GAARDS UI 1.4 User Guide

	Contents Dorian Grid Grouper GTS CDS Using GAARDS UI v1.4 Downloading the stand-alone version of GAARDS UI Changing Target Grids Adding a New Target Grid Additional Notes

GAARDS is a collection of services and tools for the administration and enforcement of security policy in an enterprise Grid. The GAARDS UI however, is the actual user interface (UI) used to perform certain the tasks of the services that are apart of the security component of a Grid. Below you will find instructions for the tasks that can be accomplished for each project.

Dorian

The GAARDS UI is used to perform the day to day administrative tasks of Dorian. This includes the management of user accounts, host certificates, and identity providers. Instructions are also available on how to request a host certificate or change a current password.

Grid Grouper

The GAARDS UI is used to administrate groups and stems (defined by Grid Grouper) on a Grid. This includes viewing groups, managing privileges of a group, and adding/removing members to a group. It also includes viewing and administratiing stems.

GTS

The GAARDS UI allows Grid Trust Service (GTS) administrators to manage certificate authorities and levels of assurance of the GTS. It also allows GTS administrators to manage a GTS's authorities and priorities, and manage permissions for access to the GTS.

CDS

The GAARDS UI provides the mechanism to delegate credentials, obtain delegated credentials, and manage credentials through the Credential Delegation Service (CDS). The GAARDS UI also allows users with administrative access to CDS to grant or revoke administrative access to the CDS.

Using GAARDS UI v1.4

Downloading the stand-alone version of GAARDS UI

Previous versions of the GAARDS UI required the user to have the entire caGrid and Globus distributions installed. This was a large time- and space-consuming dependency for users who only needed the functionality of the GAARDS UI and not the full caGrid suite.

1. Download the GAARDS-UI from https://gforge.nci.nih.gov/frs/download.php/9302/gaards-ui-1.4-bin.zip.
2. Select the gaards.zip.
3. Unzip the gaards.zip into your preferred directory.
4. Run the executable.
   1. On Windows, start GAARDS by executing "run.bat.
   2. On Mac OS X / Linux, start GAARDS by executing "sh run.sh".

Changing Target Grids

In previous versions of the GAARDS UI, a user had to exit the GAARDS UI and run the configuration utility to switch grids. In 1.4, GAARDS has been updated to be able to change and configure grids from within the GAARDS UI.

Note: the GAARDS UI and the rest of the caGrid distribution now store their grid configuration files in separate locations, but both systems still store the public keys for a grid in the same location ($HOME/.globus/certificates). This can cause a Unknown CA error if GAARDS sets the target grid to production, but Introduce is still configured for training.

# Open the GAARDS UI.

1. Click Window->Preferences.
2. Expand the "Target Grids" node under the Preferences tree.
3. Select the grid to which you would like to switch.
4. Click "Set Target Grid".

Note: If any other dialog windows are open, close and re-open them to pick up the new target grid configuration.

Adding a New Target Grid

The administrator of the new grid will have to have followed steps similar to these instructions in order to create needed grid configuration files in addition to having placed them on a publicly reachable resource.

The administrator will also need to create an ivy settings file that points to the location of the new grid's configuration files and provide it to the user.

Example ivy settings file:

<ivysettings>
    <settings defaultResolver="community-ivy-resolver-1.3" />

    <caches checkUpToDate="false" useOrigin="true" defaultCacheDir="${cache}"/>

    <resolvers>
        <url name="community-ivy-resolver-1.3">
              <ivy pattern="http://software.cagrid.org/community-repository/CVRG/target_grid/ivy-[revision].xml"/>
              <artifact pattern="http://software.cagrid.org/community-repository/CVRG/target_grid/[revision]/[artifact]-[revision].[ext]"/>
              <artifact pattern="http://software.cagrid.org/community-repository/CVRG/target_grid/[revision]/[artifact].[ext]"/>
        </url>
    </resolvers>
</ivysettings>

# Select the "Target Grids" node in the Preferences tree.

1. Enter the Repository Name.
2. Browse to the Repository Settings file provided by the grid administrator.
3. Click "Add".
4. Click "Save".

Additional Notes

By default, the GAARDS UI uses the revision from the ivy module file as the grid's display and system. To provide a more descriptive display name and a consistent systemName, the ivy module file needs to be updated to include some additional information.

An additional attribute (xmlns:grid="http://ant.apache.org/ivy/extra") needs to be added to the <ivy-module> element:

<ivy-module version="2.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:noNamespaceSchemaLocation="http://incubator.apache.org/ivy/schemas/ivy.xsd"
  xmlns:grid="http://ant.apache.org/ivy/extra" >

For the displayName, add a child element called <grid:displayName> to the <info> element. For the systemName, add a child element called <grid:systemName> to the <info> element. Both should contain the desired values to be displayed.

  <info organisation="caGrid" module="target_grid" revision="filetraining-1.4">
	<grid:displayName>Training Grid for caGrid 1.4</grid:displayName>
	<grid:systemName>filetraining-1.4</grid:systemName>
   </info>