- ogsa-authz-wg - lists.ogf.org

***SPAM*** [Invitation] Security Profile 2.0 (Duane Merrill) @ 2007-11-12 17:00 - 18:00 ()
by Hiro Kishimoto 10 Nov '07

10 Nov '07

ogsa-authz-wg(a)ogf.org, you are invited to Title: Security Profile 2.0 (Duane Merrill) Time: 2007-11-12 17:00 - 18:00 (Central Time) Calendar: Description: When: 6-7pm EST, 5-6pm CST, 3-4pm PST, 7-8am JST, 11pm-midnight UK The dial-in number for Monday; US: +1 718 3541071 (New York) or +1 408 9616509 (San Jose) UK: +44 (0)207 3655269 (London) Japan: +81 (0)3 3570 8225 (Tokyo) Germany: +49 (0)69 50070802 (Frankfurt) Switzerland: +41 (0)1 8009574 (Zurich) PIN: 4371991 See more information: - https://forge.gridforum.org/sf/go/wiki1477 Screen share service: URL: http://ogsa.glance.net/ Usage: https://forge.gridforum.org/sf/go/wiki1584 Note: ** OGF IPR POLICY APPLIES ** http://www.ogf.org/About/abt_policies.php 1) Early discussion Social study notification - https://forge.gridforum.org/sf/go/wiki1717 Note taker assignment - https://forge.gridforum.org/sf/go/wiki1848 Roll call Minutes approval and AI review (see the bottom of this agenda) Agenda bashing 2) OGSA Express AuthN profiles (Duane) Duane will revise and upload security profile drafts (plus use case draft) onto the GridForge - http://forge.ogf.org/short/ogsa-wg/spuc - Issue tracker - http://forge.ogf.org/short/ogsa-wg/spsa - http://forge.ogf.org/short/ogsa-wg/spss - http://forge.ogf.org/short/ogsa-wg/spst - http://forge.ogf.org/short/ogsa-wg/isuc 3) Any other Business Minutes approval Sept 17 telcon: https://forge.gridforum.org/sf/go/doc14765 OGF21 session: https://forge.gridforum.org/sf/go/doc14888 OGF21 F2F: https://forge.gridforum.org/sf/go/doc14883 Action Item review - http://forge.ogf.org/short/ogsa-wg/ailist You can view this event at http://www.google.com/calendar/event?action=VIEW&eid=MDhtZjQ2ZmQwcnNzNjJkNG… You are receiving this courtesy email at the account ogsa-authz-wg(a)ogf.org because you are an attendee of this event. To stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google Calendar account at http://www.google.com/calendar/ and control your notification settings for your entire calendar.

1 0

New co chair
by David Chadwick 01 Nov '07

01 Nov '07

Dear All Valerio Venturi has volunteered to be the co-chair of the working group. Could people please respond to the list or to myself or to the area directors with their opinions about this. Personally I fully support Valerio, and it will be good to have his additional input into the group regards David ***************************************************************** David W. Chadwick, BSc PhD Professor of Information Systems Security The Computing Laboratory, University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick Tel: +44 1227 82 3221 Fax +44 1227 762 811 Mobile: +44 77 96 44 7184 Email: D.W.Chadwick(a)kent.ac.uk Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 *****************************************************************

13 12

Attribute request profile
by David Chadwick 31 Oct '07

31 Oct '07

Dear All the third and final protocol profile has just been uploaded on gridforge at https://forge.gridforum.org/sf/go/doc14905?nav=1 We now have a complete set of protocol documents plus an architecture overview document. These documents now need to be harmonised, as they use different terminology for the same functional components. Could people please look through these documents and give suggestions for the names of the various functional components which are variously named as: PDP, CIS, CVS, PEP, AA, IDP, STS. Once we finalise on a set of 4 names (PEP, PDP are probably non-controversial, but assertion creation and validation probably are) for the components we can revise the documents accordingly regards David -- ***************************************************************** David W. Chadwick, BSc PhD Professor of Information Systems Security The Computing Laboratory, University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick Tel: +44 1227 82 3221 Fax +44 1227 762 811 Mobile: +44 77 96 44 7184 Email: D.W.Chadwick(a)kent.ac.uk Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 *****************************************************************

2 2

Meeting minutes
by David Chadwick 22 Oct '07

22 Oct '07

Dear WG the meeting minutes have been posted at https://forge.gridforum.org/sf/go/doc14890?nav=1 regards David ***************************************************************** David W. Chadwick, BSc PhD Professor of Information Systems Security The Computing Laboratory, University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick Tel: +44 1227 82 3221 Fax +44 1227 762 811 Mobile: +44 77 96 44 7184 Email: D.W.Chadwick(a)kent.ac.uk Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 *****************************************************************

1 0

Draft mins
by David Chadwick 18 Oct '07

18 Oct '07

Hi All the draft minutes of Mondays meeting are attached for comments, corrections, omissions etc. Can you please let me have your comments before Thursday evening so that I can post the final minutes before I leave the meeting many thanks David ***************************************************************** David W. Chadwick, BSc PhD Professor of Information Systems Security The Computing Laboratory, University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick Tel: +44 1227 82 3221 Fax +44 1227 762 811 Mobile: +44 77 96 44 7184 Email: D.W.Chadwick(a)kent.ac.uk Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 *****************************************************************

