August 2005 - ogsa-authz-wg

Re: [ogsa-wg] Aug F2F meeting draft agenda
by Takuya Mori 29 Sep '05

29 Sep '05

Hi all, The OGSA-WG is interested in synchronizing with the OGSA Authz WG and they would like to invite some representatives from us (OGSA Authz WG) to their F2F meeting scheduled between Aug 15 and 19 in San Jose area. A phone bridge will also be provided during the meeting. The topics for the joint session would be: - reviewing the attribute document (and saml authz document?) - discussing how to synchronize the activities of the both WG They have a tentative plan to have the session in the morning of the Friday (Aug 19) and they are also ready to change the session schedule, if the time slot is not convinient for us. Could somebody join the F2F meeting? If so, which day is good for the joint session and how long will it be needed? As preparation fot the joint session, they are also planning a joint session with us in their regular conference call scheduled on Aug 10. (They have regular conference calls on Mondays and Wednesdays between 5 to 7 pm in CST/CDT.) Could somebody also join the conference call? Thanks, Takuya From: Hiro Kishimoto <hiro.kishimoto(a)jp.fujitsu.com> Subject: [ogsa-wg] Aug F2F meeting draft agenda Date: Mon, 25 Jul 2005 19:26:06 +0900 > Hi all, > > Attached is the early draft of the August F2F meeting in SF Bay Area. > Please have a look, we will review this at tomorrow's OGSA call. > > As usual, the file is also uploaded to the GridForge. > https://forge.gridforum.org/projects/ogsa-wg/document/OGSA-2005-Aug-F2F-age… > > Thanks, > -- > Hiro Kishimoto

4 8

[ogsa-wg] OGSA-WG and fellow WG Winter F2F Survey
by Hiro Kishimoto 31 Aug '05

31 Aug '05

Hi all, and sorry for the cross-posting. OGSA-WG and fellow WGs are planning to have Winter F2F meeting in December or January. At the OGSA-WG F2F meeting in week before last, I took action item to ask all expected attendees for their availability for Winter F2F meeting. Please take the time to fill in the following online survey by next Monday (September 5th). We hope to decide date and city next week. Post the survey on a Web site - use this URL: http://www.zoomerang.com/survey.zgi?p=WEB224LBPWYVUT Thanks in advance, -- Hiro Kishimoto

1 0

Proposed revised OGSA-Authz Charter
by Von Welch 19 Aug '05

19 Aug '05

I've posted a proposed revision of our charter to gridforge for comment by the group. This is based on our discussions at GGF14 as well as discussion with the OGSA-WG to fit into their plans. Word: https://forge.gridforum.org/projects/ogsa-authz/document/proposed- ogsa-authz-revised-charter-aug05.doc/en/1 PDF: https://forge.gridforum.org/projects/ogsa-authz/document/proposed- ogsa-authz-revised-charter-aug05.pdf/en/1 BTW, I am about to leave on vacation for 10 days, so there will be a delay in responding to any comments. Von

1 0

GGF-14 Draft Notes
by Von Welch 19 Aug '05

19 Aug '05

Appended are the combined notes from David Chadwick and myself. Please send any corrections in the next week and then I will post them. Thanks. Von -- Preliminary Agenda * Get note taker * Working group changes - chairs, etc. * Status of V1 documents: attributes, SAML * Requirements for V2 1) Pass operation arguments to PDP to make decisions based on them (XACML supports this) 2) Pass level of authentication to PDP to make decisions based on strength of authentication (SAMLv2 supports this) 3) Return obligations to PEP (XACML supports this) 4) ANY MORE??? * Next steps ---- Von opened the meeting. Agenda was agreed. Changes in WG chairs: Andrew and Rebekah have resigned. Von thanked Rebekah and Andrew for co-chairing the meeting up to now and welcomed David Chadwick to the new co-chair post. Von said he would be stepping down as soon as V1 docs are finished and a new co-chair had volunteered. See Von or David if you are interested. Agenda Bashing: No major changes Status of V1 documents: Attribute document is in hands of GGF Editor, only one known issue from Tom Scavo re section 4.2 SAML document will be at end of WG last call at end of week. One known issue from Mary Thompson re SAML 2.0 advancement. David gave a presentation about authorisation architectures in a multi-domain environment (see slide show on Gridforge site). It considered which components are needed and how the target Source of Authority can control everything. Frank gave a similar presentation but from a different viewpoint. This considered asking remote domains (AAs) if they could help in the credential validation. Dane and Dave Berry both raised particular scenarios (push and VO manager respectively) Von suggested we need to pick a set of scenarios to constrain the problem space. Frank Siebenlist gave a overview of the Grid Authorization problem Dane raised the issue that if we have a bunch of security services with one network round-trip latency to each, we have a major performance problem Frank: services can be local Von: specification of local services makes them less technology agnostic. We may need to decide how agnostic we want to be. Final agenda item: Charter Revisions There was then a discussion about the contents of the revised Charter. Von displayed the existing charter. First two paragraphs of existing charter are OK for the revised WG. The third paragraph, which talks about a two phased approach, needs to be edited, since we are now in phase 2. Add ?it will be an authorisation architecture group for OGSA even though its output will be aimed at a wider audience than simply OGSA, it will encompass the requirements of OGSA.? Agreed to keep with the OGSA-Authz name for the group. Output documents i. Scenario document. We will provide authorisation for these scenarios. The scenarios can be part of the Architecture document. ii. Version 2 of the PEP-PDP protocol document. iii. Version 1 of the PEP-CVS protocol.

1 1

Q on document status
by Olle Mulmo 17 Aug '05

17 Aug '05

With a 2-year celebration of this WG and the recent recharter, I would like to look back and see that we haven't left too much unfinished business behind, or that something is not forgotten. Could you please comment on current document status for this WG? I noticed that the attributes document refers to the "OGSA Authorization Requirements" doc. I guess that should read GFD.38 (the work done by authz-wg)? In addition, from what I can tell the first version of the SAML callout spec haven't hit the editor yet. I had the impression that was about to happen "any day now" -- or are you skipping this and shooting for the SAMLv2 version of the document immediately? Cleaning-ladily yours, /Olle

2 3

OGSA-WG requests of OGSA-Authz-WG
by Von Welch 17 Aug '05

17 Aug '05

In discussions with the OGSA-WG this morning three requests were made of the OGSA-Authz WG: 1) Renamed the current OGSA-Authz SAML document from an OGSA document to an OGSI document to reflect OGSA's change from OGSI to WSRF. 2) As part of our V2 Charter, produce a OGSA/WSRF version of our current SAML document. (Tom Maguire has volunteered to assist.) 3) Incorporate, where appropriate, the OGSA Profile format into our future documents. In regards to #1, barring objection I will go ahead and make this change and resubmit the document to the editor. In regards to #2, this seems reasonable, and with Tom's help I will take the point on making this happen. In regards to #3, I really don't understand the roles of these profiles yet and the low quality of the phone bridge was not conducive to helping me achieve understanding. Can I ask for clarification over email on how were should be looking to use OGSA profiles in our work? Von

1 1

Can our documents be listed in the OGSA Roadmap Document?
by Takuya Mori 01 Aug '05

01 Aug '05

Hi all, As part of the synchronization with the both OGSA Authz and OGSA WG, they are interested in having our two documents, OGSA Attribute and SAML Authz document, to be listed in their roadmap document. Is there anybody feels unhappy with the idea? The roadmap document is now during its public comment period which will end in the coming Friday, so they are in a little bit hurry to get a confirmation from us. I think it will be also related with our re-chartering, so we may need an urgent discussion on it. Thanks, Takuya

3 2