47392834 Baocao Luanvan Final

Embed Size (px)

Citation preview

  • 8/3/2019 47392834 Baocao Luanvan Final

    1/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    LI CAM OAN

    Chng em xin cam oan rng ngoi cc tham kho c ghi r, cc kt qu thchin c trong lun vn ny l do chnh chng em thc hin. C mt s phn trong boco lun vn chng em c ly tng t cc ti liu tham kho c thm tng chovic pht trin ti nhng chng em m bo rng thu hiu hon ton cc ni dung. Tuyt i khng c vic sao chp hon ton t mt ti liu no m chng emkhng hiu c ni dung sao chp.

    LI CM N

    SVTH: Hunh Quang Trung ng Hong Thin Phong ii

  • 8/3/2019 47392834 Baocao Luanvan Final

    2/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Sau mt thi gian di lm vic mit mi v cng thng, chng em hon thnh c ti ca mnh. Trong sut qu trnh lm vic chng em nhn c s gip rt nhiu tgia nh, thy c v bn b, nhng ngi lun ng h chng em khi chng em cmthy kh khn v chn nn nht, nhng ngi a ra nhng ng gp thit thc v b

    ch gip chng em nh hng v c cch gii quyt tt nht cho ti ca mnh trongsut qu trnh lm Lun Vn Tt Nghip.

    Chng em xin cm n gia nh, bn b nhng ngi lun ng h chng em trong sutqu trnh lm lun vn.

    Chng em v cng bit n thy Phm Trn V, thy hng dn ca chng em, ngi thyknh yu, ngi lun a ra nhng li khuyn chn thnh v b ch cho ti cachng em, nu khng c s hng dn tn tnh ca thy th chng em khng th honthnh c ti ny.

    Chng em cng xin chn thnh cm n Thy Nguyn Quang Hng cng vi cc thy vcc anh trong phng h thng mng v my tnh, nhng ngi hng dn cho chngem rt nhiu trong Lun Vn Tt Nghip ny.

    Mt ln na chng em xin cm n tt c mi ngi, S tin tng ca mi ngi chnh lng lc chng em hon thnh tt lun vn ny.

    TM TT LUN VN

    Lun vn xy dng mt c ch Single-Sign-On t Sakai vo mi trng Vn-Grid.

    SVTH: Hunh Quang Trung ng Hong Thin Phong iii

  • 8/3/2019 47392834 Baocao Luanvan Final

    3/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Cng vic chnh ca Lun Vn l tch hp cc Grid-portlet theo chun JSR 168 vo Sakai c th t Sakai truy cp vo h thng Vn-Grid.

    MC LC

    LI CAM OAN ..........................................................................................................................ii

    SVTH: Hunh Quang Trung ng Hong Thin Phong iv

  • 8/3/2019 47392834 Baocao Luanvan Final

    4/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Chng 1: Tng Quan V Ti Lun Vn ............................................................................vii

    1.1 Gii thiu ti .......................................................................................................vii1.2 Mc tiu ca ti .................................................................................................viii1.3 Hng tip cn ca ti .......................................................................................viii1.4 Phng php trin khai ti .................................................................................viii1.5 Cu trc lun vn ....................................................................................................viii

    Chng 2: Cc kin thc nn tng trong ti lun vn .........................................................ix

    2.1 Tng quan v h thng tnh ton li .......................................................................ix2.2 Globus Toolkit 4.0 ....................................................................................................xi2.3 Single Sign On ........................................................................................................xix2.4 Tng quan v sakai ...............................................................................................xxiii2.5 Tng quan v OGCE portal ................................................................................xxviii2.6 Tng quan v Axis Service ....................................................................................xxx2.7 Chun portlet JSR 168 .........................................................................................xxxii

    Chng 3: Phn tch v hin thc h thng ti lun vn .............................................xxxvii3.1 Phn tch h thng .............................................................................................xxxvii3.2 xut c ch tch hp portlet JSR 168 vo Sakai ...............................................xliii

    3.2.1 Xy dng cc tool tng ng .........................................................................xliii3.2.2 Tch hp Grid portlet da vo chun WSRP ...................................................xlv3.2.3 Tch hp portlet JSR 168 vo Sakai .................................................................xlv

    Chng 4: Kt lun ......................................................................................................................lii

    4.1 Nhng thnh qu t c ca lun vn: .................................................................lii4.2 Nhng hn ch ca lun vn ....................................................................................lii4.3 Nhng kh khn khi thc hin ti ........................................................................lii4.4 Hng pht trin ca lun vn: ...............................................................................liii

    Chng 5: Ph lc v ti liu tham kho .................................................................................liv

    5.1 Ci t Globus Toolkit 4.0 .....................................................................................liv5.2 Ci t OGCE portal ..............................................................................................lxv5.3 Ci t sakai phin bn 2.5.4 ................................................................................lxviiTi liu tham kho .....................................................................................................lxxv

    SVTH: Hunh Quang Trung ng Hong Thin Phong v

  • 8/3/2019 47392834 Baocao Luanvan Final

    5/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    DANH MC HNH

    SVTH: Hunh Quang Trung ng Hong Thin Phong vi

  • 8/3/2019 47392834 Baocao Luanvan Final

    6/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Chng 1: Tng Quan V Ti Lun Vn1.1 Gii thiu ti

    Trong thi gian gn y vi s pht trin nh v bo ca nghnh cng ngh thng tin.Cc h thng mng ngy cng pht trin v nng cp c v ti nguyn phn cng, tc ,

    bng tn. Cng vi l s pht trin ca nn cng nghip, dch v bt buc cc doanhnghip v ngi dng phi tip cn v ng dng cng ngh thng tin mt cch mnh m.

    Nhng i km vi i hi mt ngun lc v ti chnh v con ngi. Ra i trong honcnh , ti thi im hin ti ca lun vn mt th h cng ngh thng tin mi dn rai. l in ton m my (Cloud Computing). C th ni cc ng ln nh: IBM,Google, Microsoft ang tp trung pht trin nhm cung cp cc dch v s cho ccdoanh nghip gii quyt cc vn v chi ph c s h tng v con ngi ca doanhnghip trong vic ng dng cng ngh thng tin.

    Trong khi nm 2010 l mt nm thnh cng ngoi sc mong i ca mng x hi

    facebook. Mark Zuckerberg, nh sng lp mng x hi facebook, to ra mt th hcng ngh k ni mi trn internet, sau web, forum, blog. Th gi hn na t ngi dngfacebook. iu chng t rng kh nng tng tc, kt ni gia ngi vi ngi ngycng c ci thin. Con ngi ngy cng c nhu cu phi kt ni,nhanh, d dng, vhiu qu.

    Trong bi cnh ny th trong cng ng nghin cu khoa hc cng ang cn xy dngv thit lp mt h thng. Trong h thng phi kt hp c nhng tnh nng kt niging nh facebook, cc nh ha hc, vt l hc, a cht hc, c th tm thy nhau, chias, tho lun mt cch d dng. ng thi i vi cc nh khoa hc phi i din vi

    ngy cng nhiu bi ton phc tp v i hi mt lng tnh ton, phn tch ln. Bi vyh thng trn phi p ng c sc mnh tnh ton, kh nng p ng nhanh vi mtchi ph chp nhn c th Tnh Ton Li [1](grid computing) l mt la chn p ngc. Mt h thng kt hp hai yu cu trn m cc nc phng Ty pht trin rtsm t nm 2003 l Sakai VRE Demonstrator[2] ti cc trng i hc Anh v M. Cn Vit Nam th cha c mt h thng no tng t nh th. Do ti lun vn canhm gp phn nghin cu v xy dng mt h thng nh trn.

    Ti trng i hc Bch Khoa thnh ph H Ch Minh hin ang xy dng h thngtnh Ton Li (Vn-Grid)[3]. H thng tnh ton li ny c xy dng trn b GlobusToolkit 4.0[4][5][6] v Sakai [7][8] 2.5.4 hoc 2.7.1. ti lun vn s gii quyt bi ton truy

    cp h thng tnh ton li thng qua Sakai. Cu hi c t ra l ti sao phi pht trintheo hng phi truy cp h thng tnh ton li hay GlobusTookit 4.0 thng qua Sakaim khng dng mt h thng khc? Bi v Sakai c th p ng c yu cu trn mtcch tt nht. Hin nay c trn 350 t chc gio dc s dng Sakai nh mt h thngqun l gio dc v khoa hc, to ra mt mi trng lin kt hp tc gia cc nh khoahc. T ta c th to ra mt mng li m trn cc nh khoa hc c th chia s tinguyn, d liu nghin cu ca mnh cho ngi khc, c th s dng sc mnh ca cc

    SVTH: Hunh Quang Trung ng Hong Thin Phong vii

  • 8/3/2019 47392834 Baocao Luanvan Final

    7/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    thnh vin trong cng mng li gii quyt nhng bi ton c phc tp cao. chnh l li ch ca vic xy dng mng li tnh ton ny.

    1.2 Mc tiu ca ti

    Mc tiu ca ti l lm sao to ra mi trng truy cp h thng tnh ton li thngqua Sakai portal. Ngi dng sau khi ng nhp vo Sakai th c th ly proxy truycp vo h thng tnh ton li v thc hin cc cng vic trn h thng tnh ton li.

    1.3 Hng tip cn ca ti

    T qu trnh tm hiu lc thc tp n lc bt tay vo vic lm lun vn, nhm thamkho nhiu ti liu trn mng v c th a ra ba hng tip cn hon thnh ti ny:

    Xy dng cc tool mi hon ton cho Sakai truy cp vo h thng tnh tonli. Hng tip cn ny thun li ch ta l ngi ch ng trong vic xy dng

    cc tool ny v c th ty bin cc tool theo ca ta. Tuy nhin lm theo hngny th cn thi gian tm hiu kin trc Sakai cc cng c xy dng tool choSakai V thi gian lun vn c hn nn nhm khng th i theo hng ny.

    Tch hp cc Grid-portlet vo Sakai da trn chun WSRP [9] (Web Service forRemote Portlet), hng ny c u im l kh n gin ch cn ci t Sakai Portalv OGCE(Open Grid Computing Enviroments)[10] portal sau tch hp c chWSRP ln Sakai v OGCE Sakai c th truy cp n cc portlet ca OGCE vthc hin cc tc v truy cp n h thng tnh ton li. Lc ny Sakai portalch ng vai tr cu ni cho OGCE portal truy cp n h thng tnh ton li.Hng ny khng ph hp vi yu cu ca ti l to mi trng truy cp hthng tnh ton li trc tip t Sakai.

    Tch hp cc grid-portlet c sn t OGCE portal vo Sakai. Cc grid-portlet caOGCE portal c vit theo chun JSR 168[11][12][13] trong khi t phin bn Sakai2.4 th Sakai bt u h tr cho chun portlet JSR 168 nn hng ny l hngkh thi nht v tn t thi gian thc hin ti. V nhm quyt nh thc hin ti theo hng tch hp cc portlet c sn t OGCE portal vo Sakai.

    1.4 Phng php trin khai ti

    Nhm quyt nh la chn phng n tch hp cc portlet c sn t OGCE sang Sakai vtrin khai trn 2 portlet chnh l proxymanager portlet v jobsubmit portlet xydng h thng mu cho lun vn. Sau khi tch hp thnh cng hai portlet ny vo Sakaith cc grid-portlet khc c th c tch hp tng t vo Sakai.

    1.5 Cu trc lun vn

    Chng 1: Gii thiu ti

    SVTH: Hunh Quang Trung ng Hong Thin Phong viii

  • 8/3/2019 47392834 Baocao Luanvan Final

    8/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Trong chng ny nhm s gii thiu tng quan ti, tm quan trng ca ti, nhimv ca ti, hng tip cn ti, phng php trin khai tai v cu trc ca lunvn.

    Chng 2: Nhng kin thc nn tng ca ti lun vnTrong chng ny nhm trnh by gn nh ton b cc vn tm hiu trong qu trnh

    lun vn bao gm: Tng quan v Grid Computing. Globus Toolkit 4.0. Dch v Myproxy. Dch v GRAM. C ch Single Sign On (SSO). Sakai v kin trc ca Sakai. OGCE v kin trc ca OGCE. Gii thiu v Axis Service

    Chun portlet JSR168Chng 3: Qu trnh hin thc ti lun vn

    Phn tch a ra m hnh thit k ca h thng, La chn cch tip cn ti. Cch thc tch hp ln lt hai portlet Myproxy manager v Jobsubmit ca OGCE

    Portal vo Sakai.

    Chng 4: Kt LunTrnh by nhng nhn xt, nh gi ca nhm v nhng kh khn khi thc hin ti,nhng kt qu c, nhng hn ch ca lun vn, v xut hng pht trin.

    Chng 2: Cc kin thc nn tng trong ti lun vn2.1 Tng quan v h thng tnh ton li

    M u

    Khi nim h thng tnh ton li[1] ra i cng vi s hnh thnh v pht trin ca mngInternet th h th hai (Internet-II). Cng ging nh lch s hnh thnh v pht trin camng Internet hin nay bt u t nhng nm 70 ca th k trc, xut pht im ban u

    SVTH: Hunh Quang Trung ng Hong Thin Phong ix

  • 8/3/2019 47392834 Baocao Luanvan Final

    9/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    ca Internet l phc v trao i thng tin khoa hc - gio dc gia cc trng i hc,vin nghin cu trn ton th gii. Nhng sau , vo gia nhng nm 1990, Internet c thng mi ho bi cc Cng ty Vin thng v dch v gi tr gia tng. Hin nay,cc cng ngh mng li (Grid Technologies) mi ch c gii khoa hc cng ngh

    bit n qua cc hot ng nghin cu pht trin v cc thng tin t cc Hi ngh, Hitho in ra kh si ng trong mt thp k tr li y. Tuy nhin, cc cng ngh mng

    li m trong tnh ton li, cng vi mng Internet th h th hai c ng ogii khoa hc cng ngh v c bit l cc cng ty CNTT-VT a quc gia ln trn thgii nh gi rt cao.

    Tnh ton li hin ang trn pht trin tr thnh nn tng cng ngh ch oca mng Internet th h mi, gi vai tr ging nh nghi thc TCP/IP i vi mngInternet hin nay. Cc sn phm cng ngh trn nn mng li ang c thng mi ho a ra ng dng rng ri trong tng lai gn. Cng ngh mng li s a mng mytnh Internet ngy nay n gn hn vi kin trc mng li in, ni m vic khai thc, sdng v cung cp cc ti nguyn tnh ton cng n gin nh gn thm mt thit b cungcp/sdng in mi vo mng

    nh ngha v tnh ton li - Grid Computing

    Tnh ton li l mt cng ngh cho php cc t chc o (Virtual organization) chia s tinguynphn tn theo mt mc ch chung m khng yu cu phi c 1 trung tm iukhin tp trung.

    T chc o c th m rng t nhng b phn nh trong cng 1 vin cho n t chcgm nhiu thnh vin nm ri rc khp a cu. Mt s t chc o nh:

    i thit k Blended Wing Body ca hng Boeing B phn qun l sn phm Global VPN ca hng Worldcom c mt trn 28 quc

    gia. Phng k ton ti v ca 1 cng ty

    Ti nguync th l mt ti nguyn tnh ton nh my tnh c nhn, my tnh xch tay,trm lm vic, my ch, nhm my tnh (cluster), siu my tnh hoc c th l ti nguynlu tr nh a cng trong my PC, cc thit b lu tr chuyn dng nh RAID. Ccthit b o lng, b d (sensor) cng l 1 dng ti nguyn cn chia s. Thm ch bngthng mng, phn mm cng l ti nguyn ca mt t chc o.

    Tng Quan v M Hnh Mng Li

    H thng tnh ton li l h thng phn cng v phn mm kt ni mng my tnh th hsau, cho php chia s cc ti nguyn tnh ton (conputing resources) ca cc my tnh nimng, lm tng gp nhiu ln hiu nng v tc x l thng tin. Tnh ton li (GridComputing) l cng ngh nn trong vic hnh thnh mng li, l nn tng phn mmchy trn nn cc thit b phn cng kt ni mng truyn thng gip xy dng nhng ngdng mng li c nng lc nng lc tnh ton rt mnh m, c kh nng chuyn tinhng khi lng d liu khng l, kh nng lu tr v truy cp thng tin trn mng m

    SVTH: Hunh Quang Trung ng Hong Thin Phong x

  • 8/3/2019 47392834 Baocao Luanvan Final

    10/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    bng nhng gii php phn mm v cng ngh mng Internet truyn thng ch da trnnghi thc TCP/IP khng th t ti.

    Hnh 2. 1: M hnh kin trc h thng li

    Mng li c xy dng trn nn tng kin trc m v phn tng (c th so snh vicu trc phn tng ca h giao thc nn tng trao i thng tin trn mng Internet lTCP/IP). Trong mi tng ca mng li, cc thnh phn c chia s cc thuc tnhchung v c th c b sung nhng tnh nng mi m khng nh hng n cc tngkhc:

    Tng tc ch (Fabric): gip nh v cc ti nguyn mng li Tng kt ni (Connectivity): gip kt ni mng li trn cc mng Tng ti nguyn (Resource): gip chia s cc ti nguyn mng li Tng kt hp (Collective): gip kt hp v nh v nhiu kiu ti nguyn. Tng ng dng (Application): gip kt ni cc ng dng hng ngi dng truy

    cp v s dng ti nguyn mng li.

    2.2 Globus Toolkit 4.0

    Globus Toolkit 4.0 [4][5][6] nh l mt hin thc ca tnh ton li.

    Gii thiu

    Globus l phn mm m ngun m c dng xy dng cc h thng li v cc ngdng trn nn tng li. B cng c ny cung cp cc dch v v th vin iu khin,khm ph v qun l ti nguyn, qun l tp tin, cung cp cc c ch bo mt d liu chongi dng trong h thng li. Cc dch v, giao tip v giao thc ca n cho phpngi dng c th d dng truy xut ti cc ti nguyn xa ngay trn my cc b camnh.

    Globus c pht trin bi t chc Globus Alliance, phin bn 1.0 ra i vo nm 1998,phin bn gn y nht l phin bn 5.0 ra i vo thng 1 nm 2010.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xi

  • 8/3/2019 47392834 Baocao Luanvan Final

    11/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Kin trcCu trc ca Globus gm 3 nhm dch v chnh, cc dch v ny c truy xut thngqua mt tng bo mt GSI(security layer). Ba nhm dch v l: dch v qun l tinguyn (Resource Management), dch v qun l thng tin(Information Service), dch vqun l d liu (Data Management). Globus ng gi cc dch v ny li vi nhau, chngc th c s dng mt cch c lp hoc kt hp chung vi nhau pht trin ng

    dng.

    Hnh 2. 2: Kin trc ca Globus ToolkitTng local-service cha cc dch v ca h iu hnh, dch v mng nh TCP/IP

    Tng chnh cha cc cng c xy dng cc c ch bo mt, gi cc cng vic thcthi (job submission), qun l ti nguyn, qun l thng tin ti nguyn. Tng cao hn cungcp cc dch v v cng c tng tc vi cc dch v bn di v hin thc cc chcnng cn thiu.

    Tng bo mt GSI

    Tng ny cung cp cc phng thc xc thc ca ngi dng trong mi trng li v cch bo mt trong trao i d liu. N da trn nn tng SSL, PKI v chun X.509. Tng

    GSI cung cp cc dch v, giao thc v th vin thc thi cc vn bo mt trong mitrng li nh:

    Xc thc mt ln (single sign-on) trong vic s dng cc dch v ca h thng lithng qua chng nhn (certificate) ca ngi dng.

    Xc thc vic s dng ti nguyn thng qua certificate ca host M ha d liu y quyn

    SVTH: Hunh Quang Trung ng Hong Thin Phong xii

  • 8/3/2019 47392834 Baocao Luanvan Final

    12/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Ngi dng mun truy cp vo cc ti nguyn ca h thng li cn phi c mtcertificate subject nh x vi mt ti khon trn my xa c cung cp bi ngi quntr ca h thng. Chng thc ny cn phi c k bi mt t chc (CA) m h thng tintng. Hu ht cc dch v i hi ngi dng phi c xc thc trc khi s dng ccchc nng ca n. iu ny m bo vic chng thoi thc trch nhim v bo mt dliu cho c ngi s dng ln h thng.

    Qun l ti nguyn (resource management)

    Globus resource allocation manager (GRAM): GRAM cung cp kh nng thc thi cccng vic trn cc my xa, v tr kt qu thc hin li cho trnh khch. Khi ngi dnggi mt cng vic lngatekeeper deamon trn my xa, th gatekeeper deamon s kimtra xem ngi dng ny c xc thc hay cha. Nu ngi dng ny c xcthc th n s to mt job manager qun l v iu khin vic thc thi cng vic ny.Ty thuc vo biu thi gian (scheduler) ca h thng m job manager c c tao rangay lp tc hay khng. C nhiu loi biu thi gian nh: Portable batch system (PBS),

    Load sharing facility (LSF), v Load Leveler. Trong GRAM cha Globus resource

    specification language (RSL) dng cha cc thng tin v ti nguyn m mt cng viccn thc thi nh s lng CPU, kch thc ti thiu ca b nh,

    Globus access to secondary storage (GASS): GASS l c ch truy cp ti cc tp tintrong h thng, n cho php ng dng c th c, ghi cc tp tin trn h thng t xa.GASS s dng GSI m bo ng quyn hn khi c ghi d liu trn h thng.

    Dch v cung cp thng tin ca ti nguyn (Information services)

    Gi ny cung cp thuc tnh ca cc nt (node) tham gia vo h thng li. Monitoring

    and discovery service (MDS) cung cp cc h tr thng bo v truy vn cc thng tinti nguyn ca h thng. MDS gm ba tng: tng di cng l Information providers(IPs), n chu trch nhim tp hp d liu v thng tin, trng thi ca ti nguyn; tng thhai l Grid resource information service (GRIS), n chu trch nhim tr li cc truy vnv thng tin ca ti nguyn v cp nht vo cache; tng trn cng l Grid informationindex service (GIIS), n lm mc (index) cho thng tin ti nguyn c cung cp biGRIS v GIIS khc m ng k vi n.

    Qun l d liu (Data management)

    Gi ny cung cp cc tin ch v th vin truyn ti, lu tr v qun l cc tp d liuln. N gm 2 thnh phn chnh:

    GridFTP: y l giao thc m rng ca giao thc FTP nhm m bo d liuc chuyn i trong mi trng li c bo mt, ng tin cy v hiu qu.

    Ngoi ra, n c chy trn tng GSI nhm m bo qu trnh truyn nhn cxc thc ng ngi, ng quyn.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xiii

  • 8/3/2019 47392834 Baocao Luanvan Final

    13/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Replica location and management: thnh phn ny h tr mt file c th c lutr nhiu ni trong mi trng li. Replica location service (RLS) chu trchnhim to v xa cc bn sao (replica)

    Dch v Myproxy

    D n v MyProxy[14] bt u t nm 2000 nhm cung cp mt kho chng ch trc tuyndng cho cc grid-portal v Globus Toolkit. Trc y khi truy cp vo mi h thng tnhton li chng ta phi c chng ch lu trn my tnh m chng ta ang s dng. iuny ngha l trn nu chng ta ngi trn mt my tnh m khng c chng ch truyxut vo h thng li th chng ta s khng truy cp c vo h thng li .Myproxy gip chng ta gii quyt cvn ny bng cch s lu cc chng ch lnmt kho chng ch trc tuyn c gi l Myproxy Server, t khi chng ta bt kmy tnh no th chng ta u c th truy cp vo Myproxy Server ly chng ch vv truy cp vo h thng bnh thng.

    Myproxy c th c dng bng nhiu cch khc nhau. Sau y l mt s cch dngca n:

    Hnh 2. 3: M hnh tng qut ca Myproxy service

    Sau khi nhn c mt chng ch t mt c quan chng thc (CA) ta c th luchng ch ln mt kho chng ch online c gi l Myproxy server bng lnhmyproxy-init. V mc nh lnh myproxy-init lu mt chng ch c thi hn 7 ngynhng bn c th gia tng thi gian hiu lc ca chng ch . Sau khi ta cn truy cpvo h thng li th ta c th ly mt chng ch tm thi t myproxy server bng lnhmyproxy-logon. Vi gii php myproxy server chng ta khng cn phi sao chp chngch truy cp h thng li t my ny qua my khc v vic ny rt d gy ra li v s

    khng m bo an ton cho vic truy xut h thng li ca chng ta.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xiv

  • 8/3/2019 47392834 Baocao Luanvan Final

    14/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 2. 4: Myproxy CA

    Dng MyProxy CA gip chng lm cho vn lu tr chng ch tr nn n ginhn. Trong trng hp ny Myproxy CA va l ni cp cc chng ch cho ngi dngva l ni lu cc chng ch tc l ta khng cn phi ly chng ch ngi dng ccp t CA ri dng lnh myproxy-init lu chng ch ln Myproxy Server ri khicn dng th ta phi gi lnh myproxy-logon ly mt chng ch tm thi v my ca

    mnh, m y vi MyProxy CA ta ch cn mt lnh myproxy-logon l c th ly mtchng ch tm thi t Myproxy CA phc v cho vic truy cp h thng li.

    Hnh 2. 5: Myproxy trong Grid-portal

    Mt grid-portal l mt trang web cung cp mt giao din cho nhiu dch v khc nhau,cho php ngi dng truy cp vo h thng li thc hin cc tc v tnh ton t xa,truyn ti file v truy vn thng tin v cc dch v thng qua mt trnh duyt web chun.C nhiu cch Myproxy c th c dng vi cc grid-portal. Trng hp tng qut

    nht thng qua grid-portal truy cp n h thng li l bn ng nhp vo portalv portal s lin h vi Myproxy Server ly mt chng ch n c th truy cp n hthng li vi danh ngha ca ta. Portal cn phi xc thc vi Myproxy server chngminh rng n ang thay mt ta ly chng ch ca ta v. Mt phng thc c th dng chnh l ngi dng nhp thng tin ca mnh gm username v password ngnhp vo portal, v sau portal s dng username v password ny xc thc bn viMyproxy Server v ly chng ch ca bn v. Mt cch khc chnh l sau khi bn ngnhp vo portal th portal s cung cp mt giao din bn cung cp thng tin v chngch ca bn (hostname ca Myproxy Server, username v password ca chng ch),

    SVTH: Hunh Quang Trung ng Hong Thin Phong xv

  • 8/3/2019 47392834 Baocao Luanvan Final

    15/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    portal s s dng nhng thng tin xc thc vi Myproxy Server ly chng chca bn v.

    C ch hot ng ca Myproxy

    Hnh 2. 6: C ch hot ng ca Myproxy

    Client A mun xc thc mt username s dng mt password. Th client A gimt request gm username/password ti MyProxy server.

    MyProxy Server s dng nhiu c ch khc xc thc Username/Password trn.C th MyProxy Server s kim tra cc chng ch ca user ny trn c s d liuca mnh. Hoc c th xc thc user ny thng qua cc c s d liu bn ngoitheo c ch Pluggable Authentication Module[7] hay Simple Authentication andSecurity Layer(SASL)[8].

    Nu vic xc thc thnh cng, MyProxy Server tr v mt chng ch mi cho user.

    Client A s to ra mt Session Password P' s dng trong ln k tip nu mtng dng no i hi phi xc nhn Username.

    Client s lu li chng ch ln MyProxy Server di tn l Username v passwordP'. Client A ch nh thi gian tn ti ca chng ch ny. cng chnh l thi gia

    hu dng ca Sesion password P. MyProxy Server t ng kim sot thi gianny.

    Sau khi kt thc qu trnh trn Client A c mt password P' dng truy cp vocc my khc hoc cc dch v khc trn h thng.Cc dch v ny s s dngUsername v password P' xc thc user thng qua MyProxy server. Nu sdng java API th phng thc ny c cung cp trong file SSOUtils.java.

    Tng quan v GRAM

    ngi dng xa thc thi mt chng trnh thng qua mt dch v web ta cn phinh ngha v ci t mt dch v web gm mt phng thc gi thc thi chng trnh txa, tuy nhin ci t c ta phi gii quyt cc vn sau:

    State. Cng vic tnh ton c th thc hin cc thao tc nhp/xut trong khi chylm nh hng ti trng thi ca ti nguyn tnh ton v/hoc ti h thng tp tingn vi cng vic ny. Do cn phi m bo ch thc thi 1 ln: ngi dng chc th gi li yu cu sau khi nhn c kt qu phn hi.

    User executables. Ngi dng c th cung cp chng trnh ca ring h githc thi t xa.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xvi

  • 8/3/2019 47392834 Baocao Luanvan Final

    16/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Staging of input and output. Chng trnh thc thi, d liu vo/ra c th ln, xa, v/hoc c chia s vi cc li gi thc thi khc. V th yu cu b tr d liuvo/ra l cn thit.

    Streaming output. Mt s chng trnh thc thi cn c cung cp kh nng cungcp kt qu kp thi cho ngi dng khi ang chy. V vy ngi dng phi cthng bo thng xuyn v d liu ra ca chng trnh ang chy.

    Control. Ngi dng i khi cn ngng 1 cng vic ang thc thi v 1 l do no.

    Scheduler. Cc ti nguyn tnh ton ln thng chu s iu khin ca 1 b lplch cp pht ti nguyn theo cc chnh sch u tin mt cch ti u v hiunng.

    Monitoring. i vi 1 s cng vic (job/task) phc tp cn c theo di qutrnh thc thi v cc thao tc can thip kp thi nh pending, suspending, staging

    GT4 cung cp mt dch v dng qun l v cp pht ti nguyn - Grid ResourceAllocation and Management[10] (GRAM) nhm p ng cc yu cu ny. Thng thngGRAM c trin khai cng vi cc gi MyProxy v RFT p ng thm c yu cuv bo mt, xc thc v trao i d liu grid

    H thng GRAM kt hp vi cc cng c qun l c c pht trin nhm giiquyt cc yu cu trn. GRAM cho php:

    Thc thi 1 chng trnh bt k, Hon thnh cc thao tc tin cy, Thc hin theo di cc trng thi, Qun l y nhim th, B tr tp tin v Tng tc vi cc b lp lch c.

    Cch thc hot ng ca GRAM

    SVTH: Hunh Quang Trung ng Hong Thin Phong xvii

  • 8/3/2019 47392834 Baocao Luanvan Final

    17/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 2. 7: Cu trc ci t ca GRAM

    Trong hnh trn, cc thnh phn chnh ca GRAM gm:

    Tp cc dch v chy trn GT4 Java container: Dch v to, theo di v qun l cng vic Dch v i din nhm qun l cc u nhim th Dch v chuyn tp tin tin cy (RFT) qun l d liu vo/ra ca cng vic. Mt b tng thch lp lch (GRAM adapter) nh x yu cu GRAM thnh yu

    cu tng ng ti b lp lch a phng ( c sn). GridFTP server dng thc thi cc lnh b tr d liu vo/ra ca cng vic.

    S dng c ch WS-Resource[11]

    Cc dch v Web trong GT4 container dng WS-Resource biu din trng thi gncng vic (ManagedJobs), u nhim th, v qu trnh trao i d liu ang din ra.

    Vn bo mt

    GRAM h tr cc mc kim tra an ton bo mt:

    SVTH: Hunh Quang Trung ng Hong Thin Phong xviii

  • 8/3/2019 47392834 Baocao Luanvan Final

    18/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    C ch WS-Sercurity nhm xc nhn nhng u quyn gn vi yu cu v cng xc thc ngi yu cu.

    Phn quyn c thc hin bng 1 callout cp quyn. Callout ny s truy vn filegridmap, SAML server, hay 1 c ch cp quyn khc.

    Nu c quyn, cng vic s c thc thi v tr v 1 s hiu ID cc b. Lnhtin ch sudo s c dng qun l ti nguyn cc b.

    Cc dch v chy trong GT4 container khng yu cu 1 quyn c bit: cc thao tccn quyn cao s c thc hin qua hm sudo. trnh s can thip ca ngi dng khc, cng vic (job) c gi i thng c thcthi trong 1 bi cnh an ton tch bit: v d nh di quyn ca ngi dng UNIX c thda vo yu cu ca cng vic v chnh sch cp quyn. h tr vic tnh tin, theo di v ngn chn tn cng t bn ngoi, GRAM cung cpcc k thut thanh ton (audit), v ghi chp (logging) nhm lu tr qu trnh hot ngca h thng c bit l cc thao tc quan trng.

    Thao tc lin quan ti d liu

    Cc thao tc lin quan ti vic b tr d liu vo/ra ca cng vic c GRAM giao chodch v RFT m nhim. Tu theo yu cu, dch v RFT khi to kt ni GridFTP giamy ngun v ch.

    Ngoi cc thao tc b tr d liu chun, GRAM cn h tr c ch cp nht d liu ra(standard output) 1 cch lin tc khi cng vic ang tin hnh.

    2.3 Single Sign On

    Khi nim

    Single Sign-On[12] (SSO) l gii php phn mm chng thc tp trung i vi cc ngdng chy trn cc platform khc nhau. Khi , ngi dng ch s dng 1 ti khon (ID) c chng thc v xc nhn quyn s dng ti nguyn ca h thng.

    Vi h thng c nhiu website v application th vic s dng Single Sign On (SSO)l kh cn thit nhm em li nhiu thun tin cho ngi dng v tng tnh nng bo mt.

    Li ch

    Trnh vic nh nhiu thng tin ng nh p (username & password) khi dng nhiudch v.

    Tit kim thi gian khi ti l p li mt khu cho mt ngi dng (identity user). Bo mt tt c cc cp ca vic thot hay truy xut vo h thng. Ngi pht trin ng dng khng cn phi hiu v thc hin nhn dng bo mt

    trong ng dng ca h.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xix

    http://vietfov.net/press/single-sign-on-solutionhttp://vietfov.net/press/single-sign-on-solution
  • 8/3/2019 47392834 Baocao Luanvan Final

    19/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 2. 8: Dch v Single Sign On

    V d: Trong trng hc, ngi dng s dng nhiu dch v ng k mn hc, xemim, xem thi kha biu c pht trin v lu tr trn cc ng dng khc nhau,ng midch v ta c mt ti khon ring. Nu khng s dng SSO th vi mi dch v ta u phinh p thng tin xc thc. Khi mt t chc thng nht s dng SSO cho tt c ccdch v ca h th ngi dng ch cn ng nh p mt ln duy nht trn bt k dch v notrong t chc, th khi truy xut nhng dch v khc, ngi dng khng cn phi ngnh p li.

    SSO c th c s dng di cc dng:

    Single Domain: Khi xc thc thnh cng vo domain.com, ngi dng ng thic xc thc vo cc sub-domain.domain.com tn ti.

    Multi Domain: Khi xc thc thnh cng vo facebook.com, ngi dng ng thic xc thc vo example.com

    SSO thng s dng Cookie nhn din, webserver (hay webgate) gi cookie c m ha cho browser xc thc thnh cng, cookie ny s l cha kha s dng chocc xc thc ti cc ti nguyn khc hoc cho cc xc thc c cng cp.

    Phn Cookie c m ha c th bao gm cc thng tin: session, distinguished nameca ngi dng xc thc thnh cng, IP ca client yu cu, thi im khi to

    SVTH: Hunh Quang Trung ng Hong Thin Phong xx

  • 8/3/2019 47392834 Baocao Luanvan Final

    20/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    cookie, thi im sa i cookie.. cc thnh phn khng m ha ca cookie c th baogm: thi gian expired, domain hot ng, SSL/ Httponly

    Thut ton m ha c recommend hin nay l AES, bn cnh l cc thut ton kmbn vng hn nhng thng dng nh MD5-salt, RC4, RC6 vn c s dng ph bintrong cc m ha cookie/ session.

    Single Domain SSO

    Cookie Path c cu hnh dng chung cho mi subdomain: .domain.com (bao gmdu . u)

    Hnh 2. 9: M hnh Single Domain SSO

    Multi Domain SSO

    Multi Domain SSO cho php ngi dng truy cp vo nhiu domains/hosts sau 1 ln ngnhp. Mt ng dng xc thc chnh s cung cp cc cookie hp l cho mi domain.Chnghn ngi dng truy cp vo gmail.com, khi ton b services ca Google, nhGoogle.com, Picasa, Blogspot u nhn din tnh xc thc cho ngi dng .

    Tuy nhin cng mt cookie khng th c thit t cho cc domain khc nhau dochnh sch bo mt ca hu ht browser, do mt domain chnh s c chn xc

    thc mi quy trnh, gi chung l master domain. Vi mi domain khc m ngi dngthc hin qu trnh xc thc, mi webgate ca h thng s chuyn yu cu ti masterdomain xem yu cu n t user c xc thc cha trc khi cho truy cpvo h thng.

    Master domain s hot ng nh quy trnh ca Single Domain SSO, n chnh lproxy truyn ti cookie hp l v cho mi domain c yu cu xc thc.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxi

    http://vietfov.net/press/wp-content/uploads/2010/09/aiadm0301.gif
  • 8/3/2019 47392834 Baocao Luanvan Final

    21/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 2. 10:M hnh Multi Domain SSO

    Cc bc hot ng:

    Ta thit t master domain, login-service.domain.com. Mi mt domain nm trong group SSO u c script login ring. Mi h thng trn mi domain u s dng chung Session Database. Khi mi Client yu cu ngi dng xc thc, Webgate ca n s redirects ti

    master domain c cha login service. Nu ngi dng cha ng nhp, masterdomain s triu gi script login ca webgate m user va mi gi yu cu thchin vic login vo master domain. Khi ngi dng xc thc, mt session sc to trong database v master domain s cung cp session id cho client yucu c th to cookie theo session .

    Ta c th m t hot ng ca Multi Domain SSO hnh 2 nh sau:

    Bc 1: User gi yu cu truy cp ti WebGate1 c domain l host1.domain1.com. Bc 2: WebGate1 tr li a ch ca Master Domain chnh l WebGate2 c

    domain l host2.domain2.com. Bc 3: Yu cu ng nhp t ng chuyn t Browser n WebGate2 v

    WebGate 2 yu cu user xc thc, to ra SSOcookie v c lu WebGate2. Bc 4: WebGate2 tr v cho Browser SSO cookie. Bc 5: Browser t ng s dng SSOcokie truy cp vo WebGate1. Bc 6: Ni dung cn truy cp c tr v cho Browser. Bc 7: Nu vn l Users Browser yu cu truy cp vo Webgate 3 th n s

    gi i yu cu truy cp cng SSOcookie c to ra bc 4, yu cu vSSOcookie vn c chuyn ti WebGate2 nhng lc ny SSOcookie c gi ti

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxii

    http://vietfov.net/press/wp-content/uploads/2010/09/aiadm031.gif
  • 8/3/2019 47392834 Baocao Luanvan Final

    22/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    trng vi SSOcookie c lu WebGate2 ngha l User c xc thc nnlc ny s khng yu cu xc thc li m s t ng chuyn yu cu truy cp nWebGate3 truy cp vo h thng WebGate3.

