RE: [dhcwg] identifier for key selection

>I want to authenticate not hardware but user.

Well, DHCP is the Dynamic Host Configuration Protocol. In many cases when
DHCP starts there is no user (yet), or DHCP is being used by systems that
are multi-user. But, I understand your desire to do this. And, there's
always the ability to define additional authentication protocols.

- Bernie

> -----Original Message-----
> From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] 
> On Behalf Of Mayumi Yanagiya
> Sent: Thursday, July 08, 2004 7:23 AM
> To: Bernie Volz; dhcwg@ietf.org
> Subject: Re: [dhcwg] identifier for key selection
> 
> 
> Hello Bernie,
> 
> Thank you for your comments.
> 
> Bernie Volz wrote:
> 
> > Hi:
> > 
> > Regarding the first question:
> > 
> > As defined in RFC 3315:
> > 
> >       DHCP realm                A name used to identify the DHCP
> >                                 administrative domain from 
> which a DHCP
> >                                 authentication key was selected.
> > 
> > So, both the realm and the client's DUID would be used to 
> obtain the 
> > key. If the received realm doesn't match the server's or one of the 
> > server's, the server needn't bother looking for a key?
> > 
> > Instead, it might send its realm to the client in an Advertise?
> 
> I see.
> 
> > Regarding the second, where do you want to put this identifier? The 
> > Client Identifier must be a DUID that follows one of the 
> formats given 
> > in the document. New formats could be defined. The Client 
> Identifier 
> > is supposed to represent the client (hardware), not the 
> user (though 
> > often there is only one user for each client). There's also the 
> > possibility of defining new options to carry user, subscriber, etc 
> > information similar to what has been done for DHCPv4 (see 
> the various 
> > Relay Agent suboptions).
> 
> I want to authenticate not hardware but user.
> Because, when we authenticate user, users are allowed to 
> change hardware 
> without reporting the change to administrator. I think that 
> it is very 
> convenience for user and administrator.So I'm looking for an 
> identifier 
> that I can use as user identifier.
> 
> When I use suboption such as subscriber-ID specified in 
> draft-ietf-dhc-subscriber-id-06.txt,can I use the suboption to select 
> the client's key?
> 
> 
> Thanks,
> --Mayumi
> 
> 
> 
> 
> _______________________________________________
> dhcwg mailing list
> dhcwg@ietf.org
> https://www1.ietf.org/mailman/listinfo/dhcwg
> 

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg