Re: [netmod] Last Call: <draft-ietf-netmod-system-mgmt-15.txt> (A YANG Data Model for System Management) to Proposed Standard

[Sean Turner <[e-mail]>]

Hi,

I wonder if the user authentication model should include something like a validity periods for passwords/keys?  When Tatu came and presented to SAAG @ IETF 85 (http://www.ietf.org/proceedings/85/slides/slides-85-saag-2.pdf) he noted that one issue with SSH was keys never expiring (also see http://tools.ietf.org/id/draft-ylonen-sshkeybcp-01.txt); would adding a date that could be monitored help in this regard?

Additionally, RFC 6187 adds support for certificate for SSH authentication shouldn’t this draft include provisions to support this authentication mechanism?

spt

On Apr 29, 2014, at 10:10, The IESG <[e-mail]> wrote:

> 
> The IESG has received a request from the NETCONF Data Modeling Language
> WG (netmod) to consider the following document:
> - 'A YANG Data Model for System Management'
>  <draft-ietf-netmod-system-mgmt-15.txt> as Proposed Standard
> 
> The IESG plans to make a decision in the next few weeks, and solicits
> final comments on this action. Please send substantive comments to the
> [e-mail] mailing lists by 2014-05-13. Exceptionally, comments may be
> sent to [e-mail] instead. In either case, please retain the
> beginning of the Subject line to allow automated sorting.
> 
> Abstract
> 
> 
>   This document defines a YANG data model for the configuration and
>   identification of some common system properties within a device
>   containing a NETCONF server.  This includes data node definitions for
>   system identification, time-of-day management, user management, DNS
>   resolver configuration, and some protocol operations for system
>   management.
> 
> 
> 
> 
> The file can be obtained via
> http://datatracker.ietf.org/doc/draft-ietf-netmod-system-mgmt/
> 
> IESG discussion can be tracked via
> http://datatracker.ietf.org/doc/draft-ietf-netmod-system-mgmt/ballot/
> 
> 
> No IPR declarations have been submitted directly on this I-D.
> 
> Note that RFC 1321 and RFC 6151 are normative references to
> Informational documents. 
>