March 2008 - ogsa-hpcp-wg

Telecon Notes - 27th March 2008
by Steven Newhouse 27 Mar '08

27 Mar '08

Present: Blair Dillaway Steven Newhouse Marty Humphreys Chris Smith Balazs Konya Sergio Andreozzi Agenda 1. IPR Done. 2. Agenda Bash No changes. 3. GLUE Schema Update [See https://forge.gridforum.org/sf/go/doc14639?nav=1] Is there a link between the recent work on Application Templates and the GLUE Schema's Application Environment. It is noted that GLUE is comprehensive - we may want to profile any use. GLUE started out in EDG and OSG and produced 1.0. Version 1.3 is in production use. The specification of GLUE 2.0 is taking place in OGF so that it can get a wider adoption in other systems. There are implementers tracking the XML and SQL rendering on different platforms. Plan to submit to public comment by end of May. GLUE has 3 main areas: * General service that exposes a set of endpoints * Computing resources * Storage resources Each class has mandated and optional attributes. Only need to expose the 'classes' that you wish to describe. The classes are 'abstract' and you can add additional attributes and different 'schemas' to it to support additional services. The Application Environment provides the raw information that can be used to build the JSDL document that can be submitted into the HPCBP endpoint - perhaps focused at the power user and exposes more detail. The Application Template looks to minimize the detail that is exposed. * The Application Environment in the GLUE schema may provide a way of advertising the details imposed by the HPCBP service within the Application Template. * How to expose the GLUE description through BES. From within the FactoryAttributesDocument, another operation, or part of another service? 4. Kerberos Update [Blair] First draft circulated before the call. Need to first reach agreement that this is the use case that we are trying to solve! Need to get more feedback from beyond the authors. One option is to remain with an SSL server authenticated channel. If we use Kerberos token within the SSL channel there is no binding between Kerberos and the communication channel. Which exposes a weakness where it could be reused. We could decide to use the SP NEGO protocol within WS-Trust - it allows a session to be set up between the two endpoints - (which could include SSL or others) and then to do the actual message transfer. There is a design agreement between IBM & MS covering how to use the two (SP NEGO & WS-Trust) together. It's the default mechanism within WCF. Need to confirm that interoperable implementations are available. E.g. WCF, Java, C/C++ on linux. * Chris to look at various options within SSL. * Marty thinks there may be some support in Java. Need to make sure that we remain customer/use case focused. Are real production environments using Kerberos and SSL. 5. AOB Call next week.

1 0

Kerberos Profile Draft
by Steven Newhouse 27 Mar '08

27 Mar '08

I've uploaded Blair's initial version for the call (in about 8 mins) https://forge.gridforum.org/sf/docman/do/downloadDocument/projects.ogsa-hpc… Steven

1 0

Call Thursday 20th March 2008 at 9.30 PACIFIC
by Steven Newhouse 27 Mar '08

27 Mar '08

All, Apologies for the late reminder but we have a call scheduled for Thursday 20th March 2008. Note we are keeping the same time for the USA, but we have just switched to daylight saving so your local times may be different for the next few weeks. Time: 9.30AM (Pacific), 12.30PM (East Coast), *** 4.30PM (UK) *** Call details: PIN - 2719140 USA: 866 500 6738 UK +44 118 909 2000 Agenda 1. IPR 2. Agenda Bash 3. GLUE Schema Update [Chris] Here is some background information on the GLUE schema. The link is for the draft schema: https://forge.gridforum.org/sf/go/doc14639?nav=1 and the location of an XSD rendering of the schema. XSD for GLUE 2.0 - draft 27 http://forge.cnaf.infn.it/plugins/scmsvn/viewcvs.php/glue/xml/schema/GLUE2.… XML doc example http://forge.cnaf.infn.it/plugins/scmsvn/viewcvs.php/glue/xml/examples/Admi… 4. AOB Kerberos Profile: Draft document to be circulated next week and will be discussed on next week's call

3 4

Telecon
by Steven Newhouse 21 Mar '08

21 Mar '08

When: Thursday, March 27, 2008 9:30 AM-10:30 AM (GMT-08:00) Pacific Time (US & Canada). *~*~*~*~*~*~*~*~*~* Time: 9.30AM (Pacific), 12.30PM (East Coast), *** 4.30PM (UK) YOU MAY HAVE CHANGED BY THEN *** Call details: PIN - 2719140 USA: 866 500 6738 UK +44 118 909 2000 Agenda 1. IPR 2. Agenda Bash 3. GLUE Schema Update [Chris] Here is some background information on the GLUE schema. The link is for the draft schema: https://forge.gridforum.org/sf/go/doc14639?nav=1 and the location of an XSD rendering of the schema. XSD for GLUE 2.0 - draft 27 http://forge.cnaf.infn.it/plugins/scmsvn/viewcvs.php/glue/xml/schema/GLUE2.… XML doc example http://forge.cnaf.infn.it/plugins/scmsvn/viewcvs.php/glue/xml/examples/Admi… 4. Kerberos Update [Blair] 5. AOB

