An open discussion list for topics related to the eduGAIN interfederation service.

[Nicole Harris <harris AT terena.org>]

Sent from my iPhone

> On 29 jun. 2014, at 10:04, Leif Johansson <leifj AT sunet.se> wrote:
>
>> On 2014-06-28 19:40, Nicole Harris wrote:
>>> On 28/06/2014 17:09, Peter Schober wrote:
>>> * Nicole Harris <harris AT terena.org> [2014-06-28 16:13]:
>>>> Well my first and primary question would be under what terms Jozef is
>>>> using the metadata?  I cannot find his service URL registered with any
>>>> federation or with eduGAIN.
>>> From the RequestInitiator used
>>> ("https://lindat.mff.cuni.cz/Shibboleth.sso/Login";)
>>> I think it is this entityID:
>>> https://ufal-point.mff.cuni.cz/shibboleth/eduid/sp
>>> registered (and exported to eduGAIN) by http://www.eduid.cz/
>> Yeah, sorry - thought I had deleted that paragraph before I sent as I
>> found it eventually.   Trouble with looking at work emails whilst taking
>> the child to the cinema.  Although to be fair it is practically the only
>> thing you can do during the children's films at the cinema.
>>
>> Still think it is taking liberties with some of the metadata though.
>
>
> The SWAMID terms of use are pretty clear:
>
> You may only use the Metadata as follows:
> - Installation onto your own IT systems for the purpose of establishing
> trusted communications between your systems and those of the  Registrant
> by means of standard middleware protocols.
>
> - Any and all rights including intellectual property rights to the
> Metadata shall remain owned by the Registrar, the Registrants or the
> Signer.
>
> I don't see Jozef violating any of this however clueless his tests may
> otherwize be.

I do.

He is using metadata that is not being provided via edugain as part of
the tool.  It is also not being used to "establish trusted
communications", I.e. As part of the login process but is being made
part of the service. So for example metadata from UK colleges is
included, not in the login, but being tested.  None of these are in
edugain metadata.

We have the same problem with MET which is why I was careful to ask
all federations to send me their feed data and when it moves to full
service I will ask federations to register their data themselves.

I'd want this to at least be limited to testing data that is being
legitimately made available to a service both from a TOU point of view
AND because it is then testing services that won't fail by default.
>
>
> Lets not quibble about terms of use.
>    Cheers Leif
>
>