Time: 16:30 EDT (-0400 GMT) Tel: 513-241-0892 Access Code: 65998 Minutes for 18 September TC Meeting I. Roll Call & Minutes Richard Hill Mohammad Jafari ViewDS Steven Legg Rich Levinson Hal Lockhart Bill Parducci Erik Rissanen Remon Sinnema John Tolbert Contributing Members: 9 of 59 (15%) Voting Members: 9 of 10 (90%) (used for quorum calculation) bill: we have quorum Approve Minutes: 4 September 2014 TC Meeting
https://lists.oasis-open.org/archives/xacml/201409/msg00008.html hal: no corrections seen; any objections to unanimous consent? none heard; minutes approved II. Administrivia RSA Conference 2015, taking place April 20-24 in San Francisco: Let Jane know if any proposed talks by TC members or TC as a whole, and OASIS will promote it/them: Call for Speakers will close Thursday, September 25.
https://lists.oasis-open.org/archives/xacml/201409/msg00014.html hal: if anyone is presenting, please make known RSA 2015 XACML Interop Participation Request original proposal: MAP and DLP:
https://lists.oasis-open.org/archives/xacml/201408/msg00018.html ViewDS interest: both:
https://lists.oasis-open.org/archives/xacml/201408/msg00019.html MAP: juniper, University of Applied Sciences at Hochschule Hannover
https://lists.oasis-open.org/archives/xacml/201409/msg00017.html JSON/REST, ALFA demo: Axiomatics:
https://lists.oasis-open.org/archives/xacml/201409/msg00018.html JSON/REST: ViewDS:
https://lists.oasis-open.org/archives/xacml/201409/msg00019.html hal: if jane has minimum threshold of participants, then things should be ok, threshold not known; suggest that richard contact jane to find out next steps. Profiles: status summary: bill to provide for mtg bill: summary was emailed to tc:
https://lists.oasis-open.org/archives/xacml/201409/msg00023.html <ProfileStatus> Committee Specifications (awaiting Attestations): Profile: Additional Combining Algorithms Profile Version 1.0 Status: Committee Specification, 2 Attestations (Axiomatics, EMC) Doc: CS01, 18 August 2014 URL:
http://docs.oasis-open.org/xacml/xacml-3.0-combalgs/v1.0/cs01/xacml-3.0-combalgs-v1.0-cs01.html Profile: XACML SAML Profile Version 2.0 Status: Committee Specification, NO Attestations Doc: CS02, 19 August 2014 URL:
http://docs.oasis-open.org/xacml/xacml-saml-profile/v2.0/cs02/xacml-saml-profile-v2.0-cs02.html Profile: XACML v3.0 Multiple Decision Profile Version 1.0 Status: Committee Specification, 1 Attestation (Axiomatics) Doc: CS02, 18 May 2014 URL:
http://docs.oasis-open.org/xacml/3.0/multiple/v1.0/cs02/xacml-3.0-multiple-v1.0-cs02.html Profile: XACML v3.0 Hierarchical Resource Profile Version 1.0 Status: Committee Specification, 1 Attestation (Axiomatics) Doc: CS02, 18 May 2014 URL:
http://docs.oasis-open.org/xacml/3.0/hierarchical/v1.0/cs02/xacml-3.0-hierarchical-v1.0-cs02.html Profile: XACML v3.0 XML Digital Signature Profile Version 1.0 Status: Committee Specification, NO Attestations Doc: CS02, 18 May 2014 URL:
http://docs.oasis-open.org/xacml/3.0/dsig/v1.0/cs02/xacml-3.0-dsig-v1.0-cs02.html hal: no further action on the above until further attestations In Process (Oasis): Profile: XACML MAP Authorization Profile Version 1.0 Status: In pre-Specification Vote Public Review (11/15) Doc: COS01, 18 August 2014, now in 60 day PR prior to OS vote URL:
http://docs.oasis-open.org/xacml/xacml-map-authz/v1.0/cos01/xacml-map-authz-v1.0-cos01.html Profile: REST Profile of XACML v3.0 Version 1.1 Status: Committee Public Review submitted to TC Admin URL:
https://issues.oasis-open.org/browse/TCADMIN-1888 Awaiting Next Step (TC): Profile: XACML 3.0 Export Compliance-US (EC-US) Profile V1.0 Status: Candidate Oasis Specification Next: Submit to TC Admin for Specification vote URL:
