WBS: short term goals for the Privilege Project

Date: June 12, 2006

Date: Sep 25, 2006

Date: Oct 10, 2006

Date: Oct 13, 2006

Date: Nov 2, 2006

Date: Nov 14, 2006

Date: Feb 2, 2007

Date: May 3, 2007

Date: Jun 1, 2007

Date: Aug 6, 2007

Color codes:

-High level WBS Item with mixed status for subitems

-New Proposal in Phase III

-Ongoing

-Done in Phase II

-Not Done

-Expired or Addressed in another project

1.  Support and deployment

    1.  Support the PRIMA and GUMS code for 32/64 bits for GT2 and GT4
        for CMS Tier 1&2. Provide best effort support for all OSG VOs.
        (In the past 15% effort by Vikram). Ongoing, but small.

    2.  Support "stable" VOMRS release for Fermilab, CERN, and OSG
        stakeholders Ongoing. (In the past: 15% Tanya , 10% CERN
        support). Ongoing.

    3.  Help deploy the infrastructure to stakeholders' sites. Ongoing
        but small (VDT)

2.  Improve health status reporting for key servers (remaining effort
    TBD -- was 1 FTE week). Partially DONE for Phase II.

    1.  Better Gatekeeper / Prima error reporting for authorization
        failures (effort TBD). NOT Done in Phase II.

    2.  VOMS/GUMS health monitors (Done Aug 06)

        1.  Improving the GUMS probe: adding ping capabilities

3.  Improve software validation (8 FTE weeks) (Started)

    1.  Improve validation of basic functionalities (framework available
        in VDT). NOT DONE in Phase II.

    2.  Implement validation of software dependencies. NOT DONE in Phase
        II.

        1.  Validate PRIMA / GUMS stability across multiple
            architectures

        2.  Validate GUMS / VOMS interaction across multiple release
            versions

        3.  Validate GUMS / MonALISA interaction

        4.  Validate GUMS / Tomcat - MySQL stability across multiple
            release versions

    3.  Measure PRIMA / GUMS scalability (Started by John W.). (Done Jul
        07).

4.  Improve integration of the infrastructure with dependent components
    as needed

    1.  Improve GUMS integration with MonALISA (Done)

5.  Improve robustness of GUMS (Started)

    1.  Fix GUMS memory management problems (3 FTE weeks) (Done Sep 06)

    2.  Improve GUMS configuration management (3 FTE weeks) (Started @
        BNL). Should be Partially Done by Phase II.

        1.  implement configuration validation (in progress for v1.2)

        2.  investigate/eliminate side-effects of hot-swapping
            configuration (doing changes of multiple config all at once,
            instead). NOT DONE in Phase II

        3.  implement configuration display interface (Done Jan 07)

        4.  implement configuration GUI (Done Jan 07)

        5.  improve debugging capabilities (date fields in database?).
            NOT DONE in Phase II

        6.  add query interface for "last changed date". NOT DONE in
            Phase II

    3.  Investigate redundant servers configuration (2 FTE weeks -- was
        3 FTE days) (Being done in the context of the High Availability
        of FermiGrid resources)

6.  Improve GUMS usability

    1.  Improve pool account management (1 FTE week) (Started).
        Partially DONE in Phase II

        1.  Improve error logging (for v1.2)

            1.  Add error when authorization is denied because pool
                accounts are exhausted

        2.  Improve management interface (Done Jan 07)

            1.  Add interfaces to query used and available pool
                accounts.

            2.  Add interfaces to change mapping by hand (Done excl.
                pool accounts)

    2.  Implement history log querying interface (2 FTE week) (Not
        started: for v2.0)

    3.  Add web interfaces for administrative commands (Done Jan 07).

    4.  Map pool accounts to DN AND FQAN, rather than DN only. NOT DONE
        in Phase II.

    5.  Pool accounts should NOT be mapped to users during VOMS
        synchronization simply to create vo name maps (!= grid-mapfile).
        NOT DONE in Phase II.

    6.  Recycle pool accounts

7.  gPlazma integration with DCache and deployment (effort TBD). Now
    Under dCache management.

8.  Integration of gLexec with PDP (8 FTE week: Done Oct 06).

    1.  Commissioning for CDF. Done Apr 07 (kicking out the kinks)

9.  VOMRS: implementation of "vital" features for stakeholders. As of
    Apr 07, assisting with debugging

10. Define roadmap for long-term future

    1.  Interact with Globus (Security model, XACML PRIMA-equivalent,
        CAS, etc.). Spin off: AuthZ call-out protocol interoperability
        project

    2.  Interact with EGEE (collaboration on GUMS). Expired.

11. Outreach

    1.  Understanding Requirements from new VOs and groups

    2.  Work with LIGO to improve certificate request process. Should be
        done by Phase II.

12. Authorization Interoperability (a collaboration between VO Services,
    EGEE, and Globus)

13. Privilege Policy Management (allow VOs and Sites to define, publish,
    and enforce privilege policies)

14. Enable VOMS-signed Attribute Certificate Validation (stop VOMS/GUMS
    synch.)

15. Support Storage Groups in Defining Next Generation Storage
    Authorization Models