September 2006 - ogsa-wg

Updated: OGSA Teleconference
by Andreas Savva 26 Sep '06

26 Sep '06

BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 11.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VEVENT ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:ogsa-wg@ogf.org ORGANIZER:MAILTO:andreas.savva@jp.fujitsu.com DTSTART:20060928T133000Z DTEND:20060928T153000Z TRANSP:OPAQUE SEQUENCE:1 UID:040000008200E00074C5B7101A82E00800000000D0BC3D1562E1C6010000000000000000100 00000CCA41384C861944CADC9A96A1D9895A9 DTSTAMP:20060926T025215Z DESCRIPTION:When: 2006年9月28日木曜日 22:30 to 2006年9月29日金曜日 0:30 (GMT+09:00) 大阪、札幌、東京.\n\n*~*~*~*~*~*~*~*~*~*\n\n<pre>\n\nThe following is a proposed agenda for OGSA-WG telecon on Sept. 28th\nThursday from 8:30am - 10:30am (CDT).\n\nDial-in numbers for Thursday:\n Free: +1-888-452-0308\n Intl/Toll: +1-484-644-0505\n PIN: 71815\n See more information:\n - https://forge.gridforum.org/sf/go/wiki1477?nav=1\n\nScreen share service will be provided.\n URL: http://ogsa.glance.net\n Session key: 0928\n See more explanation:\n https://forge.gridforum.org/sf/go/wiki1584?nav=1\n\n1) Early discussion (20 min)\n Note taker assignment\n Roll call\n Telecon minutes approval (if available)\n Action Items status review (see the bottom of this email)\n Agenda bashing\n\n2) OGSA roadmap v1.1 status update (Chris Jordon\, 30 min)\n\n > From Chris Jordan's email:\n> I had some issues with Word destroying my latest draft of the\n> document\, but I've uploaded a less-recent version with some schedule\n> and status updates. It is incomplete\, but I'm mostly interested at\n> this point in feedback on how I'm currently handling documents which\n> have been released as GFDs and which don't have definite plans for\n> future versions yet.\n> \n> So if you'd like to discuss the roadmap document in todays call\,\n> please take a look specifically at the OGSA Architecture and glossary\n> sections\, along with other documents in a similar state\, such as JSDL\n> 1.0. Not all documents have updated status in this version\, but I\n> left track changes on so you can see what I have updated in this\n> version.\n> \n> Latest roadmap draft:\n> \n> https://forge.gridforum.org/sf/go/doc13733?nav=1\n\n Chris will fix broken draft and upload it to gridforge\n before the call.\n\n3) Security Profile final review (Takuya\, 60 min)\n Takuya will revise two security profiles before the call.\n\n4) Wrap up (10 min)\n AOB\n\n<*NEXT CALL*>\nhttps://forge.gridforum.org/sf/go/wiki1477?nav=1\n\nOct. 2 (Mon): Information/data modeling\nOct. 5 (Thu): Security\nOct. 9 (Mon): EGA reference model\, OGSA roadmap\nOct. 12 (Thu): <TBD>\n\n<*ACTION ITEMS*>\nhttps://forge.gridforum.org/sf/go/wiki1569?nav=1\n\n > From Sept. 21 call.\n AI-0921a: Andreas to ask Greg to setup a tracker for change requests\n to the OGF template document.\n AI-0921b: Security members to discuss the BoF proposal(s) further\n - For example\, one outcome could be some standards\n activity to mirror CAOPS activities and tie-in to OGSA\n AI-0921c: Dave S (as Standards VP) to talk to the next\n Security AD (when one is selected) about the Security Area\n task list.\n AI-0921d: Dave S to collect additional material in order to identify\n security issues better.\n - (AI-0921e is an issue instance)\n AI-0921f: Dave S to ask Richard C to put the security topic\n on the agenda of the first Interoperability call and to\n also ask that the teleconference announcements be sent to\n the OGSA list\n AI-0921i: Dave S to provide an agenda for the next security call.\n - Draft agenda items for Oct. 5th:\n - What needs to be done to achieve simple interop\n generally and to bootstrap more\n - Profile to get authentication information from a\n secure channel for authentication\n - Profile for other methods to get authentication\n informatin for authorization\n\n > From Sept. 15 OGSA F2F\n AI-0915a: (A Savva\, S McGough): Set up a telephone conference to\n collect workflow (BPEL) experience\n AI-0915b: Ellen to check the status of the items on the\n DMTF work register: report which have been done\, and what\n DMTF is doing for the rest.\n AI-0915c: Ellen to propose new text to update the DMTF register\n AI-0915d: Tom will post BP base faults issue to tracker\n AI-0915e: Hiro to talk with OGF Editor to start an errata process\n\n > From Sept. 14 OGSA F2F\n AI-0914a (Andreas Savva): Integrate the simple Data scenario just\n presented into the scenarios document\n AI-0914b (D Snelling\, D Merrill): Set up an OGSA Security design\n team\n AI-0914f (Fred Brisard and Hiro Kishimoto): Fix the location of the\n next F2F and inform the group vial the mailing list\n\n > From GGF18 EMS session (Sept. 13)\n AI-0913a: Andreas to update function names of BES.\n AI-0913b: Andrew to write-up a couple of such JM functionalities\n (short paragraph for each\, e.g. time constraint as JSDL\n extension.)\n AI-0913c: Andreas to add another scenario to use this “terminate”\n method of activity interface.\n AI-0913e: Andreas to separate un-deployment as a separate scenario.\n AI-0913f: Andreas to describe relation between ACS and CDDLM.\n AI-0913g: Donal to provide his proposal on\n "ActivityExecutionCandidate."\n\n > From Sept. 7 call\n AI-0907b: Takuya will search for an external reliable source of\n strong (or deprecated) ciphers to reference.\n AI-0907c: Andreas will revise the explanatory text and send the new\n version to Takuya.\n AI-0907d: Takuya will update the documents and issue a final call\n on the list. (Probably during GGF18.)\n\n > From Aug. 31 call\n AI-0831e: (A Savva) Talk to ACS working group for refining this\n scenario.\n AI-0831f: (A Savvva) Research RNS and probably update the EMS Arch\n Scenarios document\n\n > From Aug. 17 call\n AI-0817a: Dave Berry and Jay Unger will approach groups (GIN\,\n Globus\, etc) that have implemented practical grids and\n start a discussion on how they handle data:\n - how data is treated as a resource that can be scheduled\n - how transfers are modeled\n - how files are advertised\n - how applications find files (query\, by knowledge\,?)\n (Due Oct. 9)\n\n > From Aug. 3 call\n AI-0803e: Jun will provide an example of the CDL mechanism and why\n using ID/IDREF is not a good idea.\n AI-0803f: Jun will update the CDL document to remove the Environment\n variables\n\n > From July 20 F2F\n- EGR-WG (Ravi) will contact Geoffrey Fox and invites him to\n contribute use cases.\n- Andreas to go through the minutes and formulate a reply mail to\n Geoffrey on each artifact covered in these minutes.\n\n</pre>\n\n\n SUMMARY:Updated: OGSA Teleconference PRIORITY:5 X-MICROSOFT-CDO-IMPORTANCE:1 CLASS:PUBLIC BEGIN:VALARM TRIGGER:-PT15M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR

