Agenda
DRAFT CSG Workshop and Meeting Agenda
Sanibel Harbour Resort
9-11 January 2002
Wednesday 9 January 2002
CSG Workshop
**Everglades Ballroom A
**Breakfast/break service, Ballroom A Foyer
8:30 Continental Breakfast
9:00 CSG Long Workshop: Shibboleth, Certs, and PKI
Coordinator: Bob Morgan
Please see Addendum A for the detailed agenda.
12:00 Lunch
**Harborview Room
1:00 CSG Long Workshop: Shibboleth, Certs, and PKI (continued)
5:00 Adjourn
Group Dinner - Courtside Steakhouse and Sports Bar
6:00 Cocktails
7:00 Dinner
Thursday 10 January 2002
CSG Workshop
**Everglades Ballroom A
**Breakfast/break service, Ballroom A Foyer
7:30 Continental Breakfast
8:00 CSG Short Workshop: Network Access and Authentication, incl Wireless
Coordinators: Russ Vaught, Terry Gray
Please see Addendum B for the detailed agenda.
10:30 Break
11:00 CSG Mini Workshop: Traffic Instrumentation and Management
Coordinators: Greg Jackson, Larry Lidz
12:00 Lunch
**Harborview Room
CSG Meeting
**Everglades Ballroom A
1:30 I. Introductory Remarks (CSG Coordinator)
1:35 II. Consortial Member Updates (CSG Coordinator)
Possible reports from:
EDUCAUSE (Worona)
Merit (Williams)
CREN (Boettcher)
Internet2 (Hanss)
DLF (Millman/Graham)
CIC Schools (Jackson)
CNI (Lynch/Summerhill)
Others
2:15 III. Policy Discussion 1: uPortal and Generic Portals
Coordinator: Sandy Senti
3:15 Break
3:45 IV. Short Slots & Technology Tracking Group Reports (Johnson)
The following topics will be covered:
OKI Update (Thorne, Merriman) 25 minutes
JADE: A Telecommunications Cost Model (Baron, Chin) 25
Security: Federal Grants and
Safe Computing Language (Mahoney, LeBlanc) 20
Open Discussion 5
Others as time and interest allow.
Please see Nate Johnson (njj@mit.edu) to get a topic on the
agenda, add topics, or volunteer to coordinate open topics.
The complete list of TTG topics and coordinators is on the
CSG web page at http://www.stonesoup.org/ under "Projects."
5:00 Adjourn
Group Dinner - Harborview Room
6:00 Cocktails (Harborview Veranda)
7:00 Dinner
Friday 11 January 2002
CSG Meeting (continued)
**Everglades Ballroom A
**Breakfast/break service, Ballroom A Foyer
8:00 Continental Breakfast
8:30 V. Organizational Issues (CSG Coordinator)
A. Steering/Membership Committee Issues
B. Treasurer's Report
C. Secretariat Issues
D. Logistics for Spring 2002 Meeting
(University of Chicago, 8-10 May 2002)
E. Confirmation of Fall 2002 Meeting
(Seattle, Watertown Hotel, 18-20 September 2002)
F. Venue/Date Selection for Winter 2003 Meeting
January 2003 February 2003
Su Mo Tu We Th Fr Sa Su Mo Tu We Th Fr Sa
1 2 3 4 1
5 6 7 8 9 10 11 2 3 4 5 6 7 8
12 13 14 15 16 17 18 9 10 11 12 13 14 15
19 20 21 22 23 24 25 16 17 18 19 20 21 22
26 27 28 29 30 31 23 24 25 26 27 28
8:45 VI. Session Proposals for Spring 2002 Meeting (McCredie)
9:30 Break
10:00 VII. Policy Discussion 2: Directory Enabling Applications
Coordinator: Marti Packer
11:00 VIII. Policy Discussion 3: Authorization, incl Roles Databases
Coordinator: Susan Minai-Azary
12:00 Adjourn
12:00 Lunch
**Box lunches available, Ballroom A Foyer
Addendum A: CSG Long Workshop: Shibboleth, Certs, and PKI
Detailed Agenda
Workshop: Shibboleth, Certificates, and PKI
January 9, 2002
CSG, Sanibel Island
The Internet2 Shibboleth project
(http://middleware.internet2.edu/shibboleth/) has been working on a
scheme to provide reasonably secure inter-institutional access to
controlled web-based resources based on extending existing web
authentication methods. Meanwhile, other efforts (eg HEPKI,
http://www.educause.edu/hepki/, CREN CA,
http://www.cren.net/ca/crencert.html), have been promoting and
standardizing the use of client PKI certificates for similar purposes.
Is this work conflicting or complementary? Is there a common path
forward? What should a campus be doing now? What about industry
initiatives such as Microsoft Passport and Project Liberty? Is there
any hope? This workshop will describe the technologies, compare and
contrast them; then consider the above questions and, with any luck,
their answers.
9:00 Introduction and Overview
RL "Bob" Morgan, University of Washington
9:15 Contexts and Scenarios
Ken Klingenstein, Internet2
RL "Bob" Morgan
Concepts: trust continuum, collaborative vs legal trust
Other dependent infrastructure: portals, libraries, Grids, etc
Application scenarios
Authentication and authorization
10:00 Break
10:15 Shibboleth project and related work
Steven Carmody, Brown
Ken Klingenstein, RL "Bob" Morgan
Motivation, design, walkthrough, status
"Club Shib", tribes, trust models
Relationship to OASIS/SAML
(http://www.oasis-open.org/committees/security/)
Relationship to Internet2 "Webiso" project
(http://middleware.internet2.edu/webiso/)
12:00 - 1:00 Lunch
1:00 Shibboleth application pilots issues and status
Library/content-providers
Project Meteor (student financial aid)
presenters TBD
1:30 PKI: progress and status
Ken Klingenstein
Jim Jokl, University of Virginia
David Wasley, UCOP
Judith Boettcher, CREN
The Four Planes of PKI, research issues, collaboration
Technical activities: testing, cert profiles, LDAP, mobility ...
Policy activities: draft HE cert policy, PKI-Lite CP
Deployment reports
HE Bridge CA, CREN CA
3:00 Break
3:15 PKI continued
4:00 Other related technologies:
Passport, HailStorm, Project Liberty, KX509, RBAC, etc
RL "Bob" Morgan (etc)
4:30 Group discussion
(facilitator TBD)
What should campuses be doing? What are they doing?
What's missing? Other collaboration opportunities?
5:15 Wrapup and next steps
RL "Bob" Morgan
5:30 Adjourn
Addendum B: CSG Short Workshop: Network Access and Authentication,
incl Wireless
Detailed Agenda
As part of the short workshop on Thursday morning, we're building about
30 minutes into the agenda to allow for the sharing of information from
other campuses about what they are doing/planning. If you have a
project or experiment underway, please bring some details and an
opinion.
The agenda will run as follows:
. Level-set: issues and options - John Kalbach (PSU)
. Varied approaches:
- Penn State approach - Kalbach
- Vendor products
o Vernier - RL Morgan
o BlueSocket - Poepping
- Home Made design - Poepping
- Your approach here..