- ogsa-wg - lists.ogf.org

[ogsa-wg | Roadmap - 1569] Text for section 8 from OMII
by Sourceforge Tracker Monitor 24 Jul '05

24 Jul '05

A new artifact has been added: 1569 Submitted by: Steven Newhouse Submitted date: 2005-07-24 20:21:22 Respond by visiting: https://forge.gridforum.org/tracker/?func=detail&atid=789&aid=1569&group_id… (https://forge.gridforum.org/tracker/?func=detail&atid=789&aid=1569&group_id…) Summary: Text for section 8 from OMII Project: Open Grid Services Architecture Tracker: Roadmap Artifact ID: 1569 Category: <None> Group: <None> Status: Open Priority: - Last Modified By: Steven Newhouse Last Modified: 2005-07-24 20:21:22 Submitted By: Steven Newhouse Submit Date: 2005-07-24 20:21:22 Assigned To: &lt;None&gt; File(s): <None> Description: The Open Middleware Infrastructure Institute (OMII), located at the University of Southampton, is funded by the UK e-Science Core programme. Its open source distribution of web services comprises services that are implementing GGF and OGSA based standards - such as DAIS within the OGSA-DAI project, and JSDL and BES within the GridSAM projects - both funded through OMII's managed programme. View the Roadmap : https://forge.gridforum.org/tracker/index.php?func=browse&group_id=42&atid=… (https://forge.gridforum.org/tracker/index.php?func=browse&group_id=42&atid=…)

1 0

RM -- No teleconference on July 26
by Fred Maciel 23 Jul '05

23 Jul '05

Hi again, No Resource Management design team teleconference on July 26. Regards, Fred Maciel Hitachi America R&D

1 0

Regrets -- week of July 25-29
by Fred Maciel 23 Jul '05

23 Jul '05

Hi, On the week of July 25-29 I'll be in the SNIA/DMTF Technical Symposium. Regards, Fred Maciel Hitachi America R&D

1 0

RM teleconference minutes -- July 19
by Fred Maciel 22 Jul '05

22 Jul '05

Hi, Here are the teleconference minutes. Regards, Fred Maciel.

1 0

Proposed agenda for July 20th call
by Hiro Kishimoto 21 Jul '05

21 Jul '05

Hi all, The following is a proposed agenda for OGSA-WG telecon on July 20th Wednesday from 5pm to 7pm (CDT). Dial-in numbers for Wednesday: Free: +1-888-452-0308 Intl/Toll: +1-484-644-0505 PIN: 71815 Screen share service will be provided. URL: http://ogsa.glance.net Session key: 0720 See more explanation: http://www-unix.gridforum.org/mail_archive/ogsa-wg/2004/06/msg00077.html 1) Early discussion (20 min) Note taker assignment Roll call Telecon minutes approval http://tinyurl.com/5fxfd/minutes-20050718/en/1 Agenda bashing 2) Aug F2F meeting update (20 min) Resource Model Discussion 3) OGSA WSRF BP 1.0 review (60 min) Security section review Andreas will upload revised draft before the call. 4) OGSA Next step and telecon schedule (30 min) Hiro will send out revised proposal before the call. 5) Wrap up AOB July 25th (Mon) Resource Modeling July 17th (Wed) TBD -- Hiro Kishimoto

1 2

Another security call
by Hiro Kishimoto 21 Jul '05

21 Jul '05

Tom's email bounced. -- Hiro Kishimoto Subject: Re: OGSA Next step and telecon schedule proposal (Re: [ogsa-wg] Proposed agenda for July 20th call) From: <tom.maguire(a)suscom.net> Date: Wed, 20 Jul 2005 17:04:00 -0400 call and discussion on wsa header signing and x509 certs has not taken place yet. Not prepared to discuss. Stuck in o'hare. Will not be on call. Sorry for late notice

1 0

RE: OGSA Next step and telecon schedul proposal (Re: [ogsa-wg] Proposed agenda for July 20th call)
by Djaoui, A (Abdeslem) 20 Jul '05