1 0

New roadmap draft uploaded
by Christopher Jordan 25 Sep '06

25 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I had some issues with Word destroying my latest draft of the document, but I've uploaded a less-recent version with some schedule and status updates. It is incomplete, but I'm mostly interested at this point in feedback on how I'm currently handling documents which have been released as GFDs and which don't have definite plans for future versions yet. So if you'd like to discuss the roadmap document in todays call, please take a look specifically at the OGSA Architecture and glossary sections, along with other documents in a similar state, such as JSDL 1.0. Not all documents have updated status in this version, but I left track changes on so you can see what I have updated in this version. Latest roadmap draft: https://forge.gridforum.org/sf/go/doc13733?nav=1 Chris Jordan Data Reliability Manager San Diego Supercomputer Center ctjordan(a)sdsc.edu 858.534.8347 "If we had a keen vision and feeling of all ordinary human life, it would be like hearing the grass grow and the squirrel's heart beat, and we should die of that roar which lies on the other side of silence." - George Eliot -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) iD8DBQFFGEKyPCVtcXn6kg8RAlY5AJwLGPrQyFfYH156n0ZiJCAV1olEkwCgoFW4 5PdnGHcZNdOWcAu5kiXyqJs= =Xt4T -----END PGP SIGNATURE-----

1 0

Updated: OGSA Teleconference
by Andreas Savva 25 Sep '06

25 Sep '06

BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 11.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VEVENT ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:ogsa-wg@ogf.org ORGANIZER:MAILTO:andreas.savva@jp.fujitsu.com DTSTART:20060925T220000Z DTEND:20060926T000000Z TRANSP:OPAQUE SEQUENCE:1 UID:040000008200E00074C5B7101A82E00800000000B0454EF8A6E0C6010000000000000000100 00000B8C9D493D752DC4C97538F297AF5D824 DTSTAMP:20060925T060027Z DESCRIPTION:When: 2006年9月26日火曜日 7:00-9:00 (GMT+09:00) 大阪、札幌、東京.\n\n*~*~*~*~*~*~*~*~*~*\n\n\nThe following is a proposed agenda for OGSA-WG telecon on Sept. 25th\nMonday from 5pm to 7pm (CDT).\n\nThe dial-in number for Monday\;\n US: +1 718 3541071 (New York) or\n +1 408 9616509 (San Jose)\n UK: +44 (0)207 3655269 (London)\n Japan: +81 (0)3 3570 8225 (Tokyo)\n PIN: 4371991\n See more information:\n - https://forge.gridforum.org/sf/go/wiki1477?nav=1\n\nScreen share service will be provided.\n URL: http://ogsa.glance.net\n Session key: 0925\n See more explanation:\n - https://forge.gridforum.org/sf/go/wiki1584?nav=1\n\n1) Early discussion (20 min)\n Note taker assignment\n Roll call\n Telecon minutes approval (if available)\n F2F meeting minutes approval (Sept. 15)\n - https://forge.gridforum.org/sf/go/doc13871?nav=1\n - https://forge.gridforum.org/sf/go/doc13862?nav=1\n Action Items status review (see the bottom of this email)\n Agenda bashing\n\n2) OGSA and EGA reference model (45 min)\n> - No specific OGF policy on unifying EGA and GGF work\, but there is\n> an expectation that parties talk to each other\n> - Merging the glossaries? Yes and does not look too difficult\n> - Proposal: maintain the distinction between reference model\; and\n> OGSA as (a service oriented) rendering of it\;\n> - Is it true\, or should it be made true?\n> - As an exercise\, what is the specific use case to drive it\; need\n> a reason--more than an abstract motivation. No reason just to be\n> consistent.\n> - EMS (or the more restricted HPC Profile) might be a good\n> starting point\n> - Would probably need more than one use case\; would also have to\n> think broader than current thinking in OGSA.\n> - Transaction processing kind of environment as one motivation?\n> - Next step: Set up an initial group of people to start a discussion\n> within OGSA. Identify what should be done.