perfsonar-dev - Re: [pS-dev] Help needed for the design of the authorization request
Subject: perfsonar development work
List archive
- From: Jason Zurawski <>
- To: Cándido Rodríguez Montes <>
- Cc: " List" <>, "Jeff W.Boote" <>
- Subject: Re: [pS-dev] Help needed for the design of the authorization request
- Date: Fri, 16 May 2008 06:56:21 -0400
- Openpgp: id=B94D59A6; url=http://people.internet2.edu/~zurawski/key.txt
- Organization: Internet2
Cándido;
I am currently traveling, so I have not had a chance to fully look into your responses. I will get back to you as soon as I am able to and have had a chance to review what you are proposing.
-jason
Hi Jeff and Jason,
do you need more information about this issue?
However, I've taken a look at the source code of nmwg classes and I've seen that the class org.ggf.ns.nmwg.base.v2_0.Element, which I guess I should use when the schema says 'anyElement*', is not 100% implemented because some useful methods, such as 'addChild' or 'getDOM', are like empty.
So, in case I should add the xacml request inside an element in the nmwg message I cannot do it right now.
Any comments?
Regards
El 12/05/2008, a las 11:39, Cándido Rodríguez Montes escribió:
Hi Jeff and Jason,
El 09/05/2008, a las 17:42, Jeff W. Boote escribió:
Specifically... Will this need to 'ride' along within the context of other messages? Or is this only within the context of a service communicating with the AS? (If it needs to 'ride along' it would argue for perhaps actually using the SOAP headers, or perhaps message parameters.)
It's only within the context of a service communicating with the AS. I though that I can include it inside the SOAP headers but I don't think it's the right place because it's not information about the message but it's the query that the service want to send to the AS.
The request that I'm trying to define is the authorization request from a perfSONAR service to an AS. And I want to send a message like the following:
<nmwg:message id="authRMessage1" type="AuthNEERequest" xmlns:nmwg="http://ggf.org/ns/nmwg/base/2.0/">
<nmwg:metadata id="authRMetadata">
<nmwg:parameters id="keys">
<nmwg:parameter name="SecurityToken">XXXXXXX</nmwg:parameter>
</nmwg:parameters>
</nmwg:metadata>
<nmwg:data id="authN1" metadataIdRef="authRMetadata">
<Request>
.
.
.
</Request>
</nmwg:data>
</nmwg:message>
And the response, it'd be very similar to the authentication response:
<nmwg:message id="authRMessage1_resp" messageIdRef="authRMessage1" type="AuthREEResponse" xmlns:nmwg="http://ggf.org/ns/nmwg/base/2.0/">
<nmwg:metadata id="localhost.localdomain.2c534c44:114b3c44663:-7fcd">
<nmwg:eventType>XXXXXXX</nmwg:eventType>
</nmwg:metadata>
<nmwg:data id="localhost.localdomain.2c534c44:114b3c44663:-7fcc" metadataIdRef="localhost.localdomain.2c534c44:114b3c44663:-7fcd"/>
</nmwg:message>
So, is there any place where I can put the <Request> element inside a nmwg message?
Thanks for your help!
jeff
On May 9, 2008, at 5:35 AM, Jason Zurawski wrote:
Cándido;
I need to include a XACML request inside the authorization request that I'm trying to define right now. That XACML request is something like:
<Request>
<Subject SubjectCategory="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject">
<Attribute AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id" DataType="http://www.w3.org/2001/XMLSchema#string"><AttributeValue>kan</AttributeValue></Attribute>
</Subject>
<Resource>
<Attribute AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id" DataType="http://www.w3.org/2001/XMLSchema#anyURI"><AttributeValue>http://perfsonar.net/MA</AttributeValue></Attribute>
</Resource>
<Action>
<Attribute AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id" DataType="http://www.w3.org/2001/XMLSchema#string"><AttributeValue>read</AttributeValue></Attribute>
</Action>
</Request>
The problem is that I don't know how I could add it inside a nmwg message. My choice is adding it inside a <nmwg:data> element (please, tell me if I'm wrong doing in this way). The thing is that I can get the String or the DOM Element but I didn't find a way to add it into a Message object.
Please, any help? any idea? :-)
A quick question, what is the overall purpose of this type of request? What would be the response to this? With some more context I could probably help suggest a fitting structure.
- Help needed for the design of the authorization request, Cándido Rodríguez Montes, 05/09/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Jason Zurawski, 05/09/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Jeff W. Boote, 05/09/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Cándido Rodríguez Montes, 05/12/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Cándido Rodríguez Montes, 05/16/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Jason Zurawski, 05/16/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Jason Zurawski, 05/19/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Cándido Rodríguez Montes, 05/27/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Cándido Rodríguez Montes, 05/28/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Cándido Rodríguez Montes, 05/27/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Cándido Rodríguez Montes, 05/16/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Cándido Rodríguez Montes, 05/12/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Jeff W. Boote, 05/09/2008
- Re: [pS-dev] Help needed for the design of the authorization request, Jason Zurawski, 05/09/2008
Archive powered by MHonArc 2.6.16.