# Presentation: 838900

## VOMRS StatusGDM Report

- T. Levshina

## Where do VOMRS/VOMS fit in Grid Services

## Milestones and Effort for 2006

- Current Status:
- VOMRS 1.2.0 has been released on October 4th, 2005 (new features, bug fixes, oracle support)
- VOMRS 1.2.1 _GLITE (glite 1.4 package + gLite patches) has been released on November 15th , 2005
- VOMRS is installed at:
- Fermilab  (10 installations)
- “Fermilab” VO ~4,600 members
- “Dzero” VO      ~ 550 members
- “USCMS” VO   ~   90 members
- BNL (2 installations)
- CERN (8 installations)
- Texas Tech University   (2 installations)
- University of Melbourne (1 installation)
- Development:
- Working on new release v1.2.2
- VOMRS/SAM Registration support
- Bug fixes
- Maintenance and Support:
- Fermi Grid support
- On going work with LCG Task Force:
- Migration from LDAP VO to VOMRS
- Performance issues CERN Human Resource DB
- Oracle issues
- Working on integration with VDT

## VOMRS and Grid VO Management

## VOMRS Architecture

- VOMRS
- Server

- VOMRS
- DB

- VOMRS Admin

- CLI

- WEB
- CLIENT

- gLite VOMS
- DB

- gLite Trust
- Manager

- GSI
- Authentication

- Service Broker

- Service

- CLI

- SOAP+SSL
- Authentication

- HTTP+SSL
- Authentication

- VOMS
- Admin API

- LCG ORGDB
- API

- LCG ORGDB API

- Client Host

- VOMRS Host

- ORGDB
-  Host

- SAM DB
-  Host

- SAM ADMIN
- API

- SAM ADMIN
- API

## VOMRS Server Architecture

- Interface
- Manager

- Event
- Manager

- Server

- Synchronizer
- gLite VOMS
- ADMIN API

- VOMRS
- DB

- gLite VOMS
- DB

- Service Broker

- Service

- Client
- Manager

- Client
- IF

- LCG ORGDB
- Validator

- LCG ORGDB
- DB

- Membership
- Validator

- CA
- Validator

- CA
- Synchronizer

-              Legend
-                       Server thread
-                       Reusable
-                       components
-                       Optional component (depends on Registration Type)
-                      Database

- SAM Groups
- Validator

- SAM
- DB

## VOMRS/VOMS within the scope of GRID Services

- VOMRS

- Virtual Organization
- Administration

- VOMS

- Common Middleware & Services

- GRID Middleware & Interfaces

- Authentication & Authorization

- GUMS

- Authentication & Authorization

- PRIMA

- SAZ

## VOMRS Project(Scope and Services)

- Scope:
- To investigate and implement  the requirements, both policy-related and technical, for
- admitting collaborators into a VO, and facilitating and monitoring their authorization to
- access the available grid resources.
- VOMRS provides a comprehensive set of services that facilitates management of VO
- membership and privileges:
- implements a registration workflow that  requires
- email verification of identity
- VO usage policy acceptance
- membership approval by designated VO representatives/administrators
- allows for management of multiple grid certificates per one user
- allows the selection of groups and roles by user  and  management of groups and group role assignments by various VO administrators.
- VOMRS maintains a VO membership status and a certificate level status for each member, allowing for VO-level control of a member's privileges and membership.
- VOMRS provides a subscription service;  email notifications are sent when selected changes are made to information about a member's VO membership status and/or when actions are required by members or administrators.
- VOMRS provides for VO control over its trusted set of Certificate Authorities (CA).
- VOMRS is capable of interfacing to local systems with personnel information (e.g., the  CERN Human Resource Database, SAM DB), and pulling or pushing relevant member information from/to them.
- VOMRS membership data can be configured to synchronize with the VOMS system (developed jointly for DataTAG by INFN and for DataGrid by  CERN) with all approved members' certificates and privileges.