[Go-essp-tech] Security Telecon - 13 July
Karl Taylor
taylor13 at llnl.gov
Mon Jul 12 10:17:00 MDT 2010
Hi all,
Please note that the .xls version of the standard_output spreadsheet
that Phil posted doesn't properly distinguish between green and yellow
shading, so you might want to look instead at the .pdf or .xlsx versions
available at:
http://cmip-pcmdi.llnl.gov/cmip5/output_req.html?submenuheader=2#req_list
any updated versions of this document will be first posted there.
cheers,
Karl
On 7/12/10 4:01 AM, philip.kershaw at stfc.ac.uk wrote:
> Hi all,
>
> I'm just back from leave and catching up with this. I've added a page on the GO-ESSP wiki site with a link to the spreadsheet (to save on attachments in your inboxes ;) ) ...
>
> http://*proj.badc.rl.ac.uk/go-essp/wiki/CMIP5/Meetings/telco100713
>
> This includes my comments.
>
> Cheers,
> Phil
>
>
>> -----Original Message-----
>> From: go-essp-tech-bounces at ucar.edu [mailto:go-essp-tech-
>> bounces at ucar.edu] On Behalf Of Cinquini, Luca (3880)
>> Sent: 09 July 2010 16:51
>> To: Rachana Ananthakrishnan
>> Cc: go-essp-tech at ucar.edu
>> Subject: Re: [Go-essp-tech] Security Telecon - 13 July
>>
>> Hi Rachana,
>> a bunch of us will be involved in a data node/gateway development
>> workshop on that day, but we also talked about reserving a time at that
>> workshop to attend the go-essp call anyway. What do other people think
>> about that ? I am personally in favor of it since it does fit well with
>> other things we are likely to discuss...
>> thanks, Luca
>>
>> On Jul 9, 2010, at 9:31 AM, Rachana Ananthakrishnan wrote:
>>
>>
>>> (Changed subject line from "Telco tomorrow")
>>>
>>> Hi Stephen,
>>>
>>> Thanks for the detailed document on outstanding tasks.
>>>
>>> Attached is your spreadsheet with some comments, and additional
>>> outstanding tasks. These go up to the ESG 1.2 release as documented
>>> here: https://*wiki.ucar.edu/display/esgcet/ESG+Gateway+Release
>>> +Roadmap. I have also included links to JIRA items that I filed. You
>>> will see some have been closed, but I am not convinced they have been
>>> resolved. I don't have assignment or version update rights on JIRA,
>>> hence the issue description is the only relevant part in those JIRA
>>> items.
>>>
>>> I need status from others in the team for some of the items in your
>>> spreadsheet. I'll reach out to them and try to send out an updated
>>> sheet before the telecon. If I don't receive sufficient updates, this
>>> would be a good document to base our discussions on.
>>>
>>> Cheers,
>>> Rachana
>>>
>>> On Jun 25, 2010, at 6:00 AM,<stephen.pascoe at stfc.ac.uk>
>>>
>> <stephen.pascoe at stfc.ac.uk
>>
>>>> wrote:
>>>>
>>>
>>>> Hi Rachana,
>>>>
>>>> Sorry for the delay getting back to you. July 6th is good for me
>>>> and I
>>>> have spent some time this week understanding the security system in
>>>> more
>>>> detail so we should be able to make progress without Phil.
>>>>
>>>> After a successful experiment with the datanode authentication
>>>>
>> filter
>>
>>>> (OpenidRelyingParty.war) I've been trying to itemise exactly what
>>>>
>> each
>>
>>>> of us need to do to get the whole security system working across the
>>>> federation. The result is the attached table of tasks focussing on
>>>> deployment.
>>>>
>>>> I expect you have something similar but maybe from a slightly
>>>> different
>>>> perspective. I'm trying to decompose the effort into what Gateway
>>>>
>> and
>>
>>>> Datanode teams need to do and at least partially decouple
>>>> Authentication
>>>> from Authorisation so we can start seeing things working. We are
>>>> being
>>>> leant on quite hard at the UK Met Office to demonstrate stuff that
>>>> works.