1 0

Telecon Notes - March 13th 2008
by Steven Newhouse 17 Mar '08

17 Mar '08

Present: Marty Humphrey Blair Dillaway Steven Newhouse Chris Smith Agenda 1. IPR Notified. 2. Agenda Bash Add GLUE to next week's call - to discuss Application Environment and Compute Element model. 3. Minutes from OGF 22 Key Action Items: * Address the format of jobIDs in the * Provide a flexible merge policy about the job information coming from the user and the service provider. The service provider can throw a fault if they detect an overlap from the data coming in from the user - or they can silently overwrite it. If they are going to be 'strict' and throw a fault, they must describe in the Application Template description what they are going to be strict about so the user does not have to do repeated job submission attempts to determine the policy by trial and error. 4. Technical Discussions (one or more from) * Kerberos Profile Blair: Writing a draft spec with use cases. Hopefully to be circulated for discussion on next week's call. * HPCBP Full Recommendation (now that the experience document is published) Experiences document published. Some remaining issues with BES that need to be clarified. + Add sentence in 6.2 to make it clear if a fault applies to all activities submitted in the vector it can be returned as a 'normal' fault as opposed to being placed in a vector contained in the operation response. + NotAuthorizedFaults to be applied to the BES-Management operations + CantApplyOperationFault to be returned from the TerminateActivities operation. It MAY be returned by an implementation if the activity is already in a terminal state. + Remove the OperationWillBeAppliedEventually fault as all BES operations that request state changes are applied asynchronously. 5. AOB None Next Meeting Same time next week. Main topics: * Relationship of GLUE Schema to the Application Template * Review of Kerberos Profile

2 1

Final Call: Revised Specification
by Steven Newhouse 13 Mar '08

13 Mar '08

All, I think we are nearly there... below is a link to a change tracked version of GFD 108 that addresses (I hope) all of the issues that have come up during our recent implementation experiences. The WSDL and schemas have been updated and clarifications and corrections made to the text. *** Please review and make comments by the Friday 21st March 2008 *** https://forge.gridforum.org/sf/docman/do/downloadDocument/projects.ogsa-bes… Thanks, Steven

1 0

GLUE schema information
by Christopher Smith 13 Mar '08

13 Mar '08

Hi all, Here is some background information on the GLUE schema. The link is for the draft schema, and the forwarded email points to the location of an XSD rendering of the schema. https://forge.gridforum.org/sf/go/doc14639?nav=1 -- Chris

1 0

Unresolved issues in BES from implementation experiences
by Steven Newhouse 13 Mar '08

13 Mar '08

There are some issues arising from recent implementation experiences that need some discussion... * Handling SOAP Faults Many BES operations take in a vector of activities and return a vectorised response based on these activities. How should faults be handled? The current document is ambiguous. Should: 1. Any fault generated by one of the activities in the vector can only be returned as part of the response vector from the operation. The WSDL is then incorrect as currently only a single specified fault can currently be generated from the operations. 2. Faults can be returned directly. Say if the vector length is 1. In which case text in 6.2.2, 6.2.3 & 6.2.4 needs to be clarified and the WSDL changed to allow faults of other types to be returned. See Glenn's original tracker for more details - https://forge.gridforum.org/sf/go/artf6066?nav=1 * Handling Authorization for the BES Port types The BESFactory port type contains operations that are to be applied to a vector of activities. An authenticated client may be authorized to access the operation - but may not be allowed to access one (or more) of the specified activities, for instance if the activity is owned by a different user. I've added NotAuthorizedFaults to the GetActivityStatuses, TerminateActivities & GetActivityDocument operations. The BESManagement port type does not throw any (authorization) faults. Authentication and authorization is provided by the container. A deployment therefore specifies who has access to the operations within BESManagement and any client that enters the operation is already authorized to start/stop the container from accepting activities and no fault is needed. Are these changes sufficient?

3 5

Call Thursday 13th March 2008 at 9.30 PACIFIC
by Steven Newhouse 12 Mar '08

12 Mar '08

All, Apologies for the late reminder but we have a call scheduled for Thursday 13th March 2008. Note we are keeping the same time for the USA, but we have just switched to daylight saving so your local times may be different for the next few weeks. Time: 9.30AM (Pacific), 12.30PM (East Coast), *** 4.30PM (UK) *** Call details: PIN - 2719140 USA: 866 500 6738 UK +44 118 909 2000 Agenda 1. IPR 2. Agenda Bash 3. Minutes from OGF 22 4. Technical Discussions (one or more from) * Kerberos Profile * HPCP Full Recommendation (now that the experience document is published) * Advanced Filter * Application Template 5. AOB -- ogsa-hpcp-wg mailing list ogsa-hpcp-wg(a)ogf.org http://www.ogf.org/mailman/listinfo/ogsa-hpcp-wg -- ogsa-hpcp-wg mailing list ogsa-hpcp-wg(a)ogf.org http://www.ogf.org/mailman/listinfo/ogsa-hpcp-wg

1 0

No call this week
by Steven Newhouse 05 Mar '08

05 Mar '08

With plenty of post OGF actions to catch up on let's skip a call this week and have a telecom March 13th 2008. Steven

1 0