X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=TODO;h=d009554c37a699930e8dab9786e93a6a61eb1dd3;hb=ed9a188808d5d293ca0b1297fe43a5ffbe3cc4ee;hp=52fa9456c000e119080b192844eaae5dd873b1d2;hpb=8617dd79fc5deb62f83dcffb93ddfb5dfdbd2572;p=sfa.git diff --git a/TODO b/TODO index 52fa9456..d009554c 100644 --- a/TODO +++ b/TODO @@ -1,33 +1,25 @@ --GetTicket -* sm, am only -* sm calls getticket on am and merges resulting tickets into 1 ticket +RSpecs +- RSpecConverter should convert sliver tags +- SM should cache result of Aggregte GetVersion call when CreateSliver is executed +- CreateSlivers should update SliverTags/attributes -- sfa-clean-peer-records -* modify resolve to support a list of hrns -* resolve a list of peer hrns instead of each hrn individally +Registry +- Verify that sub authority certificates still work -- sfi remove, if removing a site, remove any record that site is an an authority for -- routing sm calls -* sfi -a option should send request to sm with an extra argument to - specify which am to contact instead of connecting directly to the am - (am may not trust client directly) +Stop invalid users + * a recently disabled/deleted user may still have a valid cred. Keep a list of valid/invalid users on the aggregate and check callers against this list -- make registry more generic -* support interface managers -* support generic registry records (dont depend on postgres! object db?) +Component manager + * install trusted certs when interface starts (component_manager_pl.init_server()) + * Redeem ticket - RedeemTicket/AdminTicket not working. Why? + ** This may be replaced by sfa + credentials -- checking support for conventional ssl (creating a shared keypair for the request) +GUI/Auth Service + * develop a simple service where users auth using username/passord and + receive their cred + * service manages users key/cert,creds + * gui requires user's cred (depends on Auth Service above) + -- Initscripts on sfa / geniwrapper -- Geni identification on nodes -* nodes pk stored in /etc/sfa/nodekey -* slice's gid and nodes gid stored in all slices (/etc/sfa/slicegid, /etc/sfa/nodegid) -- Fully integrate SOAP (need to throw either soap or xmlrpc exceptions depending on the client) - -- error messages -* error messages should be easier to understand -* (failing to connect to plcapi shoudl return a helpful message, not a generic internal server error) - -- unit tests