    2.4 Tng quan v sakai

    Nm 2004, Qu ti tr Mellon Foundation quyt nh ti tr cho bn trng i hc hngu M, i hc Michigan, Indiana University,Vin Cng ngh Massachusetts v ihc Stanford hp tc pht trin mt h thng nn m ngun m nh mt mi trng

    phn mn pht trin cc cng c h tr cho vic ging dy, hc tp, v nghin cukhoa hc. Sau th i hc California ti Berkeley cng tham gia pht trin. T dn Sakai[5] chnh thc c ra i. Ngy nay c ti c triu c nhn thuc cc trng ihc v cc t chc tham gia hp tc xy dng h thng Sakai. Cng vi l mt lngrt ln ngi dng s dng Sakai nh mt phn trong cng vic ging dy, hc tp,nghin cu trn khp th gii.

    Hnh 2. 11: Sakai Portal

    Sakai CLE (Collaboration and Learning Environment - CLE). l mt phn mm giodc min ph, m ngun m c phn phi theo Giy php Gio dc Cng ng(Educational Community License - mt kiu ca giy php m ngun m). Sakai CLEc dng dy hc, nghin cu v cng tc nhiu ngi vi nhau. H thng nyl mt dng ca H qun tr o to (Learning Management System - LMS).

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxiii

  • 8/3/2019 47392834 Baocao Luanvan Final

    23/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Tnh nng ca sakai

    Hnh 2. 12:Mt s tnh nng ca Sakai

    Sakai bao gm nhiu tnh nng chung ca cc H qun tr o to(tham khao), bao gma ln cc ti liu hng dn, sch gio trnh, mc tho lun, chat trc tuyn, bi tp ln,v cc bi kim tra online

    Thm vo , Sakai cn cung cp mt b cng c lm vic nhm dng cho nghincu v cc d n nhm. h tr cc tnh nng ny, Sakai thm vo kh nng thay ithit lp ca tt c mi cng c da trn vai tr, thay i quyn h thng ty theo ngidng. N cng tch hp mt wiki, mailing list v lu tr, v b c RSS. Chnh cc chcnng ny m d n Vn-Grid mun to mt cng ng nghin cu khoa hc da voSakai ngoi nhng tnh nng trn ngi dng c th truy cp vo h thng tnh tonli tn dng sc mnh tnh ton phc v cho nhu cu nghin cu khoa hc.

    B cng c lm vic nhm tch hp trong nhn ca Sakai:

    Announcements - thng bo cho ngi dng v nhng vn chnh yu Drop Box - cho php ging vin v hc vin trao i ti liu vi nhng th mc

    ring bit cho mi sinh vin Email Archive - tt c tin nhn gi n a ch email ca trang web s c lu tr

    ti y Resources - chia s nhiu loi thng tin yu cu bo mt vi cc thnh vin

    trong trang, hoc cho php n c nhn thy bi mi ngi. Chat Room - chat thi gian thc cho mi thnh vin ang ng nhp vo site

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxiv

    http://vi.wikipedia.org/wiki/H%E1%BB%87_qu%E1%BA%A3n_tr%E1%BB%8B_%C4%91%C3%A0o_t%E1%BA%A1ohttp://vi.wikipedia.org/wiki/Wikihttp://vi.wikipedia.org/w/index.php?title=Mailing_list&action=edit&redlink=1http://vi.wikipedia.org/wiki/RSShttp://vi.wikipedia.org/wiki/H%E1%BB%87_qu%E1%BA%A3n_tr%E1%BB%8B_%C4%91%C3%A0o_t%E1%BA%A1ohttp://vi.wikipedia.org/wiki/Wikihttp://vi.wikipedia.org/w/index.php?title=Mailing_list&action=edit&redlink=1http://vi.wikipedia.org/wiki/RSS
  • 8/3/2019 47392834 Baocao Luanvan Final

    24/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Forums - cng c cho ging vin v thnh vin c cp quyn c th to ra ccmc tho lun

    Threaded Discussion Message Center - cng c giao tip cho php cc thnh vin s dng mail ni b Message Of The Day News/RSS - cng c c RSS Poll tool - cho php ngi dng bnh chn trc tuyn Preferences Presentation - cho php thc hin thuyt trnh trc tuyn Profile / Roster - h s ngi dng, bao gm hnh nh, tn tui v cc thng tin

    khc Repository Search - tm kim thng tin c lu tr trn site Schedule - cho php ging vin a thng tin di dng thng tin trn lch Ngoi nhng cng c trn Sakai cn rt nhiu cc b cng c khc phc v cho

    vic ging dy v b tr ging dy.

    Kin trc ca Sakai[13]:

    Sakai khng ch m mt mi trng hp tc trong gio dc m cn l mt frameworkcho vic pht trin cc tool nh Wiki, chat toolmt cch n gin nht c th. Sakaic xy dng trn nn nh mt ng dng java bng tt c cc framework v kin trchin i nht nh Spring, Hibernate, Servlets, Java Server Faces . V mt vt l, Sakaic t trong Tomat server gi vai tr reponse v request cho ng dng chy trn Sakai.Hnh di l mt s hnh tng quan v kin trc ca Sakai:

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxv

  • 8/3/2019 47392834 Baocao Luanvan Final

    25/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Aggregator

    Presentation

    Tools

    Services

    Client

    System

    TheAbstractSakaiEnviron

    ment

    TheSakaiFramework

    Internal

    Aggregator

    Tool

    Presentation

    Tool Code

    Application

    Services

    Framework

    Services

    Presentation

    Support

    TheSakaiToolEnvironment

    External

    Aggregator

    System

    Hnh 2. 13: M hnh tru tng Sakai

    TheSakaiFramework

    Servlet/HTML

    Renderer

    Java Server

    Faces in JSP

    Java Tool Logic

    Java Beans

    Sakai Application

    Services

    Sakai JSF

    Widget Set

    TheSakaiToolEnvironment

    Portals via

    iFrame

    Sakai/OKI

    APIs

    Sakai

    Stand-Alone

    JSR-168

    Renderer

    WSRP

    Renderer

    uPortal via

    JSR-168

    uPortal via

    WSRP

    ?????

    Renderer

    ????? via

    ????

    Hnh 2. 14: Sakai Framework

    Lp Aggregation

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxvi

  • 8/3/2019 47392834 Baocao Luanvan Final

    26/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    M Sakai ln trong mi user nh hnh di cho thy rng mi user phi lm vic vinhiu Sites.(hnh)

    Trong mi site li c nhiu trang v tool khc nhau (hnh nh). Do lpAggregation ny c chc nng tng hp cc mnh giao din t cc trang v tool khcnhau cho ra mt trang web tng th cho user. Ngoi ra lp Aggregation ny cn cho

    php user ty chn cch trnh din ca cc mnh giao din trn theo ngi dng.

    Lp Presentation

    Bn di lp Aggregation l lp Presentation cha mt b cc thnh phn cu thnh mttrang ca Sakai. Tham kho hnh di l mt v d cc thnh phn giao din trong lpPresentation tp hp trong mt file JSP.

  • 8/3/2019 47392834 Baocao Luanvan Final

    27/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Lp services

    Vic thit k lp dich v nhm gip n gin ha qu trnh pht trin Sakai che du i cchin thc chi tit bn di ca Sakai. Nh pht trin ng dng trn Sakai ch cn da trncc dich v c cung cp. V d nh mt tool khng cn bit kiu c s d liu bn dil MySQL hay Oracle hay h thng file no c cc dch v s dng v t u.

    Cc service c bn ca Sakai nh dch v ly, xa, thm mt user hay thng tin v ccmn hc. Hoc v d ngi pht trin c th pht trin mt dch v thm, iu chnh, xatrn s lp. T cc tool khc c th s dng cc dch v ny thay i s lp haychng hn vit mt cng c in s lp di nhng nh dng khc nhau da trn dch v c. Cn lm th no xy dng cc dch v ny ngi c c th tham kho chng 11ca ti liu tham kho[Sakai-Courseware-Management-the Official-Guide].

    Nhn mt cc tng qut th Sakai nh mt b khng l cc ng dng web chy cngmt servlet container, cng chia s cc dch v trung tm. Khi mt trnh duyt gi mtrequest; mt ng dng s nhn request , lm mt vi cng vic, xong tr v mt

    respone cha nhng thng tin m request yu cu. Qu trnh ny nhn chung l kh phttp trc ht request t web browser s i qua mt bt Aggregator lp Aggregator sau s chia request thnh nhiu request nh ch nh cho cc tool, sau cc tool ny sdng cc dch bn di v tr v cc kt qu mong mun. Cui cng b Aggregator s thuthp cc kt qu tr v ca cc tool tr v mt response cho ngi dng webBrowser ,thng thng l mt trang web.

    2.5 Tng quan v OGCE portal

    OGCE portal l mt portal cung cp cc portlet v tool dng truy cp vo h thng

    Grid Computing thng qua mi trng web. OGCE portal c pht trin da trn btth vin Java Cog Kit. N bao gm nhiu portlet nh ProxyManager, JobSubmission,FileManager, Grid Information, Comp-file Manager v cc tool khc axis2, balancer,applets

    Hnh 2. 16: Cc portlet c trng ca OGCE portal

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxviii

  • 8/3/2019 47392834 Baocao Luanvan Final

    28/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 2. 17: Portlet Myproxy Manager ca OGCE portal

    Portlet proxymanager dng qun l cc chng ch proxy ca user. Ch khi chngch ca user c load ln trong proxymanager portlet th cc portlet khc s s dngchng ch ny xc thc v tr nn sn sng s dng.

    Hnh 2. 18: Portlet Comp-file-management ca OGCE portal

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxix

  • 8/3/2019 47392834 Baocao Luanvan Final

    29/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Portlet Comp-file-management dng truyn file gia cc ti nguyn Grid, uploadfile ln mt ti nguyn Grid, download file t ti nguyn Grid v my.

    Kin trc OGCE portal

    OGCE portal s dng Gridsphere container nh mt portlet container qun l tt c

    cc Grid portlet trong OGCE portal. Do cc portlet u pht trin trn nn Gridsphere,ngoi tun th chun JSR 168, cn portlet cn phi tng thch vi Gridsphere v s dngmt vi gi th vin chy nh gridsphere-tag.jar

    Hnh 2. 19: Kin Trc ca OGCE portal

    Nh hnh trn tt c cc cc portlet khc ca portal u phi s dng MyProxyManager ly chng ch trc khi sn sng. Cc portlet ny s giao tip vi GlobusTool Kit 4.0 bng b th vin interface cung cp cho client l java CoG API. V tt c cc

    portlet JSR 168 ny u kh chun t Gridsphere framework sang uPortal. Do chycc portlet JSR 168 ny trong pluto container trong Sakai l hon ton c c s. V

    pluto v bn cht l mt bn thu gn ca uPortal.

    2.6 Tng quan v Axis ServiceTrc ht ti sao nhm phi gii thiu gi dch v Axis[14] y l v trong qu trnh thchin ti th nhm gp li lin quan n gi dch v ny ca apache tomcat. Cng chnhli m nhm tn rt nhiu thi gian debug.

    Apache Axis l mt gi dch v dng iu khin lun d liu vo v ra portal. Vcc d liu lu thng trn portal u a v dng mt file XML,v d nh cc gi tr,

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxx

  • 8/3/2019 47392834 Baocao Luanvan Final

    30/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    thuc tnh ca cc Java Object, theo mt giao thc no cng vi thng tin ph i km truyn i n cc dch v. Do iu khin cc lun vo ra ny th bn diApache cung cp mt gi gi l Axis c client v server iu phi d liu.

    Trc ht xin gi thiu hnh m t cu trc bn trong ca Axis

    Hnh 2. 20: Kin trc ca Axis Services

    Hnh trn l qu trnh hot ng ca Axis Engine bn pha server. Mt message nti Transport Listener. Trong trng hp ny ta xem n l mt HTTP servlet . Cng vicca Listener l s ng gi request thnh mt Message ri t Message ny vo mtclass gi l MessageContext. Trong MessageContext cha Message cn cha nhiu

    thuc tnh khc c Listener thit lp. Khi MessageContext c xy dng thnhcng th n c truyn qua b AxisEngine. Cng vic ca AxisEngine l xc nh cservice bn di m request cn v tr v mt reponse cho Listener. Thng tin chi tit vcu to cc class bn trong xin xem thm ti liu tham kho, m t chi tit cc qu trinhto Message v truyn message.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxi

  • 8/3/2019 47392834 Baocao Luanvan Final

    31/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    2.7 Chun portlet JSR 168

    Chun portlet JSR 168[15] dng nh ngha portlet v cch thc giao tip gia portlet vportal.

