SlideShare a Scribd company logo
1 of 38
ESnet  RADIUS Authentication Fabric Michael Helm ESnet/LBNL GGF-12 Sec Workshop 18 Sep 2004
What Does the RAF Do? NERSC r ANL r OTP Service ORNL r PNNL OTP Service OTP Service OTP Service ,[object Object],[object Object],[object Object],[object Object],[object Object],Realms R ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ESnet RAF Federation anl.gov nersc.gov pnnl.gov ornl.gov App r RADIUS
What Is the Grid Integrated RAF? ESnet Radius Auth DB ESnet Root  CA MyProxy Credentials PAM 1 Log in 2 Ask AuthN; hint OTP 5 Receive Proxy Cert Manage  myProxy 6 (Opt) Store Proxy 7 Execute OTP Services OCSP HSM Subordinate  CA  Engine 4. Auth OK; Namestring 3 OTP verification 4 Sign Proxy Sign Subordinate CA SIPS Proposal Apr 2004 Special case of GridLogon
RAF Benefits & Features ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
ESnet RAF Architecture Repli- cation Network  (IP) VPN  (IPsec) RADIUS Proxy router RADIUS Proxy router RADIUS Proxy router RADIUS Proxy router ESnet RAF Site ESnet AuthN Authority ( OTP ) Appli- cation  1 Rc Site  n RADIUS AuthN Authority ( OTP ) Appli- cation  1 Rc Site 1 RADIUS AuthN Authority ( OTP ) Appli- cation  1 Rc Site 2 RADIUS
RAF Current Issues ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
RAF Current Issues NERSC r ANL r OTP Service ORNL r PNNL OTP Service OTP Service OTP Service R ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ESnet RAF Federation anl.gov nersc.gov pnnl.gov ornl.gov Reliability/Replication Integrity/Security OTP/C&R Federation Transit time Application Integration
RAF Long Term Issues ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
AuthA ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
RAF Collaboration Introduction ,[object Object],[object Object],[object Object]
Collaboration Introduction (3) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Grid Integrated RADIUS Authentication Fabric ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Collaboration Introduction (4) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Collaboration Introduction (5) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
What Does the RAF Do? NERSC r ANL r OTP Service ORNL r PNNL OTP Service OTP Service OTP Service ,[object Object],[object Object],[object Object],[object Object],[object Object],Realms R ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ESnet RAF Federation anl.gov nersc.gov pnnl.gov ornl.gov r RADIUS
What Does the RAF Do? (2) Local Exclusion of a Realm NERSC r ANL r OTP Service ORNL r PNNL OTP Service OTP Service OTP Service ,[object Object],[object Object],[object Object],[object Object],[object Object],Realms R ESnet RAF Federation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
What Does the RAF Do? (3) goodlab.org  Joins the Federation NERSC r ANL r OTP Service ORNL r PNNL OTP Service OTP Service OTP Service ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Realms R ESnet RAF Federation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r OTP Service ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
What Does the RAF Do? (4) Site Manages Separate Relationship XAuth Service NERSC r ANL r OTP Service ORNL r PNNL OTP Service OTP Service OTP Service ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Realms R ESnet RAF Federation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r OTP Service ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r ,[object Object]
ESnet RAF Architecture Repli- cation Network  (IP) VPN  (IPsec) RADIUS Proxy router RADIUS Proxy router RADIUS Proxy router RADIUS Proxy router ESnet RAF Site ESnet AuthN Authority ( OTP ) Appli- cation  1 Rc Site  n RADIUS AuthN Authority ( OTP ) Appli- cation  1 Rc Site 1 RADIUS AuthN Authority ( OTP ) Appli- cation  1 Rc Site 2 RADIUS
RAF Benefits & Features ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
RAF Current Issues NERSC r ANL r OTP Service ORNL r PNNL OTP Service OTP Service OTP Service Realms R ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],r ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],ESnet RAF Federation anl.gov nersc.gov pnnl.gov ornl.gov Reliability/Replication Integrity/Security OTP/C&R Federation Transit time Application Integration
RAF Current Issues ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
What Is the Grid Integrated RAF? ESnet Radius Auth DB ESnet Root  CA MyProxy Credentials PAM 1 Log in 2 Ask AuthN; hint OTP 5 Receive Proxy Cert Manage  myProxy 6 (Opt) Store Proxy 7 Execute OTP Services OCSP HSM Subordinate  CA  Engine 4. Auth OK; Namestring 3 OTP verification 4 Sign Proxy Sign Subordinate CA SIPS Proposal Apr 2004 Special case of GridLogon
RAF Long Term Issues ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Password-based Authentication Technology ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
OTP-based Authenticated Key-Exchange ,[object Object],[object Object],[object Object],Encrypt (  pw’,  g y ) Derive one-time password pw’ from pass-phrase Compute session key: sk =  g xy Encrypt (  pw’ ,  g x )  Derive one-time password pw’ from stored password pw Compute session key: sk =  g xy Encrypt ( sk, pw’) Update the stored password: pw= pw’ Client  Server
Accomplishments ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Work in Progress ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Radius Software availability ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Open Issues ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Radius Security and Operation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Issues: OTP ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Conclusion ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Demo ,[object Object],[object Object]
Fusion Grid Firewall Issues Michael Helm ESnet/LBNL GGF-12 Sec Workshop 18 Sep 2004
FusionGrid Use Case
Comments Each site is protected by a firewall Different firewall technology OTP is probably a feature  Need single sign-on, delegation, autonomous processes….
Fusion Grid ,[object Object],[object Object],[object Object],[object Object],[object Object]

