Re: [Isms] charter proposal

On Tue, Aug 02, 2005 at 10:52:03AM -0700, Kaushik Narayan wrote:

> I am not sure we need elaborate AAA work in order to allow for
> linkages between ISMS authentication and SNMPv3 VACM.
> Ideally the RADIUS work for this should happen in RADEXT
> and I believe Dave Nelson and Greg Weber already have an
> ID that would be relevant.
> 
> http://www.ietf.org/internet-drafts/draft-nelson-radius-management-authorization-01.txt

This is indeed interesting and highly relevant work. I do, however,
believe that (if we go down this road) we need to specify when exactly
such authorization information is retrieved, how long it is valid and
how such an external source of authorization information fits into the
RFC 3411 model.

I am also not sure the implementation specific textual formats
described in the ID cited above which convey authorization information
are particularily useful for interoperability, but that might be a
less important detail at this point in time.

/js

-- 
Juergen Schoenwaelder		    International University Bremen
<http://www.eecs.iu-bremen.de/>	    P.O. Box 750 561, 28725 Bremen, Germany

_______________________________________________
Isms mailing list
Isms@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/isms