使用Akenti和Globus Toolkit进行作业和资源管理的细粒度授权
Fine-Grained Authorization for Job and Resource Management Using Akenti and the Globus Toolkit
摘要：
随着网格范式被采用作为跨组织域共享远程资源的标准方式，对这些资源的细粒度访问控制的需求也在增加。本文提出了一种授权的解决方案，作业提交和控制，开发的一部分，国家融合协作实验室，使用Globus工具包2和Akenti授权服务，以执行细粒度的授权作业和资源管理请求在网格环境中。在作业启动时，它允许系统根据资源使用的授权策略评估用户的资源规约语言请求（确定用户可以在给定资源上使用多少CPU或内存，或者用户可以运行哪些可执行文件）。此外，基于授权策略，它允许其他虚拟组织成员管理用户的作业。
英文摘要：
As the Grid paradigm is adopted as a standard way of sharing remote resources across organizational domains, the need for fine-grained access control to these resources increases. This paper presents an authorization solution for job submission and control, developed as part of the National Fusion Collaboratory, that uses the Globus Toolkit 2 and the Akenti authorization service in order to perform fine-grained authorization of job and resource management requests in a Grid environment. At job startup, it allows the system to evaluate a user's Resource Specification Language request against authorization policies on resource usage (determining how many CPUs or memory a user can use on a given resource or which executables the user can run). Furthermore, based on authorization policies, it allows other virtual organization members to manage the user's job.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