https://www.oasis-open.org/resources/tc-admin-requests/candidate-oasis-standard-submission-request Profile: XACML Intellectual Property Control (IPC) Profile Status: Candidate Oasis Specification Next: Submit to TC Admin for Specification vote URL:
https://www.oasis-open.org/resources/tc-admin-requests/candidate-oasis-standard-submission-request hal: above 2 are in process being assembled bill: will work w john,richard to get things tidied up Profile: JSON Profile of XACML 3.0 Version 1.0 Status: Committee Specification Draft 03/Public Review Draft 03, 15 May 2014 URL:
http://docs.oasis-open.org/xacml/xacml-json-http/v1.0/csprd03/xacml-json-http-v1.0-csprd03.html Next: Address comments (as noted in 11 July 2014 Minutes) Steven thinks issues resolved hal: sounds like doc can stay as is hal: we will try to contact david and get cs vote for next call Working Drafts: Profile: XACML v3.0 Core and Hierarchical Role Based Access Control (RBAC) Profile Version 1.0 Status: Working Draft Next: CS Draft Public Review (proposed by Erik 4 September 2014) Erik: to update abstract, and we'll have fresh version to vote on. Profile: Admin Delegation Profile Status: Working Draft hal: considering (1) making backward compatible revisions and bring to CS, then (2) write new draft of new algorithm; wd or csd for ref as draft; will leave us w CS version that people can implement to, and CSD as basis for moving forward if interest. Profile: Privacy Profile Status: Working Draft mohammad: has interest but not in position to be editor erik: thinks some edits may still be pending - will take a look at it </ProfileStatus> Profiles: status updates: XACML 3.0 Additional Combining Algorithms Profile Version 1.0 Committee Specification 01 published:
https://lists.oasis-open.org/archives/xacml/201409/msg00010.html Axiomatics statement of use:
https://lists.oasis-open.org/archives/xacml/201409/msg00012.html EMC statement of use
https://lists.oasis-open.org/archives/xacml/201409/msg00013.html XACML SAML Profile Version 2.0 Committee Specification 02 published:
https://lists.oasis-open.org/archives/xacml/201409/msg00011.html XACML MAP Authorization Profile Version 1.0 COS01 60-day Public Review announced - ends Nov. 15th
https://lists.oasis-open.org/archives/xacml/201409/msg00015.html https://lists.oasis-open.org/archives/xacml/201409/msg00016.html Admin Delegation Profile status update from minutes: hal volunteer to update to CS level:
https://lists.oasis-open.org/archives/xacml/201409/msg00008.html Privacy Profile status update from minutes: mohammad to provide detailed update on position:
https://lists.oasis-open.org/archives/xacml/201409/msg00008.html Comment on IPv6:
https://lists.oasis-open.org/archives/xacml/201409/msg00009.html hal: this is just an fyi III. Issues Errata: chairs to collect in wiki, including: Acknowledgement inquiry A citation in the non-Normative Reference section of the Core spec ([Hinton94]) references an earlier work by Hilary H. Hosmer as well as a presentation at NIST and a paper by David Bell in 1994 regarding policy remodeling. The author requests incorporation into the section.
https://lists.oasis-open.org/archives/xacml/201409/msg00008.html hal: this raised issues about ipr process; bill alerted jamie; this item on hold until we get oasis marching orders IV. Other business: hal: next mtg in 2 weeks: Oct 2, 2014 meeting adjourned: 5:06PM EDT -- Thanks, Rich Rich Levinson Internet Standards Security Architect Mobile: +1 978 5055017 Oracle Identity Management 45 Network Drive Burlington, Massachusetts 01803 Oracle is committed to developing practices and products that help protect the environment