\n> - Dave Snelling\, Andrew Grimshaw\, Tom Maguire\n> - Paul Strong\, Alan Clark\, Bob Thome\n\n GGF18 session material\, minutes\, and EGA document:\n - https://forge.gridforum.org/sf/go/doc13838?nav=1 (Glossary)\n - https://forge.gridforum.org/sf/go/doc13827?nav=1 (OGSA vs EGA)\n - https://forge.gridforum.org/sf/go/doc13839?nav=1 (minutes)\n - http://www.gridalliance.org/en/WorkGroups/index.asp (EGA doc)\n\n3) OGSA roadmap v1.1 status update (Chris Jordon\, 45 min)\n Chris will make the next revised draft available up on\n gridforge by this weekend for review and discussion on\n the 25th.\n\n4) Wrap up (10 min)\n AOB\n\n<*NEXT CALL*>\nhttps://forge.gridforum.org/sf/go/wiki1477?nav=1\n\nSept. 28 (Thu): TBD\nOct. 2 (Mon): Information/data modeling\nOct. 5 (Thu): Security\nOct. 9 (Mon): EGA reference model\, OGSA roadmap\n\n<*ACTION ITEMS*>\nhttps://forge.gridforum.org/sf/go/wiki1569?nav=1\n\n > From Sept. 15 OGSA F2F\n AI-0915a: (A Savva\, S McGough): Set up a telephone conference to\n collect workflow (BPEL) experience\n AI-0915b: Ellen to check the status of the items on the\n DMTF work register: report which have been done\, and what\n DMTF is doing for the rest.\n AI-0915c: Ellen to propose new text to update the DMTF register\n AI-0915d: Tom will post BP base faults issue to tracker\n AI-0915e: Hiro to talk with OGF Editor to start an errata process\n\n > From Sept. 14 OGSA F2F\n AI-0914a (Andreas Savva): Integrate the simple Data scenario just\n presented into the scenarios document\n AI-0914b (D Snelling\, D Merrill): Set up an OGSA Security design\n team\n AI-0914f (Fred Brisard and Hiro Kishimoto): Fix the location of the\n next F2F and inform the group vial the mailing list\n\n > From GGF18 EMS session (Sept. 13)\n AI-0913a: Andreas to update function names of BES.\n AI-0913b: Andrew to write-up a couple of such JM functionalities\n (short paragraph for each\, e.g. time constraint as JSDL\n extension.)\n AI-0913c: Andreas to add another scenario to use this “terminate”\n method of activity interface.\n AI-0913e: Andreas to separate un-deployment as a separate scenario.\n AI-0913f: Andreas to describe relation between ACS and CDDLM.\n AI-0913g: Donal to provide his proposal on\n "ActivityExecutionCandidate."\n\n > From GGF18 EGA session (Sept. 12)\n AI-0912a: Hiro to set up an initial group of people to start a\n discussion within OGSA. Identify what should be done.\n - Dave Snelling\, Andrew Grimshaw\, Tom Maguire\n - Paul Strong\, Alan Clark\, Bob Thome\n\n > From Sept. 7 call\n AI-0907b: Takuya will search for an external reliable source of\n strong (or deprecated) ciphers to reference.\n AI-0907c: Andreas will revise the explanatory text and send the new\n version to Takuya.\n AI-0907d: Takuya will update the documents and issue a final call\n on the list. (Probably during GGF18.)\n\n > From Aug. 31 call\n AI-0831e: (A Savva) Talk to ACS working group for refining this\n scenario.\n AI-0831f: (A Savvva) Research RNS and probably update the EMS Arch\n Scenarios document\n\n > From Aug. 17 call\n AI-0817a: Dave Berry and Jay Unger will approach groups (GIN\,\n Globus\, etc) that have implemented practical grids and\n start a discussion on how they handle data:\n - how data is treated as a resource that can be scheduled\n - how transfers are modeled\n - how files are advertised\n - how applications find files (query\, by knowledge\,?)\n (Due Oct. 9)\n\n > From Aug. 3 call\n AI-0803e: Jun will provide an example of the CDL mechanism and why\n using ID/IDREF is not a good idea.\n AI-0803f: Jun will update the CDL document to remove the Environment\n variables\n\n > From July 20 F2F\n- EGR-WG (Ravi) will contact Geoffrey Fox and invites him to\n contribute use cases.\n- Andreas to go through the minutes and formulate a reply mail to\n Geoffrey on each artifact covered in these minutes.\n\n\n SUMMARY:Updated: OGSA Teleconference PRIORITY:5 X-MICROSOFT-CDO-IMPORTANCE:1 CLASS:PUBLIC BEGIN:VALARM TRIGGER:-PT15M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR

1 0

contact
by Jamal Macdonald 24 Sep '06

24 Sep '06

1 0

Teleconference minutes - 21 September 2006
by Andreas Savva 23 Sep '06

23 Sep '06

Minutes attached. This was mostly an action review and Security call. http://forge.gridforum.org/sf/go/doc13879?nav=1 -- Andreas Savva OGSA Teleconference - 21 September 2006 ======================================= * Participants Jay Unger (IBM) Jem Treadwell (HP) Dave Snelling (Fujitsu) Alan Sill (TTU) Frank Siebenlist (ANL) Andreas Savva (Fujitsu) Mark Morgan (UVa) Duane Merrill (UVa) Tom Maguire (EMC) An Ly (CA) Hiro Kishimoto (Fujitsu) Chris Jordan (SDSC) Andrew Grimshaw (UVa) Donal Fellows (UoM) Abdeslem Djaoui (RL) Fred Brisard (CA) Mike Berhens (R2AD, LLC) Minutes: Andreas Savva * Summary of Actions AI-0921a: Andreas to ask Greg to setup a tracker for change requests to the OGF template document. AI-0921b: Security members to discuss the BoF proposal(s) further - For example, one outcome could be some standards activity to mirror CAOPS activities and tie-in to OGSA AI-0921c: Dave S (as Standards VP) to talk to the next Security AD (when one is selected) about the Security Area task list. AI-0921d: Dave S to collect additional material in order to identify security issues better. - (AI-0921e is an issue instance) AI-0921e: Alan S to provide material on the issues relating to path validation. AI-0921f: Dave S to ask Richard C to put the security topic on the agenda of the first Interoperability call and to also ask that the teleconference announcements be sent to the OGSA list AI-0921g: Hiro to add Alan Sill to the OGSA-WG list AI-0921h: Hiro to allocate a slot to review security work progress at a future call. Perhaps Oct 5. AI-0921i: Dave S to provide an agenda for the next security call. - Draft agenda items: - What needs to be done to achieve simple interop generally and to bootstrap more - Profile to get authentication information from a secure channel for authentication - Profile for other methods to get authentication informatin for authorization * September 7 teleconference minutes approved with no changes * Review of Action Items - AI-0912a: Hiro will be arranging the first call next Monday. (Close after Monday call.) - AI-0913a: Andreas to put issue in the EMS Scenarios tracker and close this action - AI-0913b: Pending. - AI-0913c: Andreas to put issue in the EMS Scenarios tracker and close this action - AI-0913d: Closed. - Done at GGF18. - AI-0913e: Andreas to put issue in the EMS Scenarios tracker and close this action - AI-0913f: Andreas to put issue in the EMS Scenarios tracker and close this action - AI-0913g: Pending. - AI-0914a: Pending. - Review all EMS Scenarios actions at the next document review. (No need to review every call.) - The next EMS Scenarios review call is not set yet. Andreas and Hiro will discuss it offline. - AI-0914b: Pending. - Discussion on the mission of the Security design team is part of this call. - AI-0914c: See AI-0914d. - AI-0914d: Closed. - Andrew has started working on new text for the Appendix. This AI belongs to the BES WG. - AI-0914e: Closed. - Andrew has initiated this activity. Richard Ciapala (MS) has taken over this activity. - AI-0914f: Pending - Proposal is Florida (Tampa or Orlando) the week before SC06. - Fred Brisard is inquiring about hotels in Tampa. He expects to have results (3-4 proposals) by next week. - Hiro will do the zoomerang after that - AI-0915a: Pending. - This was specific to experiences of people implementing BPEL and JSDL. - AI-0907a: Obsolete; Closed. - AI-0907b: Pending. - This has to be done before the Security profiles can go to final call. - AI-0907c: Pending. - AI-0907d: Pending on AI-0907b and AI-0907c - AI-0907e: Closed. - Already added to template. AI-0921a: Andreas to ask Greg to setup a tracker for change requests to the OGF template document. - AI-0907f: Closed. - The BaseFaults issues were discussed at the last F2F. - The minutes of this session were uploaded after the agenda of this call. There are an additional 4 actions (2 on BF). - AI-0831c: Closed. - Put in EMS Scenarios tracker. - AI-0831d: Closed - Put in EMS Scenarios tracker. - AI-0831e: Pending. - AI-0831f: Pending. - AI-0831g: Closed. - Andreas set up EMS Scenarios tracker. - AI-0831h: Closed - Mark sent the document out before GGF18. - AI-0828a: Closed. - Initial discussion clarified that this action is about annotating EPRs - Frank has looked into it. The recently released WS-Metadata Exchange specification shows (examples of) how this annotation can be done. The approach should be applicable here. - Initially this issue was specifically about adding porttype information but WS-MetadataExchange shows how any kind of information may be embedded. - (Dave S) There is non-normative text in the WS-Addressing Core specification (sec. 2.2, under endpoint Metadata extensibility) that refers to examples on how to include wsldLocation information. This is sufficient and there is no need to use the WS-MetadataExchange spec. - There were questions about the status of the WS-MetadataExchange specification. It is not in a standards body yet. It is covered by the recent MS open licence announcement. - Is this issue covered by the WSRF BP? Yes. - AI-0817a: Pending. - This was not not discussed at GGF18 or at the F2F. - There has not been much progress - Jay will talk with Dave Berry on how to proceed - Hiro will schedule this topic on a future call in 1-2 weeks time. - AI-0810a: Closed - Subsumed by AI-0913g - AI-0803e: Pending - AI-0803f: Pending - EGR-WG (Ravi) will contact Geoffrey Fox and invite him to contribute use cases. - Pending - Andreas to go through the minutes and formulate a reply mail to Geoffrey on each artifact covered in these minutes. - Pending - Steve McGough & Andreas to do a mapping from the current JSDL elements / terminology into the new information model structure (Proposed split into Description and Requirements) (from July 18th F2F, By GGF18 as original discussed.) - Done at the F2F. Closed. * GGF18 and F2F meeting discussion - Event went quite smoothly. - A good set of specs are coming to completion; felt like many things are finally getting done. There are