Re: Question about the defined inital SMP Parties?

Marshall Rose <mrose@dbc.mtview.ca.us> Wed, 23 September 1992 03:21 UTC

To: mlk%bir.UUCP@mathcs.emory.edu
Reply-To: snmp2@thumper.bellcore.com
Cc: snmp2@thumper.bellcore.com
Subject: Re: Question about the defined inital SMP Parties?
In-Reply-To: Your message of "Tue, 22 Sep 1992 22:27:43 EST." <0D15DDF1.eajiua@bir.bir.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Tue, 22 Sep 1992 20:24:26 -0700
Message-Id: <22622.717218666@dbc.mtview.ca.us>
Sender: ietf-archive-request@IETF.NRI.Reston.VA.US
From: Marshall Rose <mrose@dbc.mtview.ca.us>

> In 'Introduction to SMP' I could not see a differnce between the
> relationship between parties 3&4 and 5&6.

You're right.  The reason is that if you are running with DES, then you
may wish to add this to your viewtable

	viewParty = { initialPartyId a b c d 3 }
	viewSubtree = { snmpSecrets }
	viewStatus = { excluded }
	viewMask = { ''h }

which basically requires that you use privacy services to diddle party
secrets.  This is part of the default configuration used by SNMP
Security.  SMP removed this requirement because of the XOR thing.

Since this topic is a security thing, it will get discussed in the SNMP
security working group.

/mtr

Re: Question about the defined inital SMP Parties? Marshall Rose