Re: [Call-home] draft now posted; BoF?

HI,

I too would like to see the same objectives achieved as
specified below by Juergen. And in addition, let's not
forget about authorization!

On Tue, 27 Sep 2005, Juergen Schoenwaelder wrote:
> On Tue, Sep 27, 2005 at 11:33:52AM +0200, Eliot Lear wrote:
>  
> > I'm not quite sure what you're asking for.  Are you suggesting, for
> > instance, that the initiator have a host key and the listener make use
> > of a user key?
> 
> I am asking for a solution which gives me the same authenticated
> identities regardless how the connection was established. In SNMP
> terms, I assume that an engine hosting a command generator identifies
> itself as a user on the engine hosting the command responder and I
> like to leverage this user identity which does exist on the device
> across multiple management interfaces, whether that is a CLI, NETCONF
> or even an HTTP interface.
> 
> Looking at the real-world networking devices I have access to, they
> all have a notion of a user identity and they all are able to talk
> RADIUS to outsource the authentication decision, which is typically
> then password based. I like to leverage that and if call home can be
> made to work without changing the premise I am operating on, I am
> fine.
> 
> /js
> 
Regards,
/david t. perkins

_______________________________________________
Call-home mailing list
Call-home@ietf.org
https://www1.ietf.org/mailman/listinfo/call-home