pdf - Citi - University of Michigan

XZY\[]Y_^a`Bb8c"bFd$^a`¢e¤fhgi^hg1dkjc5lmfanogpY_q¤r%e4s^hY_^
t$…†x'zh{|}~¨

ü¨×Ü¡ý ò¤ö Ûó$öþÜ4Ù€óaû¡ÙGÛp×û4ô¦óø3Øaóhùpþ¤Ùóùøªò¬Ú¦ÚmÙ€ø3ò›ú
û4Ù%ÜJ
È‚ŽÉ¨Ž ¦ö4Ù%öû4ôÙZEÂñË×$Û¨¦öEÂÜ4ò¤ø:'Ù€þ&¦3ú
óaû¡ÙFÜ¡Ù%ö4ÙÜ¡Øaóaû4ò¬×ùpö©
û¡ôÙÙ%ø3õ$Ù‚× û¡ôÙ?þóÚm÷¨¦ö®ùÙûIüL×$Ü4ý«û¡×«û4ôÙø3Ù€öø×Ú
û4×ÂÛ1Ù‚ó¦3û4ôÙùû4ò¤þóhû4Ù%ø¢óhùø¦ó¦û4ô×$Ü4ò0/Ù€øªòËù¦Û1×hû4ômø3×$ÚmóòËùpö
û4Ü5¦ö

Ü¡Ùñ¬òËÙ€öJ×ù7EÂñ¬×Û¦ö Èžã Ç×Üö: TC(WVC( (W+.D>2¹03@Q.10=?+@
ö4צÜSþ¤Ù„'÷1Ù%þò”¢pþ%óaû¡òË×$ùÁóhùõ@¦óhõ$Ù?) Ç×Ü¡ÚÂ# ߇¢‡%]¦
ó$þSôòËÙ%ØÙ€ömû4ôò¤ö¡¦ö

Client Workstation
Web Browser
libpkcs11
kinit
kx509
3
Apache Web Server
kct_module
kx509_module
globus_proxy_init_module
gara_module
1 2
5
4
6
KDC
KCA
KCT
Router Pool
9
Gatekeeper
grid−mapfile
7
Resource Manager
8
Diffserv_manager
setup_flow
Globus−Gara Service
‡7¨¥‡ãâ «hˆ‰äåŠ;«h‹&æ_Œ'?«,­ ·®’$š›§®²•€” IŸ‚’“o­ ]“a£o˜%p¥Ÿ¡­®“ I¯« IŸS§¹“€” I£SŸS§˜ IŸ‚ IŸS§¹Ÿ4 I¢Ÿo°ª­Gš]I’¢I’ŸÈ‚ŽÉ¨Ž
›òËõ@¦Ü¡Ù«ß¨¦{ÝaÞ“ß@à,á§
¹\˜£SŸ€QÒd æ ì€í*禔¥$¯ª¯Ÿ¡œ§ IŸS´$˘£SŸ]“€¥$•ÂIŸ¡ I© Ð"ÒW£¡ IŸo°ŸS¥aIš›˜%]§S®Ž§®š]¥'°š›£S˜IŸo°8ḧœªI’$Ÿ°˜§¹’Ÿo°8¨3“oα˜«È¨›“%¨”$§º³ºÈ‚˜¤

C
§© Û1Ùôóñ”
.iÙÛÑö+¦ò¬Ü¡Ù%ö¡¤§¦ùý
—,©d‚ôÙ
þÜ4Ù€óaû4ÙEÂñ¬×Û¨¦pö‚÷Ü4×43ÿ—þÜ4Ù€ø3Ùùû4ò¤óhñ¤ö©
` f%dÙ3[ËqY¦öþÜ4Ùú
ݨ©d‚ôÙ$.,Ù%Û8ö+¦ò¬Ü¡Ù%øÅÛ'ÿÏû4ôÙ
š
ý$Ùÿ3ö«×Ûû¡óhò¬ùÙ€ø ò¬ùÏö

þ
ø3ò¤ö

PZRQH%§SBTÓ¥U1§
&6;=+¦òËÜ¡ÙÂû4ôÙ—dhY
` ^ag5^¸q¤nLû4×möû4ôÙ¢õ$óaû¡Ùý$ÙÙ÷1ÙÜFôóö>óhùÔò¬Ú¢ú
û¡ôÙkõóaû¡ÙýÙ%Ù÷1ÙÜ?¿ öm÷1ÙÜ Ç×Ü¡Ú óhùþÙ© ‚ôÙ õ$óhû4Ùú
÷ó$þoûµ×$ù
.iÙÛkö4ÙÜ¡ØÙ%Ü©*.,Ù¦óö¡öJ¦Ú¦Ù«û¡ôò¤ö>þÙÜ4û4ò£¢pþóhû4Ùªü‚óö?ò¤ö+¦Ù%ö× /Ü4Ù?>+¦Ù%ö

