March 2009 - pgi-wg - lists.ogf.org

Re: [Pgi-wg] Teleconference tomorrow, March 13th - Security
by m.riedel＠fz-juelich.de 13 Mar '09

13 Mar '09

Thanks for your comments Etienne, just note that the reference model was my input to the group - the group itself may create a larger PGI ecosystem. People at OGF have been worried calling it referenc model, so in PGI we take ecosystem instead... :-) Take care, Morris -------------------------------------------------------------------------------- Morris Riedel SW - Engineer Distributed Systems and Grid Computing Division Central Institute of Applied Mathematics Research Centre Juelich Wilhelm-Johnen-Str. 1 D - 52425 Juelich Germany Email: m.riedel(a)fz-juelich.de Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel Phone: +49 2461 61 - 3651 Fax: +49 2461 61 - 6656 Skype: MorrisRiedel 'We work to improve ourselves and the rest of mankind.' ------------------------------------------------------------------- ------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender), Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt, Dr. Sebastian M. Schmidt ------------------------------------------------------------------- ------------------------------------------------------------------- Morris, Concerning PGI, I completely agree with you : Even if the original use case was focused on data staging, SECURITY is the basis for everything. Taking as input following presentations : - 'PGI Reference Model' by yourself, in particular slides : - 18 'Security is orthogonal to layers, - 19 'Orthogonal Security: Plumbings', - 22 'Still work to do…'. - 'Unicore : A European Grid Technology' by Shiraz MEMON, in particular slide 7 'Standards in Unicore 6' - 'The NorduGrid/ARC perspective', in particular slides 21 and 22 'Security capability: Wishlist' - 'Conformance Targets for Simple PGI Communication' of GENESIS Interoperability absolutely requires that : 1) Trust stores (for roots of trust) and Authz Repositories (like 'gridmap' files) have exactly the same semantic content (even if syntax can differ), and are carefully distributed to all sites. 2) VOMS attributes specified inside X509 proxies and inside SAML assertions have the same semantics, in order to permit translation in both directions. 3) Restrictions/Constraints specified inside X509 proxies and inside SAML assertions have the same semantics, in order to permit translation in both directions. 4) Endpoints are specified in compliance with GLUE 2. So, I suggest to use the presentation 'Conformance Targets for Simple PGI Communication' of GENESIS as the basis document for our work. We have first to agree on at least the above points inside 1 or more Security Profiles (Semantic, Repositories, X509 syntax, SAML syntax). Then we can successfully apply SECURITY and GLUE to improve JSDL, BES and Data transfer & management. Meanwhile, I thank Johannes WATZL in advance for uploading the minutes of the PGI sessions (in particular the remote speech by Duane MERRIL). Besides, at OGF25, Joni HAHKALA of CERN (tel +41 22 76 76179) Joni.Hahkala(a)cern.ch explained to me that gLite proxy restriction attributes are developed by himself. Best regards. ---------------------------------- Etienne URBAH IN2P3 - LAL Bat 200 91898 ORSAY France Tel: +33 1 64 46 84 87 Mob: +33 6 22 30 53 27 Skype: etienne.urbah mailto:urbah@lal.in2p3.fr ---------------------------------- On Thu, 12 Mar 2009, m.riedel(a)fz-juelich.de wrote: > Hi PGI team, > > I think it would be quite valuable to have a short telcon tomorrow debriefing OGF25 - I'm happy to chair this telcon if the community is interested. > > I think we clearly have to review our strategy and thus numerous comments might be beneficial? > > Possible agenda might be: > > (1) > OGF25 Summarizing shortly our sessions > > (2) > Addressing Comments: Liasons with other working groups: SRM, JSDL, BES, etc. > > (3) > Addressing Comments: (possible) Prioritization to focus efforts: > (i) > Clearly security breaks everything - so lets foster security > (ii) > bes/glue then > (iii) > data issues > > (4) > Addressing Comments: production Grids and driving forces of PGI (small fish vs. big fish) > > (5) > Other comments by participants of the TelCon > > (6) > AOB > > > > Honestly, I don't feel comfortable without having talked about this this week - and I would be happy if we can directly dive into our problems instead of shifting it... ;-) > > > > I suggest the usual timeslot w/o talking about technical issues but rather about our roadmap and steps forward - let's not loose time... > > How does this sound? > > > > > Take care, > Morris > > > > -------------------------------------------------------------------------------- > Morris Riedel > SW - Engineer > Distributed Systems and Grid Computing Division > Central Institute of Applied Mathematics > Research Centre Juelich > Wilhelm-Johnen-Str. 1 > D - 52425 Juelich > Germany > > Email: m.riedel(a)fz-juelich.de > Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel > > Phone: +49 2461 61 - 3651 > Fax: +49 2461 61 - 6656 > > Skype: MorrisRiedel