More Related Content

What's hot

IPv6 Security - Myths and Reality
IPv6 Security - Myths and RealityIPv6 Security - Myths and Reality
IPv6 Security - Myths and RealitySwiss IPv6 Council
 
SSL/TLS Eavesdropping with Fullpath Control
SSL/TLS Eavesdropping with Fullpath ControlSSL/TLS Eavesdropping with Fullpath Control
SSL/TLS Eavesdropping with Fullpath ControlMike Thompson
 
Caffe Latte Attack Presented In Toorcon
Caffe Latte Attack Presented In ToorconCaffe Latte Attack Presented In Toorcon
Caffe Latte Attack Presented In ToorconMd Sohail Ahmad
 
Lync 2010 deep dive edge
Lync 2010 deep dive edgeLync 2010 deep dive edge
Lync 2010 deep dive edgeHarold Wong
 
Fb i pv6-sparchimanv1.0
Fb i pv6-sparchimanv1.0Fb i pv6-sparchimanv1.0
Fb i pv6-sparchimanv1.0Fred Bovy
 
SIPCORE - presentation of SIP and DANE (IETF #89)
SIPCORE - presentation of SIP and DANE (IETF #89)SIPCORE - presentation of SIP and DANE (IETF #89)
SIPCORE - presentation of SIP and DANE (IETF #89)Olle E Johansson
 
Chapter11ccna
Chapter11ccnaChapter11ccna
Chapter11ccnarobertoxe
 
MUM Middle East 2016 - System Integration Analyst
MUM Middle East 2016 - System Integration AnalystMUM Middle East 2016 - System Integration Analyst
MUM Middle East 2016 - System Integration AnalystFajar Nugroho
 
MUM Europe 2017 - Traffic Generator Case Study
MUM Europe 2017 - Traffic Generator Case StudyMUM Europe 2017 - Traffic Generator Case Study
MUM Europe 2017 - Traffic Generator Case StudyFajar Nugroho
 
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124 | Las Vegas 2017
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124  | Las Vegas 2017Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124  | Las Vegas 2017
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124 | Las Vegas 2017Bruno Teixeira
 
5 ip security dataplace security
5 ip security dataplace security5 ip security dataplace security
5 ip security dataplace securitySagarR24
 
AusNOG 2014 - Network Virtualisation: The Killer App for IPv6?
AusNOG 2014 - Network Virtualisation: The Killer App for IPv6?AusNOG 2014 - Network Virtualisation: The Killer App for IPv6?
AusNOG 2014 - Network Virtualisation: The Killer App for IPv6?Mark Smith
 
Latency tracing in distributed Java applications
Latency tracing in distributed Java applicationsLatency tracing in distributed Java applications
Latency tracing in distributed Java applicationsConstantine Slisenka
 
AusNOG 2011 - Residential IPv6 CPE - What Not to Do and Other Observations
AusNOG 2011 - Residential IPv6 CPE - What Not to Do and Other ObservationsAusNOG 2011 - Residential IPv6 CPE - What Not to Do and Other Observations
AusNOG 2011 - Residential IPv6 CPE - What Not to Do and Other ObservationsMark Smith
 
Etrance networks Consulting and Services
Etrance networks Consulting and ServicesEtrance networks Consulting and Services
Etrance networks Consulting and ServicesAbhijit Chaudhary
 
Networking in Java with NIO and Netty
Networking in Java with NIO and NettyNetworking in Java with NIO and Netty
Networking in Java with NIO and NettyConstantine Slisenka
 
PLNOG 9: Emil Gągała - Fast Service Restoration
PLNOG 9: Emil Gągała - Fast Service Restoration PLNOG 9: Emil Gągała - Fast Service Restoration
PLNOG 9: Emil Gągała - Fast Service Restoration PROIDEA
 
Zebra SRv6 CLI on Linux Dataplane (ENOG#49)
Zebra SRv6 CLI on Linux Dataplane (ENOG#49)Zebra SRv6 CLI on Linux Dataplane (ENOG#49)
Zebra SRv6 CLI on Linux Dataplane (ENOG#49)Kentaro Ebisawa
 

What's hot (20)

IPv6 Security - Myths and Reality
IPv6 Security - Myths and RealityIPv6 Security - Myths and Reality
IPv6 Security - Myths and Reality
 
SSL/TLS Eavesdropping with Fullpath Control
SSL/TLS Eavesdropping with Fullpath ControlSSL/TLS Eavesdropping with Fullpath Control
SSL/TLS Eavesdropping with Fullpath Control
 
Caffe Latte Attack Presented In Toorcon
Caffe Latte Attack Presented In ToorconCaffe Latte Attack Presented In Toorcon
Caffe Latte Attack Presented In Toorcon
 
Lync 2010 deep dive edge
Lync 2010 deep dive edgeLync 2010 deep dive edge
Lync 2010 deep dive edge
 
Fb i pv6-sparchimanv1.0
Fb i pv6-sparchimanv1.0Fb i pv6-sparchimanv1.0
Fb i pv6-sparchimanv1.0
 
SIPCORE - presentation of SIP and DANE (IETF #89)
SIPCORE - presentation of SIP and DANE (IETF #89)SIPCORE - presentation of SIP and DANE (IETF #89)
SIPCORE - presentation of SIP and DANE (IETF #89)
 
