[xacml] XACML July 25, 2002 Minutes

[Ken Yagen <kyagen@crosslogix.com>]

Title: XACML Conference Call Minutes

XACML Conference Call

Date:  Thursday, July 25, 2002

Time: 10:00 AM EDT

Tel: 512-225-3050 Access Code: 65998

 

Summary

Reviewed action items, schema subcommittee progress and F2F agenda. Subcommittee has resolved a lot of issues, but some major ones still outstanding. Next meeting is tomorrow (7/26) and there is no Monday meeting. F2F is next week and a few adjustments to the agenda were made. Conference call in will be available for ½ hour on Wed and Thurs morning at 9:00 EDT and minutes will be emailed to list at end of Day 1 and Day 2.

 

Action Items

1. Anne to have non-normative examples of policy signatures by F2F or soon thereafter..
2. Tim to release v15 of spec week before F2F
3. Tim - first draft of Access Control background due at F2F.
4. XACML primer from Hal and Konstantin postponed until after Face to Face.
5. Anne to have Conformance Test Document by F2F 
6. Add IPR issue regarding IBM to IPR section of document
7. Michiharu will provide test cases for obligations and multiple hierarchies before F2F
8. Don to get second room for parallel discussions on afternoon of day 2.
9. Don to make sure conference call connection is available and can dial out in room.

Action Items on Hold

1. Anne to go over request context with Eve Maler to see which parts make sense to fold into SAML after finalizing of SAML issue list. On hold, waiting for context issues to be resolved.

 

Votes

Voted to accept minutes of 7/18 meeting

http://lists.oasis-open.org/archives/xacml/200207/msg000xx.html

 

Proposed Agenda:

10:00-10:05 Roll Call and Agenda Review

10:05-10:10 Vote to accept minutes of July 18 conference call

http://lists.oasis-open.org/archives/xacml/200207/msg000xx.html

10:10-10:15 Review of Action Items (see 7/18 minutes)

10:15-10:30 Schema subcommittee (Anne)

10:30-10:50 Next F2F discussion:  agenda review (Hal)

10:50-11:00 Any other business

 

Roll Call

Ken Yagen, Crosslogix

Hal Lockhart, Entegrity

Carlisle Adams, Entrust

Tim Moses, Entrust

Don Flinn, Hitachi

Michiharu Kudoh, IBM

Simon Godik, Self

Suresh Damodaran, Sterling Commerce

Anne Anderson, Sun Microsystems

 

Raw Minutes (taken by Ken Yagen)

 

Voted to accept minutes of last meeting

1. Anne to have non-normative examples of policy signatures by F2F.

Working on conformance instead. May or may not be ready by F2F

2. Tim to release v15 of spec week of 7/15

Revised schema before end of week. Text before F2F

3. Tim - first draft of Access Control background due 7/19.

Will become available during F2F

4. XACML primer from Hal and Konstantin postponed until after Face to Face.
5. Daniel to post his interchange format proposal before 7/15 meeting

Daniel posted some sort of response to list.

6. Carlisle to ping Karl Best again on IBM IP Issues

Not expecting further response from IBM. Will make IP will be optional in spec and not normative. Should be called out specifically in IPR section of document

7. Anne to have Conformance Test Cases by F2F 

Anne has published a description to list. Hope to have test document by F2F. Asked for feedback from people. Positive and negative test for each function. Interested if there are additions to other areas in the schema. Conformance tests have levels - basic mandatory to implement and sections of areas not mandatory to implement. Ie Obligation protecting resource where must look into the resource. Michiharu will provide test cases for obligations and multiple hierarchies.

Test case on implied action - action implied by name of resource like in Java

Hal - suggested profiles. Need to figure out a way to specify profiles (subsets, different from SAML).

Tim - in v1 will only standardize base profile.

Hal - May want to define subsets in a conformant way.

Time for discussion of conformance profiles at F2F. Hal will lead discussion of how to go about creating profiles.

Tim - what will be LCD at F2F for swapping text - floppy drive or USB port

1. Resolve IP issues with IBM. On hold waiting on OASIS to discuss IP issues with IBM in 1 to 1 ½ weeks.

No more response expected from IBM beyond what Carlisle noted

2. Anne to go over request context with Eve Maler to see which parts make sense to fold into SAML after finalizing of SAML issue list. On hold, waiting for context issues to be resolved.
3. Response from ContentGuard regarding IP claims and XACML

Not expecting response

Schema Subcommittee Report (Anne)

Working against list of schema issues. Next meeting tomorrow. Still working on XPath subset. Have not yet resolved. Proposals for attribute designators that do not require XPath. Discussion on how to deal with indeterminate results and operational errors. Use of XPath with namespaces needs to be resolved and understood better. Happy with new target schema and matching rules. Referring to policy set in SAML assertion by reference will be added to schema. Not necessary to repeat subject and action in response. Only one resource and action per request, although could be hierarchal. Changed name of other to environment in context. Resolved qualifier attribute in subject id definition. Refers to SAML name qualifier. Chose to use resource designator over specifier. Resource id will be a string, not a URI. Format is more than datatype. Don't need scope in the response. Resource content schema accepted from Michiharu. Fixed condition type so only one type in a single rule. Removing advice from XACML until can agree on a schema for it. Simon has proposed a schema that needs to be reviewed.

 

No meeting on Monday, but people should spend time preparing for F2F.

 

Agenda for F2F

July 30:

9:00-12:00 Walkthru of latest version of document and schema to identify items to be discussed.

Anne suggests instead walkthrough list of issues, not the document. Hal explained notion is last call to raise issues not on the list.

12:00-1:00 Lunch

1:00-5:00 Combine items from morning and items from schema subcommittee list and discuss and resolve each

July 31:

9:00-12:00 Continue discussion of items

12:00-1:00 Lunch

1:00-3:00 Presentation of Digital Signatures Examples and discussion

May not be ready for F2F since Conformance is priority.

    Presentation of Conformance Test Cases and discussion

3:00-4:00 Work on identifiers section

To be led by Bill

Anne suggests maybe split up into small groups. One group pick out identifiers and make a proposal and another group work on conformance profiles and then come back together and present proposals. Don will try to get a second room for 3-5.

Simon - why spend time on this at the F2F. Anne - whole list mentioned in spec but not spelled out. Not a discussion but a work item to figure out which ones. Needed for conformance tests.

Will work separately and come back together at 4:30.

4:00-5:00 Discuss conformance profiles

 

Aug 1:

 

9:00-10:00 Discuss security and privacy section  

Is Polar leading this based on James' text distributed previously

10:00-11:00 Presentation of LDAP Profile and discussion (Tim)

11:00-12:00 Open for deferred or new items

12:00-1:00 Lunch

1:00-5:00 Review issues list for items to close or defer (past 1.0)

At least two people leaving midafternoon

Tim - missing significant text in textual specification of functions. Anne - does XPath define these that we can borrow from? Need to validate XPath and come up with text of functions not covered. Anne will bring copy of XPath (2).

 

No phone call next Thursday. Michiharu requests a system similar to last time with time block in morning to call in. Will be speakerphone and Don will confirm we can call conference number.

Wednesday and Thursday Morning less than ½ hour. Would like minutes Tuesday and Wednesday evenings.

 

Any other issues?

Directions to room included in Don's email to list.

 

Motion to adjourn