Internal MyProxy in GridSAM

Google Summer of Code 2008 ideas

Primary Mentor: Stephen McGough (asm at doc.ic.ac.uk)
Secondary Mentor: Vesso Novov
OMII Project: GridSAM.

Description

The GridSAM project is an open source project for making resources available through a standardised job submission interface BES using a standardised job submission language JSDL available from the Open Grid Forum. GridSAM provides a veneer over existing resources (either clusters or single computers) which translates the incoming standardised job submission into the format required by the underlying architecture. To enable the use of delegated proxy certificates within GridSAM a user may delegate their proxy to an external MyProxy service. GridSAM may then interact with this MyProxy service when it requires a copy of the proxy. This has security implications as the user needs to provide credentials to the MyProxy service within the job submitted to GridSAM. An alternative approach has been proposed in which GridSAM acts as a front-end to MyProxy. The user can then delegate a proxy to GridSAM (which can then store this in a MyProxy server). GridSAM can then interrogate the MyProxy server for the proxy certificate when it requires it without the user needing to provide credentials for how to access the service. The intention here would be to implement this proposal and extend the use of proxy credentials within the GridSAM project – for such things as retrieving files and access to other services.

Project Requirements

A programmer competent in Java and Web Services in Java. Experience with X509 certificates and proxy delegation of such certificates would be desirable.