February 2007 - ogsa-wg - lists.ogf.org

No call on Feb. 19
by Hiro Kishimoto 19 Feb '07

19 Feb '07

Hi all, Feb. 19 is US holiday (President's day) and I could not get slot's owners' attendance conformation. We won't have tele-conf on Feb. 19. Sorry for the last minutes notice. -- Hiro Kishimoto

1 0

Jean Pierre Prost/France/IBM is out of the office.
by Jean Pierre Prost 16 Feb '07

16 Feb '07

I will be out of the office starting 02/15/2007 and will not return until 02/21/2007. I will have limited e-mail access during my absence.

1 0

ATTN: New US Daylight Saving Time regulations!
by Michel Drescher 16 Feb '07

16 Feb '07

US (and Canadian) DST starting this year begin the second Sunday in March (this year: 11 March 2007) and end the first Sunday in November (this year: 4 November 2007). This affects the OGSA F2F in March. http://tinyurl.com/yt2dut (points to computer.org article) Cheers, Michel -- Michel <dot> Drescher <at> uk <dot> fujitsu <dot> com Fujitsu Laboratories of Europe +44 20 8606 4834

1 1

Minutes of OGSA-WG Thursday morning slot 1 security discussion 15 Feb 2007
by Alan Sill 15 Feb '07

15 Feb '07

OGSA WG teleconference Thursday 15 Feb 2007 Slot 1, -7:00-08:00 Centtral US time Attending: Hiro Kishimoto Andreas Savva Andrew Grimshaw Alan Sill 1) Early discussion (10 min) Note taker assignment - Alan Sill Roll call - as above Agenda bashing - Andrew suggested an alternate agenda / list of topics as in 2) below: 2) Security discussion (Alan Sill and Andrew Grimshaw 50 min) OGF19 security session minutes approval - https://forge.gridforum.org/sf/go/doc14164 Deferred due to current lack of quorum. Security action item review also referred to later meeting. Andrew proposed the following topics for further work and discussion a. Need for short-term decision on basic client authentication. b. Need for rapid agreement on how to indicate authentication methods that are supported by a service. c. Longer term discussion on authentication and delegation (OGSA- AuthN/AuthZ). d. Discussion on HPC profile in context of above. This is a long-term list, so discussion can only start here. Andrew explained that the HPC profile group included username/ password access to allow for the range of practice that they saw in use in clusters used in industry. The underlying systems in use in industry often use this in preference to other mechanisms (X.509, Kerberos, etc.) that are available. Alan agreed that this is valuable input. One approach would be to accept the HPC profile as input into the OGSA-AuthN Community Practice document, along with input from the Levels of Assurance RG. The goal at hand is to define the relationship between various security approaches and profiles and the OGSA definition of keys and tokens to be used in web services. GSI appears to be the base for implementations of most academic and large-scale international grids (EGEE, LCG, Open Science Grid, etc.) for access to both pre-WS and WS- based grid services. A short-term action item would be to locate and document the standards that underly such implementations. Other near-term action items: - Andrew will contact Ian Foster to obtain references for any standards or implementation reference documents that underly GSI and GRAM4. - Alan will contact Jim Basney to find references he referred to in the OGSA-AuthN OGF-19 session. Hiro proposed moving the security discussions to Monday afternoons (Central time) to enable wider participation. This was agreed. Sincerely, Alan Sill, Ph.D TIGRE Senior Scientist, High Performance Computing Center Adjunct Professor of Physics TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0