Chapter11ccna
Chapter11ccnaChapter11ccna
Chapter11ccna
 
Caffe Latte Attack
Caffe Latte AttackCaffe Latte Attack
Caffe Latte Attack
 
MUM Middle East 2016 - System Integration Analyst
MUM Middle East 2016 - System Integration AnalystMUM Middle East 2016 - System Integration Analyst
MUM Middle East 2016 - System Integration Analyst
 
MUM Europe 2017 - Traffic Generator Case Study
MUM Europe 2017 - Traffic Generator Case StudyMUM Europe 2017 - Traffic Generator Case Study
MUM Europe 2017 - Traffic Generator Case Study
 
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124 | Las Vegas 2017
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124  | Las Vegas 2017Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124  | Las Vegas 2017
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124 | Las Vegas 2017
 
5 ip security dataplace security
5 ip security dataplace security5 ip security dataplace security
5 ip security dataplace security
 
AusNOG 2014 - Network Virtualisation: The Killer App for IPv6?
AusNOG 2014 - Network Virtualisation: The Killer App for IPv6?AusNOG 2014 - Network Virtualisation: The Killer App for IPv6?
AusNOG 2014 - Network Virtualisation: The Killer App for IPv6?
 
Latency tracing in distributed Java applications
Latency tracing in distributed Java applicationsLatency tracing in distributed Java applications
Latency tracing in distributed Java applications
 
AusNOG 2011 - Residential IPv6 CPE - What Not to Do and Other Observations
AusNOG 2011 - Residential IPv6 CPE - What Not to Do and Other ObservationsAusNOG 2011 - Residential IPv6 CPE - What Not to Do and Other Observations
AusNOG 2011 - Residential IPv6 CPE - What Not to Do and Other Observations
 
Etrance networks Consulting and Services
Etrance networks Consulting and ServicesEtrance networks Consulting and Services
Etrance networks Consulting and Services
 
Networking in Java with NIO and Netty
Networking in Java with NIO and NettyNetworking in Java with NIO and Netty
Networking in Java with NIO and Netty
 
PLNOG 9: Emil Gągała - Fast Service Restoration
PLNOG 9: Emil Gągała - Fast Service Restoration PLNOG 9: Emil Gągała - Fast Service Restoration
PLNOG 9: Emil Gągała - Fast Service Restoration
 
Phifer 3 30_04
Phifer 3 30_04Phifer 3 30_04
Phifer 3 30_04
 
Zebra SRv6 CLI on Linux Dataplane (ENOG#49)
Zebra SRv6 CLI on Linux Dataplane (ENOG#49)Zebra SRv6 CLI on Linux Dataplane (ENOG#49)
Zebra SRv6 CLI on Linux Dataplane (ENOG#49)
 

Viewers also liked

Mentoring Presentation May 05
Mentoring Presentation May 05Mentoring Presentation May 05
Mentoring Presentation May 05FNian
 
Manufacturing And Product Design July 07 Briefing Session
Manufacturing And Product Design July 07 Briefing SessionManufacturing And Product Design July 07 Briefing Session
Manufacturing And Product Design July 07 Briefing SessionFNian
 
Visuel Kiss
Visuel KissVisuel Kiss
Visuel Kissfredox
 
Ctfl Seta Careers Guide
Ctfl Seta Careers GuideCtfl Seta Careers Guide
Ctfl Seta Careers GuideFNian
 
Developing Your Marketing Plan
Developing Your Marketing PlanDeveloping Your Marketing Plan
Developing Your Marketing PlanFNian
 
Programma Corso WEB 2.0
Programma Corso WEB 2.0Programma Corso WEB 2.0
Programma Corso WEB 2.0Rosario Sica
 
Juanint
JuanintJuanint
Juanintfredox
 
Syndication Pp
Syndication PpSyndication Pp
Syndication PpFNian
 
Perunacareers2007
Perunacareers2007Perunacareers2007
Perunacareers2007FNian
 
Andrew-The Course Syllabus In Writing
Andrew-The Course Syllabus In WritingAndrew-The Course Syllabus In Writing
Andrew-The Course Syllabus In Writingcyutafl
 
Crt2000a
Crt2000aCrt2000a
Crt2000aFNian
 
Unite Intervention Study
Unite Intervention StudyUnite Intervention Study
Unite Intervention StudyFNian
 
Puerto Galera Watersheds
Puerto Galera WatershedsPuerto Galera Watersheds
Puerto Galera Watershedsnetmagus
 
Nuevo Servicio De Colectivos
Nuevo Servicio De ColectivosNuevo Servicio De Colectivos
Nuevo Servicio De ColectivosDistrito4450
 

Viewers also liked (20)

Escrito Ayudas Sociales
Escrito Ayudas SocialesEscrito Ayudas Sociales
Escrito Ayudas Sociales
 
Mentoring Presentation May 05
Mentoring Presentation May 05Mentoring Presentation May 05
Mentoring Presentation May 05
 
minha familia
minha familiaminha familia
minha familia
 
Manufacturing And Product Design July 07 Briefing Session
Manufacturing And Product Design July 07 Briefing SessionManufacturing And Product Design July 07 Briefing Session
Manufacturing And Product Design July 07 Briefing Session
 
Visuel Kiss
Visuel KissVisuel Kiss
Visuel Kiss
 
Ctfl Seta Careers Guide
Ctfl Seta Careers GuideCtfl Seta Careers Guide
Ctfl Seta Careers Guide
 
