***Attending***
Mike Olive, Stanford (chair)
Dave Donnelly, Stanford
Rob Carter, Duke
Klara Jelinkova, Duke
Tom Barton, U. Chicago
Jim Repa, MIT
Tom Barton, U. Chicago
Ann West, Internet2/EDUCAUSE
Steve Olshansky, Internet2
New Action Items
[AI] (Klara) will send the survey invitation out to the Signet-Users and -Dev lists ASAP, with a deadline for responses of 28-Sep-2008. After this date she will send it to a broader group including the Educause IdM CG and CSG lists, with instructions for the recipients to direct it to the appropriate staff within their organizations.
Carryover Action Items
[AI] (Dave and Chris) will coordinate on hook development directions, and (Dave) will write up the differences between hooks and plug-ins in Signet and Grouper.
[AI] (MikeO) will send a note out to the list with some context about auditing issues and requesting folks to talk with their respective auditors for their perspectives, and report/discuss via the list.
[AI] (MikeO) will develop an initial strawman set of test cases to float to the list for feedback. Mike will also contact U. Washington for information on their authority manager (ASTRA), for additional data points about how other systems approach these issues.
**Discussion**
Privilege Management Survey
Klara reported that the first round of the privilege management survey was sent out in August, with a due date of today, Sept. 12. So far 5 responses from 4 different schools have been received out of the 10 invited to respond. No feedback has been received on the usability of the survey.
Klara will send out a repeat request (“nag”) to the first-round institutions that have not yet responded to the survey, with the hope of getting additional responses.
Klara will also email the survey invitation to the second round, consisting of people on the Signet-users and Signet-dev lists.
[AI] (Klara) will send the survey invitation out to the Signet-Users and -Dev lists ASAP, with a deadline for responses of 28-Sep-2008. After this date she will send it to a broader group including the Educause IdM CG and CSG lists, with instructions for the recipients to direct it to the appropriate staff within their organizations. https://mail.internet2.edu/wws/arc/signet-dev/2008-09/msg00002.html
The goal is to present some analysis of responses received to date at the October 13 combined Signet Grouper Working Group session at the I2 Fall Member Meeting.
- Signet Hooks and Plug-ins
Dave has been working on implementing hooks and plug-ins in Signet. For asynchronous hooks design, he had initially created a design in which a separate Java thread would be created to process each event. However, there was a concern that in the case of a bulk load, a large number of threads could be generated and these might potentially swamp and overwhelm the system.
Therefore Dave is now planning a different approach for asynchronous events: an asynchronous listener that would work with an event queue and run within a single thread. As the hooks management system receives notifications from the main application, it would push those into a queue. This approach is for the asynchronous listener only; the synchronous listener still runs in the main application thread. It is up to developer to decide whether synchronous or asynchronous is most suitable for a particular plug-in.
Dave noted that if the system shuts down and the queue is lost with outstanding events, then events could be lost. Dave will check with Chris on how asynchronous threads and system shut down are handled in Grouper.
Dave expects check-in of Signet hooks and plug-ins code during the week of Sept. 14, and that Signet RC 1.3.5. should be ready by the next Signet call. MikeO will help with the testing.
The next call is scheduled for Friday, 26-Sep-08 at 11am EDT.