Shibboleth Team Meeting Notes: 3.27.2006

Attending: Scotty Logan, Bruce Vincent, Quanah Gibson-Mount, Digant Kasundra, 
    Russ Allbery, Jon Pilat

New Action Items:

  3/27.1   Scotty: Coordinate with Tim about shib'ed Moveable Type
  3/27.2   Scotty: Put shib'ed web software on the shib service website
  3/27.3   Jon: Put up shib project website
  3/27.4   Jon: Coordinate with DDD or other doc writer about shib service
             website.  If Unix Infrastructure is maintaining this going
             forwards, we probably want a spun website, with the doc
             writer providing the text but not the formatting/HTML.  Check
             w/Joyce for Bruce Campbell's availablility.
  3/27.5   Russ: Send AFS web authentication presentattion slides to
             shib-team for review.
  3/27.6   Scotty/Bruce: Talk to Casey about shib for Sakai
  3/27.7   Scotty/Q: Figure out URNs for suPerson attributes
  3/27.8   Bruce: Delegate OID tange for Wallet project
  3/27.9   Q: Put OID mappings on the Directory website.
  3/27.10  Bruce: Pay InCommon dues

Open Action Items:

  1/27.9   Q: package IDP software (after mod_shib work) (debs)
  1/27.10  Q: package mod_shib--deb, then stow/rpm<?> (before IDP)
  1/27.12  Scotty: submit reviewed patches back to shib project. (waiting
             on review from Minh)
  1/27.14  Q: update build template (/afs/ir/service/auth/shib/) for shib
             machines.  most of what is there currently isn't needed
  2/6.1    Bruce: Write a position paper advocating the inclusion of shib
             as an approved authentication technology for people
             authenticating to stanford.edu services and a section on
             federated identity management/shib/cross-realm kerberos.
             These would be proposed as changes to Admin Guide 64 (3/31)
  2/6.2    Bruce: Write a position paper advocating the creation of an
             office (or authority for an existing office) to be the party
             responsible for the assertion of Stanford's identity
             digitally.  This position paper should also include a
             statement on how services/machines are authenticated as part
             of stanford.edu.  This assertion is required for shibboleth
             to assert stanford.edu identity to external institutions
             and/or federations. (3/31)
  2/10.2   Q: Talk to Lynn about shib attribute mappings and ARPs
  2/27.4   Bruce: Set up mtg w/Steve Jung & Eric (& Lauren/Susan
             Weinstein) once 2/6.2 writeup is complete.

Notes:

log4cpp has been packaged, Q will be working on the rest of the SP
packaging over the next 2 weeks.

Scotty has completed patches and/or packaging for shib'ed twiki,
wordpress, and moveable type.  MT may be useful in the WWW environment.
The other 2 applications are waiting on new infrastructure web person to
decide whether we're supporting those out of the central infrastructure.

Application for InCommon completed.  Stanford will be on the next InCommon
board meeting to discuss changes to the participation agreement.  Bill
needs to confirm he's the institutional officer with InCommon before we'll
be added to the InCommon website (&wayf?)

Scotty confirmed that mod_shib mod_webauth and mod_webauthldap don't
interfere with one another on an apache server (OSX, but should work
everywhere).

YahooMusic/MyMusic successfully migrated--thanks Xueshan and Scotty.
Shib1 rebuilt and Q will be focusing on packaging for the next 2 weeks.