[VER 2] WS-SX TC Minutes, July 19 2006

["Marc Goodner" <mgoodner@microsoft.com>]

[VER 2] Added roll

 

WS-SX TC Minutes, July 19 2006

 

Summary of new Action Items:

none

 

1. Call to order/roll call

   

Present:

Jong Lee, BEA Systems, Inc.*

Hal Lockhart, BEA Systems, Inc.*

Corinna Witt, BEA Systems, Inc.*

Yakov Sverdlov, CA*

Toshihiro Nishimura, Fujitsu Limited*

Greg Whitehead, Hewlett-Packard*

Ching-Yun (C.Y.) Chao, IBM*

Henry (Hyenvui) Chung, IBM*

Kelvin Lawrence, IBM*

Michael McIntosh, IBM*

Anthony Nadalin, IBM*

Bruce Rich, IBM*

Ron Williams, IBM*

Mike Lyons, Layer 7 Technologies Inc.*

Kate Cherry, Lockheed Martin*

Jan Alexander, Microsoft Corporation*

Greg Carpenter, Microsoft Corporation*

Paul Cotton, Microsoft Corporation*

Colleen Evans, Microsoft Corporation*

Vijay Gajjala, Microsoft Corporation*

Marc Goodner, Microsoft Corporation*

Martin Gudgin, Microsoft Corporation*

Chris Kaler, Microsoft Corporation*

Asir Vedamuthu, Microsoft Corporation*

Norman Brickman, Mitre Corporation*

Frederick Hirsch, Nokia Corporation*

Lloyd Burch, Novell*

Steve Carter, Novell*

Ashok Malhotra, Oracle Corporation*

Prateek Mishra, Oracle Corporation*

Alex Hristov, Otecia Incorporated*

Martin Raepple, SAP AG*

Tony Gullotta, SOA Software Inc.*

Don Adams, Tibco Software Inc.*

Ruchith Fernando, WSO2*

 

Lost voting status:

John Hughes

 

Gained voting status:

Greg Carpenter, Microsoft Corporation*

Tony Gullotta, SOA Software Inc.*

 

2. Reading/Approving minutes of last meeting (July  12)

http://lists.oasis-open.org/archives/ws-sx/200607/msg00039.html

Adopted unanimously.

 

3. TC Logistics (10 minutes or less)

See AI-2006-07-12-01 below.

 

4. Interop status

Some endpoints have been posted and different implementers are actively trying to hit them.

Question if we should be using submitted or rec version of addressing. Depends on impact to participation. Will report back next week.

Note updates to interop doc per AI-2006-04-04-08 below.

Questions on HoK scenario, Prateek will address this and other open SAML questions.

 

5. Issues list

http://docs.oasis-open.org/ws-sx/issues/Issues.xml

   

a) Review of action items

AI-2006-04-04-08 - Marc Goodner with help from Prateek Mishra to document interop message flows based on the current version of SC/Trust.

Some comments have been addressed in most recent update.

http://lists.oasis-open.org/archives/ws-sx/200607/msg00048.html

http://lists.oasis-open.org/archives/ws-sx/200607/msg00049.html

 

AI-2006-05-03-03 - Tony will investigate and start thread on issue 67.

http://lists.oasis-open.org/archives/ws-sx/200607/msg00055.html

There are existing mechanisms, recommend closing with no action.

AI closed.

 

AI-2006-07-12-01 - Kelvin to inform OASIS staff of problems with infrastructure used to support the TC.

Kelvin and others addressed these problems with OASIS staff.

SPAM overwhelmed system last week and OASIS is working on it.

AI closed.

 

AI-2006-07-12-02 - Hal will provide reference to BSP requirement related to issue 90.

http://lists.oasis-open.org/archives/ws-sx/200607/msg00044.html

AI closed.

 

b) Issues in Review status

 

  None.

 

   

c) New issues

 

  None posted.

 

Recommend opening new issue to record proposal related to AI-2006-04-04-03:

i092 Proposed SP change related to issue 52

Accepted, no objections.

 

d) Active issues

 

i004 - Transitive closure spec dependencies

In progress.

Noted that principles for determining which normative reference to use when there are multiple possible will be guided by what is referenced by WSS, most recent references used within the set of SX specs, namespace impacts from making a change.

Expectation is that a proposal will be presented on what to do here within next several weeks.

 

i008 - Need well formed XML examples

Not discussed.

 

i066 - SecurityPolicy use cases

Nothing further in the last week.

Update pending based on existing comments.

 

i067 - Resolving Policies if more than one SecureConversationToken is present

Per AI-2006-05-03-03: http://lists.oasis-open.org/archives/ws-sx/200607/msg00055.html

There are existing mechanisms, recommend closing with no action.

Closed with no action, no objections.

 

i070 - Clarify relationship between extensibility model and policy intersection

Discussion of proposal 3

Decision to raise within WS-Policy.

Request to WS-Policy WG to provide section number with stable fragment ids we can use

Note, section 3.1 also removed per previous issue

Closed with no action, noting the above, no objections.

 

i077 - Use of Section 8 from WS-SC forces applications to be WSS schema aware

Msg from Jan: http://lists.oasis-open.org/archives/ws-sx/200607/msg00034.html

Prateek still working on reviewing comments from Jan and working on a proposal

Chair asks for a response to the point that the architectural issue here is broader than in scope than our TC.

Prateek agreed, that is part of why this is taking so long. Wants to raise for discussion within WSS.

Hal pointed out that is this broader than just security, suggests W3C architecture level.

Discussion of these points, decision to carry on via email.

 

i078 - Specify Reference Types for References to SCT

http://lists.oasis-open.org/archives/ws-sx/200607/msg00045.html

Discussion going on whether a MUST or RECOMMENDED is more appropriate.

Hal defends the MUST.

Chris points out that this would be the first security token to prevent use of local id references.

Hal will present a more detailed argument on why this makes sense in this case.

Chris is concerned about processing model with local refs in security header and global from body.

Hal thinks this is an alternative to issue 77.

Will continue discussion on list, need to consider more cases.

 

i079 - Is Bootstrap policy a PolicyAssertion

http://lists.oasis-open.org/archives/ws-sx/200607/msg00041.html

Proposal to direct editors to add bootstrap policy to appendix a, no objections. Status changed to pending.

 

i080 - Handling EncryptParts specified under SupportingTokens

http://lists.oasis-open.org/archives/ws-sx/200607/msg00043.html

No objections to proposal in above message, status changed to pending.

 

i081 - Provide policy statements and associated URIs that can be referenced from wsp:PolicyReference statements

Keep open, related to issue 66.

 

i090 - Description of Strict Formatting seems wrong for EncryptedKey

BSP reference http://lists.oasis-open.org/archives/ws-sx/200607/msg00044.html

Gudge asks for more time for review.

 

Note issue should be tagged as design not editorial.

 

i091 - security policy help for example C.3.2

Gudge, working on this but has not come to any conclusions yet.

 

i092 Proposed SP change related to issue 52

Proposal result of AI-2006-04-04-03.

http://lists.oasis-open.org/archives/ws-sx/200607/msg00031.html

http://lists.oasis-open.org/archives/ws-sx/200607/msg00042.html         

No objetions to proposal as ammended by message 42. Status changed to pending.

 

f) Pending issues

Editors will wait a couple of weeks before next update of specs with these applied.

 

i071 - Guidance on Policy Application

 

i074 - Add <EncryptSupportingToken> element to Sections 7.4 and7.5

 

i082 - Remove duplicate RFC2119 reference

 

i083 - Remove shading from figures, possibly enlarge

 

i084 - Assertions with nested policy do not indicate it

 

i085 - Replace ID with Id for Id attribute

 

i088 - No XPath default

 

i089 - Minor editorial comments on security policy

 

6. AOB

 

None.

 

7. Adjournment

 

The meeting adjourned at 7:53am PST.