    Hnh 2. 21: M hnh chun ca JSR 168

    Hnh trn m t s giao tip gia portal v cc portlet. S giao tip ny c thc hin

    thng qua cc API c cung cp bi chun JSR 168.Mt s khi nim chnh:

    PortalPortal l mt ng dng web dng tch hp cc ni dung t cc ngun khc nhau vo

    cng mt trang web. Cc ni dung c th c cu hnh ty thuc vo ngi s dngkhc nhau m Portal cho php. Mt Portal c th chanhiu Portlet.

    PortletPortlet l mt thnh phn da trn nn Web s dng cc cng ngh ca Java. Portlet cqun l bi mt Portlet Container. Portlet dng x l cc yu cu v to ra cc thnh

    phn d liu ng phn hi cc yu cu.

    Portlet c th tch hp vo Portal v Portal s cung cp tng trnh din cho cc thnhphn ca Portlet.

    Ni dung c to ra bi cc Portlet c gi l Fragment. Mt Fragment l mtmnh d liu c to ra bi cc ngn ng nh: HTML, XML theo mt nh dngc quy nh. Cc Fragment ny c th c kt hp vi cc Fragment ca cc Portletkhc hnh thnh trang Web ca portal.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxii

  • 8/3/2019 47392834 Baocao Luanvan Final

    32/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Ngi s dng tng tc vi Portlet thng qua c ch yu cu/phn hi c cung cpbi Portlet. Ni dung phn hi yu cu c Portlet to ra v ni dung ny cng ty thucvo cu hnh ng vi tng ngi s dng.

    Portlet Container

    Portlet Container cung cp mt mi trng cha ng v qun l chu k sng ca mtPortlet.

    Portlet Container nhn yu cu t Portal v chuyn yu cu ny n Portlet tng ng Portlet x l yu cu v to ni dung phn hi.

    Giao din Portlet

    Giao din Portlet khai bo cc API c bn nht ca mt Portlet. Mi Portlet c xy

    dng u phi hin thc ha trc tip hoc gin tip giao din Portlet.Lp GenericPortlet hin thc ha giao din Portlet v nh ngha cc chc nng c bnnht m mt Portlet cn c. Do khi xy dng Portlet, lp trnh vin nn m rng trctip hoc gin tip lp GenericPortlet ny.

    Mt Portlet c qun l thng qua chu trnh sng ca n bt u t lc Portlet cti ln, to th hin ca n v khi to, hot ng phn hi yu cu ca ngi s dngn lc n c loi b. Cc phng thc c gi n trong chu trnh sng ca Portletl:

    Gi Phng thc init trong qu trnh khi to Portlet. Nu yu cu do my khch gi ti l yu cu hnh ng( Action Request) th

    phng thc processAction c gi. Nu yu cu do my khch gi ti l yu cubiu hin ( Render Request) th phng thc render c gi

    Khi Portlet Container xc nh mt Portlet khng cn s dng na th gi nphng thc destroy ca Portlet . Khi phng thc destroy c gi th Portlets gii phng ti nguyn m n ang s dng v lu li trng thi hin thi ca n.

    Portlet URL

    Mt Portlet c th to ra URL tham chiu n chnh Portlet . Khi cc URL ny cgi l Portlet URL. to ra mt Portlet URL th Portlet cn phi s dng i tng PortletURL. Nu

    phng thc createActionURL c gi th s to ra mt Action URL v nu phngthc createRenderURL c gi th s to ra mt render URL.Portlet Mode

    Kiu portlet xc nh chc nng m Portlet ang thc hin. Thng thng Portletthc hin cc tc v v to ra ni dung ty thuc vo chc nng hin thi. Kiu Portlet

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxiii

  • 8/3/2019 47392834 Baocao Luanvan Final

    33/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    cho ta bit nhng tc v no mt Portlet cn thc hin v nhng ni dung no Portet cnphi to ra.

    C 3 kiu Portlet c quy inh l:

    VIEW:

    Chc nng chnh ca Portlet khi s dng kiu VIEW l to ra ni dung cho bittrng thi ca Portlet.

    Lp trnh vin s hin thc ha kiu VIEW bng cch nh ngha li phng thcdoView ca lp GenericPortlet.Mi Portlet u phi h tr mode VIEW .

    EDIT:

    Trong kiu EDIT, mt Portlet s cung cp ni dung v cu hnh cc thnh phnca n ngi s dng c th ti u ha hot ng ca Portlet.

    Lp trnh vin s hin thc ha kiu EDIT bng cch nh ngha li phng thcdoEdit ca lp GenericPortlet.

    Mi Portlet khng nht thit phi h tr kiu EDIT.

    HELP

    Trong kiu HELP, Portlet cung cp nhng tin v Portlet. Nhng thng tin nythng l nhng thng tin chung v ton b Portlet.

    Portlet Request

    Mt yu cu gi n Portlet cha cc thng tin v yu cu t pha my khch, cctham s ca yu cu, ni dung d liu yu cu, kiu Portlet, trng thi ca s

    Yu cu c i din bi mt i tng v i tng ny c truyn vo nh li s ca phng thc procesAction hay render.

    Mi i tng yu cu ch c th hot ng trong phm vi ca mt phng thcprocessAction hay render.

    Cc chc nng cn thit ca i tng PortletRequest c khai bo trong giaodin PortletRequest.

    Portlet Respone

    Mt phn hi ca Portlet bao gm nhng thng tin c to ra bi Portlet gi trv cho Portlet Container da trn yu cu c gi n nh: s thay i kiu

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxiv

  • 8/3/2019 47392834 Baocao Luanvan Final

    34/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Portlet, tiu , ni dung Portlet Container s s dng nhng thng tin ny to ra phn hi n ngi s dng, thng thng l mt trang Web Portal.

    Mi i tng phn hi ch c th hot ng trong phm vi ca mt phng thcprocesAction hay render.

    Cc chc nng cn thit ca i tng Portlet Respone c khai bo trong giaodin PortletRespone.

    Portlet Preferences

    Portlet thng thng c cu hnh cho ph hp vi tng ngi s dng. Ccthng tin v cu hnh ca Portlet c gi l Portlet Preference. Portlet Containers chu trch nhim lu gi nhng thng tin cu hnh ny.

    Portlet c th truy cp vo cc thng tin cu hnh ca n thng qua giao dinPortletPreferences v Portlet ch c th thay i cc thnt tinh v cu hnh ca n

    bn trong phng thc processAction. nh ngha Portlet xc nh cc thuc tnh preference m mt Portlet s dng.

    nh ngha ny bao gm cc gi tr khi to v xc nh xem thuc tnh ny cphi l thuc tnh ch c hay khng.

    Caching

    Vic lu cc ni dung cn s dng vo vng nh tm thi c thc hin nhmmc ch rt ngn thoi gian x l ca Portlet, ng thi cng rt ngn thi gianx l ca Server.

    c t Portlet xc nh c ch ht hn vic lu tr ni dung lu tm thi ny. Cch ny hot ng ty thuc vo tng Portlet v tng ngi s dng Portlet. Ni

    dung c lu tr tm thi khng c chia s gia cc ngi s dng khc nhauang s dng ng thi cng mt Portlet.

    Mt Portlet mun tng thi gian x l bng cch s dng c ch lu tr tm thini dung cn phi nh ngha thi gian ht hn ca ni dung lu tm thi ( tnh

    bng n v giy) trong c t trin khai ca n. V d sau y cho bit mt Portletmun ni dung ca n c lu tr tm thi v c thi gian ht hn l 300 giy.

    Mt Portlet nu nh ngha thi gian ht hn lu tr d liu tm thi ca ntrong c t trin khai ca n vn c th thay i c.

    Thi gian ht hn ca vic lu tr tm thi ny c th c thay i bng cchthay i thuc tnh ca i tng RenderResponse.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxv

    300

  • 8/3/2019 47392834 Baocao Luanvan Final

    35/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Nu thi gian ht hn ny c gn bng 0 th vic lu tr d liu tm thi b bqua i vi Portlet. Nu gi tr ny c gn bng -1 th cc ni dung lu tr tmthi ca Portlet s khng bao gi b ht hn.

    Nu mt Portlet khng nh ngha thi gian ht hn ca d liu lu tr tm thitrong c t trin khai ca n th vic thay i gi tr thi gian ny trong i tngRenderResponse s khng c tc dng do s b Portlet Container b qua.

    Nu ni dung ca Portlet c lu tr tm thi v cha ht hn, ng thi khngc mt yu cu no n Portlet t pha ngi s dng th Portlet Container s sdng ni dung c lu tr tm thi khi cn thit.

    ng dng Portlet

    ng dng Portlet l mt ng dng Web nn ngoi vic bo gm Portlet v c t trinkhai Portlet, n cn c th cha cc thnh phn khc nh: Servlet, trang JSP, cc classDo , bn cnh cc thng tinh v ng dng Portlet, n cn cha ng thng tin v ccthnh phn c a vo ng dng Portlet.

    Cu trc cy th mc

    Mt ng dng Portlet cng c cu trc cy th mc c t chc ging nh mt ngdng Web. Tuy nhin c mt s khc bit sau:

    - C thm tp tin /WEB_INF/portlet.xml l tp tin c t trin khai ca Portlet.- Cc lp c s dng cho ng dng Portlet v cc ti nguyn khc c truy cp

    bi ng dng Portlet cn phi c lu trong thmc /WEB-INF/classes hoctrong cc tp tin JAR c lu trong th mc /WEB-INF/lib.

    Tp tin lu tr ca ng dng Portlet

    Mt ng dng Portlet cng c ng gi nh mt ng dng Web. Ngha l s dngdng WAR (Web Application Archive) khi trin khai ng dng.

    Cc c t ng gi v trin khai

    c t trin khai ca ng dng Web v ng dng Portlet

    Trong cc ng dng Portlet, lun tn ti 2 tp tin c t l:

    Tp tin web.xml dung c t cc ti nguyn ca ng dng Web. Tp tin portlet.xml dung c t cc ti nguyn ca ng dng Portlet.

    Cc ti nguyn no khng lin quan n Portlet th c khai bo trong tp tin c tweb.xml. Cn cc ti nguyn no lin quan n Portlet th c khai bo trong tp tin

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxvi

  • 8/3/2019 47392834 Baocao Luanvan Final

    36/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    portlet.xml. Ngoi ra, mt s thng tin ca Portlet cn phi c khai bo trong tp tinweb.xml nh sau:

    M t v ng dng Portlet c khai bo bng th . Tn ca ng dng Portlet c khai bo bng th . Vic nh x cc vai tr bo mt( Security Role Mapping) ca ng dng Portlet

    c khai bo bng th .

    Trin khai ng dng Portlet v ng dng Web

    Cc Portlet, c t trin khai v mi ti nguyn phi c ng gi trong cng mt tp tinWAR. Trong , th mc WEB-INF bao gm cc thnh phn:

    - Tp tin c t trin khai /WEB-INF/portlet.xml- Cc lp ca Portlet nm trong th mc /WEB-INF/classes- Cc tp tin JAR c lu trong th mc /WEB-INF/lib

    Chng 3: Phn tch v hin thc h thng ti lunvn

    3.1 Phn tch h thng

    Da trn mc tiu ca ti l phi kt ni h thng Sakai vi h thng Tnh Ton Lica trng. H thng Sakai ca trng ang dng l phin bn Sakai 2.5.4 v h thng

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxvii

  • 8/3/2019 47392834 Baocao Luanvan Final

    37/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Tnh Ton Li c hin thc bi Globus Toolkit 4.0.x. V truy cp vo h thngTnh Ton Li ny bng mt mi trng web th c nhiu portal h tr cng vic .Hin ti OGCE(Open Grid Computing Environments) l mt trong nhng portal h trgn nh y cc chc nng tng tc vi h thng Tnh Ton Li qua GlobusToolkit 4.0. Trong portal OGCE gm cc portlet: iframe-portlet, jobsubmission,

    proxymanager-portlet, gp-browser-2, gp-job-submission, condor-job-submission thng

    qua nhng portlet ny ngi dng s dng v qun l h thng Grid Computing.

    Hnh 3. 1: M hnh tng qut h thng ban u

    Hnh trn m t tng qut h thng OGCE portal kt ni vi Globus Toolkit 4.0.Trong ngi dng s dng cc portlet JSR 168 tng tc vi h thng Tnh Tonli. Trong ta thy c ba portlet m tiu biu th hin trn hnh l ProxyManagerPortlet, JobSubmit Portlet, Comp-file-Manager portlet. OGCE p ng c kh nngtruy cp h thng Tnh Ton Li nhng li khng c pht trin nhm to ra mt cngng nhng ngi s dng h thng Tnh Ton Li. Quay li m hnh ban u, k bn

    portal OGCE lc ny l h thng Sakai ca trng m y ngi dng c lp vi hthng Tnh Ton Li. Mc ch ca ti lc ny l lm sao kt ni h thng Sakai nyvi h thng Tnh Ton Li ca trng.

    Hnh sau th hin m hnh m nhm quyt nh xy dng. Sau khi ta hon thnhxong th ngi dng c th kt ni vi h thng Tnh Ton Li bn di thng quaGlobus Toolkit 4.0 s dng c ch xc thc bng chng ch kha cng cng.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxviii

  • 8/3/2019 47392834 Baocao Luanvan Final

    38/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 3. 2:M hnh tng qut h thng cn xy dng.

