This is a static archive of the previous Open Grid Forum Redmine content management system saved from host redmine.ogf.org file /projects/voms-proc-wg/wiki/Wiki/annotate/1 at Thu, 03 Nov 2022 23:16:11 GMT VOMS-PROC WG - Open Grid Forum

Wiki

Version 1 (David Groep, 10/09/2012 12:03 PM)

1 1 David Groep
h1. Mission
2 1 David Groep
3 1 David Groep
There are currently multiple implementations validating VOMS credentials, and all of these have had to make uncoordinated choices in how to interpret bags of attributes. For security and integrity reasons alone it is needed that the interpretation of attributes is consistent. The scope is deliberately limited to writing two specific documents in a narrow subject space, for which insufficient guidance exists but where active work is ongoing.
4 1 David Groep
5 1 David Groep
h1. Documents
6 1 David Groep
7 1 David Groep
h3. Published GFDs
8 1 David Groep
9 1 David Groep
''none yet''
10 1 David Groep
11 1 David Groep
h3. Documents currently under consideration by the CAOPS-WG
12 1 David Groep
13 1 David Groep
* VOMS Attribute Certificate Parsing Rules for Chained Identity Credentials (http://redmine.ogf.org/dmsf_files/159) (editors: David Groep, Mike Jones)
14 1 David Groep
> * determining the effective attribute set for collated VOMS attributes as presented in a hierarchical chain of identity credentials
15 1 David Groep
> * order in which attributes are to be interpreted
16 1 David Groep
> * how to determine the set of valid attributes in case one out of a bag of VOMS ACs at the same level has expired
17 1 David Groep
18 1 David Groep
* Understanding parsing rules for collated VOMS SAML space (''not available yet'')
This is a static archive of the previous Open Grid Forum Redmine content management system saved from host redmine.ogf.org file /projects/voms-proc-wg/wiki/Wiki/annotate/1 at Thu, 03 Nov 2022 23:16:13 GMT