CDA SC510 Uživatelská příručka stáhnout pdf (Strana 33)

D2.1.4 IST-033576

VOs. It is a proof-of-concept of extending standard Linux to treat VO users as

local accounts in a transparent and application-independent way.

The current prototype has limited support for local policies of access control

and resource usage constraints for VO users. In next steps, the enforcement of

local policies against VO users will be the focus. To support strong isolation and

effective resource partition among VO users, new virtualization mechanisms in

Linux are to be explored for use.

The current prototype has limited support for complex applications: a single

account is created from XOS-Cert by the PAM module, mixing multiple VO cre-

dentials is not possible, etc. New requirements have been added to XtreemOS

which request for the creation of multiple user accounts (with different privileges)

for the execution of different phases of the same application. The current pro-

totype will be enhanced in order to support these new requirements according

to a new set of speciﬁcations for VO support. During the second phase of the

XtreemOS project, the support of very dynamic VO will be evaluated (VO dura-

tion limited to an application or workﬂow execution). These very dynamic VOs

will probably necessitate the exploitation of extra credentials in order to fetch ini-

tial data and to store ﬁnal results in XtreemFS. PAM module will be extended to

support the presence of multiple XOS-Cert.

31/49 XtreemOS–Integrated Project

1 2 ... 28 29 30 31 32 33 34 35 36 37 38 ... 50 51

Žádné komentáře

CDA SC510 Uživatelská příručka Strana 33