lots of implementations (of BES, etc) including from MS. The interoperability activity was started and looking forward to the results. - There was no chance to cover some issues, like the relationship between OGSA Security work and other (OGF) security work. But this is on the agenda of this call. ** Minutes approval - Information Model Minutes (two) (Fred M)--approved with no changes - EGA Reference Model (one) (Andreas)--approved with no changes - EMS Scenarios (one) (Hiro)--approved with no changes - F2F minutes, Thursday (Michel D)--approved with no changes - F2F minutes, Friday 1. (Michel D)--approved with no changes 2. (Andreas)--approval postponed for next week because there was insufficient time to review them before the call. - All the material is believed to have been uploaded. Let the chairs/secretary know if anything is missing. * Security Profile review postponed * OGSA security Led by Dave Snelling. OGSA security work has produced two security profiles (Core and Secure Channel). Both are close to publication. One question is what should be the next work items of the design team. The HPC Profile interoperability work is probably facing an immediate problem since there is no profiled way to pass the required identity credentials for job submission. There is a gap in authentication---the OGSA security profiles only go as far as defining a secure channel. Therefore a short-term work proposal is to identify what the next minimal use cases are and to produce profiles to address them. The result could be a profile on how to do authentication. (There is no OGSA-AuthN group.) From a broader perspective there are a number of security groups (FI-RG, OGSA-AuthZ-WG, TC-RG) and a lot of good work has been done already. But it is not clear what the connections are. Alan Sill said that the CAOPS-WG has also been very active. CAOPS has been somewhat incorrectly categorized as operations; it does in fact also do design work and should have a connection to OGSA. (There are some worries that the practice of academic users may be getting decoupled from broader OGSA work.) The group was spawned by the Grid PMAs--which also formed IGTF. IGTF's purpose is authentication in a federated infrastructure. The CAOPS-WG was created to cover specific needs of educational organizations--bridging between organizations. It is not clear how this work links to the commercial world. (Commercial CAs are in the business of issuing server certs; EDUs for identity.) A main driver has been the federal government---driving use by requiring (path validation) by legislative means. - Peter Alterman @NIH Federal Bridge: runs commercial solution Is a lot of the work still around plain x.509 certificates? No, VOMS uses extended attribute certificates. - A higher level view is that x.509 certificates with SAML assertions seem to satisfy most requirements - It is not clear how industry views attribute extensions One issue is to identify what is needed for web (grid) services. A lot of existing (or pursued) approaches (CAS, Kerberos, etc) in other bodies are done without reference to specific Web services requirements. A number of different approaches for authentication were mentioned: - vanila x.509 - x.509 extensions - EPI based identity (UVA) - 'pure' SAML (identity is just another assertion) What is the current OGSA level? - Use of x509 certificates to establish a secure channel between client/server. There is mutual authentication between client and server. If a single CA is used for tests is it enough? And could it be extended later to support bridging? - The weak point is atribute extension and path validation; otherwise it works for the small case. - For the (small) base case it is sufficient to have copies of the base root certificates and be able to check whole chain (including checking all additions; so it is simpler not to allow additions). This setup is enough for basic interop but it is really functionality that has been available for the past 10 years. - Bridging is actually a lot more complicated. Another possibility for future work is to define a standardized path validation i/f that hides the operations behind, which are quite complex. - But this may be longer term work. It goes beyond current interoperability work. - Alan mentioned a number of people that might be worth including in such a discussion. - Frank proposed doing a BoF for such a path validation i/f and also proposed Alan Sill as a good person to lead it. For the Interoperability workshop one could arrange for an IGTF accredited CA; install it on both sides. (It has the advantage of also plugging in the federal infrastructure.) - It is not clear if such a setup would be acceptable to all participants. - It is not clear whether the use of the OGSA security profiles is going to be acceptable either. - Interoperability calls are being planned and this issue should be taken up there. - Richard Ciapala (richci 'at' microsoft.com) is organizing the interoperability work/calls. AI-0921b: Security members to discuss the BoF proposal(s) further - For example, one outcome could be some standards activity to mirror CAOPS activities and tie-in to OGSA AI-0921c: Dave S (as Standards VP) to talk to the next Security AD (when one is selected) about the Security Area task list. AI-0921d: Dave S to collect additional material in order to identify security issues better. - (AI-0921e is an issue instance) AI-0921e: Alan S to provide material on the issues relating to path validation. AI-0921f: Dave S to ask Richard C to put the security topic on the agenda of the first Interoperability call and to also ask that the teleconference announcements be sent to the OGSA list AI-0921g: Hiro to add Alan Sill to the OGSA-WG list AI-0921h: Hiro to allocate a slot to review security work progress at a future call. Perhaps Oct 5. AI-0921i: Dave S to provide an agenda for the next security call. - Draft agenda items: - What needs to be done to achieve simple interop generally and to bootstrap more - Profile to get authentication information from a secure channel for authentication - Profile for other methods to get authentication informatin for authorization

