Meeting the InCommon Assurance profile criteria using Active Directory

[Eric Goodman <>]

So I took a stab at reorganizing the AD Cookbook according to the discussion (at least as I remember it) from last week’s call.

 

WARNING: Because of the incorporation of the AAC interpretation language, the decision to add separate interpretation language for several sections and the reorganization we discussed (putting Interpretations and Management Assertions in their own sections), the edits ended up being rather more substantial than I expected:

 

·         In many places I changed the interpretation, configuration or management assertion language where it appeared appropriate based on the AAC clarification. This meant I had to make some judgment calls on which items were covered by 4.2.3.6.2 (which we reduced the scope of, per the clarification) and 4.2.5 (which now only requires “impractical to attack” rather than “Protected Channels”).

·         Most of the language I used for the Interpretation section came from the AAC clarification email or from the previous analysis we did (the matrix at https://spaces.internet2.edu/x/BA8wAg).

·         In making the different sections in the reorg more distinct, I found places where the language was somewhat messy, specifically Sample Management Assertions that actually contained “Interpretation” or “Configuration” text and the like. I tried to “normalize” the sections, but that meant adding or rearranging the text a bit more than I had intended. I don’t believe I added language we haven’t previously discussed, but you might want to double check me.

·         In some cases I felt that spelling out the interpretations or management assertions uncovered some new questions or clarifications. In those cases I noted the questions/concerns in Boldface Italics so that maybe we can identify them for future discussion.

·         I edited until I ran out of steam (and appeared to have made a complete pass). I have NOT proofread the update, so there’s a good chance that typos and sentence fragments abound. Feel free to point them out and/;or fix them.

·         I recognize that the combination of the auto-section numbering and the liberal use of IAP section numbers in headers ended up making the headers and TOC reminiscent of a second year algebra homework set. I may try to clean up later.

·         I’d love a better WYSIWYG editor for confluence…

·         Thankfully confluence versioning means we won’t have lost the original/previous version of edits.

 

--- Eric

 

From: [mailto:] On Behalf Of Ann West
Sent: Friday, August 30, 2013 1:52 PM
To:
Subject: [AD-Assurance] Notes from Today's call

 

Hi All,

 

I wrote up a few notes from today's call. They can be found in the wiki at :

https://spaces.internet2.edu/display/InCAssurance/Aug+30%2C+2013

 

Best,

Ann