[Netconf] Pls check before COB Jan 6th, 2012: draft-ietf-netconf-access-control-07.txt

Dear WG participants,

Just on Xmas eve, we cleared the IESG comments and DISCUSS
on this document.

To clear the discuss, we had to add a knob in the ietf-netconf-acm
YANG module that allows an administartor to enable/disable
dynamic addtion of external groups:

       leaf enable-external-groups {
         type boolean;
         default true;
         description
           "Controls whether the server uses the groups reported by the
            NETCONF transport layer when it assigns the user to a set of
            NACM groups.  If this leaf has the value 'false', any group
            names reported by the transport layer are ignored by the
            server.";
       }

That is the only substantial change, and we want to be sure the WG
agrees with that.

Other than that we believe that the changes are only editorial and/or
clarifications. Pls let us know if you agree or disagree.

Bert Wijnen,
document shepherd

----- Original Message ----- 
From: <internet-drafts@ietf.org>
To: <i-d-announce@ietf.org>
Cc: <netconf@ietf.org>
Sent: Friday, December 23, 2011 1:57 PM
Subject: [Netconf] I-D Action: draft-ietf-netconf-access-control-07.txt

>
> A New Internet-Draft is available from the on-line Internet-Drafts 
> directories. This draft is a work item of the Network Configuration Working 
> Group of the IETF.
>
> Title           : Network Configuration Protocol (NETCONF) Access Control 
> Model
> Author(s)       : Andy Bierman
>                          Martin Bjorklund
> Filename        : draft-ietf-netconf-access-control-07.txt
> Pages           : 54
> Date            : 2011-12-23
>
>   The standardization of network configuration interfaces for use with
>   the NETCONF protocol requires a structured and secure operating
>   environment that promotes human usability and multi-vendor
>   interoperability.  There is a need for standard mechanisms to
>   restrict NETCONF protocol access for particular users to a pre-
>   configured subset of all available NETCONF protocol operations and
>   content.  This document defines such an access control model.
>
>
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-netconf-access-control-07.txt
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> This Internet-Draft can be retrieved at:
> ftp://ftp.ietf.org/internet-drafts/draft-ietf-netconf-access-control-07.txt
>
> _______________________________________________
> Netconf mailing list
> Netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf 