Explanipedia

Fermilab's Transition to Token Authentication Open

Dave Dykstra, Mine Altunay, Shreyas Bhat, Dmitry Litvintsev, Marco Mambelli , et al. · 2025

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in th…

Fermilab's Transition to Token Authentication Open

Dave Dykstra, Dmitry Litvintsev, M. Mengel · 2025

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in th…

WLCG transition from X.509 to Tokens: Progress and Outlook Open

Thomas Dack, Federica Agostini, Berk Balci, Matthew Doidge, Dave Dykstra , et al. · 2025

Since 2017, the Worldwide LHC Computing Grid (WLCG) has been working towards enabling token-based authentication and authorization throughout its entire middleware stack. Taking guidance from the WLCG Token Transition Timeline, published i…

CMS Token Transition Open

Brian Bockelman, Rahul Chauhan, D. Ciangottini, Dave Dykstra, Edita Kizinevič , et al. · 2025

Within the LHC community, a momentous transition has been occurring in authorization. For nearly 20 years, services within the Worldwide LHC Computing Grid (WLCG) have been authorized based on mapping an identity, derived from an X.509 cre…

Fermilab’s Transition to Token Authentication Open

Dave Dykstra, Mine Altunay, Shreyas Bhat, Dmitry Litvintsev, Marco Mambelli , et al. · 2025

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in th…

A Managed Tokens Service for Securely Keeping and Distributing Grid Tokens Open

Shreyas Bhat, Dave Dykstra · 2024

Fermilab is transitioning authentication and authorization for grid operations to using bearer tokens based on the WLCG Common JWT (JSON Web Token) Profile. One of the functionalities that Fermilab experimenters rely on is the ability to a…

WLCG Transition from X.509 to Tokens. Status, Plans, and Timeline Open

Thomas Dack, Federica Agostini, Jim Basney, L. Cornwall, John Steven De Stefano , et al. · 2024

Since 2017, the Worldwide LHC Computing Grid (WLCG) has been working towards enabling token-based authentication and authorization throughout its entire middleware stack. Following the initial publication of the WLCG Token Schema v1.0 in 2…

Apptainer Without Setuid Open

Dave Dykstra · 2024

Apptainer (formerly known as Singularity) since its beginning implemented many of its container features with the assistance of a setuidroot program. It still supports that mode, but as of version 1.1.0 it no longer uses setuid by default.…

Apptainer Without Setuid Open

Dave Dykstra · 2022

Apptainer (formerly known as Singularity) since its beginning implemented many of its container features with the assistance of a setuid-root program. It still supports that mode, but as of version 1.1.0 it no longer uses setuid by default…

The FabrIc for Frontier Experiments Project at Fermilab: Computing for Experiments Open

K. Herner, M. Kirby, Andres Felipe Alba Hernandez, S. Bhat, Dennis Box , et al. · 2022

The FabrIc for Frontier Experiments (FIFE) project is a major initiative within the Fermilab Scientific Computing Division designed to steer the computing model for non-LHC experiments at Fermilab. The FIFE project enables close collaborat…

Advances in Grid Computing for the FabrIc for Frontier Experiments Project at Fermialb Open

K. Herner, A. F. Alba Hernandex, S. Bhat, Dennis Box, J. Boyd , et al. · 2022

The FabrIc for Frontier Experiments (FIFE) project is a major initiative within the Fermilab Scientic Computing Division charged with leading the computing model for Fermilab experiments. Work within the FIFE project creates close collabor…

HEP Software Foundation Community White Paper Working Group – Conditions Data Open

M. Bračko, M. Clemencic, Dave Dykstra, E. Lusiani, Michel Jouvin , et al. · 2022

To produce the best physics results, high energy physics experiments require access to calibration and other non-event data during event data processing. These conditions data are typically stored in databases that provide versioning funct…

Secure Command Line Solution for Token-based Authentication Open

Dave Dykstra, Mine Altunay, Jeny Teheran · 2021

The WLCG is modernizing its security infrastructure, replacing X.509 client authentication with the newer industry standard of JSON Web Tokens (JWTs) obtained through the Open ID Connect (OIDC) protocol. There is a wide variety of software…

WLCG Token Usage and Discovery Open

Brian Bockelman, Andrea Ceccanti, Thomas Dack, Dave Dykstra, M. Litmaath , et al. · 2021

Since 2017, the Worldwide LHC Computing Grid (WLCG) has been working towards enabling token based authentication and authorisation throughout its entire middleware stack. Following the publication of the WLCG Common JSON Web Token (JWT) Sc…

WLCG Web Proxy Auto Discovery for Dynamically Created Web Proxies Open

Dave Dykstra · 2020

The WLCG Web Proxy Auto Discovery (WPAD) service provides a convenient mechanism for jobs running anywhere on the WLCG to dynamically discover web proxy cache servers that are nearby. The web proxy caches are general purpose for a number o…

