[Go-essp-tech] Security Telecon - 13 July

Mon Jul 12 05:01:22 MDT 2010

Hi all,

I'm just back from leave and catching up with this.  I've added a page on the GO-ESSP wiki site with a link to the spreadsheet (to save on attachments in your inboxes ;) ) ...

http://proj.badc.rl.ac.uk/go-essp/wiki/CMIP5/Meetings/telco100713

This includes my comments.

Cheers,
Phil

> -----Original Message-----
> From: go-essp-tech-bounces at ucar.edu [mailto:go-essp-tech-
> bounces at ucar.edu] On Behalf Of Cinquini, Luca (3880)
> Sent: 09 July 2010 16:51
> To: Rachana Ananthakrishnan
> Cc: go-essp-tech at ucar.edu
> Subject: Re: [Go-essp-tech] Security Telecon - 13 July
> 
> Hi Rachana,
> 	a bunch of us will be involved in a data node/gateway development
> workshop on that day, but we also talked about reserving a time at that
> workshop to attend the go-essp call anyway. What do other people think
> about that ? I am personally in favor of it since it does fit well with
> other things we are likely to discuss...
> thanks, Luca
> 
> On Jul 9, 2010, at 9:31 AM, Rachana Ananthakrishnan wrote:
> 
> > (Changed subject line from "Telco tomorrow")
> >
> > Hi Stephen,
> >
> > Thanks for the detailed document on outstanding tasks.
> >
> > Attached is your spreadsheet with some comments, and additional
> > outstanding tasks. These go up to the ESG 1.2 release as documented
> > here: https://wiki.ucar.edu/display/esgcet/ESG+Gateway+Release
> > +Roadmap. I have also included links to JIRA items that I filed. You
> > will see some have been closed, but I am not convinced they have been
> > resolved. I don't have assignment or version update rights on JIRA,
> > hence the issue description is the only relevant part in those JIRA
> > items.
> >
> > I need status from others in the team for some of the items in your
> > spreadsheet. I'll reach out to them and try to send out an updated
> > sheet before the telecon. If I don't receive sufficient updates, this
> > would be a good document to base our discussions on.
> >
> > Cheers,
> > Rachana
> >
> > On Jun 25, 2010, at 6:00 AM, <stephen.pascoe at stfc.ac.uk>
> <stephen.pascoe at stfc.ac.uk
> >> wrote:
> >
> >>
> >> Hi Rachana,
> >>
> >> Sorry for the delay getting back to you.  July 6th is good for me
> >> and I
> >> have spent some time this week understanding the security system in
> >> more
> >> detail so we should be able to make progress without Phil.
> >>
> >> After a successful experiment with the datanode authentication
> filter
> >> (OpenidRelyingParty.war) I've been trying to itemise exactly what
> each
> >> of us need to do to get the whole security system working across the
> >> federation.  The result is the attached table of tasks focussing on
> >> deployment.
> >>
> >> I expect you have something similar but maybe from a slightly
> >> different
> >> perspective.  I'm trying to decompose the effort into what Gateway
> and
> >> Datanode teams need to do and at least partially decouple
> >> Authentication
> >> from Authorisation so we can start seeing things working.  We are
> >> being
> >> leant on quite hard at the UK Met Office to demonstrate stuff that
> >> works.
> >>
> >> I suggest we could use this table as a basis for our discussion on
> >> July
> >> 6th, in conjunction with what ever you would like to focus on.  Feel
> >> free to add to or amend the table if you want.
> >>
> >> I'd like to get an update on each of the rows in this table.
> >>
> >> Cheers,
> >> Stephen.
> >>
> >> ---
> >> Stephen Pascoe  +44 (0)1235 445980
> >> British Atmospheric Data Centre
> >> Rutherford Appleton Laboratory
> >>
> >> -----Original Message-----
> >> From: go-essp-tech-bounces at ucar.edu
> >> [mailto:go-essp-tech-bounces at ucar.edu] On Behalf Of Rachana
> >> Ananthakrishnan
> >> Sent: 22 June 2010 17:38
> >> To: Lawrence, Bryan (STFC,RAL,SSTD)
> >> Cc: go-essp-tech at ucar.edu
> >> Subject: Re: [Go-essp-tech] Telco tomorrow
> >>
> >> Hi,
> >>
> >> I would like to request that we push the security agenda by another
> >> week, to July 6th.  - I have prior conflict and cannot make it next
> >> week.
> >>
> >> Thanks,
> >> Rachana
> >>
> >> On Jun 21, 2010, at 10:38 AM, Bryan Lawrence wrote:
> >>
> >>> Hi Folks
> >>>
> >>> I'm in favour of a security call next week, and either
> >>>
> >>> a) skipping the call tomorrow, or
> >>>
> >>> b) if Karl can join us, addressing the access control issue from a
> >>> policy point of view (not a technical point of view, I think
> >>> technically we can support all the policy options) ... and ...
> where
> >>> we are with the state of the qc level2 software.
> >>>
> >>> (I also owe Martina few replies ... but hopefully I can do that via
> >>> email.)
> >>>
> >>> thanks
> >>> Bryan
> >>>
> >>> On Monday 21 Jun 2010 15:19:30 Dean N. Williams wrote:
> >>>> Yes, if we are to discuss Security, then I will need to inform
> >>>> Rachana, Neill and others on the ESG Security team. (I am not sure
> >>>> if