Updated: OGSA Teleconference - BSP issues
by Andreas Savva 15 Feb '07

15 Feb '07

BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 11.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VEVENT ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:ogsa-wg@ogf.org ORGANIZER:MAILTO:andreas.savva@jp.fujitsu.com DTSTART:20070215T143000Z DTEND:20070215T145900Z TRANSP:OPAQUE SEQUENCE:2 UID:040000008200E00074C5B7101A82E00800000000A0179E0CF750C7010000000000000000100 000009B8422735AC5E447BB7D8663F59C4920 DTSTAMP:20070215T030634Z DESCRIPTION:When: 2007年2月15日木曜日 23:30-23:59 (GMT+09:00) 大阪、札幌、東京.\n\n*~*~*~*~*~*~*~*~*~*\n\n<pre>\n\nSee the following wiki page for telecon structure.\n- https://forge.gridforum.org/sf/go/wiki1703\n\nDial-in numbers for Thursday:\n Free: +1-888-452-0308\n Intl/Toll: +(210) 234-7446\n PIN: 71815\n See more information:\n - https://forge.gridforum.org/sf/go/wiki1477\n\nScreen share service will be provided.\n URL: http://ogsa.glance.net\n Session key: 0215\n See more explanation:\n https://forge.gridforum.org/sf/go/wiki1584\n\n<SLOT 2: STARTS 8:30am\; ENDS 9am>\n\n3) Blair's comments on BSP core discussion (Frank and Takuya\, 30 min)\n\n> I actually have a more general concern that OGSA-BSP-Core and\n> OGSA-BSP-SC contain language indicating that SC is to be used in\n> conjunction with Core. But\, there is no explanation as to what this\n> actually means. I can see value in the mechanism defined by Core for\n> discovering a service ERP and public key\, particularly if one is\n> using message level security(WS-Security). This provides the\n> knowledge needed to encrypt a request message to the service without\n> having to perform a separate negotiation protocol such as defined by\n> WS-SecureChannel. But\, if I'm using TLS/SSL channel security then\n> service authentication\, and the service public key\, are based on its\n> X.509 certificate. Neither TLS or SSL have any notion of requiring\n> correspondence of the X.509 subject key to a key discovered\n> out-of-band by an application. Perhaps you can add language to the SC\n> specification indicating how these are to be used together.\n\n4) Wrap up (10 min)\n AOB\n\n</pre>\n\n\n SUMMARY:Updated: OGSA Teleconference - BSP issues PRIORITY:5 X-MICROSOFT-CDO-IMPORTANCE:1 CLASS:PUBLIC BEGIN:VALARM TRIGGER:-PT15M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR

1 0

Updated: OGSA Teleconference - Security
by Andreas Savva 15 Feb '07

15 Feb '07

BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 11.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VEVENT ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:ogsa-wg@ogf.org ORGANIZER:MAILTO:andreas.savva@jp.fujitsu.com DTSTART:20070215T130000Z DTEND:20070215T140000Z TRANSP:OPAQUE SEQUENCE:1 UID:040000008200E00074C5B7101A82E0080000000090092EDCF650C7010000000000000000100 00000F97771FE31E5B74FBA9B83394E70B92A DTSTAMP:20070215T030622Z DESCRIPTION:When: 2007年2月15日木曜日 22:00-23:00 (GMT+09:00) 大阪、札幌、東京.\n\n*~*~*~*~*~*~*~*~*~*\n\n<pre>\n\nSee the following wiki page for telecon structure.\n- https://forge.gridforum.org/sf/go/wiki1703\n\nDial-in numbers for Thursday:\n Free: +1-888-452-0308\n Intl/Toll: +(210) 234-7446\n PIN: 71815\n See more information:\n - https://forge.gridforum.org/sf/go/wiki1477\n\nScreen share service will be provided.\n URL: http://ogsa.glance.net\n Session key: 0215\n See more explanation:\n https://forge.gridforum.org/sf/go/wiki1584\n\n<SLOT 1: STARTS 7am\; ENDS 8am>\n\n1) Early discussion (10 min)\n Note taker assignment\n Roll call\n Agenda bashing\n\n2) Security discussion (Alan Sill and Andrew Grimshaw 50 min)\n OGF19 security session minutes approval\n - https://forge.gridforum.org/sf/go/doc14164\n Security action item review\n\n> - Develop basic\, short-term use-cases || MUST manage scope creep\n> (Andrew Grimshaw)\n> - Develop profile to supprt use-cases || MUST manage scope creep\n> (Andrew Grimshaw)\n> - Refine profile for username/password in OGSA context\n> (Alan Sill)\n> - Complete OGSA-AuthN roadmap\n> (Alan Sill)\n> - Glossary\n> - Develop richer use-cases and extract requirements\n> (Hiro Kishimoto)\n\n OGSA-AuthN-WG forming status update\n\n</pre>\n SUMMARY:Updated: OGSA Teleconference - Security PRIORITY:5 X-MICROSOFT-CDO-IMPORTANCE:1 CLASS:PUBLIC BEGIN:VALARM TRIGGER:-PT15M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR

