SourceForge : View Wiki Page: ConsideredURFieldsCommon

Search Wiki Pages Project: UR-WG Wiki > ConsideredURFieldsCommon > View Wiki Page

wiki2516: ConsideredURFieldsCommon

List of fields considered for the record identity block of the usage record

The fields are considered for inclusion in a record identity block in a usage record. Each resources will have its own specific block. This specific block is reserved to the attributes that describes the record identity.

RecordIdentityBlock

This is the block property of the Usage Record identity field.

Example
<ur:RecordIdentityBlock>
<!— Identity properties go in here -->
</ur:RecordIdentityUsageBlock>

Comments:

Ralph: ok
Mike J: OK, but perhaps need some more detail: what can we expect to see in this block
<IdentityBlock> <anonymous/>
<DN authorisaition="true">string</DN>
<uid>n</uid>
<ip authorisation="false">n.n.n.n</ip>
...
</IdentityBlock> Jon: Changed this block to be RecordIdentityBlock, moved SubjectIdentity to separate block.

~recordId

A record identity uniquely defines a record in the set of all usage record for the grid implementation. ~recordId is an opaque string;

Comments:

Ralph: In StAR we defined two attributes: create time and ID <sr:RecordIdentity sr:createTime="2010-11-09T09:06:52Z" sr:recordId="host.example.org/sr/87912469269276"/>
Mike J: OK but if using the StAR example above need to specify that sr:recordId is an opaque string; if you want host info this should be in its own attribute/node Jon: renamed field from RecordIdentity to recordID not to confuse it with RecordIdentityBlock, agree it should be an opaque string.

~createTime

The ~createTime attribute describes when the record was created.

Comments:

~recorderId

The ~recorderId gives information on who created the record.

Comments:

--- Mike J: Suggest a mockup for the wiki: The following is an example straw-man of what I would like to see (it is not agreed nor a summary of the above)

<usage>
  <recordIdentity>
    <creationTime>[When the record is cut]</creationTime>
    <recordID>[unique opaque ID]</recordID>
    <recorderID type="DN">[DN of host cutting the record]</recorderID> ||  
    <recorderID type="IP">[IP address of host curring the record]</recorderID>
  </recordIdentity>
  <identity>
    <!-- There may be other examples of the following. One of the following needs to have an attribute defining that it was used for authorisation -->
    <Id individual="true" type="anonymous"/> ||
    <Id  individual="true"type="DN" scope="global|local">[DN]</userId>?
    <Id individual="true"  type="IP" scope="global|local">[IP]</userId>?
    <Id individual="true"  type="UID" scope="site|local">[ID]</userId>?

    <ID individual="false"  type="GID" scope="site|local">[ID]</groupID>?
    <ID  individual="false" type="VOMS">
      <authority type="DN">[VOMS AC Issuer/Server certificate]</authority>
      <method>AC|List|SAML</method>
    </groupID>
    <ID individual="false" type="GID" scope="site|local">[GID]</groupID>
    <ID individual="false" type="IP" scope="local|global">
      <IP mask="255.255.0.0">[IP]</IP>+
    </groupID>
  </identity>
...
</usage>

Show Details