1 0

Links for material on path validation and on the IGTF, etc.
by Alan Sill 22 Sep '06

22 Sep '06

Per action items from meeting of 21 Sep. 2006: A link for information on the International Grid Trust Federation (IGTF) and its activities with respect to the large-scale grids in science and academics is below: http://www.gridpma.org/ Information in general on path validation is available at http://tools.ietf.org/html/rfc3379 I will look for and try to supplement the above with information specific to path validation and related issues for the use of Bridge CAs and similar structures in grids as soon as possible. Note that The Americas Grid PMA (TAG PMA) has formed a working group on the above issue including members from the other PMAs, and that is currently in process. There is also extensive activity, especially in the Internet2, Educause and related sectors with respect to the use of Shibboleth with grids, including related PKI and X.509-embedding issues, see http://grid.ncsa.uiuc.edu/events/ggf18-shib-bof/ Best, Alan Alan Sill TIGRE Senior Scientist High Performance Computing Center TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0

Proposed agenda for Sept. 21st call
by Hiro Kishimoto 22 Sep '06

22 Sep '06

Hi all, The following is a proposed agenda for OGSA-WG telecon on Sept. 21st. Thursday from 8:30am - 10:30am (CDT). Dial-in numbers for Thursday: Free: +1-888-452-0308 Intl/Toll: +1-484-644-0505 PIN: 71815 Screen share service will be provided. URL: http://ogsa.glance.net Session key: 0921 See more explanation: https://forge.gridforum.org/sf/go/wiki1584?nav=1 1) Early discussion (20 min) Note taker assignment Roll call Telecon minutes approval (Sept. 7) https://forge.gridforum.org/sf/go/doc13796?nav=1 Action Items status review (see the bottom of this email) Agenda bashing 2) GGF18 and F2F meeting debriefing (20 min) Feedback and impression on GGF18 sessions and F2F. Minutes approval https://forge.gridforum.org/sf/docman/do/listDocuments/projects.ogsa-wg/doc… If you have not yet upload your materials, please do so before the call. 3) OGSA security (David Snelling, 80 min) 3-1) Formalities 3-2) Existing Technologies Summary X.509 X.509, with proxy extension SAML Specific SAML profiles of interest. XACML .... 3-3) Overview of Security Area activity FI-RG OGSA-AuthZ-WG TC-RG 3-4) Initial short list of minimal use cases OGSA Base security profile summary OGSA secure channel for authorization SAML based point to point authorization Delegation? 3-5) Security Profile status update (Takuya) 3-6) Other?? 4) Wrap up (10 min) AOB <*NEXT CALL*> https://forge.gridforum.org/sf/go/wiki1477?nav=1 Sept. 25 (Mon): EGA reference model, OGSA roadmap Sept. 28 (Thu): TBD Oct. 2 (Mon): Information/data modeling Oct. 5 (Thu): Security Oct. 9 (Mon): EGA reference model, OGSA roadmap <*ACTION ITEMS*> https://forge.gridforum.org/sf/go/wiki1569?nav=1 > From GGF18 EGA session (Sept. 12) AI-0912a: Hiro to set up an initial group of people to start a discussion within OGSA. Identify what should be done. - Dave Snelling, Andrew Grimshaw, Tom Maguire - Paul Strong, Alan Clark, Bob Thome > From GGF18 EMS session (Sept. 13) AI-0913a: Andreas to update function names of BES. AI-0913b: Andrew to write-up a couple of such JM functionalities (short paragraph for each, e.g. time constraint as JSDL extension.) AI-0913c: Andreas to add another scenario to use this “terminate” method of activity interface. AI-0913d: Andrew to propose clarification on this issue in BES specification. AI-0913e: Andreas to separate un-deployment as a separate scenario. AI-0913f: Andreas to describe relation between ACS and CDDLM. AI-0913g: Donal to provide his proposal. > From Sept. 14 OGSA F2F AI-0914a (Andreas Savva): Integrate the simple Data scenario just presented into the scenarios document AI-0914b (D Snelling, D Merrill): Set up an OGSA Security design team AI-0914c (E Stokes): Send a mail to the BES mailing list requesting re-examination of the BES spec appendix regarding the Information Model relationship AI-0914d (A Grimshaw): Propose new text for the said appendix; arrange telecon woth interested parties to mediate the conflicting interests AI-0914e (A Grimshaw): Initiate and ramp up the interop fest activities AI-0914f (H Kishimoto): Fix the location of the next F2F and inform the group vial the mailing list > From Sept. 15 OGSA F2F AI-0915a (A Savva, S McGough): Set up a telephone conference to collect workflow experience > From Sept. 7 call AI-0907a: Hiro to add Chris Jordan to the list of people attending the F2F at the IBM facility. AI-0907b: Takuya will search for an external reliable source of strong (or deprecated) ciphers to reference. AI-0907c: Andreas will revise the explanatory text and send the new version to Takuya. AI-0907d: Takuya will update the documents and issue a final call on the list. (Probably during GGF18.) AI-0907e: Hiro to send an email to Greg requesting that the 'obsoletes' information be added to the document template. AI-0907f: Hiro to add an agenda item for the F2F to discuss a revision of statement R0711. > From Aug. 31 call AI-0831c: (A Savva) Update/rewrite secction 4.1 of the EMS Architecture scenarios AI-0831d: (A Savva) Add the Application Version in section 4.2, paragraph 4, of the EMS Arch Scenarios AI-0831e: (A Savva) Talk to ACS working group for refining this scenario. AI-0831f: (A Savvva) Research RNS and probably update the EMS Arch Scenarios document AI-0831g: (A Savva) List of open issues, scenarios and refinements for the EMS Arch Scenarios document AI-0831h: (M Morgan, A Grimshaw) Provide an outline sequence how BES, ByteIO, RNS, etc. are combined together at University of Virginia > From Aug. 28 call Action AI-0828a: Frank will do more investigation, read the paper, and make a proposal. > From Aug. 17 call AI-0817a: Dave Berry and Jay Unger will approach groups (GIN, Globus, etc) that have implemented practical grids and start a discussion on how they handle data: - how data is treated as a resource that can be scheduled - how transfers are modeled - how files are advertised - how applications find files (query, by knowledge,?) (Postponed until GGF18) > From Aug. 10 call AI-0810a: Donal to look into the relation of the EPS and CDL (retrieval, update, etc). (Eventually this should probably become a separate scenario.) > From Aug. 3 call AI-0803e: Jun will provide an example of the CDL mechanism and why using ID/IDREF is not a good idea. AI-0803f: Jun will update the CDL document to remove the Environment variables > From July 20 F2F - EGR-WG (Ravi) will contact Geoffrey Fox and invites him to contribute use cases. - Andreas to go through the minutes and formulate a reply mail to Geoffrey on each artifact covered in these minutes. <postponed> - Steve McGough & Andreas to do a mapping from the current JSDL elements / terminology into the new information model structure (Proposed split into Description and Requirements) (from July 18th F2F, By GGF18 as original discussed.) ---- Hiro Kishimoto