    T hnh trn cho thy l nhm phi bng cch no a cc chc nng hin c OGCE portal vo Sakai..

    Trc ht kt ni h thng Sakai v h thng Grid Computing hin nay chng taphi lm g?

    R rng l phi gii quyt c vn truy cp, cp pht quyn ngi dng , sao chongi dng ca Sakai c th truy cp vo h thng tnh ton li thng qua Globus. Cch xc thc v cch qun l user ca Sakai v Globus Toolkit 4.0 l hon ton khcnhau. Mt bn Sakai s s dng c ch xc thc User Directory Service. Mt bn GlobusToolkit 4.0 s dng chng ch kha cng cng qun l ngi dng. Qua qu trnh khost v nghin cu th nhm thc hin ti cha i su gii quyt vn mu thun trn.Tc l trn h thng Sakai c nhiu nhm ngi dng khc nhau, c nhm s dng hthng Tnh Ton Li, c nhm khng s dng ti mt thi im no . Do phi cn

    can thip bn di sao cho nhng nhm ngi dng s dng cc portlet chc nng caGlobus Toolkit 4.0, c kh nng ng nhp Globus mt cch t ng. Cn nhng nhmngi dng khng c cp quyn s dng Globus th khng c bt k mt chng chno truy cp Globus.

    T nhng nh gi trn ta s c c m hnh hot ng chi tit ca h thng mongmun nh hnh di. Trong m hnh cn c mt dch v getProxyService( username,

    SVTH: Hunh Quang Trung ng Hong Thin Phong xxxix

  • 8/3/2019 47392834 Baocao Luanvan Final

    39/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    passphrase). Dch v ny c chc nng t ng ly cc chng ch proxy m ngi dngusername trn sakai c v sakai.

    1 .L qu trnh dch v getProxyService() lu tt c cc chng ch proxy vo mtbng chng ch proxy.

    2. L qu trnh t pha ngi s c mt portlet ProxyManager t ng cp nht ttc cc chng ch proxy v lit k ra cho ngi dng username s dng mt trongcc chng ch .

    Hnh 3. 3:S hot ng ca h thng mong mun

    Di y l cc hnh nh ca hai portlet ProxyManager v JobSubmission trn portalOGCE trong m hnh h thng ban u.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xl

  • 8/3/2019 47392834 Baocao Luanvan Final

    40/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 3. 4:Portlet MyproxyManager ca OGCE portal

    Hnh trn l hnh nh ca proxymanager-portlet, portlet ny s tng tc vi MyProxyserver ly cc chng ch Proxy ca user. Mc ch ca nhm l rt gn giai on nyngi dng Sakai s khng cn phi nhp username v passphrase mt ln na. M s cmt dch c GetProxyservice(username, passphrase) bn di trong Sakai m nhn vaitr ny. Giao din ngi dng s chuyn sang giao din ca hnh tip theo. Gi li cacchc nay cn li ca ProxyManager Portlet.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xli

  • 8/3/2019 47392834 Baocao Luanvan Final

    41/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 3. 5: Ly Proxy ca ngi dng qua OGCE portal

    Hnh trn l hnh nh proxymanager-portlet ca OGCE portal ly v chng ch Proxyca user. Proxymanager-portlet cn h tr s dng nhiu chng ch cng thi, cho

    php user chuyn quyn s dng t Proxy cng ng v Proxy c nhn bng chc nngSet as default. Cc portlet khc s s dng Proxy c thit lp mc nh l default proxy.Cn bn di l hnh ca portlet OGCE jobsubmission:

    Hnh 3. 6:Portlet JobSubmission ca OGCE portal

    SVTH: Hunh Quang Trung ng Hong Thin Phong xlii

  • 8/3/2019 47392834 Baocao Luanvan Final

    42/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Trong qu trnh tm hiu v thc hin ti th nhm hin thc c h thng, c thni l chp nhn c hot ng nh hnh bn di, bng cch thc hin tch hp cc

    portlet JSR 168 ca OGCE vo Sakai Portal.

    Hnh 3. 7:S hot ng h thng hin thc

    Trong h thng Sakai ca nhm th ngi dng login vo Sakai bc 1,trong bc 2sau s dng Portlet ProxyManger ca OGCE portal ly cc chng ch t MyproxyServer. Tip theo ti bc 3 l lu li cc chng ch ny vo Proxy Table trn portlet.

    3.2 xut c ch tch hp portlet JSR 168 vo Sakai

    T yu cu ca ti th i hi phi c mt c ch no m user ng nhp vo Sakaiphi truy cp c h thng li thng qua Globus tookit 4.0. Di y l ba phng nm nhm tm hiu c.

    3.2.1 Xy dng cc tool tng ng

    Sakai c th chia ra lm hai phn mt l Sakai container v Sakai tool. khai thc ccng dng web ngi pht trin phi vit cc tool cho Sakai.

    Nhm cng tm hiu vit mt tool cho Sakai s dng cng c Sakai App Builder.

    Quay li vn l chng ta cn truy cp Grid thng qua Sakai do nhm s phipht trin cc tool nh proxymanager-tool hay jobsubmision-tool... cc tool tng ngvi cc portlet ca Sakai.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xliii

  • 8/3/2019 47392834 Baocao Luanvan Final

    43/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Do ngi vit cc tool ny phi m bo hiu c hot ng ca code tng portletv cc th vin h tr cho vic giao tip vi globus v myproxy bn di.

    Sakai App Builder l mt cng c kh mnh nhm h tr hot ng vit tool ca Sakaitheo cc chun nh RSF( Reasonable Server Face), JSF( Java Server Face) v WicketFace.

    Ci t Sakai App Builder nh sau:

    Download ci t phin bn Sakai mi nht. Chy Eclipse Chn tab Windown -> Preferences Click double Java Click double Build Path Chn Classpath Variables Click mc New Nhp M2_REPO cho mc Name Click vo folder dn n th mc .m2/respository click ok -> ok. Chn tab Help chn Install New Software Chn New Remote Site Nhp AppBuilderSite vo mc Name Nhphttp://source.Sakaiproject.org/appbuilder/update/ Click finish click Next

    Click Install

    s dng c SakaiAppBuilder:

    Chn File->New-> Project->SakaiProject->SakaiAppBuilder Nhp tn project La chn cc tu chn nh key project( k t u vit hoa) Sau la chn hin thc RSF, JSF hay Wicket ...

    Cc k thut dng trang h tr pht trin tool Sakai rt phong ph nh Java Servlets,

    Velocity, JSP, JSF, RSF, Wicket. La chn k thut ph thuc v ch quan ca ngipht trin. Nhm thc tp cng th pht trin mt tool-proxymanager bng Wicket.Qua qu trnh tm hiu v tin hnh code th, th Wicket kh l d s dng thit kgiao din cho ngi dng. Nhng v mt ton th th pht trin ht tt cc tool cnthit tng ng vi OGCE th i hi nhiu u t v mt thi gian v cng sc tmhiu cc cng c xy dng tool cho Sakai v phi hiu su sc kin trc ca Sakai, v thigian lun vn c hn nn nhm khng i theo hng ny.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xliv

    http://source.sakaiproject.org/appbuilder/update/http://source.sakaiproject.org/appbuilder/update/
  • 8/3/2019 47392834 Baocao Luanvan Final

    44/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    3.2.2 Tch hp Grid portlet da vo chun WSRP

    WSRP[17] (Web Services for Remote Portlet) nh ngha mt chun tng tc, s dngWeb Services tng tc vi nhng portlet JSR 168. Cc portlet thuc chun WSRPny c gn vi mt portal. Cc portlet ny s thc thi bn ngoi my ch portal, bntrong my ch mt t chc khc mt v tr xa. Khi mt portal cn mt on trang no

    ca WSRP portlet n s gi portlet t xa thng qua giao thc SOAP.

    Hin ti y l mt hng gii quyt kh tt. Sakai h tr WSRP. Nhng hin tiOGCE portal li khng h tr. thc hin chuyn cc truy cp vo Grid thng quaSakai bng OGCE portal l khng kh thi my!. Mc d WSRP h tr API pht trin

    portlet chun ny. Mc ch ca ti l yu cu cc dch v Grid phi c p ng trctip t Sakai portal.

    3.2.3 Tch hp portlet JSR 168 vo Sakai

    Thng qua tm hiu cc bi vit ca Charles Serverance[18] th cch tip cn ny l kh thi.Cc phin bn Sakai t 2.4.x tr v sau bt u h tr portlet JSR 168. Hin ti phin

    bn Sakai m nhm dng l 2.7.1 nn Sakai h tr sn portlet JSR 168 thng qua pluto1.1

    Sakai

    Tool

    RequestFilter

    JSR-168

    Tool

    PortletServlet

    Sakai ToolRegistration

    Pluto PortletRegistration

    CharonPortal

    Sakai

    Site SetupPluto

    Container

    Sakai ToolDispatch

    Hnh 3. 8: Sakai Tool Registration

    Portlet JSR 168 c deploy trong mt servlet container nh mt ng dng web. Do

    Sakai cng c mt servlet gi l PortletServlet dng iu khin cc request v png cc resquest gia portal v JSR-168 tool. Portlet servlet ny t ng nhn dng vng k trong Pluto[20] Portlet Register.

    Sau khi JSR-168 c ng k trong Pluto Portlet Register th portlet cng c ngk nh mt tool vi Sakai Tool Registration ca portal v vy portlet s xut hin trongSakai Sites tool v Site Setup tool khi ngi dng thit lp. iu ny th hin r trong qutrnh ta khi ng Sakai Portal.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xlv

  • 8/3/2019 47392834 Baocao Luanvan Final

    45/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Mi khi tm thy mt portlet th portlet s t ng ng k vi Sakai v Pluto. Saukhi ng k xong th trong bng Sakai Tool Registration s c thm mt entry nh sau:

    Trong qu trnh thc thi Charon portal trong Sakai s tm kim trong Sakai ToolRegistration ca portal, khi thy mt portlet tool n s s dng Pluto container chuyn

    cc request ti portlet v tr v cc response cho portal.

    M t cc bc tch hp

    Hin ti nhm lun vn c mt gi deploy Sakai-Ogce[19], tch hp sn cc portlet caOGCE vo Sakai. Nhng gi ny khng c source code build cho Sakai 2.5.4 v chachy c. Do o nhm lun vn phi tin hnh build v tch hp cc portlet t OGCEvo Sakai.

    Cc bc tin hnh

    Bc 1: Build cc portlet ca OGCE Portal chung vi OGCE Portal hoc dngNetBean IDE, hoc dng Eclispse IDE build tng portlet. Kinh nghim canhm cho thy vi phin bn mi nht ca NetBean IDE d dng build portlet hnl dng Eclipse IDE.

    Bc 2:Chnh file cu hnh web.xml v project.xml Bc 3: Copy cc gi jar cn thit bn OGCE Portal vo Sakai Portal. bc mt nhm chn phng n d nht l build nguyn c OGCE Portal sau

    s dng cc deployment em sang Sakai Portal. V cch build OGCE portalth xin tham kho chi tit chng 2.

    Cu hnh ProxyManager Portlet

    Trc ht l chnh file cu hnh web.xml nh hnh di.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xlvi

  • 8/3/2019 47392834 Baocao Luanvan Final

    46/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 3. 9: Cu hnh file web.xml cho portlet Proxy Manager.Trn hnh trn ch ra nhng lp cn phi chnh sa. Hnh bn tri l file web.xml lc tacha cu hnh. Hnh bn phi l file web.xml ta cu hnh. Trong tt c cc portlet trongSakai Portal chng ta u phi chnh hai lp listener class v Servlet class v tag khi em t OGCE Portal sang Sakai Portal. Sau bc ny ta khi ng SakaiPortal ln. Vo WorkSite setup chng ta s thy portlet lc ny c ng k trongsakai.