>>>>
>>>> I suggest we could use this table as a basis for our discussion on
>>>> July
>>>> 6th, in conjunction with what ever you would like to focus on. Feel
>>>> free to add to or amend the table if you want.
>>>>
>>>> I'd like to get an update on each of the rows in this table.
>>>>
>>>> Cheers,
>>>> Stephen.
>>>>
>>>> ---
>>>> Stephen Pascoe +44 (0)1235 445980
>>>> British Atmospheric Data Centre
>>>> Rutherford Appleton Laboratory
>>>>
>>>> -----Original Message-----
>>>> From: go-essp-tech-bounces at ucar.edu
>>>> [mailto:go-essp-tech-bounces at ucar.edu] On Behalf Of Rachana
>>>> Ananthakrishnan
>>>> Sent: 22 June 2010 17:38
>>>> To: Lawrence, Bryan (STFC,RAL,SSTD)
>>>> Cc: go-essp-tech at ucar.edu
>>>> Subject: Re: [Go-essp-tech] Telco tomorrow
>>>>
>>>> Hi,
>>>>
>>>> I would like to request that we push the security agenda by another
>>>> week, to July 6th. - I have prior conflict and cannot make it next
>>>> week.
>>>>
>>>> Thanks,
>>>> Rachana
>>>>
>>>> On Jun 21, 2010, at 10:38 AM, Bryan Lawrence wrote:
>>>>
>>>>
>>>>> Hi Folks
>>>>>
>>>>> I'm in favour of a security call next week, and either
>>>>>
>>>>> a) skipping the call tomorrow, or
>>>>>
>>>>> b) if Karl can join us, addressing the access control issue from a
>>>>> policy point of view (not a technical point of view, I think
>>>>> technically we can support all the policy options) ... and ...
>>>>>
>> where
>>
>>>>> we are with the state of the qc level2 software.
>>>>>
>>>>> (I also owe Martina few replies ... but hopefully I can do that via
>>>>> email.)
>>>>>
>>>>> thanks
>>>>> Bryan
>>>>>
>>>>> On Monday 21 Jun 2010 15:19:30 Dean N. Williams wrote:
>>>>>
>>>>>> Yes, if we are to discuss Security, then I will need to inform
>>>>>> Rachana, Neill and others on the ESG Security team. (I am not sure
>>>>>> if
>>>>>>
>>>>
>>>>>> Neill is back from vacation yet.)
>>>>>>
>>>>>> I think a good topic of discussion could be to catch up on what
>>>>>>
>> the
>>
>>>>>> EU community (BADC and MPIM/DKRZ) are working on for AR5 -- that
>>>>>>
>> is,
>>
>>>>>> find out if anything has change, their progress software
>>>>>> development,
>>>>>>
>>>>
>>>>>> any new deadline that they face, etc... Or something along these
>>>>>> lines.
>>>>>>
>>>>>> Best regards,
>>>>>> Dean
>>>>>>
>>>>>> On Jun 21, 2010, at 7:09 AM, Eric Nienhouse wrote:
>>>>>>
>>>>>>> Hi Stephen,
>>>>>>>
>>>>>>> I think security integration is a good topic for our next telco.
>>>>>>>
>> I
>>
>>>>>>> believe several others involved with the security and data node
>>>>>>> efforts may be unavailable tomorrow, however.
>>>>>>>
>>>>>>> Skipping our telco this week with plans to discuss security next
>>>>>>> week sounds reasonable to me.
>>>>>>>
>>>>>>> Regards,
>>>>>>>
>>>>>>> -Eric
>>>>>>>
>>>>>>> philip.kershaw at stfc.ac.uk wrote:
>>>>>>>
>>>>>>>> Next week would suit me better too. It would give us more time
>>>>>>>>
>> to
>>
>>>>>>>> put together an agenda.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Cheers,
>>>>>>>>
>>>>>>>> Phil
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> *From:* go-essp-tech-bounces at ucar.edu
>>>>>>>> [mailto:go-essp-tech-bounces at ucar.edu] *On Behalf Of *Cinquini,
>>>>>>>> Luca (3880)
>>>>>>>> *Sent:* 21 June 2010 14:43
>>>>>>>> *To:* Pascoe, Stephen (STFC,RAL,SSTD)
>>>>>>>> *Cc:* go-essp-tech at ucar.edu
>>>>>>>> *Subject:* Re: [Go-essp-tech] Telco tomorrow
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Hi Stephen,
>>>>>>>>
>>>>>>>> I personally cannot attend a call tomorrow since I'm on travel,
>>>>>>>> but
>>>>>>>>
>>>>
>>>>>>>> I could attend next week.
