REVIEW-83: XCI-826: Deliver Globus Connect Server (GCS) v5.4 to XSEDE

Overview

Globus Connect Server version 5.4 (GCS v5.4) is the next generation of the storage provider’s interface to the Globus system. It connects a storage system to the Globus data transfer service, enabling researchers to use the Globus web application (https://app.globus.org), Globus CLI, Globus Transfer API, or a Web browser to access the storage system, subject to the administrator’s data access policies.

GCS v5.4 replaces the X.509-based security mechanism used in GridFTP and Globus Connect Server version 4 with a new mechanism based on OpenID Connect 1.0 (OIDC) and OAuth 2.0 (OAuth2). OIDC/OAuth2-based security is widely used in the research community and in the mainstream Internet.

This design and security review gives XSEDE Operations, Service Providers, and other key stakeholders an opportunity to review the most important functional, design and security characteristics of GCS v5.4. Feedback from this review should identify the most important concerns that need to be addressed to deploy GCS v5.4 in production on XSEDE. XCI is conducting endpoint deployment and access testing before releasing it to XSEDE service providers.

Review Input Documents

 

Review Criteria

  • Does GCS satisfy XSEDE and SP security requirements and mitigate the most important risks
  • Does GCS address the most important functional requirements for operators to manage storage access
  • Does GCS address the most important functional requirements for users and science gateway developers to access storage systems
  • Are the Design/Security Description, XSEDE Installation Guide, and Domain Guide documents clear and do they cover the most important design/security elements
  • Do you have any deployment, announcement, and training recommendations

Schedule

Current Date: 2021-04-22
Current Status: Reviewer Feedback (Design and Security Review)
Target Date Actual Date Activity Milestone
  2021-03-30 Review launch date
2021-04-14 Written feedback due (Reviewers)
2021-04-16 Written response date (Review Material Developers)
2021-04-23 Final approval due and completion date (Reviewers)
Review Created: 2021-03-29 6:33 pm
Review Last Updated: 2021-04-16 7:41 am

 

Reviewers

If you are a reviewer, please login to sign or withdraw from this review.

Required

  • John-Paul Navarro
    VIEWED: 2021-04-20 07:45
  • Derek Simmel
    VIEWED: 2021-04-19 14:33
  • David Wheeler
    VIEWED: 2021-04-17 22:54

Optional

  • Jim Basney
    VIEWED: 2021-04-01 16:10
    SIGNED: 2021-04-01 16:10
  • Robert Quick
  • Gary Rogers
  • Tabitha Samuel
  • Shava Smallen
    VIEWED: 2021-04-15 14:17
  • Alexander Withers

Review Material Developers

Lee Liming

Review Facilitator

John-Paul Navarro

 

Please post your comments using the "New topic" or "Post reply" buttons in the forum below.