Developing Your Marketing Plan
Developing Your Marketing PlanDeveloping Your Marketing Plan
Developing Your Marketing Plan
 
Programma Corso WEB 2.0
Programma Corso WEB 2.0Programma Corso WEB 2.0
Programma Corso WEB 2.0
 
081008 Petra Anttola
081008 Petra Anttola081008 Petra Anttola
081008 Petra Anttola
 
Juanint
JuanintJuanint
Juanint
 
Syndication Pp
Syndication PpSyndication Pp
Syndication Pp
 
Blogs
BlogsBlogs
Blogs
 
Perunacareers2007
Perunacareers2007Perunacareers2007
Perunacareers2007
 
Andrew-The Course Syllabus In Writing
Andrew-The Course Syllabus In WritingAndrew-The Course Syllabus In Writing
Andrew-The Course Syllabus In Writing
 
Crt2000a
Crt2000aCrt2000a
Crt2000a
 
Unite Intervention Study
Unite Intervention StudyUnite Intervention Study
Unite Intervention Study
 
Puerto Galera Watersheds
Puerto Galera WatershedsPuerto Galera Watersheds
Puerto Galera Watersheds
 
Artamblupa
ArtamblupaArtamblupa
Artamblupa
 
Otaku2008 01
Otaku2008 01Otaku2008 01
Otaku2008 01
 
Nuevo Servicio De Colectivos
Nuevo Servicio De ColectivosNuevo Servicio De Colectivos
Nuevo Servicio De Colectivos
 

Similar to E Snet Authentication Fabric Pilot

E Snet Raf Essc Jan2005
E Snet Raf Essc Jan2005E Snet Raf Essc Jan2005
E Snet Raf Essc Jan2005FNian
 
AusNOG 2016 - The Trouble with NAT
AusNOG 2016 - The Trouble with NATAusNOG 2016 - The Trouble with NAT
AusNOG 2016 - The Trouble with NATMark Smith
 
Summit 16: Open-O Mini-Summit - Architecture & Technology
Summit 16: Open-O Mini-Summit - Architecture & TechnologySummit 16: Open-O Mini-Summit - Architecture & Technology
Summit 16: Open-O Mini-Summit - Architecture & TechnologyOPNFV
 
From MSS to TelScale - Mobicents Summit 2011
From MSS to TelScale - Mobicents Summit 2011From MSS to TelScale - Mobicents Summit 2011
From MSS to TelScale - Mobicents Summit 2011telestax
 
Defending your workloads with aws waf and deep security
Defending your workloads with aws waf and deep securityDefending your workloads with aws waf and deep security
Defending your workloads with aws waf and deep securityMark Nunnikhoven
 
Cilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPFCilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPFCynthia Thomas
 
Interoperable Web Services with JAX-WS and WSIT
Interoperable Web Services with JAX-WS and WSITInteroperable Web Services with JAX-WS and WSIT
Interoperable Web Services with JAX-WS and WSITCarol McDonald
 
LAS16-306: Exploring the Open Trusted Protocol
LAS16-306: Exploring the Open Trusted ProtocolLAS16-306: Exploring the Open Trusted Protocol
LAS16-306: Exploring the Open Trusted ProtocolLinaro
 
EAP TLS, the Rolls-Royce of extensible authentication protocol (EAP) methods ...
EAP TLS, the Rolls-Royce of extensible authentication protocol (EAP) methods ...EAP TLS, the Rolls-Royce of extensible authentication protocol (EAP) methods ...
EAP TLS, the Rolls-Royce of extensible authentication protocol (EAP) methods ...Jisc
 
HP Helion Webinar #5 - Security Beyond Firewalls
HP Helion Webinar #5 - Security Beyond FirewallsHP Helion Webinar #5 - Security Beyond Firewalls
HP Helion Webinar #5 - Security Beyond FirewallsBeMyApp
 
2016 06-10-ieee-sdn (1)
2016 06-10-ieee-sdn (1)2016 06-10-ieee-sdn (1)
2016 06-10-ieee-sdn (1)ICT PRISTINE
 
Summit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
Summit 16: Open-O Mini-Summit - VF Event Streaming Project ProposalSummit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
Summit 16: Open-O Mini-Summit - VF Event Streaming Project ProposalOPNFV
 
Using Istio to Secure & Monitor Your Services
Using Istio to Secure & Monitor Your ServicesUsing Istio to Secure & Monitor Your Services
Using Istio to Secure & Monitor Your ServicesAlcide
 
Palo Alto Networks PAN-OS 4.0 New Features
Palo Alto Networks PAN-OS 4.0 New FeaturesPalo Alto Networks PAN-OS 4.0 New Features
Palo Alto Networks PAN-OS 4.0 New Featureslukky753
 
Software defined network and Virtualization
Software defined network and VirtualizationSoftware defined network and Virtualization
Software defined network and Virtualizationidrajeev
 
Go with the Flow-v2
Go with the Flow-v2Go with the Flow-v2
Go with the Flow-v2Zobair Khan
 

Similar to E Snet Authentication Fabric Pilot (20)

E Snet Raf Essc Jan2005
E Snet Raf Essc Jan2005E Snet Raf Essc Jan2005
E Snet Raf Essc Jan2005
 
AusNOG 2016 - The Trouble with NAT
AusNOG 2016 - The Trouble with NATAusNOG 2016 - The Trouble with NAT
AusNOG 2016 - The Trouble with NAT
 