2 2

***SPAM*** Levels of Assurance (LoA) Session Change
by Blair Dillaway 16 Oct '07

16 Oct '07

Hi all, The LoA RG session has been moved to 1:30-3:00PM on Thursday in the Discovery Room. This is one time slot earlier than before to avoid a conflict with the OGSA Express Authentication Session. I hope this doesn't cause anyone a conflict. Thanks, Blair Dillaway

1 0

Agenda and Slides from Meeting
by David Chadwick 16 Oct '07

16 Oct '07

Dear All the agenda and slides from yesterday's meeting are now online at https://forge.gridforum.org/sf/go/doc14818?nav=1 Minutes will be uploaded as soon as I get them from the notetakers (Rich, I have yours already, thanks) regards David -- ***************************************************************** David W. Chadwick, BSc PhD Professor of Information Systems Security The Computing Laboratory, University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick Tel: +44 1227 82 3221 Fax +44 1227 762 811 Mobile: +44 77 96 44 7184 Email: D.W.Chadwick(a)kent.ac.uk Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 *****************************************************************

1 0

Agenda
by David Chadwick 15 Oct '07

15 Oct '07

Dear All For todays meeting at 1.30pm I propose to have an item on the Agenda entitled Project Reports. This will be an open slot for anyone with current projects in the Authz space to present their results. If you have a project and would like to present to the group please let me know and indicate how much time you would need regards David -- ***************************************************************** David W. Chadwick, BSc PhD Professor of Information Systems Security The Computing Laboratory, University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick Tel: +44 1227 82 3221 Fax +44 1227 762 811 Mobile: +44 77 96 44 7184 Email: D.W.Chadwick(a)kent.ac.uk Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 *****************************************************************

1 0

***SPAM*** OGF 21 Security Area Meeting
by Blair Dillaway 12 Oct '07

12 Oct '07

Hi All, I want to encourage you to attend the Security Area meeting on Monday, the 15th, at 3:15PM in the Portland Room. Mike Jones, Microsoft's Director of Identity Partnerships, has agreed to join us to discuss Identity standards activity occurring outside the OGF and on-going efforts to ensure broad interoperability. This should be a great follow-on to discussions at recent OGFs on identity management, federations, and authentication. See you next week. Blair Dillaway

1 0

Re: [OGSA-AUTHZ] [ogsa-wg] [ogsa-authn-bof] Notes from Joint OGSA WG AuthN/AuthZ call
by Richard Sinnott 27 Jun '07

27 Jun '07

This is something that we at NeSC (and I know many others) are interested in. My own personal perspective on the OGF AuthN and AuthZ work is that it is something everyone recognises as important, but that the detailed specification of the standards is not something many can/are able to usefully contribute to. (I think this is similar across many of the OGF standards areas). Case in point on the recent thread between David and Tom on how to use SAML AuthZ statements vs XACML contexts etc. How many folk in OGF-land are able to decide on the advantages/disadvantages of these things? We at NeSC are predominantly technology end users supporting a wide variety of e-Research projects. We have applied the implementations of the authN/authZ specs, e.g. the SAML AuthZ API, and identified their limitations etc, but it is only when these things have been implemented by the likes of the Globus and PERMIS teams for example, that we can really play an effective role. I think that this resonates across all of OGF activities be it DAIS specs for building data Grids, JSDL/BES specs for compute Grids etc. I am not sure how mature the Shibboleth/authZ has to be to be in order to be explored within OGF. I definitely think that workshops/OGF meetings showing how folk have built VOs/Campus Grids etc using the likes of Shibboleth, VOMS and other AAs, with authZ technologies such as PERMIS is needed/essential, i.e. I think the authN/authZ work should be as much about sharing expertise in how best to build secure Grids/VOs as it is on pursuing standards. Cheers, Rich -----Original Message----- From: ogsa-wg-bounces(a)ogf.org [mailto:ogsa-wg-bounces@ogf.org] On Behalf Of Blair Dillaway Sent: 26 June 2007 01:10 To: David Chadwick Cc: OGSA Authentication WG BoF; OGSA AUTHZ WG; OGSA-WG Subject: Re: [ogsa-wg] [ogsa-authn-bof] Notes from Joint OGSA WG AuthN/AuthZ call I don't remember any serious discussion of chartering work in this area, either within the AuthZ WG or elsewhere. So I can only surmise people haven't felt this area is adequately mature. The sessions Von hosted on Grid-Shib technology at OGF's last year certainly indicated a diverse set of approaches were being explored. Did you and Von discuss this in drafting the current charter? Do you believe things have evolved to the point where we could build critical mass around work in this area? (Of course, I'd love to hear from anyone who thinks the OGF should be doing work in this area.) Regards, Blair David Chadwick wrote: > > Hi Blair > > Interestingly there is one aspect of authz that has a significant > amount of user interest and that is merging attributes from Shibboleth > and Grids to be used together for authz decision making. But this is > currently not within the scope of the OGF OGSA Authz group's work plan. > So what does this indicate? > > regards > > David > > ***************************************************************** > David W. Chadwick, BSc PhD > Professor of Information Systems Security The Computing Laboratory, > University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick > Tel: +44 1227 82 3221 > Fax +44 1227 762 811 > Mobile: +44 77 96 44 7184 > Email: D.W.Chadwick(a)kent.ac.uk > Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html > Research Web site: > http://www.cs.kent.ac.uk/research/groups/iss/index.html > Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 > > ***************************************************************** -- ogsa-wg mailing list ogsa-wg(a)ogf.org http://www.ogf.org/mailman/listinfo/ogsa-wg

2 1