þ
þ
þ
k(lnm1oqp Žaà.r,ö4÷pÙ€þ¤ò£¢Ù%ömóù Ùù'Ø'ò¬Ü4×$ùÚmÙùû
baced¥cgfihCj
û¡ôóaû>û4ôÙ¦þ&¦Ü¡Ü¡Ùùû>ö4ÿ'öû4ôÙ¦õ$óhû4Ùú
ö÷Ü¡ò¬Øò¬ñ¬ÙõÙ€öÞ'×$Ü
ý$ÙÙ÷1ÙÜóùøµÜ5¦ùZüò›û¡ô¸õ$óaû¡Ùý$ÙÙ÷1ÙÜ?¿
Çÿ¢óhñ¬ñ3û4ôÙö4Ù%þ¦Ü4òËûIÿ¥Ü¡Ù>+¦ò¬Ü4Ù%ÚmÙùû¡öò¬Ú¢ú
òËûGÚ7¦ö

óhû?ñË×$õò¬ù-©
ß,©d‚ôÙœ¦ö4ÙܨòËùµû4ôÙÂñ¬×'þ%óhñ1Ü4Ù€óhñ¬ÚÑÙ&3Ù%þ¦3û4Ù€ö‚s½õö÷«óùø
¦û4ôÙ

Client Workstation
Web Browser
libpkcs11
kinit
kx509
3
Apache Web Server
kct_module
kx509_module
globus_proxy_init_module
e2e_gara_module
Globus−Gara Service
1 2
5
4
6
12
Gatekeeper
grid−mapfile
KDC
KCA
KCT
13
Router Pool
11
Gatekeeper
grid−mapfile
7
Resource Manager
8
Diffserv_manager
group_membership
KeyNote_policy_file
setup_flow
9
Local Domain
Remote Domain
Resource Manager
14
Diffserv_manager
group_membership
KeyNote_policy_file
setup_flow
15
AFS PTS
10
PTS_get_group
Router Pool
Globus−Gara Service
«hŠ¡ÌÎÍ'‹eÏ¡¨«‰aÍ,¬p‹%«a¨„«‰;«‹‰ÐŒŠª§Í,å Ñ¢ŒŠ¡ŒÓÒ-Ô§Í.Ì“­ Ò L â š]§/˜ÒŸ¡ I¨3Ÿ4 I“€§®ÒŸ¡œ L š]§º¹ Iš›¨$”$Iš]“€¥ â ŸS¥aIŸ¡ o"Ò â ŽÅš›§®˜
›òËõ@¦Ü¡ÙFݨ¦Ë
I¨3Ÿ¡ Iš]ÍSŸS°mÒŸ¡œ žhš]•€¥Ÿ4 o/Ò â · š›§L˜«ÒŸ¡ I¨3Ÿ¡ Iš]ÍSŸS° â IŸo°$ŸS¥aIš›˜%5·p