Summit 16: Open-O Mini-Summit - Architecture & Technology
Summit 16: Open-O Mini-Summit - Architecture & TechnologySummit 16: Open-O Mini-Summit - Architecture & Technology
Summit 16: Open-O Mini-Summit - Architecture & Technology
 
From MSS to TelScale - Mobicents Summit 2011
From MSS to TelScale - Mobicents Summit 2011From MSS to TelScale - Mobicents Summit 2011
From MSS to TelScale - Mobicents Summit 2011
 
Defending your workloads with aws waf and deep security
Defending your workloads with aws waf and deep securityDefending your workloads with aws waf and deep security
Defending your workloads with aws waf and deep security
 
Cilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPFCilium:: Application-Aware Microservices via BPF
Cilium:: Application-Aware Microservices via BPF
 
SOA patterns
SOA patterns SOA patterns
SOA patterns
 
Aruba OS 6.4 Command Line Interface Reference Guide
Aruba OS 6.4 Command Line Interface Reference GuideAruba OS 6.4 Command Line Interface Reference Guide
Aruba OS 6.4 Command Line Interface Reference Guide
 
Interoperable Web Services with JAX-WS and WSIT
Interoperable Web Services with JAX-WS and WSITInteroperable Web Services with JAX-WS and WSIT
Interoperable Web Services with JAX-WS and WSIT
 
Introduction to Diameter Protocol - Part1
Introduction to Diameter Protocol - Part1Introduction to Diameter Protocol - Part1
Introduction to Diameter Protocol - Part1
 
LAS16-306: Exploring the Open Trusted Protocol
LAS16-306: Exploring the Open Trusted ProtocolLAS16-306: Exploring the Open Trusted Protocol
LAS16-306: Exploring the Open Trusted Protocol
 
EAP TLS, the Rolls-Royce of extensible authentication protocol (EAP) methods ...
EAP TLS, the Rolls-Royce of extensible authentication protocol (EAP) methods ...EAP TLS, the Rolls-Royce of extensible authentication protocol (EAP) methods ...
EAP TLS, the Rolls-Royce of extensible authentication protocol (EAP) methods ...
 
HP Helion Webinar #5 - Security Beyond Firewalls
HP Helion Webinar #5 - Security Beyond FirewallsHP Helion Webinar #5 - Security Beyond Firewalls
HP Helion Webinar #5 - Security Beyond Firewalls
 
2016 06-10-ieee-sdn (1)
2016 06-10-ieee-sdn (1)2016 06-10-ieee-sdn (1)
2016 06-10-ieee-sdn (1)
 
Summit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
Summit 16: Open-O Mini-Summit - VF Event Streaming Project ProposalSummit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
Summit 16: Open-O Mini-Summit - VF Event Streaming Project Proposal
 
Using Istio to Secure & Monitor Your Services
Using Istio to Secure & Monitor Your ServicesUsing Istio to Secure & Monitor Your Services
Using Istio to Secure & Monitor Your Services
 
Active network
Active networkActive network
Active network
 
Palo Alto Networks PAN-OS 4.0 New Features
Palo Alto Networks PAN-OS 4.0 New FeaturesPalo Alto Networks PAN-OS 4.0 New Features
Palo Alto Networks PAN-OS 4.0 New Features
 
Software defined network and Virtualization
Software defined network and VirtualizationSoftware defined network and Virtualization
Software defined network and Virtualization
 
Go with the Flow-v2
Go with the Flow-v2Go with the Flow-v2
Go with the Flow-v2
 

More from FNian

Wipro Media Q1 0809
Wipro Media Q1 0809Wipro Media Q1 0809
Wipro Media Q1 0809FNian
 
Watts Brief
Watts BriefWatts Brief
Watts BriefFNian
 
The Role Of Business In Society Presentation At
The Role Of Business In Society   Presentation AtThe Role Of Business In Society   Presentation At
The Role Of Business In Society Presentation AtFNian
 
Unit C Eco Toolbox
Unit C Eco ToolboxUnit C Eco Toolbox
Unit C Eco ToolboxFNian
 
Singapore Jakarta Conf
Singapore Jakarta ConfSingapore Jakarta Conf
Singapore Jakarta ConfFNian
 
Syndication Pp
Syndication PpSyndication Pp
Syndication PpFNian
 
Integration of internal database system
Integration of internal database systemIntegration of internal database system
Integration of internal database systemFNian
 
Analyse sourcing and manufacturing strategies
Analyse sourcing and manufacturing strategiesAnalyse sourcing and manufacturing strategies
Analyse sourcing and manufacturing strategiesFNian
 
Scitc 2006 India 2005 And Future
Scitc 2006 India 2005 And FutureScitc 2006 India 2005 And Future
Scitc 2006 India 2005 And FutureFNian
 
Miller China Trade
Miller China TradeMiller China Trade
Miller China TradeFNian
 
Developing a market plan
Developing a market planDeveloping a market plan
Developing a market planFNian
 
Gianelle Tattara
Gianelle TattaraGianelle Tattara
Gianelle TattaraFNian
 
Gp Industry
Gp IndustryGp Industry
Gp IndustryFNian
 
House
HouseHouse
HouseFNian
 
How To Biuld Internal Rating System For Basel Ii
How To Biuld Internal Rating System For Basel IiHow To Biuld Internal Rating System For Basel Ii
How To Biuld Internal Rating System For Basel IiFNian
 
