[Planetlab-devel] opening up GetSliceTicket()

[David E. Eisenstat]

On Wed, 30 May 2007, Jeannie Albrecht wrote:

> Hi Marc,
> The only information that either service used to use was which nodes
> were assigned to which slices.  That is all we ever used.  For
> everything else we do in Plush, we have always used the PLC API.
>
> Jeannie

I guess the natural thing to do would be to relax the security 
restrictions on GetSlices(). Here's what it currently returns:

Returns:

     *

       array of struct

           o

             creator_person_id : int, Identifier of the account that 
created this slice
           o

             instantiation : string, Slice instantiation state
           o

             slice_attribute_ids : array, List of slice attributes

                 +

                   int
           o

             name : string, Slice name
           o

             slice_id : int, Slice identifier
           o

             created : int, Date and time when slice was created, in 
seconds since UNIX epoch
           o

             url : string, URL further describing this slice
           o

             max_nodes : int, Maximum number of nodes that can be assigned 
to this slice
           o

             person_ids : array, List of accounts that can use this slice

                 +

                   int
           o

             expires : int, Date and time when slice expires, in seconds 
since UNIX epoch
           o

             site_id : int, Identifier of the site to which this slice 
belongs
           o

             peer_slice_id : int, Foreign slice identifier at peer
           o

             node_ids : array, List of nodes in this slice

                 +

                   int
           o

             peer_id : int, Peer to which this slice belongs
           o

             description : string, Slice description



I don't see anything outrageously secret in here, but then again, my 
security reflexes are rather weak.

The slice-node mappings are more or less available already from CoMon*, so 
it doesn't seem to me like a huge deal if we were to expose at least that.

-David

* AFAICT, CoMon will only report the slivers with a running process.