5 4

PGI TelCon Today - 4 p.m. CET - OGF25 Debrief and Non technical telcon
by m.riedel＠fz-juelich.de 13 Mar '09

13 Mar '09

Hi PGI team, although I got confirmation that many people might not able to join the telcon today, I would still like to try to gather some feedback at this telcon. So we don't have a technical telcon today - only thoughts about OGF25 and feedback about the process as this is equally important. The teleconference is going to start at the usual time (4:00 PM CET). Call-in details as follow: via Skype call +9900827049931906 (free of charge) ordinary phone numbers (local rates) with the 9931906 conference number: Austria 0820 401 15470 Belgium 0703 57 134 France 0826 109 071 Germany +49 (0) 180 500 9527 Switzerland 0848 560 397 Agenda: (1) OGF25 Summarizing shortly our sessions, going through the minutes on GridForge (2) Addressing Comments: Liasons with other working groups: SRM, JSDL, BES, etc. Suggestions: SRM -> Alex Sim JSDL -> Donal Fellows OGSA-BES -> Andrew GrimShaw/Steven Newhouse Security -> David Groep (3) Addressing Comments: (possible) Prioritization to focus efforts: (i) Clearly security breaks everything - so lets foster security (ii) bes/glue then (iii) data issues (5) Addressing Comments: Possible slit-up to sub-groups following the different priorizations in subgroups (initially disagreement, but now on the table again) (6) Addressing Comments: production Grids and driving forces of PGI (small fish vs. big fish), manpower issues versus production Grids and campus Grids (7) Other comments by participants of the TelCon (8) AOB Take care, Morris -------------------------------------------------------------------------------- Morris Riedel SW - Engineer Distributed Systems and Grid Computing Division Central Institute of Applied Mathematics Research Centre Juelich Wilhelm-Johnen-Str. 1 D - 52425 Juelich Germany Email: m.riedel(a)fz-juelich.de Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel Phone: +49 2461 61 - 3651 Fax: +49 2461 61 - 6656 Skype: MorrisRiedel 'We work to improve ourselves and the rest of mankind.' ------------------------------------------------------------------- ------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender), Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt, Dr. Sebastian M. Schmidt ------------------------------------------------------------------- -------------------------------------------------------------------

1 0

Re: [Pgi-wg] No teleconference tomorrow, march 13th
by m.riedel＠fz-juelich.de 13 Mar '09

13 Mar '09

Thanks for the input Steven, I put a split-up into parallel groups again on the agenda although we have it discussed several times before (3 month ago). At former times we feared that the split-up will then turn out to raise the same OGF problem of standardize standards in "isolation" from each other. Also solving different problems in GIN areas (data, compute, etc.) doesn't helped much and we tool lessons learned from this sub-groups within one group also into account. However, let's discuss it very shortly again today! Take care, Morris -------------------------------------------------------------------------------- Morris Riedel SW - Engineer Distributed Systems and Grid Computing Division Central Institute of Applied Mathematics Research Centre Juelich Wilhelm-Johnen-Str. 1 D - 52425 Juelich Germany Email: m.riedel(a)fz-juelich.de Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel Phone: +49 2461 61 - 3651 Fax: +49 2461 61 - 6656 Skype: MorrisRiedel 'We work to improve ourselves and the rest of mankind.' ----- Original Message ----- From: Steven Newhouse <Steven.Newhouse(a)cern.ch> Date: Thursday, March 12, 2009 12:21 pm Subject: RE: [Pgi-wg] No teleconference tomorrow, march 13th > Before the telecon could someone please report: > * Any notes taken during the sessions > * The list of actions coming out of the sessions > > Time on the call could be sent on prioritisation the action lists and > discussing how to increase the pace of group. For instance, while we > continue discussing security could we also tackle some of the related > issues such as the profiling file/replica location needed within JSDL > and the requirements from the service interface that is not currently > supported through BES/HPCBP. > > Perhaps these areas can be taken up on additional calls? Still keep > working on security, but some individuals start on another day by > working on other issues. > > Steven > > Dr Steven Newhouse > EGEE Technical Director > http://cern.ch/Steven.Newhouse > > ------------------------------------------------------------------- ------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender), Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt, Dr. Sebastian M. Schmidt ------------------------------------------------------------------- -------------------------------------------------------------------

