2. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
• The method used to collect users
• Problems encountered
• Solutions provided and impact
• Statistics
• Robot Certificates
• Open questions
27/03/2012 2
3. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Method
27/03/2012 3
CIC DB
VO ID CARD
EGI
Operations
Portal
VO Managers
VOMS SOAP
VOMS SOAP
VOMS SOAP
Users lists recordedVO USERS
STATISTICS
4. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Problems encountered
27/03/2012 4
1. Missing or outdated VOMS information e.g listMembers method
missing or incorrect - Correct Url looks like
https://cclcgvomsli01.in2p3.fr:8443/voms/biomed/services/VOMSAdmin?method=list
Members
2. Unstable access to VOMSes : servers are down, not reachable , not
properly installed or in restricted access
3. Not all the users are registered in VOMS (e.g users hidden by a
robot certificates )
4. Expired user registrations are not removed from VOMS (excepted
VOMRS)
5. Some VOs are inactive for over a year, but still included in statistics
5. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Solutions
27/03/2012 5
1. Email was sent to VO managers.
2. Identification of some VOMS servers with information from BDII
3. Compatibility issues with some VOMS got addressed with the
upgrade to VOMS 2.0
4. EGI.eu setup a framework to collect statistics about people who use
EGI through “robot certificates” (Details on slides 10 )
5. Further development of VOMS was requested : VOMS should be
published into BDII with the number of users
6. List of inactive Vos was obtained from Accounting Portal, Vos were
contacted, suspended
6. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Impact
27/03/2012 6
Action VO Concerned User numbers impact
Fill the holes in VO id cards from BDII Approx 10 Approx. +400
Contact VO managers and ask them to complete the VO ID card Approx 6 Approx. +100
Contact VOs that have incorrect user enrolment URLs Approx 10 Approx. +200
Suspend the VOs that are inactive for 12 months and don't expect activity Approx 10 Approx. -250
7. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Recent Statistics
27/03/2012 7
http://operations-portal.egi.eu/vo/usersSummary
• 202 VO identified with users (223 VO in total)
• 20706 Users
10. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Robot user statistics
27/03/2012 10
[1] http://go.egi.eu/wiki.robot.users
[2] http://go.egi.eu/blog.robot.users
• Goal: identify robot users without certificate
X509 certificates that belong to an application with its owner.
• Owner registers in the VO with the robot certificate.
• Owner allows access to third party users to the VO through the application.
• Framework:
– No automatic mechanism is in place
– Robot owners provided statistics to EGI.eu
– Data collected in a wiki page [1]
– Want to read more? [2]
11. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Robot user Statistics
27/03/2012 11
• 26 VO using robot certificate
• Estimation of 300 users but probably same users are using several different
Science Gateways (different VO’s and are counted multiple-times.
• Number of robot owners: 33
• Out of 33 , 14 robot owners provided feedback (42%)
• The number of robots fluctuates, and some robots were not anymore in use.
VOMS entry deletion was requested (at least 4 or 5 robots were deleted in the
last 3 months)
• This number is currently is negligible at the time being (when compared with
21K users reported by Operations Portal).
But we expect an increase of this number with the increasing use of Science
Gateways, and federated identity authentications
12. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Science Gateways
27/03/2012 12
• Science Gateways (SG) are an emerging grid interface
• SG are often coupled to automated clients (robots)
• Robot certificates behave on behalf of the end-user
• There are 46 robots operating in EGI resources
Time evolution of registrations to Science Gateways (Roberto Barbera’s)
13. www.egi.euEGI-InSPIRE RI-261323
EGI Community Forum 2012
http://cf2012.egi.eu
Open Questions
27/03/2012 13
1.Access to EGI through science gateways that use
federated identity management for authentication is
emerging
– EGI facilitates this through knowledge and technology exchange:
http://go.egi.eu/sciencegateways
– How could we monitor the size and evolution of this user community?
2.Definition of EGI users
– Current statistics focus on those who use certified sites
– However, many NGIs also offer resources that are not certified, but provide
similar services (e.g. Hadoop clusters; national/regional cloud infrastructures)
– Most of these resources are available for multi-national EGI communities too
– Should the users of these system also considered as EGI users?
