View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
000632810000-014: PubSubSpecpublic2020-12-30 11:582021-09-21 15:46
ReporterMatthias Damm Assigned ToMatthias Damm  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Summary0006328: Uniqueness of SecurityGroupId and SKS identification
Description

We define the SecurityGroupId as unique inside a SKS. But we identify the SKS with an array of EndpointDescriptions where we allow entries for redundant SKS.

Normally an OPC UA application is identified by the ApplicationInstanceUri which is part of the EndpointDescription. But in the case of redundant servers, there are several ApplicationInstanceUris for non-transparent redundant servers. Therefore we do not have a unique identification for a SKS.

This is mainly a problem if an OPC UA application need to merge different SecurityGroup configurations from several WriterGroups, ReaderGroups and DataSetReaders for the management of security keys that can be shared between several of these objects.

We need a definition on how to "identify" a SKS and how to merge EndpointDescriptions for such a SKS.

TagsNo tags attached.
Commit Version
Fix Due Date

Relationships

related to 0006330 closedMatthias Damm 10000-014: PubSub Handling of EndpointDescriptions for SecurityKeyServices 
related to 0006331 closedMatthias Damm 10000-014: PubSub UserIdentityToken configuration for SecurityKeyServices 
related to 0006329 closedMatthias Damm 10000-014: PubSub SetSecurityKeys needs clarification for SecurityGroupId 
related to 0006542 closedPaul Hunkar 10000-017: Alias Names Need the concept of a Server Set to properly support non-transparent redundant Servers 

Activities

Matthias Damm

2021-03-04 15:44

developer   ~0013947

One option is to use the DiscoveryUrls in the ApplicationDescription as part of the solution.

But there is also a bigger redundancy discussion started by Jeff. Need to wait for the resolution there.

Matthias Damm

2021-09-19 18:50

developer   ~0014880

Added in OPC 10000-14 - UA Specification Part 14 - PubSub 1.05.0 Draft35.docx

Added to '6.2.4.4 SecurityKeyServices' (PubSubGroup):
If the SKS supports non-transparent redundancy, each Server in the redundant set shall have one entry in the array.

Jim Luth

2021-09-21 15:46

administrator   ~0014891

Agreed to changes in Virtual F2F.

Issue History

Date Modified Username Field Change
2020-12-30 11:58 Matthias Damm New Issue
2020-12-30 12:04 Matthias Damm Relationship added related to 0006329
2020-12-30 12:20 Matthias Damm Relationship added related to 0006330
2020-12-30 12:27 Matthias Damm Relationship added related to 0006331
2021-03-04 15:43 Matthias Damm Assigned To => Matthias Damm
2021-03-04 15:43 Matthias Damm Status new => assigned
2021-03-04 15:44 Matthias Damm Note Added: 0013947
2021-03-04 16:14 Jeff Harding Relationship added related to 0006542
2021-09-19 18:50 Matthias Damm Status assigned => resolved
2021-09-19 18:50 Matthias Damm Resolution open => fixed
2021-09-19 18:50 Matthias Damm Note Added: 0014880
2021-09-21 15:46 Jim Luth Status resolved => closed
2021-09-21 15:46 Jim Luth Fixed in Version => 1.05
2021-09-21 15:46 Jim Luth Note Added: 0014891