1 0

Session notes
by Johannes Watzl 13 Mar '09

13 Mar '09

Dear all, I put the session notes on gridforge except the 2nd working session on Thursday. I am working on it. cu Best, Johannes -- _ _ _ _ _ _ Johannes Watzl |\/| |\ | |\/| Institut für Informatik / Dept. of CS | | | \| | | Ludwig-Maximilians-Universität München ======= TEAM ======= Oettingenstr. 67, 80538 Munich, Germany Room D0.5, Phone +49-89-2180-9162 Munich Network Management Team Email: watzl(a)nm.ifi.lmu.de Münchner Netz-Management Team http://www.nm.ifi.lmu.de/~watzl

1 0

Re: [Pgi-wg] No teleconference tomorrow, march 13th
by m.riedel＠fz-juelich.de 12 Mar '09

12 Mar '09

Hi PGI team, I think it would be quite valuable to have a short telcon tomorrow debriefing OGF25 - I'm happy to chair this telcon if the community is interested. I think we clearly have to review our strategy and thus numerous comments might be beneficial? Possible agenda might be: (1) OGF25 Summarizing shortly our sessions (2) Addressing Comments: Liasons with other working groups: SRM, JSDL, BES, etc. (3) Addressing Comments: (possible) Prioritization to focus efforts: (i) Clearly security breaks everything - so lets foster security (ii) bes/glue then (iii) data issues (4) Addressing Comments: production Grids and driving forces of PGI (small fish vs. big fish) (5) Other comments by participants of the TelCon (6) AOB Honestly, I don't feel comfortable without having talked about this this week - and I would be happy if we can directly dive into our problems instead of shifting it... ;-) I suggest the usual timeslot w/o talking about technical issues but rather about our roadmap and steps forward - let's not loose time... How does this sound? Take care, Morris -------------------------------------------------------------------------------- Morris Riedel SW - Engineer Distributed Systems and Grid Computing Division Central Institute of Applied Mathematics Research Centre Juelich Wilhelm-Johnen-Str. 1 D - 52425 Juelich Germany Email: m.riedel(a)fz-juelich.de Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel Phone: +49 2461 61 - 3651 Fax: +49 2461 61 - 6656 Skype: MorrisRiedel 'We work to improve ourselves and the rest of mankind.' ----- Original Message ----- From: Moreno Marzolla <moreno.marzolla(a)pd.infn.it> Date: Thursday, March 12, 2009 11:34 am Subject: [Pgi-wg] No teleconference tomorrow, march 13th > Dear all, > > there will be no PGI WG teleconference tomorrow, march 13th. > The next one will be next week, friday march 20 at the usual time > (4:00 > PM CET); a reminder will be sent in advance as usual. > > Moreno. > > -- > Moreno Marzolla > INFN Sezione di Padova, via Marzolo 8, 35131 PADOVA, Italy > EMail: moreno.marzolla(a)pd.infn.it Phone: +39 049 8277103 > WWW : http://www.dsi.unive.it/~marzolla Fax : +39 049 8756233 > > _______________________________________________ > Pgi-wg mailing list > Pgi-wg(a)ogf.org > http://www.ogf.org/mailman/listinfo/pgi-wg > ------------------------------------------------------------------- ------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender), Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt, Dr. Sebastian M. Schmidt ------------------------------------------------------------------- -------------------------------------------------------------------

4 3

Re: [Pgi-wg] No teleconference tomorrow, march 13th
by m.riedel＠fz-juelich.de 12 Mar '09