Gujarat
GujaratGujarat
GujaratFNian
 
Ietp Session 2 June 28
Ietp Session   2 June 28Ietp Session   2 June 28
Ietp Session 2 June 28FNian
 
India An Overview
India An OverviewIndia An Overview
India An OverviewFNian
 
Intra Industry
Intra IndustryIntra Industry
Intra IndustryFNian
 
Innovation Class 6
Innovation Class 6Innovation Class 6
Innovation Class 6FNian
 

More from FNian (20)

Wipro Media Q1 0809
Wipro Media Q1 0809Wipro Media Q1 0809
Wipro Media Q1 0809
 
Watts Brief
Watts BriefWatts Brief
Watts Brief
 
The Role Of Business In Society Presentation At
The Role Of Business In Society   Presentation AtThe Role Of Business In Society   Presentation At
The Role Of Business In Society Presentation At
 
Unit C Eco Toolbox
Unit C Eco ToolboxUnit C Eco Toolbox
Unit C Eco Toolbox
 
Singapore Jakarta Conf
Singapore Jakarta ConfSingapore Jakarta Conf
Singapore Jakarta Conf
 
Syndication Pp
Syndication PpSyndication Pp
Syndication Pp
 
Integration of internal database system
Integration of internal database systemIntegration of internal database system
Integration of internal database system
 
Analyse sourcing and manufacturing strategies
Analyse sourcing and manufacturing strategiesAnalyse sourcing and manufacturing strategies
Analyse sourcing and manufacturing strategies
 
Scitc 2006 India 2005 And Future
Scitc 2006 India 2005 And FutureScitc 2006 India 2005 And Future
Scitc 2006 India 2005 And Future
 
Miller China Trade
Miller China TradeMiller China Trade
Miller China Trade
 
Developing a market plan
Developing a market planDeveloping a market plan
Developing a market plan
 
Gianelle Tattara
Gianelle TattaraGianelle Tattara
Gianelle Tattara
 
Gp Industry
Gp IndustryGp Industry
Gp Industry
 
House
HouseHouse
House
 
How To Biuld Internal Rating System For Basel Ii
How To Biuld Internal Rating System For Basel IiHow To Biuld Internal Rating System For Basel Ii
How To Biuld Internal Rating System For Basel Ii
 
Gujarat
GujaratGujarat
Gujarat
 
Ietp Session 2 June 28
Ietp Session   2 June 28Ietp Session   2 June 28
Ietp Session 2 June 28
 
India An Overview
India An OverviewIndia An Overview
India An Overview
 
Intra Industry
Intra IndustryIntra Industry
Intra Industry
 
Innovation Class 6
Innovation Class 6Innovation Class 6
Innovation Class 6
 

Recently uploaded

Investment in The Coconut Industry by Nancy Cheruiyot
Investment in The Coconut Industry by Nancy CheruiyotInvestment in The Coconut Industry by Nancy Cheruiyot
Investment in The Coconut Industry by Nancy Cheruiyotictsugar
 
2024 Numerator Consumer Study of Cannabis Usage
2024 Numerator Consumer Study of Cannabis Usage2024 Numerator Consumer Study of Cannabis Usage
2024 Numerator Consumer Study of Cannabis UsageNeil Kimberley
 
IoT Insurance Observatory: summary 2024
IoT Insurance Observatory:  summary 2024IoT Insurance Observatory:  summary 2024
IoT Insurance Observatory: summary 2024Matteo Carbone
 
Digital Transformation in the PLM domain - distrib.pdf
Digital Transformation in the PLM domain - distrib.pdfDigital Transformation in the PLM domain - distrib.pdf
Digital Transformation in the PLM domain - distrib.pdfJos Voskuil
 
Buy gmail accounts.pdf Buy Old Gmail Accounts
Buy gmail accounts.pdf Buy Old Gmail AccountsBuy gmail accounts.pdf Buy Old Gmail Accounts
Buy gmail accounts.pdf Buy Old Gmail AccountsBuy Verified Accounts
 
Ten Organizational Design Models to align structure and operations to busines...
Ten Organizational Design Models to align structure and operations to busines...Ten Organizational Design Models to align structure and operations to busines...
Ten Organizational Design Models to align structure and operations to busines...Seta Wicaksana
 
Call Us 📲8800102216📞 Call Girls In DLF City Gurgaon
Call Us 📲8800102216📞 Call Girls In DLF City GurgaonCall Us 📲8800102216📞 Call Girls In DLF City Gurgaon
Call Us 📲8800102216📞 Call Girls In DLF City Gurgaoncallgirls2057
 
Intro to BCG's Carbon Emissions Benchmark_vF.pdf
Intro to BCG's Carbon Emissions Benchmark_vF.pdfIntro to BCG's Carbon Emissions Benchmark_vF.pdf
Intro to BCG's Carbon Emissions Benchmark_vF.pdfpollardmorgan
 
Global Scenario On Sustainable and Resilient Coconut Industry by Dr. Jelfina...
Global Scenario On Sustainable  and Resilient Coconut Industry by Dr. Jelfina...Global Scenario On Sustainable  and Resilient Coconut Industry by Dr. Jelfina...
Global Scenario On Sustainable and Resilient Coconut Industry by Dr. Jelfina...ictsugar
 
Marketplace and Quality Assurance Presentation - Vincent Chirchir
Marketplace and Quality Assurance Presentation - Vincent ChirchirMarketplace and Quality Assurance Presentation - Vincent Chirchir
Marketplace and Quality Assurance Presentation - Vincent Chirchirictsugar
 
