Definitions of Managed Objects for IP Storage User Identity Authorization
draft-ietf-ips-auth-mib-08

[Ballot discuss]
In section 7.6, I am confused by the discussion of "other."  Given the
  discussion in section 5, it is pretty clear to me that the intent is
  to allow additional credential types to be supported easily.  However,
  the discussion in Section 7.6 does not really tell me how to add an
  additional credential type, say a certificate.

  Please reference RFC 4120 instead of RFC 1510.

[Note]: 'PROTO Shepherd black_david@emc.com
NOTE: -08 submitted early Friday (at end of Last Call) to include Bert''s
Last Call comments
Title Change: Definitions of Managed Objects for IP Storage User Identity Authorization [add "IP Storage"]' added by Allison Mankin

IANA Last Call Comments:
Upon approval of this document the IANA will assign a mib-2 number for the ipsAuthMibModule.  This registration will take place in the prefix
iso.org.dod.internet.mgmt.mib-2 (1.3.6.1.2.1) at the following location:
http://www.iana.org/assignments/smi-numbers

We understand this to be the only IANA Actions for this document.

Bert took on being MIB Doctor, expedited because of the long delay,
and gave comments which David and I reviewed.  We all agreed could be
Last Call comments.

[Note]: 'We do not currently have a MIB Doctor - David Harrington refused.  I''m also on the hook
to reassert that this MIB is legitimate because it was chartered.  It is needed by the iSCSI MIB.' added by Allison Mankin

[Note]: 'We do not currently have a MIB Doctor - David Harrington refused. 
I''m also on the hook
to reassert that this MIB is legitimate because it was chartered. 
It is needed by the iSCSI MIB.' added by Allison Mankin

[Note]: 'We do not currently have a MIB Doctor - David Harrington refused.  I''m also on the hook
to reassert that this MIB is legitimate because it was chartered.  It is needed by the iSCSI MIB.' added by Allison Mankin

[Note]: 'Still waiting for the author to rev.  David Black has pinged again at intervals - most recently at end of November.  MIB Doctor review will be done anyway, since only a couple of objects are due to change - Bert committed to the MIB doctor review at the end of November.' has been cleared by Allison Mankin

Still waiting for the author to rev.  David Black has pinged again at intervals - most recently at end of November.  MIB Doctor review will be done anyway, since only a couple of objects are due to change - Bert committed to the MIB doctor review at the end of November.

[Note]: 'Still waiting for the author to rev.  David Black has pinged again at intervals - most recently at end of November.  MIB Doctor review will be done anyway, since only a couple of objects are due to change - Bert committed to the MIB doctor review at the end of November.' added by Allison Mankin

Sent a review by Bernard Aboba and my review - advising withdrawal of this MIB due to inclusion of credentials.  SNMPv3 only DES, no authorization technology, other issues.  David Black summary and expansion of the security issues is in the IPS archive on 2003-07-01.  Solution:  remove the SRP and CHAP credential objects, give the MIB strictly an identity management purpose.  AES enhancement of SNMPv3 is coming, but this does not solve all the problems of trying to manage the centralized secrets with SNMP (my view).

From: Elizabeth Rodriguez [mailto:ElizabethRodriguez@ieee.org]

Hi Allison, Scott,

The Authentication MIB (draft-ietf-ips-auth-mib-04.txt) is now ready for
AD review.

It has passed WG last call, and has been reviewed for nits and by our
MIB advisior Keith McCloghrie.

Thank you,

Elizabeth Rodriguez & David Black