VOMS Support, MyProxy Tool and Globus Online Tool in GSISSH-Term Siew Hoon Leong (Cerlane) 23rd October 2013 EGI Webinar

Transcription

1 LRZ VOMS Support, MyProxy Tool and Globus Online Tool in GSISSH-Term Siew Hoon Leong (Cerlane) 23rd October 2013 EGI Webinar

2 Overview q Introduction l History of GSISSH-Term q New Features q Demo q Tricks and Upcoming plans q Summary l Information 2

3 Introduction If you want to do any of this from your laptop 3

4 Introduction If you want to do any of this from your laptop Automatic setup and update of EGI VOMS and VOMSES 3

5 Introduction If you want to do any of this from your laptop Automatic setup and update of EGI VOMS and VOMSES Generate and upload a VOMS-enabled proxy to a MyProxy server 3

6 Introduction If you want to do any of this from your laptop Automatic setup and update of EGI VOMS and VOMSES Generate and upload a VOMS-enabled proxy to a MyProxy server Start big data transfers with Globus Online 3

7 Introduction If you want to do any of this from your laptop Automatic setup and update of EGI VOMS and VOMSES Generate and upload a VOMS-enabled proxy to a MyProxy server Start big data transfers with Globus Online One tool for EGI and PRACE 3

8 Introduction 4

9 Introduction GSISSH-Term is the right tool! 4

10 Introduction GSISSH-Term is is the right tool! 1) OS independent (developed in Java) 2) One click install and launch (Webstart application) 3) Install and configure EUGridPMA CA certificates automatically 4) Install and configure VOMS and VOMSES with all EGI VOs automatically 4

11 Introduction q Java based terminal client for interactive access via ssh/gsissh q AND MORE l MyProxy Tool l Globus Online Tool l VO Management Tool l Secure Tunneling l SFTP Session l etc. 5

12 History of GSISSH-Term q SSHTerm l Originally developed by Lee David Painter Richard Pernavas Brett Smith l Java based ssh terminal l q GSI-SSHTerm l Current release: 0.91h l STFC and NGS (UK) added the GSI capabilities l Added VOMS support in cooperation with the CertWizard team from NGS (closed source project) 6

13 Current: GSISSH-Term q Development began in 2009 at LRZ l Evaluating GSI-SSHTerm to support our Grid users l Great software but requires customisation for European Grid users that are outside of UK q First improvements were contributed back to GSI- SSHTerm developers l PKCS12 - To support multiple cert/key entries (release 0.91g) l Others did not make it in due to manpower restriction to evaluate the code changes l Lead to the a branch out from GSI-SSHTerm (based on 0.91h) 7

14 Current: GSISSH-Term q Major improvements since: l Mac OSX support (including keychain Access) l Automatic installation and update of EUGridPMA CA certificates l Support Openssl 1.0x PEM certificate keys (PKCS8) l Added MyProxy Tool l Added Globus Online Tool l Reimplemented the VOMS authentication interface (simplified version with some feature enhancements) and added automatic installation and update of VOMS and VOMSES files for all EGI VOs l Added a VO Management Tool q Latest release:

15 Features 9

16 Features q Interactive access l gsissh to a EGI or PRACE resource to submit a job 10

17 Features q MyProxy Tool Features include: 1) Create and upload (VOMS-enabled) proxy 2) Remove or destroy proxy 3) Retrieve proxy information 11

18 New Features in release

19 New Features q VO Management Tool l Automatically install EGI VO configurations l Add your VO to Favourites 13

20 New Features q New VO Authentication Interface 14

21 New Features q New VO Authentication Interface 14

22 New Features q New VO Authentication Interface 14

23 New Features q New VO Authentication Interface 14

24 New Features q New VO Authentication Interface 14

25 New Features q Globus Online Tool l Transfer data using GridFTP Features include: 1) Drag and drop to transfer folder or file 2) Create new folder 3) Remove folder and file 4) View file information 5) Task Management frame Features not included: 1) Endpoint Management 2) User management 15

26 Demo 16

27 Tricks 17

28 Additional tricks q Configuration files l {HOME}/.sshterm/ l Important files GSI-SSHTerm_IGE_for_PRACE_EGI_LRZ.properties gotaskslog.json q Install and download other CAs automatically l Modify GSI-SSHTerm_IGE_for_PRACE_EGI_LRZ.properties add line: sshterm.myproxy.cacert.url={http location to a new tar.gz file} q Install and download VOMS from another location automatically l Modify GSI-SSHTerm_IGE_for_PRACE_EGI_LRZ.properties add line: sshterm.voms.config.url={http location to a new tar.gz file} Requires the same directory structure and naming 18

29 Upcoming plans q Support JGlobus2 and thus SHA2 formats before December l In negotiation with original GSI-SSHTerm developer from the UK q Support remote VNC 19

30 Summary 20

31 Summary q GSISSH-Term is a Java based terminal client q Includes many tools and useful features that can support EGI and PRACE users l Automatic installation and update of EGI VOMS and VOMSES, and EUGridPMA CA certificates l VO Management Tool l Simple to use VO Authentication interface l MyProxy Tool l Globus Online Tool 21

32 Information q Documentation: l software_en/gsisshterm_en/ q Link to launch: l 22

33 Information q LRZ maintained GSISSH-Term is known to be used by l EGI verce.eu drihm.eu l EGCF l PRACE l Globus Online l LRZ q Was used by l DEISA l IGE l DGRID 23

34 Requests q If you have any change/feature requests or questions, you can submit it on the EGCF Requirement Tracker (RT) l l Join EGCF to get a RT account: q EGI users, you can submit it to EGI GGUS q For non-egi users, you can also submit your requests or questions to grid-admin@lrz.de Thank you 24

35 Questions 25