Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-ssh-client-server-24

Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de> Wed, 02 June 2021 15:32 UTC

Return-Path: <J.Schoenwaelder@jacobs-university.de>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE1FF3A0DBC for <netconf@ietfa.amsl.com>; Wed, 2 Jun 2021 08:32:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DEDTLwlLex9X for <netconf@ietfa.amsl.com>; Wed, 2 Jun 2021 08:32:22 -0700 (PDT)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80082.outbound.protection.outlook.com [40.107.8.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E722A3A0DB9 for <netconf@ietf.org>; Wed, 2 Jun 2021 08:32:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=R2niv5IzPQash9yc0pjDh/DB3qY4AScnuh+l41KqQ/0ZGu7zLda5f8ILIK/fHQ6YOM2CKVefnx0VwOwTkRxcgLAE01gSRI+zYfQEhS4EzVrgXcyU64QVDrfRXGvCNFDTmM2PY9DeqerhfswXvbA3VcGpl+J52VMRctg1URJJeWwuDYaoQyDtFuoI1iqDXh0/5Vv5eqI8S2V7tPpktYwlmCFEBv55LBU469Am30BXXy1+nJgZRhdMzBfip1GVAMgasnzy9P4msuxnRRkwgy0v/15S8upi5SuOsudRdfzAoq+QIV8riVj0G7ZijlDYGgyuntz7DlOIl3a8PiSlNmzqPA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PRjpC4oFU6TxtdazV9TQGOw7bDw2u9E5sN5mwrfaFq8=; b=bITpEhEw8sq+DUnqs9yq+UGIuLTxpVWKD7J5IZyiEZl3bmHQNm1e6YYqRKM4vuqaim7PTe2SOXv7FEETeODwaVo9j8L2DnRsg0WxFvBKxisAC0Fba8wpXUa9zxujtf6B91UylI9VEdr5lVHZa9fYThB7Y1OYLPxAPMIgi/H+TB3p7Eqj6IhP7F1orpQnUzolH/iDhI/7yOLBLWU5MpIhm6twmoVtjOgdVZXO6TpOC7NWRLBHL0jb2Scj4kPfhC87wq59yJ5Ardm2Nr2ebmkeOEyBmCQQSkS7gNfLYpZTcEN0kX2G3nPj0Cs2Kv0CwltS/VlrIzjwn3d2aJyaQd2m3Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PRjpC4oFU6TxtdazV9TQGOw7bDw2u9E5sN5mwrfaFq8=; b=D4bxTZl9evEXISyXMI+s8xdZUSWm1Eq6ArxybZz/uu8Iv7zBjRuCJOzOjv539jyplVQQ0HDW8CHPFr6ES2/6BvclBPxOvVXuQEdR9ytVdyD1P37f1FetzxWPkW4HQWs7HiN1BPbvhiQ/0X5vQ7jmuR/YPCknNgQNv6dwAK45V3w=
Authentication-Results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=jacobs-university.de;
Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) by AM0P190MB0705.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:19e::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4173.21; Wed, 2 Jun 2021 15:32:18 +0000
Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::fd93:9b33:ac92:ea58]) by AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::fd93:9b33:ac92:ea58%8]) with mapi id 15.20.4195.020; Wed, 2 Jun 2021 15:32:18 +0000
Date: Wed, 02 Jun 2021 17:32:17 +0200
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: Kent Watsen <kent+ietf@watsen.net>
Cc: Andy Bierman <andy@yumaworks.com>, "netconf@ietf.org" <netconf@ietf.org>
Message-ID: <20210602153217.4uukkxm6c2lmdqyc@anna.jacobs.jacobs-university.de>
Reply-To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
Mail-Followup-To: Kent Watsen <kent+ietf@watsen.net>, Andy Bierman <andy@yumaworks.com>, "netconf@ietf.org" <netconf@ietf.org>
References: <162197047222.6755.5719177112947542346@ietfa.amsl.com> <01000179af378320-73241cbb-c5a4-45dd-8c87-03ff603cc2f0-000000@email.amazonses.com> <CABCOCHTjKHE1pbP05tcBGvx1Ms5LJsvmtBe1te4kOr-1jwTJPw@mail.gmail.com> <01000179c9c98396-98e37454-f6bd-4753-92a4-0c8911d102d9-000000@email.amazonses.com> <20210602055558.m4qzan73lt6ebnmt@anna.jacobs.jacobs-university.de> <01000179cd25b935-41381155-4d11-4e36-a6ec-b71b55fde875-000000@email.amazonses.com>
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <01000179cd25b935-41381155-4d11-4e36-a6ec-b71b55fde875-000000@email.amazonses.com>
X-Originating-IP: [212.201.44.244]
X-ClientProxiedBy: AM0PR05CA0076.eurprd05.prod.outlook.com (2603:10a6:208:136::16) To AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from localhost (212.201.44.244) by AM0PR05CA0076.eurprd05.prod.outlook.com (2603:10a6:208:136::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4195.20 via Frontend Transport; Wed, 2 Jun 2021 15:32:17 +0000