20 Jul '05

Hiro The direction of the information services will become clearer as work on InfoD stabilizes. I certainly would like to see more participation (eventually!) on this topics, but for now it is tightly coupled with InfoD. Abdeslem -----Original Message----- From: owner-ogsa-wg(a)ggf.org [mailto:owner-ogsa-wg@ggf.org]On Behalf Of Hiro Kishimoto Sent: Wednesday, July 20, 2005 3:54 PM To: ogsa-wg(a)ggf.org Subject: OGSA Next step and telecon schedul proposal (Re: [ogsa-wg] Proposed agenda for July 20th call) Hi all, > 4) OGSA Next step and telecon schedule (30 min) > Hiro will send out revised proposal before the call. Attached is revised next step proposal. Please have a look. ---- Hiro Kishimoto Hiro Kishimoto wrote: > Hi all, > > The following is a proposed agenda for OGSA-WG telecon on July 20th > Wednesday from 5pm to 7pm (CDT). > > Dial-in numbers for Wednesday: > Free: +1-888-452-0308 > Intl/Toll: +1-484-644-0505 > PIN: 71815 > > Screen share service will be provided. > URL: http://ogsa.glance.net > Session key: 0720 > See more explanation: > http://www-unix.gridforum.org/mail_archive/ogsa-wg/2004/06/msg00077.html > > 1) Early discussion (20 min) > Note taker assignment > Roll call > Telecon minutes approval > http://tinyurl.com/5fxfd/minutes-20050718/en/1 > Agenda bashing > > 2) Aug F2F meeting update (20 min) > Resource Model Discussion > > 3) OGSA WSRF BP 1.0 review (60 min) > Security section review > Andreas will upload revised draft before the call. > > 4) OGSA Next step and telecon schedule (30 min) > Hiro will send out revised proposal before the call. > > 5) Wrap up > AOB > > July 25th (Mon) Resource Modeling > July 17th (Wed) TBD

1 0

Comments on OGSA WSRF BP 1.0 draft 25 (specifically security)
by humphrey＠cs.virginia.edu 20 Jul '05

20 Jul '05

I assume that this document has not entered public comment, so I'll post my comments here regarding security. I'm afraid that these are largely the SAME comments that I've made before. Here are my specific concerns... The security section (section 8.1) implies that *EVERY* SOAP message must be either (1) over TLS or (2) "SOAP Message security with XML signature and/or XML Encryption". If you truly mean this (implied by "R0811"), this is overly restrictive and makes no sense (there does not exist *ANY* message that can justifiably be sent between services/clients that need not incur the overhead of crypto?). However, it's not clear if you really mean this ("R0819", "R0820", "R0821", "R0822", "R0823" seem to imply otherwise)... so, what exactly is the intention here? In general, section 8.1.2 is too restrictive -- "mutual-authenticated WS- Communication will be required" is overly restrictive. And this section includes this statement: "The Profile mandates that there be no anonymous communication. To ensure interoperability, only X.509 certificate-based authentication is permitted by the Profile.") So, this latter part in particular says that there is *NO PLACE* for password authentication in OGSA. (I also believe that you have now outlawed MyProxy, right?) Am I reading something incorrectly? -- Marty Marty Humphrey Assistant Professor Department of Computer Science University of Virginia ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/

8 8

WSRF BP 1.0 v29 uploaded
by Andreas Savva 20 Jul '05

20 Jul '05

WSRF BP v29 uploaded. This is for review in the call tomorrow. (v28 was uploaded after the last call by Tom.) Hiro and I accepted a number of old, already reviewed changes. (This 'uncovered' a number of comments that should be reviewed tomorrow.) We also made some minor edits. https://forge.gridforum.org/projects/ogsa-wg/document/draft-ggf-ogsa-wsrf-b… or http://tinyurl.com/5fxfd/draft-ggf-ogsa-wsrf-basic-profile/en/24 -- Andreas Savva Fujitsu Laboratories Ltd

