[AG-TECH] Globus cert question

Ivan R. Judson judson at mcs.anl.gov
Mon Mar 17 12:51:47 CST 2003


Hey,

Thanks to Michael for starting the response!  It's true, AG2 has a different
security model than AG1, and the first important point is that every user
that wants to use the AG should have a certificate (at least for now).

We're working on certificate management and an explanation of what this
security shift means to the end user, but rest assured, we're making every
effort to keep the security hurdles to a minimum while providing a range of
security solutions for different types of collaboration.  

If there are any questions, I'd be happy to have a short discussion of
security, perhaps having Bob Olson try to transfer some of our information
to another AG developer who might be willing to draft a "Security in AG2"
AGDP document?

--Ivan

> -----Original Message-----
> From: owner-ag-tech at mcs.anl.gov 
> [mailto:owner-ag-tech at mcs.anl.gov] On Behalf Of Michael Miller
> Sent: Monday, March 17, 2003 8:58 AM
> To: ag-tech at mcs.anl.gov
> Subject: Re: [AG-TECH] Globus cert question
> 
> 
> Frank,
> 
> I asked the same question not long ago and found out that the 
> globus cert 
> is for identification of a person not necessarily a machine. This has 
> implications for nodes that are shared amongst several 
> people, but I'm not 
> sure how that is managed.  Perhaps someone on the AG team 
> could suggest how 
> to manage certificates for sites that have several AGnodes 
> and more than 
> one operator using any/all of them.
> 
> Michael Miller
> NCSA
> 
> 
> At 12:05 AM 3/16/2003 -0500, Frank Sweetser wrote:
> >We'd like to experiment a bit with AG2 on one box, and if it 
> goes well,
> >install
> >it on our primary grid setup.  Do we need to request a 
> seperate globus 
> >cert for
> >each machine, or can we just copy the same one around to all 
> of our machines?
> >
> >--
> >Frank Sweetser fs at wpi.edu
> >WPI Network Engineer
> 
> Thanx,
> 
> Michael Miller
> System Engineer
> Visualization Technology Support
> Computing and Data Management
> National Center for Supercomputing Applications
> University of Illinois - UC
> 
> "If you're clear in your vision and trust the people in your 
> team with 
> clear objectives, they will invariably do their best to 
> achieve everything 
> desired, and usually deliver everything you could have hoped 
> for and even 
> more." -Paul Debevec
> 




More information about the ag-tech mailing list