[Go-essp-tech] Security Telecon - 13 July

Fri Jul 9 09:31:16 MDT 2010

(Changed subject line from "Telco tomorrow")

Hi Stephen,

Thanks for the detailed document on outstanding tasks.

Attached is your spreadsheet with some comments, and additional  
outstanding tasks. These go up to the ESG 1.2 release as documented  
here: https://wiki.ucar.edu/display/esgcet/ESG+Gateway+Release 
+Roadmap. I have also included links to JIRA items that I filed. You  
will see some have been closed, but I am not convinced they have been  
resolved. I don't have assignment or version update rights on JIRA,  
hence the issue description is the only relevant part in those JIRA  
items.

I need status from others in the team for some of the items in your  
spreadsheet. I'll reach out to them and try to send out an updated  
sheet before the telecon. If I don't receive sufficient updates, this  
would be a good document to base our discussions on.

Cheers,
Rachana

On Jun 25, 2010, at 6:00 AM, <stephen.pascoe at stfc.ac.uk> <stephen.pascoe at stfc.ac.uk 
 > wrote:

>
> Hi Rachana,
>
> Sorry for the delay getting back to you.  July 6th is good for me  
> and I
> have spent some time this week understanding the security system in  
> more
> detail so we should be able to make progress without Phil.
>
> After a successful experiment with the datanode authentication filter
> (OpenidRelyingParty.war) I've been trying to itemise exactly what each
> of us need to do to get the whole security system working across the
> federation.  The result is the attached table of tasks focussing on
> deployment.
>
> I expect you have something similar but maybe from a slightly  
> different
> perspective.  I'm trying to decompose the effort into what Gateway and
> Datanode teams need to do and at least partially decouple  
> Authentication
> from Authorisation so we can start seeing things working.  We are  
> being
> leant on quite hard at the UK Met Office to demonstrate stuff that
> works.
>
> I suggest we could use this table as a basis for our discussion on  
> July
> 6th, in conjunction with what ever you would like to focus on.  Feel
> free to add to or amend the table if you want.
>
> I'd like to get an update on each of the rows in this table.
>
> Cheers,
> Stephen.
>
> ---
> Stephen Pascoe  +44 (0)1235 445980
> British Atmospheric Data Centre
> Rutherford Appleton Laboratory
>
> -----Original Message-----
> From: go-essp-tech-bounces at ucar.edu
> [mailto:go-essp-tech-bounces at ucar.edu] On Behalf Of Rachana
> Ananthakrishnan
> Sent: 22 June 2010 17:38
> To: Lawrence, Bryan (STFC,RAL,SSTD)
> Cc: go-essp-tech at ucar.edu
> Subject: Re: [Go-essp-tech] Telco tomorrow
>
> Hi,
>
> I would like to request that we push the security agenda by another
> week, to July 6th.  - I have prior conflict and cannot make it next
> week.
>
> Thanks,
> Rachana
>
> On Jun 21, 2010, at 10:38 AM, Bryan Lawrence wrote:
>
>> Hi Folks
>>
>> I'm in favour of a security call next week, and either
>>
>> a) skipping the call tomorrow, or
>>
>> b) if Karl can join us, addressing the access control issue from a
>> policy point of view (not a technical point of view, I think
>> technically we can support all the policy options) ... and ... where
>> we are with the state of the qc level2 software.
>>
>> (I also owe Martina few replies ... but hopefully I can do that via
>> email.)
>>
>> thanks
>> Bryan
>>
>> On Monday 21 Jun 2010 15:19:30 Dean N. Williams wrote:
>>> Yes, if we are to discuss Security, then I will need to inform
>>> Rachana, Neill and others on the ESG Security team. (I am not sure  
>>> if
>
>>> Neill is back from vacation yet.)
>>>
>>> I think a good topic of discussion could be to catch up on what the
>>> EU community (BADC and MPIM/DKRZ) are working on for AR5 -- that is,
>>> find out if anything has change, their progress software  
>>> development,
>
