PTB Meeting

Thursday 8 Mar 2012, 14:15 → 16:00 Europe/Zurich

lund.room.1 (Teleconference)

PTB meeting, 14:15-16:00, 8 March 2012 Calling details: skype conference call with lund.room.1 Proposed agenda: ---------------- Data and Security objectives

PTB meeting 08/03/2012 14:15 - 16:00 , on skype


Present: John, Patrick, Balazs, Jon, Cristina

not needed: Laurence, Maro


At the beginning of the meeting there was a heated discussion between Patrick and Balazs about the "procedure", i.e. why are we (PTB) even considering requirements coming through EGI but not yet fully gone through the full "EGI requirement management process". Patrick felt PTB was doing the wrong thing and he wasted his time.

The same topic came up again and again.


Then, we settled down to take the requirements in the tracker one by one.

Data
-----

 #20344 support for VO renaming and migration in the SEs and LFC

Solution is already available, Patrick will update the ticket

 #26415 autimagical migration of files among SEs to prevent filling up disk space    

The previously endorsed requirement now got returned because of lack of resources

 #26458     Data lifetime management

new objective: Basic data lifetime management in the SEs.


 #26579     Identify users affected by an SE intervention

the previously endorsed requirement now got returned

 #26585     short-lived anonymous HTTP TURL on Storage Elements    

new objective "Dx Supporting short-lived anonymous HTTP transfer URLs on Storage Elements"

Then, a "last minute" requirement was added
https://savannah.cern.ch/task/index.php?27082

and got endorsed by

new objective "Dx Provide transparent HTTP access to distributed storage composed of different SEs"


Security:
---------

 #26591     Support drop-in trust anchor distribution

This requirement is resolved.

 #20348     Simple (and automatic) way of forcing users to choose a group during VO registration

falls under the existing X16 "Evolve ..."  objective


 #26589     Support for SHA2 proxies

new objective: Sx Add support for SHA2 proxies

 #26590     Support the Online Certificates Status Protocol    

new: Sx Support for Online Certificates Status Protocol



stopped here:

 #26592     Common Authentication Library to configure the accepted proxy lifetime     endorsed     general requirement     jwhite https://rt.egi.eu/guest/Ticket/Display.html?id=3075     ARGUS     2 - lower 2012-02-16 11:07
 #26593     CRL refersh     endorsed     general requirement     jwhite https://rt.egi.eu/guest/Ticket/Display.html?id=3074         3 - medium     2012-02-16 11:09
 #26447     High Availability (HA) ARGUS     Returned     component requirement jwhite     https://rt.egi.eu/guest/Ticket/Display.html?id=2278     ARGUS     0 - unknown     2012-02-14 14:54
 #26407     VOMS Admin supports group selection at registration time     ongoing component requirement     jwhite https://rt.egi.eu/guest/Ticket/Display.html?id=1282     VOMS/VOMSADMIN     3 - medium     2012-02-14 10:05
 #26587     Enforce Relying-Party Defined Namespace constraints     ongoing     general requirement     jwhite     https://rt.egi.eu/guest/Ticket/Display.html?id=3080         4 - high     2012-02-16 10:54
 #26588     Default key size for any generated proxy     ongoing     general requirement     jwhite     https://rt.egi.eu/guest/Ticket/Display.html?id=3079


Aob: next meetings

- John, Jon and Balazs finishes the security objetives Tomorrow, Friday 13-14

- Next week Tuesday comes the "big meeting", where we'll go through all the open/new objectives and decides what is on/out for EMI 3 and where do we cut.

--------------------------------------------------------------------------------------



----------------------------------------------------
PTB meeting 09/03/2012 13:00 - 14:12 , on skype


Present: John, Balazs, Jon,

not needed: Laurence, Maro, Cristina, Patrick



Security:
---------


continued from Yesterday:


 #26592     Common Authentication Library to configure the accepted proxy
lifetime

new objective: "Sx Apply the available ARGUS-based authorization framework to support the proxy-lifetime restriction use case"

 #26593     CRL refersh    

new cross area objective  "Xx Verify the standard support of CRL handling of EMI services"


 #26407     VOMS Admin supports group selection at registration time    

falls under the X16 for voms-admin


 #26587     Enforce Relying-Party Defined Namespace constraints

to be added as a task
"The EMI CANL should enforce Relying-Party Defined Namespace constraints and use a single format for expressing such RPDNCs" to be part of the

"X16 Evolve EMI components" objective


 #26588     Default key size for any generated proxy

new objective: "proxy handling features to address sha2, defult keysize and ocsp requests"