Re: [Isms] open issues

["Randy Presuhn" <randy_presuhn at mindspring.com>]

Hi -

> From: "Juergen Schoenwaelder" <j.schoenwaelder at jacobs-university.de>
> To: "Randy Presuhn" <randy_presuhn at mindspring.com>
> Cc: <isms at ietf.org>
> Sent: Wednesday, April 23, 2008 2:47 AM
> Subject: Re: [Isms] open issues
...
> But if the manager is the SSH server, then all you have is an
> authenticated host the server is running on. You made the point that
> there can be distinct notification receivers on the same host. So how
> do you solve that puzzle?
...

I don't.  Our architecture, both on the manager and on the agent ends,
strongly assumes that security mechanisms are able to authenticate
to the granularity of a principal.  RFC 3411 sections 3.2.1 and 3.2.2
should make that clear.  If SSH doesn't provide (or can't be made to
provide) that service, then it's not suitable.  It's as simple as that.

Randy

_______________________________________________
Isms mailing list
Isms at ietf.org
https://www.ietf.org/mailman/listinfo/isms