1 0

Teleconference minutes - 17 July 2005
by Andreas Savva 19 Jul '05

19 Jul '05

Minutes attached. - August F2F update - WSRF BP 1.0 review - Resource modelling discussion - RNS specification review https://forge.gridforum.org/projects/ogsa-wg/document/minutes-20050718/en/1 or http://tinyurl.com/5fxfd/minutes-20050718/en/1 -- Andreas Savva Fujitsu Laboratories Ltd OGSA Teleconference - 17 July 2005 ================================== * Participants Pete Ziu (Northrop Grumman) Jay Unger (IBM) Osamu Tatebe (AIST) Latha Srinivasan (HP) Dave Snelling (Fujitsu) Andreas Savva (Fujitsu) Manuel Pereira (IBM) Steven Newhouse (OMII) Takuya Mori (NEC) Mark Morgan (UVa) Tom Maguire (IBM) Hiro Kishimoto (Fujitsu) Andrew Grimshaw (UVa) Dave Berry (NeSC) Mike Behrens (R2AD, LLC) * Minutes approval Minutes approved with minor changes. Proposed changes described in http://www-unix.gridforum.org/mail_archive/ogsa-wg/2005/07/msg00056.html * August F2F updates - Andrew is leaving Thursday - Proposal to start Naming early and finish at 11am on Thursday; or move the Naming session to Wednesday - Agreed to move Naming session to Wednesday - Hiro and Mark have to leave before Friday noon - Agreed to start Friday early and if possible finish the session by 11am; continue without them, if necessary. - ByteIO moved to Tuesday - Proposal to allocate time during the F2F for resource modelling - Hiro to allocate three hours on Wednesday afternoon in the OGSA session. - WSDM conflict update: Heather Kreger has agreed to move the WSDM meeting to another week. - Hiro has contacted Allen L.: Prefers Data session later in the week. - Data moved to Thursday - Dave B wants to have a discussion on data staging as a separate job rather than as part of a single job. A number of JSDL-WG members will be at the F2F so having a discussion as part of the Data session is a possibility. * WSRF BP 1.0 review - Tom has uploaded v27 on gridforge Action: Tom continues to have the pen and will upload a new draft after the call. ** Canonizalization proposal - There are several (three) canonicalization proposals but many do not define a serialization. The proposed addition (below) does. - l.336-340 modified to use the OASIS specification "Schema Centric XML Canonicalization." - Also softened language (MUST to SHOULD) because it is not clear what the implementation status of this specification is. - This specification is a 'Committee Specification.' In other words, the specification has been approved by the TC as a CD, submitted to public comment (and only minor changes were required to address comments). But it has not gone through a final approval vote. In terms of the Profile Definition classification it is at least "Evolving Institutional." Action: Tom will check to see the implementation status. (Contact the IBM co-author of this proposal.) Action: Takuya will review this addition. He will also check the implementation status (within NEC). Agreed to delete comments against this proposal. ** Security Discussed security issues raised on the list. Action: Tom to arrange a separate teleconf to discuss the security issues below. Invite Marty, Dave S, Mark McKeown, Frank, Takuya. *** Signed endpoint references Issue raised on the list by Mark McKeown http://www-unix.gridforum.org/mail_archive/ogsa-wg/2005/07/msg00049.html - Presumably transport level security would not require this. - For Message level security, need to define what to sign; probably everything including reference properties. Action: Takuya will follow up with Frank on whether it should be mandated. *** Mandating transport or message security The profile as it stand does not allow non-encrypted messages or channels. There are cases when one would not want either, e.g., large data transfers that may cause performance degradation. Also depending on the environment it might be acceptable to not encrypt (e.g., operating within enterprise (behind firewall)). (If corruption is the issue then signatures and not encryption is appropriate.) Consensus on softening the requirement: - Change l.466 'requires' to 'recommends' - And also change transport level compliance statements R0811-14 from MUST to SHOULD. *** Mutual authentication - Discussed and agreed on last week. - The non-normative text is out of sync with the normative text. Agreed to change l.489 to 'recommended.' Action: Takuya to reply to Marty's email. *** User name/password authentication There is no statement about name/password authentication in the WSRF BP. It is allowed by the WS-I Security BP (token authentication). l.491 is problematical, however. The phrasing explicitly allows only x.509. But this is a non-normative statement and no normative statements back this up. Action: Takuya will look into this issue and report back to the group. * Resource modelling discussion [Timeboxed to 15 minutes.] The BES has put resource modelling out of scope. But it looks more and more that OGSA should face this issue sooner rather than later. And avoid or minimize rework later on There was a presentation about CIM/JSDL mapping at GGF14. This is a good starting point and OGSA-WG should discuss whether CIM is the solution for OGSA. The main questions are - what is a reasonable model for OGSA (for Grid); and - is CIM it Are there other candidates besides CIM? - It was noted that WSDM also seems to be turning towards CIM. - GLUE is an option but there is work to provide a CIM mapping. The rendering and semantics distinction/definition is discussed in GFD-I.45. Available at http://www.ggf.org/documents/GFD.45.pdf There is also the WS-CIM work. The group should check how far that work satisfies OGSA requirements. Initially a limited experiment might be in order. For example apply CIM to BES/JSDL. But BES-WG cannot take this work on, and RSS-WG also is moving to put it out of scope. One related issue is how to 'sell' CIM to the wider Grid community. It was proposed to put together a concrete proposal in a document format so as to have something concrete to discuss by the F2F. The RM call agenda (Tuesday) is set to discuss this topic. And continue this discussion on another OGSA call (possibly next Monday). * RNS specification review Draft: https://forge.gridforum.org/projects/gfs-wg/document/RNS-Proposed_Final_Dra… Manuel gave an overview of the specification. The referenced draft is being prepared for submission. - Some grid file system parts (e.g. one of the appendices) will be removed for final submission. - Also to remove sentence in Sec.1.2.1 about manipulation via WSRF. It gives the wrong impression. Andrew had a number of comments and he will post them on the OGSA and GFS lists. There are two ways to proceed: - GFS submits the document to GGF Editor soon and there is followup discussion as part of the public comment period; or - GFS discusses with OGSA, adjusts the RNS specification if necessary and then submits. Action: Manuel will take this proposal back to the GFS group and will let OGSA know in a subsequent email. * Next call (Wednesday) - Next steps discussion - Teleconf schedule - WSRF BP 1.0 review

1 0