Idioma:

Role Based Access Control system in the ATLAS experiment

Valsan, M L ; Dobson, M ; Miotto, G Lehmann ; Scannicchio, D A ; Schlenker, S ; Filimonov, V ; Khomoutnikov, V ; Dumitru, I ; Zaytsev, A S ; Korol, A A ; Bogdantchikov, A ; Avolio, G ; Caramarcu, C ; Ballestrero, S ; Darlea, G L ; Twomey, M ; Bujor, F

Journal of physics. Conference series, 2011-12, Vol.331 (2), p.022042-6 [Periódico revisado por pares]

Bristol: IOP Publishing

Texto completo disponível

Citações Citado por

Enviar para

Título:
Role Based Access Control system in the ATLAS experiment
Autor: Valsan, M L ; Dobson, M ; Miotto, G Lehmann ; Scannicchio, D A ; Schlenker, S ; Filimonov, V ; Khomoutnikov, V ; Dumitru, I ; Zaytsev, A S ; Korol, A A ; Bogdantchikov, A ; Avolio, G ; Caramarcu, C ; Ballestrero, S ; Darlea, G L ; Twomey, M ; Bujor, F
Assuntos: Access control ; Active control ; CERN ; Control systems ; Data base management systems ; Design engineering ; Directories ; Experiments ; Human resources ; Policies ; Security management ; Stores
É parte de: Journal of physics. Conference series, 2011-12, Vol.331 (2), p.022042-6
Notas: ObjectType-Article-1
SourceType-Scholarly Journals-1
ObjectType-Feature-2
content type line 23
Descrição: The complexity of the ATLAS experiment motivated the deployment of an integrated Access Control System in order to guarantee safe and optimal access for a large number of users to the various software and hardware resources. Such an integrated system was foreseen since the design of the infrastructure and is now central to the operations model. In order to cope with the ever growing needs of restricting access to all resources used within the experiment, the Roles Based Access Control (RBAC) previously developed has been extended and improved. The paper starts with a short presentation of the RBAC design, implementation and the changes made to the system to allow the management and usage of roles to control access to the vast and diverse set of resources. The RBAC implementation uses a directory service based on Lightweight Directory Access Protocol to store the users (∼3000), roles (∼320), groups (∼80) and access policies. The information is kept in sync with various other databases and directory services: human resources, central CERN IT, CERN Active Directory and the Access Control Database used by DCS. The paper concludes with a detailed description of the integration across all areas of the system.
Editor: Bristol: IOP Publishing
Idioma: Inglês

Links

View record in IOP Publishing$$FView record in $$GIOP Publishing

Voltar para lista de resultados

Realização: Logos de Redes Sociais:

Role Based Access Control system in the ATLAS experiment

Valsan, M L ; Dobson, M ; Miotto, G Lehmann ; Scannicchio, D A ; Schlenker, S ; Filimonov, V ; Khomoutnikov, V ; Dumitru, I ; Zaytsev, A S ; Korol, A A ; Bogdantchikov, A ; Avolio, G ; Caramarcu, C ; Ballestrero, S ; Darlea, G L ; Twomey, M ; Bujor, F

Bristol: IOP Publishing

Buscando em bases de dados remotas. Favor aguardar.