Re: [Isms] #32: is the securityName=username default OK?

[Sam Hartman <hartmans-ietf at mit.edu>]

>>>>> "Nelson," == Nelson, David <dnelson at enterasys.com> writes:

    Nelson,> AAA systems almost always authenticate humans.  Even when
    Nelson,> they don't, the protocols have been designed for
    Nelson,> authentication of humans.  That pretty much guarantees
    Nelson,> that the basic identity nomenclature (the username) will
    Nelson,> be human readable, because it has to be human writeable
    Nelson,> (e.g. entered by a human at a keyboard).  I believe you
    Nelson,> can assume and require that tmSecurityName be human
    Nelson,> readable without any loss of generality, even when the
    Nelson,> credentials are in a more complex form, such as digital
    Nelson,> certificates.

I believe that assuming Tmsecurityname is human readable is in general
false.  There are too many complicated problems having to do with
choosing the right name and various things people want to put in a
name.

I believe that you can assume the ssh username is human readable and
agree with david that you do not want per-user configuration.

--Sam


_______________________________________________
Isms mailing list
Isms at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/isms