1 0

Proposed agenda for Feb. 15th call
by Hiro Kishimoto 14 Feb '07

14 Feb '07

Hi all, The following is a proposed agenda for OGSA-WG telecon on Feb. 15th Thursday from 7am - 9am (CST). We subdivide the call into two 1 hour slots. Michel Drescher, workflow design team co-lead, cannot make this Thursday, thus workflow session will be postponed. Frank Siebenlist and Takuya Mori, authors of BSP core, will discuss Blair's comment from *8:30-9am* CT. We will use the 2nd slot for this. See the following wiki page for telecon structure. - https://forge.gridforum.org/sf/go/wiki1703 Dial-in numbers for Thursday: Free: +1-888-452-0308 Intl/Toll: +(210) 234-7446 PIN: 71815 See more information: - https://forge.gridforum.org/sf/go/wiki1477 Screen share service will be provided. URL: http://ogsa.glance.net Session key: 0215 See more explanation: https://forge.gridforum.org/sf/go/wiki1584 <SLOT 1: STARTS 7am; ENDS 8am> 1) Early discussion (10 min) Note taker assignment Roll call Agenda bashing 2) Security discussion (Alan Sill and Andrew Grimshaw 50 min) OGF19 security session minutes approval - https://forge.gridforum.org/sf/go/doc14164 Security action item review > - Develop basic, short-term use-cases || MUST manage scope creep > (Andrew Grimshaw) > - Develop profile to supprt use-cases || MUST manage scope creep > (Andrew Grimshaw) > - Refine profile for username/password in OGSA context > (Alan Sill) > - Complete OGSA-AuthN roadmap > (Alan Sill) > - Glossary > - Develop richer use-cases and extract requirements > (Hiro Kishimoto) OGSA-AuthN-WG forming status update <SLOT 2: STARTS 8:30am; ENDS 9am> 3) Blair's comments on BSP core discussion (Frank and Takuya, 30 min) > I actually have a more general concern that OGSA-BSP-Core and > OGSA-BSP-SC contain language indicating that SC is to be used in > conjunction with Core. But, there is no explanation as to what this > actually means. I can see value in the mechanism defined by Core for > discovering a service ERP and public key, particularly if one is > using message level security(WS-Security). This provides the > knowledge needed to encrypt a request message to the service without > having to perform a separate negotiation protocol such as defined by > WS-SecureChannel. But, if I'm using TLS/SSL channel security then > service authentication, and the service public key, are based on its > X.509 certificate. Neither TLS or SSL have any notion of requiring > correspondence of the X.509 subject key to a key discovered > out-of-band by an application. Perhaps you can add language to the SC > specification indicating how these are to be used together. 4) Wrap up (10 min) AOB <*NEXT CALL*> https://forge.gridforum.org/sf/go/wiki1477 Feb. 19 (Mon) 4-5pm: Roadmap (Chris Jordan) 5-6pm: Information Modeling (Ellen Stokes) Feb. 22 (Thu) 7-8am: EMS Arch scenarios (Andreas Savva) 8-9am: Logistics (Hiro Kishimoto) Feb. 26 (Mon) 4-5pm: Security (Alan and Andrew) 5-6pm: Logistics (Hiro Kishimoto) <*ACTION ITEMS*> https://forge.gridforum.org/sf/go/wiki1569 -- Hiro Kishimoto

1 0

A paper that might be of interest
by Ian Foster 14 Feb '07

14 Feb '07

"GT4 GRAM: A Functionality and Performance Study"

1 0

Phone numbers for this morning?
by Alan Sill 14 Feb '07

14 Feb '07

Can you remind me of the phone numbers for this morning's call? THey do not seem to be in my calendar. Organization of this morning's Internet2 networking meeting is taking more time than I thought, and the start of that meeting has been moved to 8:30 central, so I will only be able to join this morning for a short time, I'm afraid. Thanks, Alan Alan Sill, Ph.D TIGRE Senior Scientist, High Performance Computing Center Adjunct Professor of Physics TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0

Comment re Ref Model and SysML
by Strong, Paul 14 Feb '07

14 Feb '07

All, On the call yesterday I mentioned that SysML, a UML Profile focused on systems engineering might be interesting. Upon investigation it appears too focused on hardware systems (automotive and such like) to be useful for the reference model work. I thought they might mean systems engineering in the sense of data center and computer systems engineering (extending beyond software). It does not seem to. Cheers Paul

1 0