wƒyhƒ$wÄt@Å1}hxuÇÆÅ+È+Ƀ+Êuƒ@ÅËx$w+ÌfÍ
Ã
y‡ÅtwÅÆÅ5}o|5ƒ+Ê,ÎÎ+ÏÐfÑ4ÐfÑ+Ñ4Ò¨Í Ã v{3wt@Å5}axü Ê,ÓÇÍ
Ã
ƒuvÉxp}€u,ŨÆt+Ê6ÑÔ6ÑQ§ÐÑ+Ñ"JÎ@ÐÑ?Õ+ÒÍ
Ã
ƒuvÉxp}€u,ŨÆÖ¨Ê6ÑÔ6ÑQ§ÐÑ+Ñ"JÎ@ÐJÐÔ,×Í
Ã
Ötu3v@ËJ}av+Å$¨Ê,ÓÇÍ Ã É3wxÅx~x3†Ê+Å1~4É6Í
Ã
~$†}aƒu,ÅÆhut|5ƒ+Ê3t…†$xÇÍ Ã ~†}hƒu,ŨÆ$v$ü Ê,Ð+×ÏÕ+Ô¨Ð
Ã
daY Øe¤qnor `m^hg1^¸$qnLþSôÙ€þSý3öþ¤×$ù,¢õ@¦Ü¡óhû4ò¬×ùa¢ñ¬Ù%ö
í¨©d‚ôÙ
û4ôÙÜ4×@¦3û4Ù%Ü¡ö8ö+¦Ù€öIûZòËù,
óùø¥ñ¬×3þóñò¤ø8óÜ4Ù¨óaû4ú
û¡ôÙùû4ò¤þóhû4ÙLû4ôÙj¦ö4ÙÜ?©L‚ôÙ8L
É‚ž® ðÙ%ö4צÜSþ¤Ù"'÷1Ù%þò”¢1þóaû¡òË×$ù!ÁQóhùú
ûSóþSôÙ€ø¥û¡×«û4ôÙ
Ç×Ü¡Ú óaû¡òË×$ù¥û4׫û¡ôÙd˜«Ùÿ3Ö?×û4Ù‚÷1×ñ¬ò¬þÿ¥Ùùõ$òËùÙ
ÚmÙùûGò¬ù,
ÇÜ¡×ÚÑû¡ôÙ„˜«Ùÿ3Ö?×û4ÙÂ÷p×$ñ›ú
üôò¤þSôZÜ4Ù€óøöû4ôÙ«÷1×ñ¬ò¬þÿ3ö$
õ@¦óhõ$Ù?¦
ò¤þ¤ÿ!¢pñËÙ¥óùøZÚmóýÙ€ö¨óùø¸ó¦3û¡ô×Ü¡ò0/%óaû¡òË×$ùø3Ù€þ¤ò¤öóØò¬ùõ
û4×UÚ óýÙ û¡ôÙ Ü4Ùú
û¡ôóaûiû4ôÙŸ¦ö4ÙÜ,ò¬öÏó¦û4ô×$Ü4ò0/Ù€ø
Øe¤qnor ` ^ag1^¸$qn/Ü5¦ùö/û¡ôÙªeqRÙ?¹ Úf‡Û
>+¦Ù€öIû€Þû¡ôÙ¢daY
QÙ%ñËùÙû¿ öWû4× û¡ôÙ»óh÷÷Ü4×ú
Ü)'÷1Ù%þ¤ûUö4þÜ4ò¬÷3ûCüôò¤þSô
÷Ü¡ò¤óaû4ÙÅܡצû4ÙÜSö óùø þ¤×$ù,¢õ¦Ü4Ù€öZû4ôÙ ’×aü„©
‚ôÙ
Ø‚eq¤nor ` ^ag5^¸q¤nÏ÷ó$þSýóõÙ€ökû¡ôÙCÜ¡Ù%ö¦ñ›ûSöÅ× Zû4ôÙ
dhY
ÚmÙÚ8Û1ÙÜSö4ôòË÷ñ ¦ùþ¤û4ò¬×ù þ%óhñ¬ñ«òËùû4× ó ö

Ù
á
Þ V @6I-03@QA ì EG+¥ß
á?—,©d‚ôò¤öò¬öQû4ôÙ‚ö¡óhÚmÙóö{û¡Ù÷†íÞÙ&þ¤Ù%÷3ûQû¡ôóaû/ö

‰›"ågªC}n‚Cˆng’n‚:ƒS” ‚:ƒC|e’"ågªS{:”‰ˆ:ƒe‚n"”e‚g}n{"n§Cæ çn³n±˜¦(~n“C ©
‚
ß4%š¤©è&¨ñ¤ó/%ÙÞ!ó©„›Ùò¬õÙù'Ûó¦Ú¸Þ2ó©ZA¹×óhùùò¤ø3ò¤öÞ óùø
#
¤ f;¹1Þáíí@¨© e
¢%š¤©ð&Lñ¤ó/%ÙÞ}óÇ©2›Ù%òËõ$Ùù'Ûó¦Ú¸Þ,óhùpø š¤©¥û4ÜSó¦ö¡ö©
#
݇%»>×3þ&¦ÚmÙùûSóaû4ò¬×ùY¦ C Eœ¦ò¤ø3Ù û¡× EZC>ð"C©
#
¦ ’:Ž˜¦9z"|e„"åg‹"|ngå
ˆn‚S‚C~¨¤åSåe›S›C›:§gC~©¦O…^”S
•GÜ¡ÙÚmò£¦Ú ò¬÷ ×aØÙÜ¡Ø'òËÙ%ü„©
#Ëáá&%7EZÜ*CFÖ¥Z©
¦3C“C}:å‰~n{n"ge’n‚ ‚:ƒC|g’:Cå
ˆn‚S‚C~¨¤åSåe›S›C›©¦ƒ‰’"g{C’"C‚"©
C
—4%¥ð„© &j¦3û4ñ¬ÙÜ€Þf»†©ÜGùõ$ÙÜ4û%ÞA©f›×öIû¡ÙÜ€Þ6(©f˜«Ù%ö¡öó¦ú
©¨L¦Ù€þSýÙÞ3óùø:óÇ©î/×ñ¬Ú¦Ù%Ü©{C
óòËù¥õ$Ü4×@¦÷¥ö4ÙÜ¡Øò¤þ¤Ù€öQØ'ò¤ó?óÂö

(L×$Úm÷¨¦3û4ò¬ùõ •®×$Ü