>>>>>>>>
>>>>>>>> thanks, Luca
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> On Jun 21, 2010, at 6:38 AM,<stephen.pascoe at stfc.ac.uk
>>>>>>>> <mailto:stephen.pascoe at stfc.ac.uk>> wrote:
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> We have no scheduled telco topic for tomorrow. At some point I
>>>>>>>> think
>>>>>>>> we need to revisit security, in particular integrating the
>>>>>>>> OpenidRelyingParty filter into the datanode. I am quite fuzzy
>>>>>>>>
>> on
>>
>>>>>>>> the status of the authorisation bit.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Would those involved in security be able to contribute to a
>>>>>>>>
>> telco
>>
>>>>>>>> tomorrow or should we postpone and create a proper agenda for
>>>>>>>>
>> next
>>
>>>>>>>> week?
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Thanks,
>>>>>>>>
>>>>>>>> Stephen.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> ---
>>>>>>>>
>>>>>>>> Stephen Pascoe +44 (0)1235 445980
>>>>>>>>
>>>>>>>> British Atmospheric Data Centre
>>>>>>>>
>>>>>>>> Rutherford Appleton Laboratory
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> _______________________________________________
>>>>>>>> GO-ESSP-TECH mailing list
>>>>>>>> GO-ESSP-TECH at ucar.edu<mailto:GO-ESSP-TECH at ucar.edu>
>>>>>>>> http://**mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> ----------------------------------------------------------------
>>>>>>>>
>> --
>>
>>>>>>>> ------
>>>>>>>>
>>>>>>>> _______________________________________________
>>>>>>>> GO-ESSP-TECH mailing list
>>>>>>>> GO-ESSP-TECH at ucar.edu
>>>>>>>> http://**mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> GO-ESSP-TECH mailing list
>>>>>>> GO-ESSP-TECH at ucar.edu
>>>>>>> http://**mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>>>>>
>>>>>> _______________________________________________
>>>>>> GO-ESSP-TECH mailing list
>>>>>> GO-ESSP-TECH at ucar.edu
>>>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>>>>
>>>>>>
>>>>> --
>>>>> Bryan Lawrence
>>>>> Director of Environmental Archival and Associated Research
>>>>> (NCAS/British Atmospheric Data Centre and NCEO/NERC NEODC) STFC,
>>>>> Rutherford Appleton Laboratory Phone +44 1235 445012; Fax ... 5848;
>>>>> Web: home.badc.rl.ac.uk/lawrence
>>>>> _______________________________________________
>>>>> GO-ESSP-TECH mailing list
>>>>> GO-ESSP-TECH at ucar.edu
>>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>>>
>>>> Rachana Ananthakrishnan
>>>> Argonne National Lab | University of Chicago
>>>>
>>>> _______________________________________________
>>>> GO-ESSP-TECH mailing list
>>>> GO-ESSP-TECH at ucar.edu
>>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>>
>>>> --
>>>> Scanned by iCritical.
>>>>
>>>> <security_task_matrix.xls>
>>>>
>>> Rachana Ananthakrishnan
>>> Argonne National Lab | University of Chicago
>>> <security_task_matrix-
>>>
>> ra.xls>_______________________________________________
>>
>>> GO-ESSP-TECH mailing list
>>> GO-ESSP-TECH at ucar.edu
>>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>>
>> _______________________________________________
>> GO-ESSP-TECH mailing list
>> GO-ESSP-TECH at ucar.edu
>> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>>
> --
> Scanned by iCritical.
> _______________________________________________
> GO-ESSP-TECH mailing list
> GO-ESSP-TECH at ucar.edu
> http://*mailman.ucar.edu/mailman/listinfo/go-essp-tech
>
>
More information about the GO-ESSP-TECH
mailing list