December 2007 - caops-wg

Revised auditing documents
by Yoshio Tanaka 14 Dec '07

14 Dec '07

Dear all, Working with Matt, we have revised the auditing guidelines document. I also compared the TAGPMA spreadsheet and the auditing document. Here is the summary of the revision: - Added one auditing item (item# CA-(23)). - Moved item# CA-(30) to item# CA-(52). - Added Matt as a co-author. - Revised English. BTW, Christos gave us the following comment at the last OGF: The document should provide a generic framework for performing audits on Grid IdPs. We should remove any statements on the preferred answers for each question in the document. Actually, sections 1, 2, and 4 describe a generic framework. These sections are not profile-specific but common for all profiles. However, Section 3, "Auditing Checklist," is derived from and depend on the Classic AP. Section 3 should be different for the other profiles such as SLCS. Even so, should I modify profile-specific questions and descriptions to more generic descriptions? Any comments are appreciated. Regarding the comparison with the TAGPMA spreadsheet and the auditing document, here is the summary of the results: - One item in the spreadsheet was not in the auditing document. - new item #CA-(23) - Some items in the auditing document are not in the spreadsheet. - Most items are "SHOULD" statement. - Some of such items are newly added in Classic AP 4.1. - Item numbers which are not in the spreadsheet. - #CA-(14) - #CA-(21) - #CA-(31) - #CA-(39) - #CA-(43) - #CA-(44) - #CA-(45) - #CA-(49) - #CA-(59) - #RA-(4) - #RA-(8) Thanks, -- Yoshio Tanaka (yoshio.tanaka(a)aist.go.jp) http://ninf.apgrid.org/ http://www.apgridpma.org/

1 0

Update: Links and information on recent OGSA work on Basic Security Profile and Express Authentication Profile documents
by Alan Sill 11 Dec '07

11 Dec '07

The referenced documents continue to be discussed in the context of OGF's OGSA work group. Links are in the following meeting announcement. Please contact Hiro Kishimoto, Andreas Savva, Duane Merrill, Andrew Grimshaw, or send comments on the process to David Groep and Blair Dillaway (Security Area directors) if you wish. Meanwhile, I think that the CAOps and IGTF groups should familiarize themselves with these documents. Alan OGSA-WG teleconference: Basic Security Profile (and related documents and efforts) When: 9-10pm EST, 8-9am CST, 6-7pm PST, 11-12pm JST, 2-3pm UK The dial-in number for Monday; US: +1 718 3541071 (New York) or +1 408 9616509 (San Jose) UK: +44 (0)207 3655269 (London) Japan: +81 (0)3 3570 8225 (Tokyo) Germany: +49 (0)69 50070802 (Frankfurt) Switzerland: +41 (0)1 8009574 (Zurich) PIN: 4371991 See more information: - https://forge.gridforum.org/sf/go/wiki1477 Screen share service: URL: http://ogsa.glance.net/?key=1206 Usage: https://forge.gridforum.org/sf/go/wiki1584 Note: ** OGF IPR POLICY APPLIES ** http://www.ogf.org/About/abt_policies.php 1) Early discussion Social study notification - https://forge.gridforum.org/sf/go/wiki1717 Note taker assignment - https://forge.gridforum.org/sf/go/wiki1848 Roll call Agenda bashing 2) Minutes approval and AI review (see the bottom of this agenda) Minutes approval Nov. 19: Waiting for minutes (Mark Morgan) Nov. 26: https://forge.gridforum.org/sf/go/doc14942?nav=1 Action Item review - http://forge.ogf.org/short/ogsa-wg/ailist 2) OGSA Express AuthN profiles (Duane) - Review comments received during final call of the two profiles Secure Addressing - https://forge.ogf.org/sf/go/doc14938 (doc) - http://forge.ogf.org/short/ogsa-wg/spsa (tracker) Secure Communication - https://forge.ogf.org/sf/go/doc14937 (doc) - http://forge.ogf.org/short/ogsa-wg/spsc (tracker) - Review updated version of the OGSA Basic Profile (to be uploaded before the call) https://forge.ogf.org/sf/go/doc14940 and comments posted to the list View your event at http://www.google.com/calendar/event? action=VIEW&eid=ZWYxbGJscGVzZWgwYXFodTJzaXRmMzF2NzQgb2dzYS13Z0BvZ2Yub3Jn &tok=MTcjb2dzYS53Z0BnbWFpbC5jb202ODEyZjgxZWU5OGE0Yjc0MzY1Nzg2YTFhODg2MjM 1OTI5MmM2ZTNm&ctz=America%2FChicago&hl=en. Alan Sill, Ph.D TIGRE Senior Scientist, High Performance Computing Center Adjunct Professor of Physics TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0

New version of Audit Guidelines document
by Christos Kanellopoulos 03 Dec '07

03 Dec '07

Hi all, this morning Yoshio uploaded a new version (1.0b4) of the "Guidelines for auditing Grid CAs" document on GridForge [1]. This document is considered to be in it's final stages, so please do read the document and comment on it. For those in Seattle, see you in a few minutes at the CAOPS session [1]: https://forge.gridforum.org/sf/go/doc4858 -- Christos Kanellopoulos Grid Operations Center, Aristotle University of Thessaloniki University Campus, GR 541 24, Building 22D, Office 4'6B Tel. +302310998988 Fax. +302310994309 http://www.grid.auth.gr

4 4