    Hnh 3. 10: Portlet Proxy Manager trong Sakai.

    n bc copy cc gi jar t OGCE Portal v Sakai Portal th iu ny cn ph thuc votng portlet. Th nht l xem code ca cc portlet cn tch hp, xem phn import, tt c

    SVTH: Hunh Quang Trung ng Hong Thin Phong xlvii

    portlet-jsr-api-2.1.jar

    proxymanager-api-4.3.jar

    log4j-1.2.8.jarcog-jglobus-1.4-dev-071030.jar

    jgss-OGCE.jar

    commons-logging-1.1.jar

    commons-io-1.0.jar

    jce-jdk13-131.jar

    jarpc-OGCE.jar

  • 8/3/2019 47392834 Baocao Luanvan Final

    47/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    cc gi import phi c em qua v t ng cu trc th mc nh bn OGCE Portal.i vi ProxyManager Portlet th cn cc gi sau:

    Tt nhin ngoi nhng gi jar cn thit trong file source code th cn nhiu gi ph thuc khc.Cn phi cn c vo dng bo li ca Apache Tomcat xc nh gi cn thiu. V d

    Nhn dng u ca dng li cho ta bit portlet thiu class v khng tm thy class

    org/globus/wsrf/impl/security/authorization/SelfAuthorization ny. Vy vic cui cng l tm raclass SeftAuthorization nm trong gi jar no ca OGCE portal. Sau copy sang Sakai Portal. nhanh chng th c th dng cc cng c tm kim trong linux. Nhm s dng ngay chnhcng c tm kim ca GNOME c sn trong CentOS 5.4

    SVTH: Hunh Quang Trung ng Hong Thin Phong xlviii

    Caused by: java.lang.NoClassDefFoundError:org/globus/wsrf/impl/security/authorization/SelfAuthorizationatorg.globus.cog.abstraction.impl.execution.gt4_0_0.DelegatedTaskHandlerFactory.newTaskHandler(DelegatedTaskHandlerFactory.java:21)

    atorg.globus.cog.abstraction.impl.execution.gt4_0_0.TaskHandlerImpl.submit(Task

    HandlerImpl.java:77)at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:

    39 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

    at java.lang.reflect.Method.invoke(Method.java:585)

  • 8/3/2019 47392834 Baocao Luanvan Final

    48/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 3. 11: Cng c tm kim trong GNOME

    Vn gp phi lc tch hp nhn chung nm tng portlet c th. Mi khi tch hp bt k mtportlet no i hi ngi lm phi hiu c ni dung, chc nng ca portlet , cc dch v mportlet s dng kt ni vi GLOBUS TOOLKIT 4.0 tng nm c cc gi jar c th.Sau khi cc file th vin cn thit c copy y ta s c portlet nh hnh sau:

    Hnh 3. 12: Myproxy tch hp thnh cng vo Sakai v c th ly proxy

    Cu hnh Job Submit Portlet

    Cu hnh tng t ProxyManager Portlet ta s chy c Portlet ny nh hnh. n khi ci tJobSubmission portlet ta phi copy th mc coglibs t OGCE portal vo Sakai Portal. Sau sc nhiu thng bo li thiu gi jar cn thit, th tip tc copy cc gi trong /ogce-portal-home/shared sang /sakai-portal-home/shared.

    Hnh di l kt qu trc khi chy Job Submit portlet.

    SVTH: Hunh Quang Trung ng Hong Thin Phong xlix

  • 8/3/2019 47392834 Baocao Luanvan Final

    49/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Hnh 3. 13: Portlet Job Submit trong Sakai

    Nhng khi chy portlet ny th b li

    SVTH: Hunh Quang Trung ng Hong Thin Phong l

    WARN: Factoryorg.apache.axis.configuration.EngineConfigurationFactoryServlet Ignored:missing required method: public static EngineConfigurationFactorynewFactory(Object). (2010-11-16 13:55:17,750 http-8080-Processor22_org.apache.axis.configuration.EngineConfigurationFactoryFinder)WARN: Factoryorg.apache.axis.configuration.EngineConfigurationFactoryDefault Ignored:missing required method: public static EngineConfigurationFactorynewFactory(Object). (2010-11-16 13:55:17,752 http-8080-Processor22_org.apache.axis.configuration.EngineConfigurationFactoryFinder

    ).java:60)at

    xportlets.jobsubmit.JobSubmitAction.submitJob(JobSubmitAction.java:571)

    ERROR: Unable to locate a valid EngineConfigurationFactory (2010-11-1613:55:17,752 http-8080-Processor22_org.apache.axis.configuration.EngineConfigurationFactoryFinder)

    org.globus.cog.abstraction.impl.common.sandbox.SandboxException:Unexpected exception: org.globus.wsrf.encoding.SerializationException:Serialization failed [Caused by: java.lang.NullPointerException]

    atorg.globus.cog.abstraction.impl.common.sandbox.SandboxingTaskHandler.submit(SandboxingTaskHandler

    Caused by: org.globus.wsrf.encoding.SerializationException: Serialization failed[Caused by: java.lang.NullPointerException]

  • 8/3/2019 47392834 Baocao Luanvan Final

    50/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Sau khi debug trn chnh gi Jar gy ra li th nhm xc nh c li do chnh giApache Axis.

    Khi Sakai Portal khi ng nhng khng th cu hnh cEngineConfigurationFactory. Nguyn nhn chnh l nhm t gi Axis-OGCE.jar

    trong Sakai Portal khng ng th mc ging nh bn OGCE Portal. Nh vy c th lni v vn nguyn nhn li c th xy ra nhng chung qui l do cu hnh cha ng haythiu cc gi Jar cn thit, hoc v tr t cc gi Jar. Cu trc th mc ca Sakai hu nhkhng thay i g ngoi tr vic thm mt th mc /apache-tomcat-5.5.30/coglibs/. Thmc coglibs cha hu nh tt c cc file Jar cn thit cho GLOBUS TOOLKIT 4.0 .

    Ngoi nhng vic trn, th nhm tinh chnh mt vi th lp giao din nh hostname,cc cu hnh mc nh, th nhm a ln c ba portlet ProxyManager,JobSubmission, Comp-fileManager. Qu trnh th nghim trn mt my v mng Lan lhon ton thnh cng. Di l cc hnh nh trong lc chy th nghim ca ba portlet. T

    c th rt ra c mt kt lun l tch hp portlet t OGCE Portal sang Sakai Portal lhon ton kh thi.

    SVTH: Hunh Quang Trung ng Hong Thin Phong li

  • 8/3/2019 47392834 Baocao Luanvan Final

    51/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Chng 4: Kt lun4.1 Nhng thnh qu t c ca lun vn:

    Trong qu trnh t lc bt u n lc hon thnh lun vn nhm thu c nhng ktqu sau:

    Bc u nm bt c cng ngh Grid-Computing. Nm bt c b cng c Globus Toolkit 4.0 v vn dng vo ci t thc t. Tm hiu c mt s cng ngh c dng xy dng Grid-portal nh: Single

    Sign On(SSO), chun portlet JSR 168 Trin khai thnh cng cc portal nh: OGCE, Sakai. Tch hp thnh cng cc portlet JSR 168 vo Sakai trong c 2 portlet quan

    trng nht chnh l Myproxy v Job-Submission. Chnh s tch hp thnh cngny bin Sakai tr thnh mt Grid-Portal, t ngi dng khi ng nhp voSakai c th tham gia vo mng li tnh ton Grid-Computing.

    4.2 Nhng hn ch ca lun vn

    Mc d t c mt s thnh qu nh k trn nhng v thi gian gp rt nn lun vnvn cn mt s hn ch nht nh:

    Cha th chuyn ton b cc portlet t OGCE portal sang Sakai portal. Cha thit lp c c ch Single Sign On (SSO) t Sakai vo Globus ngha l khi

    mt ngi dng c quyn truy cp n h thng tnh ton li th khi ngi dng

    truy cp vo Sakai th ng thi cng chnh l truy cp vo h thng tnh tonli. Yu cu ny i hi phi am hiu su kin trc ca Sakai bi v cch qun luser ca Sakai v cch qun l user ca Myproxy l hon ton khc nhau, c thmapping user ca Sakai v Myproxy vi nhau i hi nhiu thi gian tm hiu,v thi gian lun vn c hn nn nhm vn cha hon thnh c chc nng ny.

    4.3 Nhng kh khn khi thc hin ti

    Thnh tht th khi thc hin ti nhm gp rt nhiu kh khn c v ch quan v khchquan.

    ti lin quan n nhiu framework nhau. Trong nhm hon ton ph thucvo cc th vin v OGCE portlet l mt tr ngi ln. Bn cnh nghin cuv pht trin portlet JSR168 c lp cho Sakai i hi mt lng thi gian ln.Mt khc Sakai khng hon ton lm vic trc tip vi cc portlet JSR168 m phithng qua Pluto portal. iu c ngha l nu pht trin portlet li t u th phi

    pht trin trn uPortal[], sau phi cu hnh li cho Pluto[]. Nh vy pht trin lit u theo chun JSR 168 l iu khng cn thit. Nhng nu chuyn ton bcode ca cc portlet JSR 168 sang kiu tool trn sakai l mt cng vic qu sc i

    SVTH: Hunh Quang Trung ng Hong Thin Phong lii

  • 8/3/2019 47392834 Baocao Luanvan Final

    52/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    vi ti lun vn. Cu trc mt tool ca Sakai, cc x l cc request v reponsel hon ton khc vi portlet JSR 168. Do nu pht trin ch k tha c giithut chung ca portlet m thi. Nh vy l kh kh khn v mo him i vinhm, trong khi thi gian lm lun vn khng c nhiu. T nhn nh nhmchp nhn s rng buc cc th vin ca OGCE, thay v xy dng li, th tin hnhtm hiu v cc gi th vin .

    Kh khn th hai m nhm gp phi l thiu cng c h tr cho vic pht trin vbin dch portlet JSR168 cho Sakai. V mi b pht trin portlet u chuyn dngcho mt portlal nht nh. Trong khi Sakai li hon ton khng h tr cng c

    pht trin cho portlet m Sakai ch h tr nhng cng c pht trin tool. Do dng nh nhm phi debug c apache tomcat, dng cng c decompile cc gi

    jar ca OGCE sau build li cc gi b li t truy tm nguyn nhn sa li.iu cng c ngha tn rt nhiu thi gian debug mi li.

    Cui cng t pha ch quan ca nhm, do tip cn vi lnh vc mi hon ton,kin thc lin quan n ti ca nhm hu nh bt u t con s khng. Dn ntip cn v lm ch vn , phn tch cc vn gp phi l ht sc kh khn v

    tn nhiu thi gian. c th thay i cc m ngun ca cc OGCE portlet i hiphi c thi gian di tip xc v c nhiu kinh nghim trong vic pht trin portlet.

    4.4 Hng pht trin ca lun vn:

    C th ni cng ngy cng c nhiu nhu cu v gii quyt cc bi ton ln m cc mytnh n khng th gii quyt ni v Grid-Computing chnh l gii php gii quytnhng bi ton nh th ny. H thng tnh ton li l mt cng ngh c trin vng rtln trong tng lai khi m c s h tng v mng v ti nguyn mng ngy cng phttrin. Grid- Computing c th tn dng ngun ti nguyn mng ny gii quyt cc bi

    ton ln trong khoa hc, gio dc

    Nu c th tip tc pht trin ti ny nhm s tp trung vo gii quyt cc vn sau:

    Chuyn ton b cc portlet t OGCE portal sang Sakai Sakai hon ton mangy chc nng ca mt Grid-portal.

    Thit lp c ch Single Sign On (SSO) t Sakai vo Globus to nn s thuntin cho ngi dng khi mun truy cp vo mng li tnh ton bng Sakai portal.

    Qung b vic truy cp n cc h thng tnh ton li bng Sakai portal n vimi ngi bi Sakai portal c xy dng hng ti cng ng v ang ngy

    cng pht trin mnh m. Nu c thm cc tnh nng truy cp n h thng tnhton li th cng ng Sakai s c thm bc pht trin t ph v c th trthnh portal ch o trong cng ng khoa hc v gio dc.

    SVTH: Hunh Quang Trung ng Hong Thin Phong liii

  • 8/3/2019 47392834 Baocao Luanvan Final

    53/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Chng 5: Ph lc v ti liu tham kho5.1 Ci t Globus Toolkit 4.0

    ci t GT4.0.1 trc ht trong CentOs, cn phi ci t gi RPMforge. y l giservice h tr yum.

    Thc hin lnh vim /etc/hosts chnh li domain localhost ca bn s c s dngtrong nhiu bc ci t sau. Thc ra khng thay i domain localhost th ta ci t vn

    bnh thng. Nhng vic thay i localost thnh mt tn d nh s tt hn:

    Download gi gridserver i km vi bn bo co. Gii nn chuyn vo th mc va giinn.

    Bn Comment dng script cui cng ca file install.sh ri lu file li.

    Tip theo tin hnh ci GT4.0.8 bng lnh:

    SVTH: Hunh Quang Trung ng Hong Thin Phong liv

    [root@phongcnttbk]$ vim /etc/hosts

    # Do not remove the following line, or various programs

    # that require network functionality will fail.127.0.0.1 phongcnttbk localhost

    [root@phongcnttbk ~]$ cd gridserver/

    [root@phongcnttbk gridserver]$ ls

    certs config.env INSTALL packages pts uninstall.sh

    config config_globus.sh install.sh README test

    #su globus $GLOBUS_LOCATION/setup/globus/setup-simple-ca

    [root@phongcnttbk gridserver]$ ./install.sh

  • 8/3/2019 47392834 Baocao Luanvan Final

    54/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Gi chng ta cn mt hostcert cho my v mt usercert cho chng ta. lm c iu chng ta cn phi ci t mt SimpleCA. Ta thc hin cc lnh sau:

    Cc lnh ny thc hin trong user globus, lc ny c th coi globus ng vai tr l mtCA.

