VOX/VOMS deployment plan

DRAFT
Last Update: 2004-07-23

Preamble:

Readers wishing to read more about the Virtual Organisation Management System and how its evaluation, testing and deployment activity started in LCG are invited to visit the original notes on the subject. A repository of working documents, including useful references is available to anyone insterested in this activity.

Contacts:

Vincenzo.Ciaschini@cnaf.infn.it (VOMS core service development)
Maria.Dimou@cern.ch (member of the User Registration Task Force and responsible for LCG VOX/ VOMS planning, installation, evaluation)
Enrico.Ferro@pd.infn.it (VOMS - LCAS - LCMAPS integration and testing for INFN)
Joni.Hahkala@cern.ch (member of the User Registration Task Force and VOMS development coordinator in EGEE)
Dave Kelsey (Joint Security Group chair, member of the User Registration Task Force)
Tanya Levshina <tlevshin@hppc.fnal.gov> (member of the User Registration Task Force and VOX project Leader. This page can be opened by people whose certificates are registered)
Karoly.Lorentey@cern.ch (member of the User Registration Task Force and VOMS admin and registration modules' development)
Ian.Neilson@cern.ch (User Registration Task Force coordinator, LCG Security Officer)
Di.Qing@cern.ch, Marco.Serra@cern.ch (LCG testbed managers of the Certification & Testing team)
Ian Bird@cern.ch, Flavia.Donno@cern.ch, Zdenek.Sekera@cern.ch, Markus.Schulz@cern.ch (LCG deployment management)
Erwin.Laure@cern.ch,Frederic.Hemmer@cern.ch (EGEE management)

Actions:

We already run a VOMS server in the CERN Grid Deployment team, which gets automatically synchronised with the LDAP LCG VOs' data every 4 hours. Our first practical aim is to over-come the problems we are meeting so far in having a complete match of data coming from LDAP or VOMS, when generating the grid-map file from VOMS.

It is a requirement of the LCG management to establish a collaboration amongst the most complete user registration management tools, namely VOMS and VOX/VOMS, in order to achieve the full functionality needed, for use by the LCG VO managers in a non-LDAP-based future. Our immediate technical aim is to evaluate the tools' functionality and to agree on common development to achieve compliance to the User Registration and VO Membership Management Requirements.

LCG's aim was to have in Spring 2005 an operational and documented new User Registration Service (replacing https://lcg-registrar.cern.ch), fully integrated in the rest of the LCG service components, with the additional authorisation functionality in terms of user's Groups and Roles deployed.

However, the User Registration Task Force (TF) (Mandate) aims at making tools compliant to the new GDB-approved User Registration Requirements by extending their functionality according to the (also GDB-approved) proposal. The development that will be required to achieve this goal will determine the end-date of the whole process.

VOMS development activities in the EGEE framework are dictated by requirements that might be different from ours. However, in order to properly plan the development tasks, the deployment time-scale and the developer's time, we established a communication channel with our relevant partners in EGEE, which we should maintain open through-out this process.

Maria Dimou, IT/GD Grid Infrastructure Services