>>> any new deadline that they face, etc... Or something along these
>>> lines.
>>>
>>> Best regards,
>>> 	Dean
>>>
>>> On Jun 21, 2010, at 7:09 AM, Eric Nienhouse wrote:
>>>> Hi Stephen,
>>>>
>>>> I think security integration is a good topic for our next telco.  I
>>>> believe several others involved with the security and data node
>>>> efforts may be unavailable tomorrow, however.
>>>>
>>>> Skipping our telco this week with plans to discuss security next
>>>> week sounds reasonable to me.
>>>>
>>>> Regards,
>>>>
>>>> -Eric
>>>>
>>>> philip.kershaw at stfc.ac.uk wrote:
>>>>> Next week would suit me better too.  It would give us more time to
>>>>> put together an agenda.
>>>>>
>>>>>
>>>>>
>>>>> Cheers,
>>>>>
>>>>> Phil
>>>>>
>>>>>
>>>>>
>>>>> *From:* go-essp-tech-bounces at ucar.edu
>>>>> [mailto:go-essp-tech-bounces at ucar.edu] *On Behalf Of *Cinquini,
>>>>> Luca (3880)
>>>>> *Sent:* 21 June 2010 14:43
>>>>> *To:* Pascoe, Stephen (STFC,RAL,SSTD)
>>>>> *Cc:* go-essp-tech at ucar.edu
>>>>> *Subject:* Re: [Go-essp-tech] Telco tomorrow
>>>>>
>>>>>
>>>>>
>>>>> Hi Stephen,
>>>>>
>>>>> I personally cannot attend a call tomorrow since I'm on travel,  
>>>>> but
>
>>>>> I could attend next week.
>>>>>
>>>>> thanks, Luca
>>>>>
>>>>>
>>>>>
>>>>> On Jun 21, 2010, at 6:38 AM, <stephen.pascoe at stfc.ac.uk
>>>>> <mailto:stephen.pascoe at stfc.ac.uk>> wrote:
>>>>>
>>>>>
>>>>>
>>>>> We have no scheduled telco topic for tomorrow.   At some point I
>>>>> think
>>>>> we need to revisit security, in particular integrating the
>>>>> OpenidRelyingParty filter into the datanode.  I am quite fuzzy on
>>>>> the status of the authorisation bit.
>>>>>
>>>>>
>>>>>
>>>>> Would those involved in security be able to contribute to a telco
>>>>> tomorrow or should we postpone and create a proper agenda for next
>>>>> week?
>>>>>
>>>>>
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Stephen.
>>>>>
>>>>>
>>>>>
>>>>> ---
>>>>>
>>>>> Stephen Pascoe  +44 (0)1235 445980
>>>>>
>>>>> British Atmospheric Data Centre
>>>>>
>>>>> Rutherford Appleton Laboratory
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> GO-ESSP-TECH mailing list
>>>>> GO-ESSP-TECH at ucar.edu <mailto:GO-ESSP-TECH at ucar.edu>
>>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------
>>>>> ------
>>>>>
>>>>> _______________________________________________
>>>>> GO-ESSP-TECH mailing list
>>>>> GO-ESSP-TECH at ucar.edu
>>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>>
>>>> _______________________________________________
>>>> GO-ESSP-TECH mailing list
>>>> GO-ESSP-TECH at ucar.edu
>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>
>>> _______________________________________________
>>> GO-ESSP-TECH mailing list
>>> GO-ESSP-TECH at ucar.edu
>>> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>
>>
>> --
>> Bryan Lawrence
>> Director of Environmental Archival and Associated Research
>> (NCAS/British Atmospheric Data Centre and NCEO/NERC NEODC) STFC,
>> Rutherford Appleton Laboratory Phone +44 1235 445012; Fax ... 5848;
>> Web: home.badc.rl.ac.uk/lawrence
>> _______________________________________________
>> GO-ESSP-TECH mailing list
>> GO-ESSP-TECH at ucar.edu
>> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
>
> Rachana Ananthakrishnan
> Argonne National Lab | University of Chicago
>
> _______________________________________________
> GO-ESSP-TECH mailing list
> GO-ESSP-TECH at ucar.edu
> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
>
> -- 
> Scanned by iCritical.
>
> <security_task_matrix.xls>

Rachana Ananthakrishnan
Argonne National Lab | University of Chicago
-------------- next part --------------
A non-text attachment was scrubbed...
Name: security_task_matrix-ra.xls
Type: application/vnd.ms-excel
Size: 16384 bytes
Desc: not available
Url : http://mailman.ucar.edu/pipermail/go-essp-tech/attachments/20100709/9b3c11b6/attachment-0001.xls 