This is a static archive of the previous Open Grid Forum Redmine content management system saved from host redmine.ogf.org file /issues/284 at Thu, 03 Nov 2022 02:01:08 GMT document #284: NSI Authentication and Authorization - Editor - Open Grid Forum

document #284

NSI Authentication and Authorization

Added by Guy Roberts over 7 years ago. Updated over 4 years ago.

Status:closed Start date:07/03/2015
Priority:Normal Due date:
Assignee:Greg Newby % Done:

0%
Category:-
Target version:-
Document Type:Proposed Recommendation

Description

This is the AA document that is part of the NSI suite of documents.

This document outlines security requirements placed on Network Service Agents (NSA) when participating in the Network Services Interface (NSI) Connection Service protocol. Also discussed are the impacts of end-user authentication and authorization mechanism on the NSA and the NSI CS protocol through the use of the existing NSI security attributes.

Richard, could you please take a look and let us know if this is ready for public comment?

Thanks,
Guy

draft-gwdi-trompert-nsi_aa-public-comment-v2.docx (1.7 MB) Guy Roberts, 07/03/2015 10:01 AM

draft-gwdi-trompert-nsi_aa-public-comment-v2-JJ.docx (1.8 MB) Jens Jensen, 01/05/2016 10:35 AM

draft-gwdi-trompert-nsi_aa-public-comment-v3.docx (1.7 MB) Guy Roberts, 01/14/2016 09:43 AM

draft-gwdi-trompert-nsi_aa-public-comment-v5.docx (3 MB) Guy Roberts, 01/19/2016 06:24 AM

draft-gwdi-trompert-nsi_aa-public-comment-pdf-v1.docx (1.7 MB) Guy Roberts, 01/19/2016 06:24 AM

draft-gwdi-trompert-nsi_aa-public-comment-v5_RHJ.docx (1.7 MB) Richard Hughes-Jones, 06/29/2016 07:24 AM

draft-gwdi-trompert-nsi_aa-public-comment-v7.docx (1.7 MB) Guy Roberts, 07/04/2016 05:47 AM

draft-gwdi-trompert-nsi_aa-public-comment-v7.pdf (1 MB) Guy Roberts, 07/04/2016 09:14 AM

GFD-R.232.pdf (1.7 MB) Greg Newby, 08/18/2017 10:44 AM

GFD-R.232.docx (1.7 MB) Greg Newby, 08/18/2017 10:44 AM

gfd.232.docx (1.7 MB) Greg Newby, 09/17/2017 11:01 AM

gfd.232.pdf (1.7 MB) Greg Newby, 09/17/2017 11:01 AM

History

#1
Updated by Greg Newby over 7 years ago

  • Status changed from submitted to AD review

Dear Guy,

Thanks for this. As you suggest, we are awaiting initial AD review, prior to presentation to the Standards Council.

#2
Updated by Richard Hughes-Jones over 7 years ago

Reviewed the doc and passed to Jens for more detailed comments on AAI/ security aspects

#3
Updated by Greg Newby almost 7 years ago

  • Assignee changed from Richard Hughes-Jones to Jens Jensen

Status is that we are awaiting AD input on this document. Apologies for the delay.
Greg

#4
Updated by Greg Newby almost 7 years ago

Status confirmed that Jens will give a security review, then back to Richard. We should then be ready for next steps, including public comment.
- Greg

#5
Updated by Jens Jensen almost 7 years ago

I've finally managed to read the document and add my comments. I don't know if we should discuss over a call or something, in case I need to explain (or have something explained

#6
Updated by Greg Newby almost 7 years ago

Dear Guy,

Please take a look at Jens' updates, and follow up as appropriate. For example, via a phone call with Jens. Or, by posting an updated document. We will await your further response. Thanks,
- Greg

#7
Updated by Guy Roberts almost 7 years ago

Hello Jens,

Thanks for the comments on the AA doc, we will review these on our NSI call tomorrow.