    Mn hnh s hin ra thng bo, yu cu c gi nguyn CA hay khng ta nn chn mcnh l c. Lc subject name ca CA l:

    trong :

    Tip theo l nhpp email cho CA, email n l ni cc yu cu chng thc s c gi n

    k c k duyt bi CA.Tip theo l thi hn hiu lc ca CA mc nh l 1825 ngy (5 nm).Tip theo s l yu cu ngi dng khi to mt khu cho CA.

    n y mt chng thc t k duyt c khi to cho CA vi subject ca ngidng, ngi dng y l globus. ng thi cp cho gloubs 2 kha cho thit lp bo mt

    tin cy l cakey.pem v cacert.pem c 2 c lu tr trong th mc home ca globus

    hon thnh vic thit lp CA th gloubs phi ci t phn mm GSI, sau khi ci tGSI chng thc CA ca globus s c k v do globus c th to chng thc i din

    SVTH: Hunh Quang Trung ng Hong Thin Phong lv

    [globus@phongcnttbk gridserver]$ cd

    [globus@phongcnttbk ~]$ source $GLOBUS_LOCATION/etc/globus-user-env.sh

    [globus@phongcnttbk ~]$ /usr/grid/globus/setup/globus/setup-simple-ca

    cn=Globus Simple CA, ou=simpleCA-phongcnttbk, ou=GlobusTest, o=Grid

    - cn: l tn gi chung(common name)

    - Ou: l n v t chc (organization unit), n nhn bit CA ny t cc - CA khcto bi SimpleCA bi ngi dng khc na.

    Enter PEM pass phrase:

    Verifying - Enter PEM pass phrase:

    /home/globus/.globus/simpleCA//private/cakey.pem

    /home/globus/.globus/simpleCA/globus_simple_ca_e25b0701_setup-0.19.tar.gz

  • 8/3/2019 47392834 Baocao Luanvan Final

    55/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    cho bt k ngi dng no khc. Gi ci t GSI c t trong th mc home caglobus, n c to ra trong qu trnh ci t simpleCA:

    Lnh ci t GSI phi c thc hin trong root:

    Qu trnh ci t thnh cng lc ny CA c th chng thc cho ngi dng khc.

    Tip theo ta s chng thc cho host ca ta. ng nhp vo root v g lnh:

    Lnh ny set bin mi trng v bt u g lnh:

    Hostname y chnh l tn y ca host ci globus. Trong trng hp ny hostname lphongcnttbk

    Lnh ny dng yu cu CA xc thc cho host c tn l phongcnttbk. C hai file yu cu csinh ra l /etc/grid-security/hostcert_request.pem v mt kha ring km theo l /etc/grid-security/hostkey.pem.

    By gi CA chng thc yu cu va ri ca host ta phi ng nhp vo globus v thc hinlnh sau:

    Sau khi nhp password cho CA th s to ra file hostsigned.pem chng t host c CA xcthc v vic cui cng ta copy file hostsigned.pem ny vo th mc /etc/grid-security v i tn

    thnh hostcert.pem. Lnh copy ny phi thc hin trong root.

    Vy l ta hon tt vic xc thc cho host.

    Hai chng ch hostcert.pem v hostkey.pem thuc quyn s hu ca root v s cdng bi gridFTP server. Trong khi cc webservices container li chy trong non-root. Do

    SVTH: Hunh Quang Trung ng Hong Thin Phong lvi

    [root@phongcnttbk $GLOBUS_LOCATION/setup/globus_simple_ca_e25b0701_setup/setup-gsi default

    [root@phongcnttbk globus]# source $GLOBUS_LOCATION/etc/globus-user-env.sh

    [root@phongcnttbk globus]# grid-cert-request host hostname

    [root@phongcnttbk globus]# grid-cert-request host phongcnttbk

    [globus@phongcnttbk ~]$ grid-ca-sign -in /etc/grid-security/hostcert_request.pem-out hostsigned.pem

    root@phongcnttbk:~# cp ~globus/hostsigned.pem /etc/grid-security/hostcert.pem

  • 8/3/2019 47392834 Baocao Luanvan Final

    56/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    chng ta cn to ra mt bn sao ca hostcert.pem v hostkey.pem thuc quyn s huca globus. Qu trnh to bng sao nh sau:

    Kim tra quyn s hu ca cc chng ch va c tao ra:

    By gi chng ta s chng thc cho user, y user chng ta s l phongcnttbk ng vaitr ngi dng cn c xc thc.

    ng nhp vo phongcnttbk v thit lp cc bin mi trng:

    Tng t nh vic xc thc ca host ta cng to ra mt yu cu xc thc vi userphongcnttbk:

    N s yu cu nhp mt passphrase dng xc thc cho user phongcnttbk sau ny vxc nhn li passphrase .

    SVTH: Hunh Quang Trung ng Hong Thin Phong lvii

    [root@phongcnttbk grid-security]# cp hostcert.pem containercert.pem

    [root@phongcnttbk grid-security]# cp hostkey.pem containerkey.pem

    [root@phongcnttbk grid-security]# chown globus:globus container*.pem

    [root@phongcnttbk grid-security]# ls -l *.pem

    -rw-r--r-- 1 globus globus 0 Dec 29 01:51 containercert.pem

    -r-------- 1 globus globus 887 Dec 29 01:51 containerkey.pem

    -rw-r--r-- 1 root root 0 Dec 29 01:22 hostcert.pem

    -rw-r--r-- 1 root root 1407 Dec 29 01:22 hostcert_request.pem

    -r-------- 1 root root 887 Dec 29 01:22 hostkey.pem

    [phongcnttbk@phongcnttbk ~]$ source $GLOBUS_LOCATION/etc/globus-user-env.sh

    [phongcnttbk@phongcnttbk ~]$ grid-cert-request

    Enter PEM pass phrase:

    Veri in - Enter PEM ass hrase:

  • 8/3/2019 47392834 Baocao Luanvan Final

    57/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Qu trnh yu cu thc hin xong s to ra mt file private key l/home/phongcnttbk/.globus/userkey.pem v mt file yu cu l/home/phongcnttbk/.globus/usercert_request.pem. Ta cn chuyn yu cu ny n CA c chng thc. Ta c th dng lnh:

    gi mail ti CA hoc c th dng lnh cp chuyn yu cu n CA. y ta copyfile usercert-request.pem vo th mc home ca globus(chnh l CA) tin hnh xcthc cho user phongcnttbk. Kim tra th mc /home/globus c file usercert_request.pemthuc quyn s hu ca globus l c.

    Sau ta tin hnh xc thc yu cu ca user phongcnttbk bng lnh:

    Sau tr li file usercert.pem v cho user phongcnttbk bng cch gi mail hay copy. Fileusercert.pem tr v phi c lu v th mc /home/phongcnttbk/.globus

    V ta s c chng ch hin th trn terminal nh sau:

    Nh vy qu trnh xc thc cho phongcnttbk hon tt. By gi chng ta cn to ra filegrid-mapfile map user phongcnttbk vi proxy ca n l dng chng thc v sau.

    ng nhp vo root v g lnh:

    to ra file grid-mapfile. Nh lu li file ny.Sau ta g lnh:

    SVTH: Hunh Quang Trung ng Hong Thin Phong lviii

    [phongcnttbk@phongcnttbk ~]$ cat /home/bacon/.globus/usercert_request.pem |

    mail bachdienthusinh290489

    [phongcnttbk@phongcnttbk .globus]$ ll

    total 12

    -rw-r--r-- 1 phongcnttbk phongcnttbk 2647 Dec 29 02:24 usercert.pem

    -rw-r--r-- 1 phongcnttbk phongcnttbk 1400 Dec 29 02:00 usercert_request.pem

    -r-------- 1 phongcnttbk phongcnttbk 963 Dec 29 02:

    /O=Grid/OU=GlobusTest/OU=simpleCA-phongcnttbk/CN=host/phongcnttbk

    [root@phongcnttbk ~]# vim /etc/grid-security/grid-mapfile

    [root@phongcnttbk~]#cat/etc/grid-security/grid-mapfile/O=Grid/OU=GlobusTest/OU=simpleCA-phongcnttbk/CN=PhongDang

    phongcnttbk

    [globus@phongcnttbk ~]$ grid-ca-sign -in usercert_request.pem -out usercert.pem

  • 8/3/2019 47392834 Baocao Luanvan Final

    58/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Nh vy l ta xc thc cho user v map user phongcnttbk vi proxy ca n.

    Ci t Myproxy-server

    Myproxy server dng xc thc user trc khi cho php user truy cp vo cc dch vglobus. cu hnh Myproxy server ta phi sa li file myproxy-server.config c

    cung cp ti $GLOBUS_LOCATION/share/myproxy/myproxy-server.config v copy nn /etc/myproxy-server. Nu ta b qua bc ny th myproxy-server khng th khing c.

    u tin ta thc hin lnh:

    copy file myproxy-server.config n /etc, sau thc hin lnh:

    v sa li ni dung ca n nh sau:

    v sau lu li.

    Tip theo l thm dch v myproxy-server vo h thng bng lnh sau:

    Ta kim tra li xem myproxy server c thm vo h thng hay cha bng lnh sau:

    SVTH: Hunh Quang Trung ng Hong Thin Phong lix

    [root@phongcnttbk ~]# cp $GLOBUS_LOCATION/etc/myproxy-server.config /etc

    [root@phongcnttbk ~]# gedit /etc/myproxy-server.config

    ## Complete Sample Policy## The following lines define a sample policy that enables all# myproxy-server features. See below for more examples.accepted_credentials "*"authorized_retrievers "*"

    default_retrievers "*"authorized_renewers "*"default_renewers "none"authorized_key_retrievers "*"default_key_retrievers "none"trusted_retrievers "*"default_trusted_retrievers "none"

    [root@phongcnttbk

    >>

  • 8/3/2019 47392834 Baocao Luanvan Final

    59/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Nu thy myproxy-server 7512/tcp dng cui l c.

    Sau ta cn cho cu hnh myproxy-server khi ng cng vi h thng

    Tip theo l khi ng dch v myproxy-server ln.

    Kim tra myproxy-server c start ln cha bng lnh:

    SVTH: Hunh Quang Trung ng Hong Thin Phong lx

    [root@phongcnttbk ~]#tail /etc/services v xem kt qu:[root@phongcnttbk ~]tail /etc/servicesbinkp 24554/tcp # binkp fidonet protocolasp 27374/tcp # Address Search Protocolasp 27374/udp

    dircproxy 57000/tcp # Detachable IRC Proxytfido 60177/tcp # fidonet EMSI over telnet fido 60179/tcp # fidonet EMSI over TCP# Local services gsiftp 2811/tcpmyproxy-server 7512/tcp # Myproxy server

    root@choate:~# cp $GLOBUS_LOCATION/share/myproxy/etc.xinetd.myproxy/etc/xinetd.d/myproxyroot@choate:~# vim /etc/xinetd.d/myproxyroot@choate:~# cat /etc/xinetd.d/myproxyservice myproxy-server{socket_type = streamprotocol = tcpwait = no

    user = rootserver = /usr/local/globus-4.0.1/sbin/myproxy-serverenv = GLOBUS_LOCATION=/usr/local/globus-4.0.1

    LD_LIBRARY_PATH=/usr/local/globus-4.0.1/libdisable = no

    [root@phongcnttbk ~]# /etc/init.d/xinetd reload

    Reloading configuration: [ OK ]

    [root@phongcnttbk ~]# netstat -an | grep 7512

  • 8/3/2019 47392834 Baocao Luanvan Final

    60/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Nu thy c dng di y:

    Nh vy l ta ci t cu hnh thnh cng.Mt ch rt quan trng trong vic ci t v cu hnh globus, myproxy server chnhl lnh no thc hin trong user no phi r rng khng c ln ln v c mt s lnh chchy c trong root m khng chy c trong cc user khc hay trng hp ta dngCA xc thc cho phongcnttbk m li chy lnh yu cu xc thc cho root th ta s gp ccvn li v sau ny.

    Myproxy-init, Myproxy-logon.

    lu tr chng ch vo trong kho myproxy th ta s dng lnh myproxy-init nh sau:

    Trong hostname chnh l hostname ca myproxy server

    Username l ti khon ca myproxy.

    Trong trng hp ca ti th ti s g lnh l:

    Trn mn hnh Terminal s hin ra nh sau:

    SVTH: Hunh Quang Trung ng Hong Thin Phong lxi

    tcp 0 0 0.0.0.0:7512 0.0.0.0:* LISTEN

    Myproxy-init -s hostname l username

    [phongcnttbk@phongcnttbk ~]$ myproxy-init -s phongcnttbk -l phong

    Your identity: /O=Grid/OU=GlobusTest/OU=simpleCA-phongcnttbk/CN=PhongDangEnter GRID pass phrase for this identity:Creating proxy ............................... DoneProxy Verify OKYour proxy is valid until: Thu Jan 6 02:10:54 2011Enter MyProxy pass phrase:Verifying - Enter MyProxy pass phrase:A proxy valid for 168 hours (7.0 days) for user phong now exists on phongcnttbk.

  • 8/3/2019 47392834 Baocao Luanvan Final

    61/75

    Xy dng c ch Single Sign On t mi trng Sakai vo VN-GRID GVHD: TS. Phm Trn V

    Trong qu trnh