Glexec , SCAS & CREAM

1. Glexec, SCAS & CREAM

2. Milestones • CREAM-CE capable of large-scale direct job submission • Glexec & SCAS capable of large-scale use on WN in logging only mode • Show CREAM-CE/glexce/SCAS at scale • Support direct job submission • Support WMS job submission

3. CREAM UI Used by ALICE From VO BOX WMS glExec PPS: On WN with setuid OK for small scale deployments. Logging only mode not working SCAS CREAM CE Released – but not advertised Deployed on 2 sites ALICE experience OK PPS: On plenty of sites PATCH Ready for Certification: WN Proxy Renewal PATCH Failed certification PATCH Passed Certification: Has untested ICE Bug fix patch entering certification Large scale Direct Submission Deployment Large scale WN Deployment (needs SCAS) Large scale direct Multi-User Pilot Jobs Condor-G  CREAM Simple submission working Moving through failure cases Large scale WMS Multi-User Pilot Jobs

4. Authorization Service • Components: • PAP (Administration): Core functionality complete • PEP (Enforcement): Complete. Developer testing • PDP (Decision): Started • Integration & Scalability Testing • January & February 2009 • Enter Certification • Mid-March 2009 subject to satisfactory testing

5. Deployment (In Discussion) • Incremental deployment • No big bang • Local Deployment • No external dependencies. Local configuration • Remote Policy checks • Pull in remote policy from OSCT • Perform Authz checks during WMS site selection • Sends requests to sites or sites release policy to WMS • Further details from recent SA3/JRA1 session • http://indico.cern.ch/getFile.py/access?contribId=18&sessionId=8&resId=0&materialId=slides&confId=42513

6. Summary • Priority remains glexec/SCAS/CREAM integration & deployment at scale • When independent components are proven • Authz Service in EGEE-III DoW • Will be integrated & deployed when ready • Load tests needed for CREAM integration • Activation will be incremental & can be site specific