I will let you know how we go.

Guy

#8
Updated by Guy Roberts almost 7 years ago

Hello Jens,

Thanks for taking time out to discuss the NSI AA document with us.

John has gone through the document and added clarifications and revisions based on our discussion.

Could you please take a look and let us know if this is now ready to go out to public comment?

Thanks,
Guy

#9
Updated by Guy Roberts almost 7 years ago

Jens,

I have just spotted that Richards comments have not been responded to yet. We will work on these and send through an updated document soon.

Guy

#10
Updated by Guy Roberts almost 7 years ago

Hello Jens,

please find attached a marked up version of the NSI AA document including edits based on all of Richard's comments.

I have also included a cleaned up pdf version with the comments and markups removed.

Could you please take a look and let us know if you are happy with these changes?

Thanks,
Guy

#11
Updated by Greg Newby over 6 years ago

Checking again with Richard... sorry for the delay.

#12
Updated by Greg Newby over 6 years ago

Per the standards council telecon on May 17, there are remaining concerns from the Area Director (Richard). Awaiting further discussions, and perhaps a newly updated document.

#13
Updated by Richard Hughes-Jones over 6 years ago

Most of the comments dealt with in a clear manner.
Only two points remain:
1. How does the OE know the path and hence the Auth servers in advance of path computation?
The assumption from John:
“It is my assumption that a user community like LHCONE would use one authorization system and anyone using, or providing resource as part of, would use the same system.” May be valid but it really limits the general use of the standard.
Somewhere in maybe section 7, or the intro, you need to have some lines outlining limitation/assumption and stating that the general case if for future study.
2. OAuth section seems to introduce new teminology.

#14
Updated by Greg Newby over 6 years ago

  • Status changed from author action to public comment
  • Assignee changed from Richard Hughes-Jones to Andre Merzky

This will now go for 60-day public comment. Andre will create the tracker, then I will announce.

#15
Updated by Guy Roberts over 6 years ago

Hello Greg, Andre,

Please find cleaned up version 7 of the public comment document.

This addresses Richards questions of v5 and should be ready to upload for public comment.

Guy

#16
Updated by Guy Roberts over 6 years ago

Andre,

Here is a pdf version. I have checked it against the OGF doc template and updated to match.

Please let me know if you spot any problems.

Thanks,
Guy

#17
Updated by Greg Newby over 6 years ago

This is now ready for public comment.

Andre, please create a new P.C. tracker, then I will announce. Thanks... Greg

#18
Updated by Greg Newby about 6 years ago

  • Assignee changed from Andre Merzky to Greg Newby

Greg will push this to public comment.

#19
Updated by Greg Newby about 6 years ago

The public comment tracker:
https://redmine.ogf.org/projects/editor-pubcom/boards/38

Authors/editors: Please solicit comments, even brief affirmative "I have read this, and think it is good" comments from your stakeholders. Public comment is open until January 1, 2017.

#20
Updated by Greg Newby almost 6 years ago

  • Status changed from public comment to AD review
  • Assignee changed from Greg Newby to Richard Hughes-Jones

Zero public comments were received. The standards council will discuss this at their next meeting.

#21
Updated by Richard Hughes-Jones over 5 years ago

Please Publish

#22
Updated by Greg Newby over 5 years ago

  • Status changed from AD review to to be published
  • Assignee changed from Richard Hughes-Jones to Greg Newby

Per the standards council telecon of May 12, this will be published as
GFD-R-P.232

#23
Updated by Greg Newby about 5 years ago

Final version document files.

#24
Updated by Greg Newby about 5 years ago

I spotted a typo. Updating.

#25
Updated by Greg Newby over 4 years ago

  • Status changed from to be published to closed

(Other formats not available in this archive.

This is a static archive of the previous Open Grid Forum Redmine content management system saved from host redmine.ogf.org file /issues/284 at Thu, 03 Nov 2022 02:01:19 GMT