8447779800, Low rate Call girls in Kotla Mubarakpur Delhi NCR
8447779800, Low rate Call girls in Kotla Mubarakpur Delhi NCR8447779800, Low rate Call girls in Kotla Mubarakpur Delhi NCR
8447779800, Low rate Call girls in Kotla Mubarakpur Delhi NCRashishs7044
 
APRIL2024_UKRAINE_xml_0000000000000 .pdf
APRIL2024_UKRAINE_xml_0000000000000 .pdfAPRIL2024_UKRAINE_xml_0000000000000 .pdf
APRIL2024_UKRAINE_xml_0000000000000 .pdfRbc Rbcua
 
Call US-88OO1O2216 Call Girls In Mahipalpur Female Escort Service
Call US-88OO1O2216 Call Girls In Mahipalpur Female Escort ServiceCall US-88OO1O2216 Call Girls In Mahipalpur Female Escort Service
Call US-88OO1O2216 Call Girls In Mahipalpur Female Escort Servicecallgirls2057
 
International Business Environments and Operations 16th Global Edition test b...
International Business Environments and Operations 16th Global Edition test b...International Business Environments and Operations 16th Global Edition test b...
International Business Environments and Operations 16th Global Edition test b...ssuserf63bd7
 
FULL ENJOY Call girls in Paharganj Delhi | 8377087607
FULL ENJOY Call girls in Paharganj Delhi | 8377087607FULL ENJOY Call girls in Paharganj Delhi | 8377087607
FULL ENJOY Call girls in Paharganj Delhi | 8377087607dollysharma2066
 
8447779800, Low rate Call girls in Saket Delhi NCR
8447779800, Low rate Call girls in Saket Delhi NCR8447779800, Low rate Call girls in Saket Delhi NCR
8447779800, Low rate Call girls in Saket Delhi NCRashishs7044
 
8447779800, Low rate Call girls in Shivaji Enclave Delhi NCR
8447779800, Low rate Call girls in Shivaji Enclave Delhi NCR8447779800, Low rate Call girls in Shivaji Enclave Delhi NCR
8447779800, Low rate Call girls in Shivaji Enclave Delhi NCRashishs7044
 
Flow Your Strategy at Flight Levels Day 2024
Flow Your Strategy at Flight Levels Day 2024Flow Your Strategy at Flight Levels Day 2024
Flow Your Strategy at Flight Levels Day 2024Kirill Klimov
 

Recently uploaded (20)

Investment in The Coconut Industry by Nancy Cheruiyot
Investment in The Coconut Industry by Nancy CheruiyotInvestment in The Coconut Industry by Nancy Cheruiyot
Investment in The Coconut Industry by Nancy Cheruiyot
 
2024 Numerator Consumer Study of Cannabis Usage
2024 Numerator Consumer Study of Cannabis Usage2024 Numerator Consumer Study of Cannabis Usage
2024 Numerator Consumer Study of Cannabis Usage
 
IoT Insurance Observatory: summary 2024
IoT Insurance Observatory:  summary 2024IoT Insurance Observatory:  summary 2024
IoT Insurance Observatory: summary 2024
 
Digital Transformation in the PLM domain - distrib.pdf
Digital Transformation in the PLM domain - distrib.pdfDigital Transformation in the PLM domain - distrib.pdf
Digital Transformation in the PLM domain - distrib.pdf
 
Buy gmail accounts.pdf Buy Old Gmail Accounts
Buy gmail accounts.pdf Buy Old Gmail AccountsBuy gmail accounts.pdf Buy Old Gmail Accounts
Buy gmail accounts.pdf Buy Old Gmail Accounts
 
Ten Organizational Design Models to align structure and operations to busines...
Ten Organizational Design Models to align structure and operations to busines...Ten Organizational Design Models to align structure and operations to busines...
Ten Organizational Design Models to align structure and operations to busines...
 
Call Us 📲8800102216📞 Call Girls In DLF City Gurgaon
Call Us 📲8800102216📞 Call Girls In DLF City GurgaonCall Us 📲8800102216📞 Call Girls In DLF City Gurgaon
Call Us 📲8800102216📞 Call Girls In DLF City Gurgaon
 
Corporate Profile 47Billion Information Technology
Corporate Profile 47Billion Information TechnologyCorporate Profile 47Billion Information Technology
Corporate Profile 47Billion Information Technology
 
Intro to BCG's Carbon Emissions Benchmark_vF.pdf
Intro to BCG's Carbon Emissions Benchmark_vF.pdfIntro to BCG's Carbon Emissions Benchmark_vF.pdf
Intro to BCG's Carbon Emissions Benchmark_vF.pdf
 
Global Scenario On Sustainable and Resilient Coconut Industry by Dr. Jelfina...
Global Scenario On Sustainable  and Resilient Coconut Industry by Dr. Jelfina...Global Scenario On Sustainable  and Resilient Coconut Industry by Dr. Jelfina...
Global Scenario On Sustainable and Resilient Coconut Industry by Dr. Jelfina...
 
