stored in VOMS?

• Maintains a database
• Users, Roles, Groups, Capabilities
• A user may have multiple roles or be in multiple
  groups
• DOSAR has three roles (one predefined)
• User, Admin, VO-Admin (required)
• Look through Administrate VOMS link at web-site
• Current roles are for testing purposes
• Groups and Capabilities offer additional way to
  distinguish users

5
What does VOMS do?

• Allows holders of grid certificates to request
  membership
• At present, user should send the administrator
  email after submitting form.
• Allows sites to receive membership list
• Participates in role based authentication

6
Why do we need VOMS?

• VOMS is mechanism for distributing membership
  lists to OSG sites.
• edg-gridmapfile-upgrade
• Polls configured VOM server(s)
• All VO members mapped to same local account
• GUMS (Grid User Management System)
• Can be used in similar manner as above.
• Also supports role-based authentication

7
How do we use VOMS?

• OSG sites
• Use normal tools to map members to dosar
• DOSAR w/ OSG sites
• Use normal tools but may map members to SAMGrid
  account
• DOSAR w/o OSG sites
• May need to manually update map files

8
Issues

• User mappings will be difficult to manage
• OSG Sites
• DOSAR members likely to be in multiple VOs
• Getting mapped to dosar may not work without
  role-based authentication
• DOSAR Sites
• SAMGrid uses 2 mapfiles (gatekeeper, jim_gridftp)
• VOMS server not compatible with D0 provided
  methods for retrieving these.