Re: [netconf] Latest ietf-netconf-server draft and related modules

[Kent Watsen <[e-mail]>]

> RFC 4252 says:
> 
>   The server drives the authentication by telling the client which
>   authentication methods can be used to continue the exchange at any
>   given time.  The client has the freedom to try the methods listed by
>   the server in any order.  This gives the server complete control over
>   the authentication process if desired, but also gives enough
>   flexibility for the client to use the methods it supports or that are
>   most convenient for the user, when multiple methods are offered by
>   the server.


And the RFC goes on to say:

   The 'authentications that can continue' is a comma-separated name-
   list of authentication 'method name' values that may productively
   continue the authentication dialog.

   It is RECOMMENDED that servers only include those 'method name'
   values in the name-list that are actually useful.  However, it is not
   illegal to include 'method name' values that cannot be used to
   authenticate the user.

All of the methods returned SHOULD be productive for the client to choose next.  It doesn’t matter (from a protocol perspective) which method is selected, assuming more than one was returned.

Kent