Re: [Isms] wg last call followup - sshtm

["David Harrington" <ietfdbh at comcast.net>]

Whoa!!!!!!

There is NO securityName in the message. 
Where do you think the message contains a securityname?

IN 4.2, TSM 
   3) Set securityParameters to a zero-length OCTET STRING ('0400').

dbh

> -----Original Message-----
> From: isms-bounces at ietf.org [mailto:isms-bounces at ietf.org] On 
> Behalf Of Jeffrey Hutzelman
> Sent: Sunday, March 01, 2009 8:20 AM
> To: tom.petch; Juergen Schoenwaelder; isms at ietf.org
> Cc: jhutz at cmu.edu
> Subject: Re: [Isms] wg last call followup - sshtm
> 
[...]
> >
> > So the application specified alice and got back bob.
> >
> > Is this how it is meant to work?
> 
> That won't happen.  In your scenario, the CR does not "use 
> bob for access 
> control".  TSM compares the name reported by SSH (bob) with the 
> securityName in the SNMP message, and when they don't match, 
> rejects the 
> request.
> 
> -- Jeff
> _______________________________________________
> Isms mailing list
> Isms at ietf.org
> https://www.ietf.org/mailman/listinfo/isms
>