Marketplace and Quality Assurance Presentation - Vincent Chirchir
Marketplace and Quality Assurance Presentation - Vincent ChirchirMarketplace and Quality Assurance Presentation - Vincent Chirchir
Marketplace and Quality Assurance Presentation - Vincent Chirchir
 
8447779800, Low rate Call girls in Kotla Mubarakpur Delhi NCR
8447779800, Low rate Call girls in Kotla Mubarakpur Delhi NCR8447779800, Low rate Call girls in Kotla Mubarakpur Delhi NCR
8447779800, Low rate Call girls in Kotla Mubarakpur Delhi NCR
 
APRIL2024_UKRAINE_xml_0000000000000 .pdf
APRIL2024_UKRAINE_xml_0000000000000 .pdfAPRIL2024_UKRAINE_xml_0000000000000 .pdf
APRIL2024_UKRAINE_xml_0000000000000 .pdf
 
Call US-88OO1O2216 Call Girls In Mahipalpur Female Escort Service
Call US-88OO1O2216 Call Girls In Mahipalpur Female Escort ServiceCall US-88OO1O2216 Call Girls In Mahipalpur Female Escort Service
Call US-88OO1O2216 Call Girls In Mahipalpur Female Escort Service
 
International Business Environments and Operations 16th Global Edition test b...
International Business Environments and Operations 16th Global Edition test b...International Business Environments and Operations 16th Global Edition test b...
International Business Environments and Operations 16th Global Edition test b...
 
FULL ENJOY Call girls in Paharganj Delhi | 8377087607
FULL ENJOY Call girls in Paharganj Delhi | 8377087607FULL ENJOY Call girls in Paharganj Delhi | 8377087607
FULL ENJOY Call girls in Paharganj Delhi | 8377087607
 
8447779800, Low rate Call girls in Saket Delhi NCR
8447779800, Low rate Call girls in Saket Delhi NCR8447779800, Low rate Call girls in Saket Delhi NCR
8447779800, Low rate Call girls in Saket Delhi NCR
 
Enjoy ➥8448380779▻ Call Girls In Sector 18 Noida Escorts Delhi NCR
Enjoy ➥8448380779▻ Call Girls In Sector 18 Noida Escorts Delhi NCREnjoy ➥8448380779▻ Call Girls In Sector 18 Noida Escorts Delhi NCR
Enjoy ➥8448380779▻ Call Girls In Sector 18 Noida Escorts Delhi NCR
 
8447779800, Low rate Call girls in Shivaji Enclave Delhi NCR
8447779800, Low rate Call girls in Shivaji Enclave Delhi NCR8447779800, Low rate Call girls in Shivaji Enclave Delhi NCR
8447779800, Low rate Call girls in Shivaji Enclave Delhi NCR
 
Flow Your Strategy at Flight Levels Day 2024
Flow Your Strategy at Flight Levels Day 2024Flow Your Strategy at Flight Levels Day 2024
Flow Your Strategy at Flight Levels Day 2024
 

E Snet Authentication Fabric Pilot

  • 1. ESnet RADIUS Authentication Fabric Michael Helm ESnet/LBNL GGF-12 Sec Workshop 18 Sep 2004
  • 2.
  • 3. What Is the Grid Integrated RAF? ESnet Radius Auth DB ESnet Root CA MyProxy Credentials PAM 1 Log in 2 Ask AuthN; hint OTP 5 Receive Proxy Cert Manage myProxy 6 (Opt) Store Proxy 7 Execute OTP Services OCSP HSM Subordinate CA Engine 4. Auth OK; Namestring 3 OTP verification 4 Sign Proxy Sign Subordinate CA SIPS Proposal Apr 2004 Special case of GridLogon
  • 4.
  • 5. ESnet RAF Architecture Repli- cation Network (IP) VPN (IPsec) RADIUS Proxy router RADIUS Proxy router RADIUS Proxy router RADIUS Proxy router ESnet RAF Site ESnet AuthN Authority ( OTP ) Appli- cation 1 Rc Site n RADIUS AuthN Authority ( OTP ) Appli- cation 1 Rc Site 1 RADIUS AuthN Authority ( OTP ) Appli- cation 1 Rc Site 2 RADIUS
  • 6.
  • 7.
  • 8.
  • 9.
  • 10.
  • 11.
  • 12.
  • 13.
  • 14.
  • 15.
  • 16.
  • 17.
  • 18.
  • 19. ESnet RAF Architecture Repli- cation Network (IP) VPN (IPsec) RADIUS Proxy router RADIUS Proxy router RADIUS Proxy router RADIUS Proxy router ESnet RAF Site ESnet AuthN Authority ( OTP ) Appli- cation 1 Rc Site n RADIUS AuthN Authority ( OTP ) Appli- cation 1 Rc Site 1 RADIUS AuthN Authority ( OTP ) Appli- cation 1 Rc Site 2 RADIUS
  • 20.
  • 21.
  • 22.
  • 23. What Is the Grid Integrated RAF? ESnet Radius Auth DB ESnet Root CA MyProxy Credentials PAM 1 Log in 2 Ask AuthN; hint OTP 5 Receive Proxy Cert Manage myProxy 6 (Opt) Store Proxy 7 Execute OTP Services OCSP HSM Subordinate CA Engine 4. Auth OK; Namestring 3 OTP verification 4 Sign Proxy Sign Subordinate CA SIPS Proposal Apr 2004 Special case of GridLogon
  • 24.
  • 25.
  • 26.
  • 27.
  • 28.
  • 29.
  • 30.
  • 31.
  • 32.
  • 33.
  • 34.
  • 35. Fusion Grid Firewall Issues Michael Helm ESnet/LBNL GGF-12 Sec Workshop 18 Sep 2004
  • 37. Comments Each site is protected by a firewall Different firewall technology OTP is probably a feature Need single sign-on, delegation, autonomous processes….
  • 38.