> >>
> >>>> Neill is back from vacation yet.)
> >>>>
> >>>> I think a good topic of discussion could be to catch up on what
> the
> >>>> EU community (BADC and MPIM/DKRZ) are working on for AR5 -- that
> is,
> >>>> find out if anything has change, their progress software
> >>>> development,
> >>
> >>>> any new deadline that they face, etc... Or something along these
> >>>> lines.
> >>>>
> >>>> Best regards,
> >>>> 	Dean
> >>>>
> >>>> On Jun 21, 2010, at 7:09 AM, Eric Nienhouse wrote:
> >>>>> Hi Stephen,
> >>>>>
> >>>>> I think security integration is a good topic for our next telco.
> I
> >>>>> believe several others involved with the security and data node
> >>>>> efforts may be unavailable tomorrow, however.
> >>>>>
> >>>>> Skipping our telco this week with plans to discuss security next
> >>>>> week sounds reasonable to me.
> >>>>>
> >>>>> Regards,
> >>>>>
> >>>>> -Eric
> >>>>>
> >>>>> philip.kershaw at stfc.ac.uk wrote:
> >>>>>> Next week would suit me better too.  It would give us more time
> to
> >>>>>> put together an agenda.
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> Cheers,
> >>>>>>
> >>>>>> Phil
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> *From:* go-essp-tech-bounces at ucar.edu
> >>>>>> [mailto:go-essp-tech-bounces at ucar.edu] *On Behalf Of *Cinquini,
> >>>>>> Luca (3880)
> >>>>>> *Sent:* 21 June 2010 14:43
> >>>>>> *To:* Pascoe, Stephen (STFC,RAL,SSTD)
> >>>>>> *Cc:* go-essp-tech at ucar.edu
> >>>>>> *Subject:* Re: [Go-essp-tech] Telco tomorrow
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> Hi Stephen,
> >>>>>>
> >>>>>> I personally cannot attend a call tomorrow since I'm on travel,
> >>>>>> but
> >>
> >>>>>> I could attend next week.
> >>>>>>
> >>>>>> thanks, Luca
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> On Jun 21, 2010, at 6:38 AM, <stephen.pascoe at stfc.ac.uk
> >>>>>> <mailto:stephen.pascoe at stfc.ac.uk>> wrote:
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> We have no scheduled telco topic for tomorrow.   At some point I
> >>>>>> think
> >>>>>> we need to revisit security, in particular integrating the
> >>>>>> OpenidRelyingParty filter into the datanode.  I am quite fuzzy
> on
> >>>>>> the status of the authorisation bit.
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> Would those involved in security be able to contribute to a
> telco
> >>>>>> tomorrow or should we postpone and create a proper agenda for
> next
> >>>>>> week?
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> Thanks,
> >>>>>>
> >>>>>> Stephen.
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> ---
> >>>>>>
> >>>>>> Stephen Pascoe  +44 (0)1235 445980
> >>>>>>
> >>>>>> British Atmospheric Data Centre
> >>>>>>
> >>>>>> Rutherford Appleton Laboratory
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> _______________________________________________
> >>>>>> GO-ESSP-TECH mailing list
> >>>>>> GO-ESSP-TECH at ucar.edu <mailto:GO-ESSP-TECH at ucar.edu>
> >>>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> ----------------------------------------------------------------
> --
> >>>>>> ------
> >>>>>>
> >>>>>> _______________________________________________
> >>>>>> GO-ESSP-TECH mailing list
> >>>>>> GO-ESSP-TECH at ucar.edu
> >>>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
> >>>>>
> >>>>> _______________________________________________
> >>>>> GO-ESSP-TECH mailing list
> >>>>> GO-ESSP-TECH at ucar.edu
> >>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
> >>>>
> >>>> _______________________________________________
> >>>> GO-ESSP-TECH mailing list
> >>>> GO-ESSP-TECH at ucar.edu
> >>>> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
> >>>>
> >>>
> >>> --
> >>> Bryan Lawrence
> >>> Director of Environmental Archival and Associated Research
> >>> (NCAS/British Atmospheric Data Centre and NCEO/NERC NEODC) STFC,
> >>> Rutherford Appleton Laboratory Phone +44 1235 445012; Fax ... 5848;
> >>> Web: home.badc.rl.ac.uk/lawrence
> >>> _______________________________________________
> >>> GO-ESSP-TECH mailing list
> >>> GO-ESSP-TECH at ucar.edu
> >>> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
> >>
> >> Rachana Ananthakrishnan
> >> Argonne National Lab | University of Chicago
> >>
> >> _______________________________________________
> >> GO-ESSP-TECH mailing list
> >> GO-ESSP-TECH at ucar.edu
> >> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
> >>
> >> --
> >> Scanned by iCritical.
> >>
> >> <security_task_matrix.xls>
> >
> > Rachana Ananthakrishnan
> > Argonne National Lab | University of Chicago
> > <security_task_matrix-
> ra.xls>_______________________________________________
> > GO-ESSP-TECH mailing list
> > GO-ESSP-TECH at ucar.edu
> > http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
> 
> _______________________________________________
> GO-ESSP-TECH mailing list
> GO-ESSP-TECH at ucar.edu
> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
-- 
Scanned by iCritical.