A fully unprivileged CernVM-FS Open

Jakob Blomer, Dave Dykstra, G. Ganis, Simone Mosciatti, Jan Priessnitz · 2020

The CernVM File System provides the software and container distribution backbone for most High Energy and Nuclear Physics experiments. It is implemented as a file system in user-space (Fuse) module, which permits its execution without any …

Web Proxy Auto Discovery for Dynamically Created Web Proxies Open

Dave Dykstra · 2020

The WLCG Web Proxy Auto Discovery (WPAD) service provides a convenient mechanism for jobs running anywhere on the WLCG to dynamically discover web proxy cache servers that are nearby. The web proxy caches are general purpose for a number o…

Distributing User Code with the CernVM FileSystem Open

Dave Dykstra, Shreyas Bhat, Dennis Box, Hyun Woo Kim, Tanya Levshina · 2020

The CernVM FileSystem (CVMFS) is widely used in High Throughput Computing to efficiently distributed experiment code. However, the standard CVMFS publishing tools are designed for a small group of people from each experiment to maintain co…

Distributing User Code with the CernVM FileSystem Open

Dave Dykstra · 2019

The CernVM FileSystem (CVMFS) is widely used in High Throughput Computing to efficiently distributed experiment code. However, the standard CVMFS publishing tools are designed for a small group of people from each experiment to maintain co…

Advances and enhancements in the FabrIc for Frontier Experiments project at Fermilab Open

K. Herner, Andres Felipe Alba Hernandez, Shreyas Bhat, Dennis Box, J. Boyd , et al. · 2019

\nThe FabrIc for Frontier Experiments (FIFE) project within the Fermilab Scientific Computing Division is charged with integrating offline computing components into a common computing stack for the non-LHC Fermilab experiments, supporting …

A roadmap for HEP software and computing R&D for the 2020s Open

J. Albrecht, A. A. Alves, G. Amádio, Giuseppe Andronico, Nguyen Anh-Ky , et al. · 2019

HEP Software Foundation Community White Paper Working Group -- Conditions Data Open

M. Bračko, M. Clemencic, Dave Dykstra, A. Formica, G. Govi , et al. · 2019

To produce the best physics results, high energy physics experiments require access to calibration and other non-event data during event data processing. These conditions data are typically stored in databases that provide versioning funct…

arXiv : HEP Software Foundation Community White Paper Working Group – Conditions Data Open

M. Bračko, Michel Jouvin, Dave Dykstra, L. Wood, D. J. Lange , et al. · 2019

To produce the best physics results, high energy physics experiments require access to calibration and other non-event data during event data processing. These conditions data are typically stored in databases that provide versioning funct…

The Open High Throughput Computing Content Delivery Network Open

Dave Dykstra, Brian Bockelman, Jakob Blomer, Laurence Field · 2019

LHC experiments make extensive use of web proxy caches, especially for software distribution via the CernVM File System and for conditions data via the Frontier Distributed Database Caching system. Since many jobs read the same data, cache…

Advances and enhancements in the FabrIc for Frontier Experiments project at Fermilab Open

K. Herner, Andres Felipe Alba Hernandez, Shreyas Bhat, Dennis Box, J. Boyd , et al. · 2019

The FabrIc for Frontier Experiments (FIFE) project within the Fermilab Scientific Computing Division is charged with integrating offline computing components into a common computing stack for the non-LHC Fermilab experiments, supporting ex…

Understanding the evolution of conditions data access through Frontier for the ATLAS Experiment Open

M. Svatos, Alessandro de Salvo, Alastair Dewhurst, E. Vamvakopoulos, J. J. Lozano Bahilo , et al. · 2019

The ATLAS Distributed Computing system uses the Frontier system to access the Conditions, Trigger, and Geometry database data stored in the Oracle Offline Database at CERN by means of the HTTP protocol. All ATLAS computing sites use Squid …

A Conditions Data Management System for HEP Experiments Open

P. Laycock, Dave Dykstra, A. Formica, G. Govi, A. Pfeiffer , et al. · 2018

Conditions data infrastructure for both ATLAS and CMS have to deal with the management of several Terabytes of data. Distributed computing access to this data requires particular care and attention to manage request-rates of up to several …

Web Proxy Auto Discovery for the WLCG Open

Dave Dykstra, Jakob Blomer, B. Blumenfeld, S. De Cecco, A. Dewhurst , et al. · 2017

All four of the LHC experiments depend on web proxies (that is, squids) at each grid site to support software distribution by the CernVM FileSystem (CVMFS). CMS and ATLAS also use web proxies for conditions data distributed through the Fro…

Experience in using commercial clouds in CMS Open

L. A. T. Bauerdick, Brian Bockelman, Dave Dykstra, S. Fuess, Gabriele Garzoglio , et al. · 2017

Historically high energy physics computing has been performed on large purpose-built computing systems. In the beginning there were single site computing facilities, which evolved into the Worldwide LHC Computing Grid (WLCG) used today. Th…

Dave Dykstra YOU? Author Swipe