12 Mar '09

Hi, >- Before the telecon could someone please report: >- * Any notes taken during the sessions Johannes, any news on meeting minutes or the collection of documents from the PGI sessions? Thanks for clarification, Morris -------------------------------------------------------------------------------- Morris Riedel SW - Engineer Distributed Systems and Grid Computing Division Central Institute of Applied Mathematics Research Centre Juelich Wilhelm-Johnen-Str. 1 D - 52425 Juelich Germany Email: m.riedel(a)fz-juelich.de Info: http://www.fz-juelich.de/zam/ZAMPeople/riedel Phone: +49 2461 61 - 3651 Fax: +49 2461 61 - 6656 Skype: MorrisRiedel 'We work to improve ourselves and the rest of mankind.' ----- Original Message ----- From: Steven Newhouse <Steven.Newhouse(a)cern.ch> Date: Thursday, March 12, 2009 12:21 pm Subject: RE: [Pgi-wg] No teleconference tomorrow, march 13th > Before the telecon could someone please report: > * Any notes taken during the sessions > * The list of actions coming out of the sessions > > Time on the call could be sent on prioritisation the action lists and > discussing how to increase the pace of group. For instance, while we > continue discussing security could we also tackle some of the related > issues such as the profiling file/replica location needed within JSDL > and the requirements from the service interface that is not currently > supported through BES/HPCBP. > > Perhaps these areas can be taken up on additional calls? Still keep > working on security, but some individuals start on another day by > working on other issues. > > Steven > > Dr Steven Newhouse > EGEE Technical Director > http://cern.ch/Steven.Newhouse > > ------------------------------------------------------------------- ------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender), Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt, Dr. Sebastian M. Schmidt ------------------------------------------------------------------- -------------------------------------------------------------------

1 0

No teleconference tomorrow, march 13th
by Moreno Marzolla 12 Mar '09

12 Mar '09

Dear all, there will be no PGI WG teleconference tomorrow, march 13th. The next one will be next week, friday march 20 at the usual time (4:00 PM CET); a reminder will be sent in advance as usual. Moreno. -- Moreno Marzolla INFN Sezione di Padova, via Marzolo 8, 35131 PADOVA, Italy EMail: moreno.marzolla(a)pd.infn.it Phone: +39 049 8277103 WWW : http://www.dsi.unive.it/~marzolla Fax : +39 049 8756233

1 0

WS-Trust profile
by Christoph Witzig 09 Mar '09

09 Mar '09

Dear all I mentioned in last week's meeting at OGF the WS Trust profiles that we formulated for the STS. They can be found at http://www.switch.ch/grid/support/documents/#specs Work on the STS has been started last year but is currently put on the backburner due to a re-prioritization within EGEE. The intention is to continue the work after the summer break. One of the first things to do at this point will be to revise these document and harmonize them with the newly released microsoft identity card selector profile and the SAML2 token profiles from OASIS. Cheers Christoph -- SWITCH Serving Swiss Universities --------------------------------- Christoph Witzig Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 66, fax +41 44 268 15 68 christoph.witzig(a)switch.ch, http://www.switch.ch

1 0

Document "VOMS Certificate Format" as referenced in the Secure Communications strawman
by David Groep 05 Mar '09

05 Mar '09

Dear all, The PGI Secure Communications Profile strawman document references the long standing draft of "The VOMS Certificate Format": https://forge.gridforum.org/sf/go/doc13797 which has been out as a draft for ages but not progressed. I think it would be useful to publish this doc as an (informational) doc Real Soon, as it is in quite a good shape even as it stands. I would consider it 'done' (especially since as far as I see this describes exactly what is now being used). Your comments are welcome, and then the authors (I hope) or the sec area can push this document out. Regards, DavidG. -- David Groep ** Nikhef, Dutch National Institute for Sub-atomic Physics,PDP/Grid group ** ** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **

2 1

dial in info for t he OGF GIN sessions
by Balazs Konya 05 Mar '09

05 Mar '09

Dear All, You may try to call in to the GIN sessions at OGF25. Here is the contact information: +9900827045181077 (skype) US: 1-201-793-9022 (conference room number 9931906) bye, Balazs

1 0