caops-wg

Download

caops-wg@lists.ogf.org

July 2007

3 participants
2 discussions

Re: [caops-wg] [validity] [ogro-dev] Re: Downloading and Installing OGRO
by Jesus Luna 31 Jul '07

31 Jul '07

(Sorry for the cross-posting) Dear Doug, Please take a quick glimpse to our PPTs and papers about OGRO, which are published in http://people.ac.upc.edu/jluna/ogro/ In the case of the papers, if you're interested in any of them please let me know to send it to you. Currently OGRO is trying to reach a "critical mass" as an Incubator project to be included into a future release of GT, but in fact we've been able to successfully integrate it for our tests into the GT4 and the CoG (Java). We can provide you with our little background on this. The code still needs to be optimized, but we're still working on this with a lot of help from the "University of Naples". Finally, about the deployment issues in fact OGRO was born to provide some practical experience to our work "OCSP Requirements for Grids", which was being written by the OGF's CA Operations WG (https://forge.gridforum.org/sf/projects/caops-wg) This document is now "on the fridge", but it'd be great to bring it back to life -if you believe about its usefulness-. Mike was also quite involved in this document. Regards, Jesus Doug Olson wrote: > Yes, it is certainly very interesting. If there is something like a > powerpoint > status report on OGRO it would be useful to send a short note > to the tg-security@osg mail list with a pointer to that status report. > How useful to OSG is dependant on how close to deployable the > things are and who is willing to carry out the testing on the OSG > integration testbed. If OGRO is making additions to the base > Globus Toolkit then the code ought to be included in the build > of globus distributed by VDT at some point. > Besides having code though, as you have pointed out before, > there will be various deployment issues around really using OCSP > to replace CRLs. Are the deployment considerations part of > the OGRO project also? > Doug >

2 1

Soliciting the grid community's views on risk-based authN & authZ schemes
by Mike 'Mike' Jones 10 Jul '07

10 Jul '07

Salutations, On behalf of the UK JISC (http://www.jisc.ac.uk/) the ES-LoA Project (E-infrastructure Security: authentication Levels of Assurance) is soliciting views from the community of services, and identity and resource providers about the use-of/need-for a risk-based authentication and authorisation scheme. Such a scheme, built on top of open standards based middleware such as Shibboleth, would take into account the level of confidence in users' identification through their identity and attribute assertions when deciding whether or not to permit access to a particular resource. The principle objectives of the ES-LoA project are as follows: o to raise the community's awareness with regard to authentication Levels of Assurance (LoA) as one of the factors that can be used to quantify the degree of protection for resources with varying levels of sensitivity in federated environments, o to investigate potential applications of LoA to various types of service, including resources provided for the grid/e-Science community, and library and e-learning resources, o to build community consensus in using the appropriate definition of LoA reflecting the trustworthiness of a resource's authentication mechanism, and o to raise service providers' interests in deploying a technology that can help them to achieve LoA linked fine-grained access control. If you provide, or plan to provide, a service or client infrastructure that issues or consumes credentials for authentication we would be grateful if you would take time to participate in this survey. The results will also form input to the Open Grid Forum's activity in this area through the LoA research group. The survey, entitled "ES-LoA Survey Questionnaire", is available from http://www.es-loa.org/output. Please either fill in the online form or return the completed Word document to es-loa(a)manchester.ac.uk by Friday 8th June 2007. Thank you for your time and valuable information, the ES-LoA project team.

1 1