2 2

Accepted: Updated: OGSA Teleconference
by Balle, Susanne 20 Sep '06

20 Sep '06

1 0

Accepted: Updated: OGSA Teleconference
by Maguire_Tom＠emc.com 20 Sep '06

20 Sep '06

1 0

Updated: OGSA Teleconference
by Andreas Savva 20 Sep '06

20 Sep '06

BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 11.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VEVENT ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:ogsa-wg@ogf.org ORGANIZER:MAILTO:andreas.savva@jp.fujitsu.com DTSTART:20060921T133000Z DTEND:20060921T153000Z LOCATION:http://ogsa.glance.net TRANSP:OPAQUE SEQUENCE:1 UID:040000008200E00074C5B7101A82E00800000000209D6892A2DCC6010000000000000000100 000008E16B3C2DDF71746B9CBB330C5F23E6F DTSTAMP:20060920T015149Z DESCRIPTION:When: 2006年9月21日木曜日 22:30 to 2006年9月22日金曜日 0:30 (GMT+09:00) 大阪、札幌、東京.\nWhere: http://ogsa.glance.net\n\n*~*~*~*~*~*~*~*~*~*\n\n<pre>\n\nDial-in numbers for Thursday:\n Free: +1-888-452-0308\n Intl/Toll: +1-484-644-0505\n PIN: 71815\n\nScreen share service will be provided.\n URL: http://ogsa.glance.net\n Session key: 0921\nSee more explanation:\nhttps://forge.gridforum.org/sf/go/wiki1584?nav=1\n\n1) Early discussion (20 min)\n Note taker assignment\n Roll call\n Telecon minutes approval (Sept. 7)\nhttps://forge.gridforum.org/sf/go/doc13796?nav=1\n Action Items status review (see the bottom of this email)\n Agenda bashing\n\n2) GGF18 and F2F meeting debriefing (20 min)\n Feedback and impression on GGF18 sessions and F2F.\n Minutes approval\nhttps://forge.gridforum.org/sf/docman/do/listDocuments/projects. ogsa-wg/docman.root.meeting_materials_and_minutes.ggf_meetings.ggf18\n\n If you have not yet upload your materials\, please\n do so before the call.\n\n3) OGSA security (David Snelling\, 80 min)\n\n3-1) Formalities\n\n3-2) Existing Technologies Summary\n\n X.509\n X.509\, with proxy extension\n SAML\n Specific SAML profiles of interest.\n XACML\n ....\n\n3-3) Overview of Security Area activity\n\n FI-RG\n OGSA-AuthZ-WG\n TC-RG\n\n3-4) Initial short list of minimal use cases\n\n OGSA Base security profile summary\n OGSA secure channel for authorization\n SAML based point to point authorization\n Delegation?\n\n3-5) Security Profile status update (Takuya)\n\n3-6) Other??\n\n4) Wrap up (10 min)\n AOB\n\n<*NEXT CALL*>\nhttps://forge.gridforum.org/sf/go/wiki1477?nav=1\n\nSept. 25 (Mon): EGA reference model\, OGSA roadmap\nSept. 28 (Thu): TBD\nOct. 2 (Mon): Information/data modeling\nOct. 5 (Thu): Security\nOct. 9 (Mon): EGA reference model\, OGSA roadmap\n\n<*ACTION ITEMS*>\nhttps://forge.gridforum.org/sf/go/wiki1569?nav=1\n > From GGF18 EGA session (Sept. 12)\n AI-0912a: Hiro to set up an initial group of people to start a\n discussion within OGSA. Identify what should be done.\n - Dave Snelling\, Andrew Grimshaw\, Tom Maguire\n - Paul Strong\, Alan Clark\, Bob Thome\n\n > From GGF18 EMS session (Sept. 13)\n AI-0913a: Andreas to update function names of BES.\n AI-0913b: Andrew to write-up a couple of such JM functionalities\n (short paragraph for each\, e.g. time constraint as JSDL\n extension.)\n AI-0913c: Andreas to add another scenario to use this “terminate”\n method of activity interface.\n AI-0913d: Andrew to propose clarification on this issue in BES\n specification.\n AI-0913e: Andreas to separate un-deployment as a separate scenario.\n AI-0913f: Andreas to describe relation between ACS and CDDLM.\n AI-0913g: Donal to provide his proposal.