LIGOProvisioningUseCase

The Grouper Developers are seeking practical use cases that will contribute to the development and enhancement of the Grouper product, in turn benefiting those institutions that plan to deploy Grouper.
 
To participate in the development of this work, we ask that you add details of your proposed use case below, as thoroughly as possible.

LIGO provisioning Use Case

Institution: LIGO

Author: Scott Koranda

Brief Description of the LIGO VO

LIGO, the Laser Interferometer Gravitational-wave Observatory seeks to detect gravitational waves--ripples in the fabric of spacetime. The LIGO Scientific Collaboration (LSC), a self-governing collaboration, was founded in 1997
and currently has more than 800 members from 70 institutions worldwide. LIGO is the funded by the NSF.

Sketch of LIGO provisioning

Consider the case of a new data analyst, named Scott Koranda, joining the collaboration by joining the LSC group at the University of Wisconsin-Milwaukee. The following types of resources must be provisioned:

• the Kerberos principal scott.koranda@LIGO.ORG is created in the master KDC and replicated to the slave KDCs
• in the LIGO master LDAP server the following dn is created:

  dn: employeeNumber=882,ou=people,dc=ligo,dc=org
  cn: Scott Koranda
  objectClass: top
  objectClass: person
  objectClass: organizationalPerson
  objectClass: inetOrgPerson
  objectClass: eduPerson
  objectClass: posixAccount
  objectClass: krbPrincipalAux
  objectClass: eduMember
  objectClass: x-LIGO-TWikiObject
  objectClass: qmailUser
  uidNumber: 40882
  street: UWM Physics Department$P.O. Box 413
  uid: scott.koranda
  employeeType: Faculty, Sr. Sci/Eng
  facsimileTelephoneNumber: +1 414 229 5589
  x-LIGO-TWikiLoginName: scottkoranda
  postalCode: 53201
  postalAddress: UWM Physics Department$P.O. Box 413$Milwaukee$WI$53201$US
  telephoneNumber: +1 414 229 5056
  description: /DC=org/DC=LIGO/OU=People/CN=Scott Koranda
  gidNumber: 40882
  employeeNumber: 882
  krbPrincipalName: scott.koranda@LIGO.ORG
  x-LIGO-TWikiName: ScottKoranda
  l: Milwaukee
  st: WI
  eduPersonAffiliation: University of Wisconsin at Milwaukee
  sn: Koranda
  homeDirectory: /home/scott.koranda
  givenName: Scott
  mail: scott.koranda@ligo.org
  mailAlternateAddress: skoranda@gmail.com
  mailForwardingAddress: skoranda@gravity.phys.uwm.edu
  

• Additionally the following dn is created:

  dn: cn=scott.koranda,ou=group,dc=ligo,dc=org
  objectClass: top
  objectClass: posixGroup
  gidNumber: 40882
  cn: scott.koranda
  

• the subject (in Grouper terms) scott.koranda@LIGO.ORG is added in Grouper to the Group Communities:LVC:LSC:MOU:UWM:UWMGroupMembers and because of that becomes a member of a number of composite groups. These are provisioned into LDAP so that the dn above also has attributes

isMemberOf: Communities:LVC:LVCGroupMembers
isMemberOf: Communities:LVC:LSC:MOU:UWM:UWMGroupMembers
isMemberOf: Communities:LVC:LSC:LSCGroupMembers
isMemberOf: Communities:LSCVirgoLIGOGroupMembers