Re: [Isms] pre-08 for TSM document
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Isms] pre-08 for TSM document



On Fri, Jun 27, 2008 at 08:51:28PM +0800, David Harrington wrote:
 
> Is there a limit to SSH user name? We should make sure they are
> consistent.

usmUserName is SnmpAdminString (SIZE(1..32)) so there is a limit.  On
the other hand, there is no limit for snmpCommunityName. I am not sure
we need to have identical limits for security IDs.

The fun part is that in several places there is no limit for a
securityName but VACM says vacmSecurityName is SnmpAdminString
(SIZE(1..32)). So you can configure USM to map a user name to an
snmpSecurityName for which it is impossible to specify access control
rules in VACM. It looks we should have defined an SnmpSecurityName TC
to make things really consistent...

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>
_______________________________________________
Isms mailing list
Isms at ietf.org
https://www.ietf.org/mailman/listinfo/isms



Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.