27/03/2012 4 1. Missing or outdated VOMS information e.g listMembers method missing or incorrect - Correct Url looks like https://cclcgvomsli01.in2p3.fr:8443/voms/biomed/services/VOMSAdmin?method=list Members 2. Unstable access to VOMSes : servers are down, not reachable , not properly installed or in restricted access 3. Not all the users are registered in VOMS (e.g users hidden by a robot certificates ) 4. Expired user registrations are not removed from VOMS (excepted VOMRS) 5. Some VOs are inactive for over a year, but still included in statistics
5 1. Email was sent to VO managers. 2. Identification of some VOMS servers with information from BDII 3. Compatibility issues with some VOMS got addressed with the upgrade to VOMS 2.0 4. EGI.eu setup a framework to collect statistics about people who use EGI through “robot certificates” (Details on slides 10 ) 5. Further development of VOMS was requested : VOMS should be published into BDII with the number of users 6. List of inactive Vos was obtained from Accounting Portal, Vos were contacted, suspended
6 Action VO Concerned User numbers impact Fill the holes in VO id cards from BDII Approx 10 Approx. +400 Contact VO managers and ask them to complete the VO ID card Approx 6 Approx. +100 Contact VOs that have incorrect user enrolment URLs Approx 10 Approx. +200 Suspend the VOs that are inactive for 12 months and don't expect activity Approx 10 Approx. -250
statistics 27/03/2012 10 [1] http://go.egi.eu/wiki.robot.users [2] http://go.egi.eu/blog.robot.users • Goal: identify robot users without certificate X509 certificates that belong to an application with its owner. • Owner registers in the VO with the robot certificate. • Owner allows access to third party users to the VO through the application. • Framework: – No automatic mechanism is in place – Robot owners provided statistics to EGI.eu – Data collected in a wiki page [1] – Want to read more? [2]
Statistics 27/03/2012 11 • 26 VO using robot certificate • Estimation of 300 users but probably same users are using several different Science Gateways (different VO’s and are counted multiple-times. • Number of robot owners: 33 • Out of 33 , 14 robot owners provided feedback (42%) • The number of robots fluctuates, and some robots were not anymore in use. VOMS entry deletion was requested (at least 4 or 5 robots were deleted in the last 3 months) • This number is currently is negligible at the time being (when compared with 21K users reported by Operations Portal). But we expect an increase of this number with the increasing use of Science Gateways, and federated identity authentications
27/03/2012 12 • Science Gateways (SG) are an emerging grid interface • SG are often coupled to automated clients (robots) • Robot certificates behave on behalf of the end-user • There are 46 robots operating in EGI resources Time evolution of registrations to Science Gateways (Roberto Barbera’s)
27/03/2012 13 1.Access to EGI through science gateways that use federated identity management for authentication is emerging – EGI facilitates this through knowledge and technology exchange: http://go.egi.eu/sciencegateways – How could we monitor the size and evolution of this user community? 2.Definition of EGI users – Current statistics focus on those who use certified sites – However, many NGIs also offer resources that are not certified, but provide similar services (e.g. Hadoop clusters; national/regional cloud infrastructures) – Most of these resources are available for multi-national EGI communities too – Should the users of these system also considered as EGI users?