Operational Security

• Security Guidelines
• Log Retention Guidelines
• Local firewall configuration
• CERN Firewall Closure
• Secure access to GD machines
• 'root' access on GD machines (draft)
• Firewall authorization request

VO-related documents internal to grid-deployment

• Documentation about the CERN VOMS servers:
  • VomsCern
  • VomsServiceInterventions
  • VomsCdbSindes
  • VomsServiceMonitor
  • VomsProblemSolving (Last updated 2008-06-23)
  • VomsNotes
  • VomsWlcgHa
  • VomrsUpdateLog
  • VomrsFunctionality
  • VomsVomrsClient

• Documentation for admins using the VOMS services.
  • VomsFAQforServiceManagers
  • VomrsFAQforServiceManagers
  • site-info.def configuration after January 9th 2007 when voms.cern.ch changes its hostcert
  • site-info.def configuration after May 29th 2007 when lcg-voms.cern.ch changes its hostcert
  • Forum on VO data configuration at the Grid SItes

• Documentation for VOM(R)S validation
  • Voms test suite
  • voms-admin test suite
  • Vom(r)s test reports
  • Detailed Vom(r)s test reports

• Other
  • VomsScFourTechnicalQuestionnaire
  • VirtualIds

General Use VOM(R)S document links:

• How to deploy VOMS Old pre-glite document, mostly obsolete.
• VOMRS_FAQ
• Notes from the closing VOM(R)S Workshop of the LCG Registration Task Force
• VOM(R)S Working Group

Documentation about the CERN LDAP servers:

• LcgRegistrar
• How the LDAP-based DTEAM VO was set-up
• How the LDAP-based DTEAM VO gets updated

Tools in the service of the Grid Deployment Team

• How set-up a VirtualHost in Apache with certificate-based Authorisation Linux RH7 and SLC3 configurations.

Security-related documents internal to grid-deployment

• Check that nodes are not left configured without a root password: Script and instructions here.
• Mandate and Policy of the security group.

-- Main.dimou - 19 Aug 2005