\n\n > From Sept. 14 OGSA F2F\n AI-0914a (Andreas Savva): Integrate the simple Data scenario just\n presented into the scenarios document\n AI-0914b (D Snelling\, D Merrill): Set up an OGSA Security design\n team\n AI-0914c (E Stokes): Send a mail to the BES mailing list requesting\n re-examination of the BES spec appendix regarding the\n Information Model relationship\n AI-0914d (A Grimshaw): Propose new text for the said appendix\;\n arrange telecon woth interested parties to mediate the\n conflicting interests\n AI-0914e (A Grimshaw): Initiate and ramp up the interop fest\n activities\n AI-0914f (H Kishimoto): Fix the location of the next F2F and inform\n the group vial the mailing list\n\n > From Sept. 15 OGSA F2F\n AI-0915a (A Savva\, S McGough): Set up a telephone conference to\n collect workflow experience\n\n > From Sept. 7 call\n AI-0907a: Hiro to add Chris Jordan to the list of people attending\n the F2F at the IBM facility.\n AI-0907b: Takuya will search for an external reliable source of\n strong (or deprecated) ciphers to reference.\n AI-0907c: Andreas will revise the explanatory text and send the new\n version to Takuya.\n AI-0907d: Takuya will update the documents and issue a final call\n on the list. (Probably during GGF18.)\n AI-0907e: Hiro to send an email to Greg requesting that the\n 'obsoletes' information be added to the document\n template.\n AI-0907f: Hiro to add an agenda item for the F2F to discuss a\n revision of statement R0711.\n\n > From Aug. 31 call\n AI-0831c: (A Savva) Update/rewrite secction 4.1 of the EMS\n Architecture scenarios\n AI-0831d: (A Savva) Add the Application Version in section 4.2\,\n paragraph 4\, of the EMS Arch Scenarios\n AI-0831e: (A Savva) Talk to ACS working group for refining this\n scenario.\n AI-0831f: (A Savvva) Research RNS and probably update the EMS Arch\n Scenarios document\n AI-0831g: (A Savva) List of open issues\, scenarios and refinements\n for the EMS Arch Scenarios document\n AI-0831h: (M Morgan\, A Grimshaw) Provide an outline sequence how\n BES\, ByteIO\, RNS\, etc. are combined together at University\n of Virginia\n\n > From Aug. 28 call\n Action AI-0828a: Frank will do more investigation\, read the paper\,\n and make a proposal.\n\n > From Aug. 17 call\n AI-0817a: Dave Berry and Jay Unger will approach groups (GIN\,\n Globus\, etc) that have implemented practical grids and\n start a discussion on how they handle data:\n - how data is treated as a resource that can be scheduled\n - how transfers are modeled\n - how files are advertised\n - how applications find files (query\, by knowledge\,?)\n (Postponed until GGF18)\n\n > From Aug. 10 call\n AI-0810a: Donal to look into the relation of the EPS and CDL\n (retrieval\, update\, etc). (Eventually this should probably\n become a separate scenario.)\n\n > From Aug. 3 call\n AI-0803e: Jun will provide an example of the CDL mechanism and why\n using ID/IDREF is not a good idea.\n AI-0803f: Jun will update the CDL document to remove the Environment\n variables\n\n > From July 20 F2F\n- EGR-WG (Ravi) will contact Geoffrey Fox and invites him to\n contribute use cases.\n- Andreas to go through the minutes and formulate a reply mail to\n Geoffrey on each artifact covered in these minutes.\n\n<postponed>\n- Steve McGough & Andreas to do a mapping from the current JSDL\n elements / terminology into the new information model structure\n (Proposed split into Description and Requirements)\n (from July 18th F2F\, By GGF18 as original discussed.)\n\n</pre>\n SUMMARY:Updated: OGSA Teleconference PRIORITY:5 X-MICROSOFT-CDO-IMPORTANCE:1 CLASS:PUBLIC BEGIN:VALARM TRIGGER:-PT15M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR

1 0