Document Action: 'The TACACS+ Protocol' to Informational RFC (draft-ietf-opsawg-tacacs-17.txt)

The IESG <iesg-secretary@ietf.org> Thu, 19 March 2020 19:20 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Document Action: 'The TACACS+ Protocol' to Informational RFC (draft-ietf-opsawg-tacacs-17.txt)
Auto-Submitted: auto-generated
Precedence: bulk
Cc: draft-ietf-opsawg-tacacs@ietf.org, warren@kumari.net, rfc-editor@rfc-editor.org, opsawg-chairs@ietf.org, Joe Clarke <jclarke@cisco.com>, jclarke@cisco.com, opsawg@ietf.org, The IESG <iesg@ietf.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <158464562489.15836.14722266654525843849@ietfa.amsl.com>
Date: Thu, 19 Mar 2020 12:20:24 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/vzKb8ovYowa_QC-SvwtVug0GupQ>

The IESG has approved the following document:
- 'The TACACS+ Protocol'
(draft-ietf-opsawg-tacacs-17.txt) as Informational RFC

This document is the product of the Operations and Management Area Working
Group.

The IESG contact persons are Warren Kumari and Ignas Bagdonas.

A URL of this Internet Draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsawg-tacacs/

Technical Summary

This document describes the current implementation of of the TACACS+ protocol. It does not change or add new functionality intended to address existing and well documented shortcomings of the protocol, especially on the security side. TACACS+ is widely deployed and is expected to stay deployed for a foreseeable future, and therefore any future extensions work would benefit from having a stable reference to the current functional specification.

Working Group Summary

The WG process was long for this document, initially resulting from the change of focus to the documentation of existing TACACS+ protocol as deployed and leaving the development of new functionality for further time. There were disagreements on whether the document should be progressed at all, what the intended status should be, and on a notable number of technical details. Eventually the consensus on what should go into the document and what the intended status should be was reached.

Document Quality

Multiple commercial and opensource implementations of the TACACS+ protocol exist, as well as an extensive operational experience with it. Over time there have been several detailed reviews of the document by WG members, as well as feedback from implementation experience.

Personnel

Joe Clarke is the Document Shepherd for this document. Ignas Bagdonas is the Responsible Area Director.

RFC Editor Note

Please update the following sentence in Section 6.1:

OLD:
KRB5 and KRB4 are Kerberos version 5 and 4.

NEW:
KRB5 [RFC4120] and KRB4 [1] are Kerberos version 5 and 4.

And please add the following Informative References:

[RFC4120] and
[1] Miller, S., Neuman, C., Schiller, J., and J. Saltzer, "Section
E.2.1: Kerberos Authentication and Authorization System",
M.I.T. Project Athena, Cambridge, Massachusetts, December 21,
1987.

Document Action: 'The TACACS+ Protocol' to Inform… The IESG