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: a67fced3-6759-4a21-9d6e-08d925db9b19
X-MS-TrafficTypeDiagnostic: AM0P190MB0705:
X-MS-Exchange-Transport-Forked: True
X-Microsoft-Antispam-PRVS: <AM0P190MB0705A5108D6159C21B4C8508DE3D9@AM0P190MB0705.EURP190.PROD.OUTLOOK.COM>
X-MS-Oob-TLC-OOBClassifiers: OLM:9508;
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: /fzcPhjMBMFbsnZ3HS6b+yQ+CvZQya4GtdzgtzV8USEm1SrZwA5BOnRseEuKVA6liwmlljyKqvDAKyIE2/jZciTB2O2bogcx6UzkOIjxK47V6SbObf9JBeen/y8v+v/RN1IQ0fjzSO5A5cQr54DOH7Ix4eKkz4YwUrzhQLS0DllhmYRYJWwk2CLEhn0ONFQxNZIy2ZmO6pju+jg0CmZmWzJ/5X1S7X6Et4iKb5YkSGf0a4PYysPuvfxGnjYtYDtc5yK8y9nwuWnDYlzWz1mJuGwsW/i5YKjxt80QyGSzhE5z+R/64aexOP40MTfIzjBDVEgp9WXJwUxzXXj4YNOu6b31QoQ1hoJFxwr+/Rrk+jMMsV2DM/yyviDB4zZLUBCDCYo7uUqfazAfWPXb+kZSgL0OuIYSVsSN73mnCUEilED+d59SiVy5XbtvMxGRO3WhkGA4Sls1jeqOv+pU7N7CoIePpausCc5oPGlI5Oh9hvy1h0iwe8OSHnIKWfTuXTBkZn65hVPNarCjVHGrE0RcNyiitWbiaIDsPeITQokuoUGy4Iblr3kHRY2Ch70e9ZH/kDfWg0uYL8sJIRky438uxGJl2rvdH3GrxevImAPKgNYb6+T5TXxnhJqiLmVNmOY8d+zc2tjftj/LJ6amLqIlpK7fNsKAQynmS3QK0BX+ahEL/aXDNhiH5weKEtcHp0UV/WnjUf4n1m1ML4TOG3rs+O9AiYRazRDZ0BuF7J1TEPzU/ul9LQM8CXuBZciAfRj3PPefRrAnByIn+0GhtwOKrA==
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0P190MB0641.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(396003)(39840400004)(136003)(346002)(366004)(376002)(86362001)(316002)(786003)(66556008)(66476007)(6486002)(54906003)(83380400001)(956004)(38100700002)(8676002)(26005)(66946007)(16526019)(186003)(5660300002)(1076003)(478600001)(52116002)(2906002)(4326008)(8936002)(3450700001)(38350700002)(6496006); DIR:OUT; SFP:1101;
X-MS-Exchange-AntiSpam-MessageData: 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
X-OriginatorOrg: jacobs-university.de
X-MS-Exchange-CrossTenant-Network-Message-Id: a67fced3-6759-4a21-9d6e-08d925db9b19
X-MS-Exchange-CrossTenant-AuthSource: AM0P190MB0641.EURP190.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jun 2021 15:32:18.1262 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 32FzU+etj+JfxRcql8M8OiCX07D34hwJLI75GkuP2raFX2Yeet6QUfoTV6zusrDogjayXDbbAZXmaaqS+G5RG26pC55+KosCKraN8UOB5yQ=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0P190MB0705
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/Q2GsQt897ptnI1lz6WvElwVvGsw>
Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-ssh-client-server-24
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Jun 2021 15:32:27 -0000

On Wed, Jun 02, 2021 at 02:34:32PM +0000, Kent Watsen wrote:
> 
> >> It seems that the following might works:
> >> 
> >>  - In ietf-ssh-client, rename "userauth-*" to "client-ident-*”
> >>      - since client-side config, the “userauth” nomenclature is not as strong
> >>      - aligns “client-ident” usage with the “tls” and “http” drafts
> >> 
> >>  - In ietf-ssh-server, rename "userauth-*" to "local-user-auth-*”
> >>      - makes sense as nodes depend from a container called “users” that
> >>        has a if-feature statement “local-users-supported”
> >>      - thus, can simultaneously be parsed as "[local-user]-auth-*”
> >>        and "local-[user-auth]-*”
> >> 
> >> I’ll make this  change if no objections.
> > 
> > I have not understood which problem this renaming solves. SSH
> > authentication mechanisms have well established names, why is it
> > useful to invent different names?
> 
> Focus on the method names:
> 
>       "publickey"             REQUIRED
>       "password"              OPTIONAL
>       "hostbased"             OPTIONAL
>       "none"                  NOT RECOMMENDED
> 
> The “userauth” string isn’t important.
>

I guess I have not understood the proposed edits.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>