| 1 | |
| 2 | {{{ |
| 3 | -------- Forwarded Message -------- |
| 4 | Subject: CLARIN Use-case VC Notes |
| 5 | Date: Tue, 26 Apr 2016 15:06:35 +0100 |
| 6 | From: Lukas Hämmerle <lukas.haemmerle@switch.ch> |
| 7 | Organization: SWITCH |
| 8 | To: Timo Mustonen <timo.mustonen@csc.fi>, Martin Matthiesen |
| 9 | <martin.matthiesen@csc.fi>, Sami Silén <Sami.Silen@csc.fi> |
| 10 | CC: Dieter Van Uytvanck <dieter@clarin.eu>, Jozef Mišutka |
| 11 | <misutka@ufal.mff.cuni.cz>, Wolfgang Pempe <pempe@dfn.de> |
| 12 | |
| 13 | Hello all |
| 14 | |
| 15 | Find below the CLARIN/GEANT VC we had today. This was the last VC in the |
| 16 | context of GN4 year one project. From May 1st on, GÉANT has a new |
| 17 | structure, new goals and new people. Lukas and Wolfgang (together with |
| 18 | many more colleagues) still will be involved (also together with AARC) |
| 19 | in supporting research communities like CLARIN. So, not that much should |
| 20 | change. |
| 21 | |
| 22 | Still, as agreed this was kind of the last VC for a while. |
| 23 | Many thanks to all participants who contributed to this work and thanks |
| 24 | to CLARIN for working together with us! I hope that the work of this |
| 25 | collaboration can improve things for CLARIN in the long term. We will |
| 26 | anyway have a follow-up meeting sometime in summer to analyze this more |
| 27 | thoroughly. |
| 28 | |
| 29 | Best Regards |
| 30 | Lukas |
| 31 | |
| 32 | |
| 33 | ------------------------------------------------------------------------- |
| 34 | |
| 35 | Video Conference |
| 36 | ================ |
| 37 | Date: 26. April 2016 |
| 38 | Time: 9.00 - 10.05 CEST |
| 39 | Location: <https://connect.sunet.se/enabling-users> |
| 40 | |
| 41 | Agenda |
| 42 | ------ |
| 43 | 1. Status updates on work packages |
| 44 | 2. CLARIN-specific entity category |
| 45 | |
| 46 | |
| 47 | Attendees |
| 48 | ========= |
| 49 | * Lukas Hämmerle, GÉANT |
| 50 | * Wolfgang Pempe, GÉANT |
| 51 | * Martin Matthiesen, CLARIN |
| 52 | |
| 53 | |
| 54 | Excused |
| 55 | ---------- |
| 56 | * Sami Silen, GÉANT |
| 57 | |
| 58 | |
| 59 | 1. Status updates on work packages |
| 60 | ----------------------------------------------------------------- |
| 61 | 1. CLARIN eduGAIN Integration |
| 62 | 1.A. Dieter reported that CLARIN signed agrement and sent it |
| 63 | back to DFN-AAI. So, it's now mutually signed and the status |
| 64 | quo is now ensured by CLARIN and DFN-AAI. |
| 65 | |
| 66 | |
| 67 | 2.A. Attribute Release Check |
| 68 | Current test version available http://earc.eduid.hu/ |
| 69 | Further changes were applied after another round of feedback. |
| 70 | This service will be finished and put in production in the next |
| 71 | GÉANT project starting May 1st. |
| 72 | |
| 73 | |
| 74 | 2.B. CoCo/R&S support for CLARIN's most wanted-IdPs list. |
| 75 | No updated list of organisations/federations with attribute |
| 76 | release issues received from Jozef but composing such a list is |
| 77 | also not easy in general. |
| 78 | Martin reports that in some cases it helped a lot to fix |
| 79 | attribute release issues at an organisation if a professor |
| 80 | (involved in CLARIN) asked his IT departement to release |
| 81 | attributes to SP XYZ because he and his student need access |
| 82 | to it for research/study purposes. |
| 83 | Positive example: Uni Regensburg got attribute release working |
| 84 | within a few hours just last week. |
| 85 | On the other hand, this might not always work (e.g. if a data |
| 86 | protection lawyer is involved who by default just says no, be it |
| 87 | because he needs time to understand the concept or because he |
| 88 | generally dislikes/fears the idea of release attributes). |
| 89 | The strange thing is that the interpretation and considerations |
| 90 | of attribute release vary extremely even in one country like |
| 91 | Germany. Some universities have no problem releasing attributes |
| 92 | on request to services like CLARIN whereas other universities |
| 93 | struggle to do so. |
| 94 | |
| 95 | 2.C. Improving error messages for SPs |
| 96 | Instructions: |
| 97 | https://confluence.csc.fi/display/HAKA/Shibboleth+SP+attribute+checker |
| 98 | An example SP that is set up like this can be tested here: |
| 99 | https://devsp.funet.fi/secure/ |
| 100 | (Use username/password: teppo/testaaja) |
| 101 | Wiki page currently being moved to eduGAIN wiki |
| 102 | https://wiki.edugain.org/How_to_configure_Shibboleth_SP_attribute_checker |
| 103 | |
| 104 | Martin tested instructions using an Ansible script (that also |
| 105 | sets the entityID, which is not available as Shibboleth |
| 106 | variable in the error templates). Currently, solution is |
| 107 | deployed on one production CLARIN SP (www.kielipankki.fi). |
| 108 | Solution was announced and presented on CLARIN mailing list, |
| 109 | little feedback received. |
| 110 | Martin also sent the instructions to DARIAH (Peter Gietz, |
| 111 | Martin Haase) that CLARIN intends to collaborate more closely |
| 112 | with. |
| 113 | Wolfgang added the instructions to a test SP in DFN-AAI. |
| 114 | Conclusion: Instructions are sufficiently tested and documented. |
| 115 | Lukas will announce instructions in a few weeks on relevant |
| 116 | mailing lists and get back to Martin. |
| 117 | |
| 118 | Sami reported (after the VC) that also updated the page on |
| 119 | the eduGAIN wiki as well as the code of the attribute checker, |
| 120 | which is now on github. He also will remove the initial wiki |
| 121 | page from CSC wiki. |
| 122 | |
| 123 | So, this work is for now considered completed but as mentioned |
| 124 | needs to be make known. |
| 125 | |
| 126 | 2. CLARIN-specific entity category |
| 127 | Wolfgang asked DFN-AAI who has configured entity-category-based |
| 128 | released. FU Berlin probably has configured this already. |
| 129 | |
| 130 | |
| 131 | Next Meeting |
| 132 | =========== |
| 133 | * Lukas will contact Martin to schedule a follow-up meeting |
| 134 | mid August. |
| 135 | |
| 136 | Actions |
| 137 | ======= |
| 138 | * Lukas will announce instructions |
| 139 | |
| 140 | |
| 141 | |
| 142 | -- |
| 143 | SWITCH |
| 144 | Lukas Hämmerle, Central Solutions |
| 145 | GÉANT Project Task Leader "Enabling Users" |
| 146 | Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland |
| 147 | phone +41 44 268 15 05, direct +41 44 268 15 64 |
| 148 | lukas.haemmerle@switch.ch, http://www.switch.ch |
| 149 | |
| 150 | |
| 151 | }}} |