Re: [Isms] wg last call followup - e-mail address
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Isms] wg last call followup - e-mail address



--On Sunday, March 01, 2009 12:58:40 PM +0100 "tom.petch" <cfinss at dial.pipex.com> wrote:

What I think essential is an expanatory paragraph, much earlier, in tmsm
even (thinking that another transport model might find a use for this)
saying eg

"The transportAddress, as passed by the application may take the form
user at example.com:port
The 'user' part may be used to establish a transport and then be used by
the remote engine as securityName.  The local engine still uses
securityName as well and so has two names, one of which is used somewhere
and the other elsewhere making this specification hard to understand,
dysfunctional even.  This capability meets no known requirement but there
is a good reason for it being present".

Well, we're not going to have a paragraph like that, because it takes totally the wrong tone. The feature is present because it _does_ need a requirement and is needed. But yes, there should be a paragraph describing the transport address format; I'm surprised if that's not in there.


Well, you might find a better pair of the last two sentences but after
expending so much effort, I am a tad frustrated at my lack of
understanding:-).  I really would like to understand why we introduced
this and how it works.  My current focus is on a Command Generator as ssh
client and the processing of outbound Request and inbound Response;
forget about Command Responders and Notification engines for the moment.

Then you're not going to understand, because it's not intended for that use case. It's specfically for the case of a Notification Originator as an SSH client, where the SNMP securityName names the recipient of the notification, not the originator. In this case, using the securityName as the SSH username is almost certainly the _wrong_ thing to do, and the user at host transport address format provides a way to specify the correct username (which in fact likely has nothing to do with any other identity that SNMP knows about).

-- Jeff

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.