Re: [dhcwg] identifier for key selection

[Mayumi Yanagiya <[e-mail]>]

Hi,

Thanks for your comments.
I try to make a problem statements draft.

Regards,
--Mayumi

>>I want to authenticate not hardware but user.
> 
> 
> Well, DHCP is the Dynamic Host Configuration Protocol. In many cases when
> DHCP starts there is no user (yet), or DHCP is being used by systems that
> are multi-user. But, I understand your desire to do this. And, there's
> always the ability to define additional authentication protocols.
> 
> - Bernie
> 
> 
>>-----Original Message-----
>>From: [e-mail] [mailto:[e-mail]] 
>>On Behalf Of Mayumi Yanagiya
>>Sent: Thursday, July 08, 2004 7:23 AM
>>To: Bernie Volz; [e-mail]
>>Subject: Re: [dhcwg] identifier for key selection
>>
>>
>>Hello Bernie,
>>
>>Thank you for your comments.
>>
>>Bernie Volz wrote:
>>
>>
>>>Hi:
>>>
>>>Regarding the first question:
>>>
>>>As defined in RFC 3315:
>>>
>>>      DHCP realm                A name used to identify the DHCP
>>>                                administrative domain from 
>>
>>which a DHCP
>>
>>>                                authentication key was selected.
>>>
>>>So, both the realm and the client's DUID would be used to 
>>
>>obtain the 
>>
>>>key. If the received realm doesn't match the server's or one of the 
>>>server's, the server needn't bother looking for a key?
>>>
>>>Instead, it might send its realm to the client in an Advertise?
>>
>>I see.
>>
>>
>>>Regarding the second, where do you want to put this identifier? The 
>>>Client Identifier must be a DUID that follows one of the 
>>
>>formats given 
>>
>>>in the document. New formats could be defined. The Client 
>>
>>Identifier 
>>
>>>is supposed to represent the client (hardware), not the 
>>
>>user (though 
>>
>>>often there is only one user for each client). There's also the 
>>>possibility of defining new options to carry user, subscriber, etc 
>>>information similar to what has been done for DHCPv4 (see 
>>
>>the various 
>>
>>>Relay Agent suboptions).
>>
>>I want to authenticate not hardware but user.
>>Because, when we authenticate user, users are allowed to 
>>change hardware 
>>without reporting the change to administrator. I think that 
>>it is very 
>>convenience for user and administrator.So I'm looking for an 
>>identifier 
>>that I can use as user identifier.
>>
>>When I use suboption such as subscriber-ID specified in 
>>draft-ietf-dhc-subscriber-id-06.txt,can I use the suboption to select 
>>the client's key?
>>
>>
>>Thanks,
>>--Mayumi
>>
>>
>>
>>
>>_______________________________________________
>>dhcwg mailing list
>>[e-mail]
>>https://www1.ietf.org/mailman/listinfo/dhcwg
>>
> 
> 
> 
> _______________________________________________
> dhcwg mailing list
> [e-mail]
> https://www1.ietf.org/mailman/listinfo/dhcwg
> 

-- 

*++++++++++++++++++++++++++++++++++++++++++
NTT Network Service Systems Laboratories
Mayumi Yanagiya
tel: [phone]   fax: [phone]
E-mail: [e-mail]
+++++++++++++++++++++++++++++++++++++++++++*


_______________________________________________
dhcwg mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/dhcwg