IETF Logo Mail Archive

Re: [netmod] I-D Action: draft-ietf-netmod-system-mgmt-11.txt

Martin Bjorklund <mbj@tail-f.com> Thu, 06 February 2014 11:59 UTC

Return-Path: <mbj@tail-f.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2F9A1A0385 for <netmod@ietfa.amsl.com>; Thu, 6 Feb 2014 03:59:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.436
X-Spam-Level:
X-Spam-Status: No, score=-2.436 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.535, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J6XLwayosqG8 for <netmod@ietfa.amsl.com>; Thu, 6 Feb 2014 03:59:17 -0800 (PST)
Received: from mail.tail-f.com (mail.tail-f.com [109.74.15.94]) by ietfa.amsl.com (Postfix) with ESMTP id DA0AC1A00E6 for <netmod@ietf.org>; Thu, 6 Feb 2014 03:59:16 -0800 (PST)
Received: from localhost (138.162.241.83.in-addr.dgcsystems.net [83.241.162.138]) by mail.tail-f.com (Postfix) with ESMTPSA id BE5CE240C5E3; Thu, 6 Feb 2014 12:59:14 +0100 (CET)
Date: Thu, 06 Feb 2014 12:59:14 +0100
Message-Id: <20140206.125914.1253292680765952579.mbj@tail-f.com>
To: j.schoenwaelder@jacobs-university.de
From: Martin Bjorklund <mbj@tail-f.com>
In-Reply-To: <20140206103915.GB49052@elstar.local>
References: <20140120120649.30508.62952.idtracker@ietfa.amsl.com> <CF17F4CF.21088%yiya@cisco.com> <20140206103915.GB49052@elstar.local>
X-Mailer: Mew version 6.5rc2 on Emacs 23.4 / Mule 6.0 (HANACHIRUSATO)
Mime-Version: 1.0
Content-Type: Text/Plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Cc: netmod@ietf.org
Subject: Re: [netmod] I-D Action: draft-ietf-netmod-system-mgmt-11.txt
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Feb 2014 11:59:18 -0000

Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de> wrote:
> On Wed, Feb 05, 2014 at 07:05:30PM +0000, Yi Yang (yiya) wrote:
> > I have a quick question on authentication method.
> > 
> > If the system supports SSH public key authentication only, but not local
> > user password, how user-authentication-order should be set?
>  
> I think this is fair question to ask. Martin and Andy, are we missing
> an identity for this case?

The local-users feature handles SSH keys as well, see 3.5.1.  As
explained in 3.5.1, ssh public key authentication is requested by the
client, so the authentication-order on the server doesn't really
apply.


/martin

v2.23.0 | Report a Bug | By Email