An open discussion list for topics related to the eduGAIN interfederation service.

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> I present to you the application of Romania / RoEduNetID who has signed
> the eduGAIN Declaration, has a policy based on the policy template, is
> self declaring their federation as a production service and is wanting
> to join the global R&E federated environment.

When I browsed their website and the technical.edugain.org status page,
I noticed they did not declare a metadata URL, and in fact the entire
web page does not show any federation metadata.

I wonder how that goes together with the self-declared status of
"production": where is the federation, except on paper?

> You can find more detailed information about the federation under
> "eduGAIN Candidates” at
>     https://technical.edugain.org/status.php
> which contains links to their policy and MRPS.

The version of their policy is "0.8"; MRPS is "0.3". Are those the
latest, final versions that should be reviewed? Or is there a 1.0
somewhere, this being an outdated copy?

Policy
======
1)
The document states "This document, together with its appendices
constitutes the RoEduNetID Federation Policy. The current list
of all appendices is available on the website of RoEduNetID Federation
(https://eduid.roedu.net/)."

I did not find a list of appendices on that web page.

2)
You may want to fix the typo 3.3: "Prices and payment terms are
specified on Fereation website."

I did not find prices and payment terms on the federation website.

MRPS
====
1)
The document states: "The procedure for becoming a member of the
RoEduNetID Federation is documented at https://eduid.roedu.net/.";, in at
least two instances.

The website almost exclusively contains generic descriptions of what
eduGAIN is (rather than RoEduNetID, which is strange), and I see no
procedures regarding the RoEduNetID membership.

2)
The document also states in section 4 that RegistrationPolicy SHALL be
used (i.e. it is mandatory); while section 2 speaks of the possibility
that no RegistrationPolicy is present, calling this out as "historic,
undocumented" registration practice. I have the impression that
RoEduNetID is a very young federation and does not have any such
historic cases. Of course I can't verify that because the metadata for
the SAML profile is not visible on the website. Does or does not
RoEduNetID have entities with such historic registration practices? If
not, the last paragraph of section 2 should be deleted.

3)
In section 5.3, the last sentence does not parse. It has more opening
parentheses than closing ones. Unfortunately in a sentence that
describes regular expressions, which creates an actual readability problem.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature