Re: [Isms] Session timeouts?

["David B. Nelson" <d.b.nelson at comcast.net>]

Jeffrey Hutzelman writes...

> I think it's entirely reasonable to specify RADIUS attributes which
> describe session timeout behavior for SSH, with the understanding that 
> while there is a standard way to describe the timeouts, there is no 
> requirement that an SSH server actually implement them.

Right.  RADIUS standards do not create requirements for applications to
implement the use of certain attributes, or support certain features; only
end users do that.  The most that the RADIUS documents dictate is how the
attributes are to be used, if the feature is implemented. 

I think it's useful to point out what RADIUS features are available for use
with SNMP Transport Models.  That's how I would propose to handle the
session timeout issue for ISMS, to describe how RADIUS attributes are used
to provision this feature, and suggest (dare I say recommend?) how it might
be implemented, e.g. in the SSH server.

If it turns out that there are Security Considerations surrounding the
decision to implement session timeouts (or not) we could describe them.


_______________________________________________
Isms mailing list
Isms at ietf.org
https://www.ietf.org/mailman/listinfo/isms