Incubator/Dynamic Accounts/Documentation

From Globus

Navigation:

1 Introduction
2 Current Version
- 2.1 TP6
3 Changelogs
4 Archives
- 4.1 TP5
- 4.2 TP4.1

Introduction

The dynamic accounts based Workspace Management Services allow a Grid client to dynamically create and manage a workspace, implemented as a Unix account, on a remote site. The infrastructure is composed of a factory service that allows an authorized Grid client to create individual accounts or groups of accounts, and an account service that allows an authorized Grid client to manage individual account properties, such as account access policy or time to live (TTL). These concepts are represented as WSRF services and implemented using the GT4 implementation of WSRF.

The code is composed of a front-end implementing protocols for the creation and management of workspaces and a back-end implementation. Workspace creation and management can be implemented in different ways according to site policies and preferences. At this point, our dynamic accounts implementation supports two kinds of such "back-ends": (1) true dynamic creation using the Unix "useradd" command, and (2) account pooling, based either on LCMAPS account pools or a new database backed pooling implementation.

[edit]