|
⇤ ← Revision 1 as of 2006-04-12 08:58:14
Size: 66
Comment:
|
Size: 2613
Comment: Very rough version
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| Describe ShibGridMtg12Apr here. | '''ShibGrid Project Meeting Notes''' '''12th April 2006 at RAL''' Present: Andrew Martin, Kang Tang, Matt Viljoen, David Spence. ''[Apologies: I have written these notes up too late. And my browser crashed while I was doing so, loosing one set of edits. As such, they are now a poor record of the meeting. --Andrew]'' |
| Line 6: | Line 13: |
reviewed notes Person at Daresbury working on a shibbolized portal. additional to this project? should be invited to AG meetings cert. lifetimes shib = 1hr credential lifetime could get IdP to set up lifetime this is a max lifetime user could theoretically set a shorter one myProxy allows up to the max lifetime is it up to SP to decide what is Manchester's view? where should policy sit? maybe post to shibgrid mailing list IB reqs: IB portal David?? portal using mod_shib apache plug-in David to contact Matthew Mascord -- David done work on MyProxy shibbolized proxy upload establised semi-production IdP at RAL arch document describes attributes and how they turn in to attributes at DN Action on Kang: IdP in Oxofrd. does it issue the same attributes (do names need changing?) could set up simple version for project not in scope to sort out properly. gsi-ssh no need to talk to Rob. David Meredith is in this group, but based at Daresbury. Line manager Andy Richards. Action Mat to find out how much time to spend on this work. Wiki. Happy to use. check on version control limit edit access?? action APM - talk to mark establish a bit more structure or get a better wiki can files be uploaded ============= arch doc david has a prototype. sso myproxy server deployed at RAL already java-ssh client... === second use case. benefits of long-lived credentials. === myProxy. just one. choose? logically, allow choice, but not bother for now. Organisationally, it's part of NGS, with portal. Other services could use it if authorized. == could call out from myProxy to VOMS. so get role in certificate. optional extra step === notes from GGF to circulate. check where we are relative to other projects === discuss with OMII about s/w quality also with security evaluation ==== getting requirements sorted out and written up is key. ==== aim for first week of may. on AG. === Kang Tang to meet with David from end next week. Thurs? |
ShibGrid Project Meeting Notes
12th April 2006 at RAL
Present: Andrew Martin, Kang Tang, Matt Viljoen, David Spence.
[Apologies: I have written these notes up too late. And my browser crashed while I was doing so, loosing one set of edits. As such, they are now a poor record of the meeting. --Andrew]
Meeting in progress...
APM
reviewed notes
Person at Daresbury working on a shibbolized portal.
- additional to this project? should be invited to AG meetings
cert. lifetimes
- shib = 1hr credential lifetime could get IdP to set up lifetime this is a max lifetime user could theoretically set a shorter one myProxy allows up to the max lifetime is it up to SP to decide what is Manchester's view? where should policy sit? maybe post to shibgrid mailing list
IB reqs: IB portal David?? portal using mod_shib apache plug-in David to contact Matthew Mascord
-- David done work on MyProxy shibbolized proxy upload
establised semi-production IdP at RAL
arch document describes attributes and how they turn in to attributes at DN
Action on Kang: IdP in Oxofrd.
- does it issue the same attributes
- (do names need changing?) could set up simple version for project
- not in scope to sort out properly.
gsi-ssh
no need to talk to Rob. David Meredith is in this group, but based at Daresbury. Line manager Andy Richards. Action Mat to find out how much time to spend on this work.
Wiki. Happy to use.
- check on version control limit edit access?? action APM - talk to mark establish a bit more structure or get a better wiki can files be uploaded
=============
arch doc
david has a prototype. sso myproxy server deployed at RAL already
- java-ssh client...
===
second use case. benefits of long-lived credentials.
===
myProxy. just one.
choose? logically, allow choice, but not bother for now.
Organisationally, it's part of NGS, with portal. Other services could use it if authorized.
== could call out from myProxy to VOMS. so get role in certificate. optional extra step
===
notes from GGF to circulate. check where we are relative to other projects
===
discuss with OMII about s/w quality also with security evaluation
====
getting requirements sorted out and written up is key.
====
aim for first week of may. on AG.
===
Kang Tang to meet with David from end next week. Thurs?