InfoMagic Standards 1994 January/InfoMagic Standards - January 1994.iso/inet/ietf/snmpsec/92nov.min

Text File | 1993-02-17 | 10KB | 232 lines

Editor's Note:  Minutes received 12/2/92

CURRENT_MEETING_REPORT_

Reported by James Galvin/TIS

Minutes of the SNMP Security Working Group (SNMPSEC)

The meeting was called to order at 4:00 p.m.  on November 17th.  The
Agenda was reviewed and accepted as presented.  It was mentioned that
the Charter was revised to reflect the need to align with SNMP version
2; there were no comments on the Charter as distributed to the mailing
list.  Finally, it was noted that the Security Area has been alerted to
the aggressive schedule we have planned and has been requested to
provide a security review of the soon to be revised documents as soon as
possible.

The following editorial changes were approved for all three documents:
        - change all references to SNMP to SNMPv2.
        - change all references to "Internet-standard Network Management
          Framework to SNMPv2 Framework.
        - change all references to "rfc1351Domain" to "snmpUDPDomain".
        - change the MIB to IMPORT from the SNMPv2 protocol operations
          document.
        - clarify the viewTable description when viewMask contains bits
          set to 0.
        - clarify in the MIB which default party identifiers execute at
          an agent and which execute at a management station.
        - clarify that the "a.b.c.d" in the initial party identifiers is
          always the agent's IP address.
        - clarify the text in the SMP introductory document that
          explains the relationship between initial parties 3 and 4 and
          initial parties 5 and 6.

The following technical clarifications were suggested and approved:
        - add a field to the partyTable to indicate if this party entry
          operates in the role of a management station or an agent.
        - change the sequence of steps in the authentication protocol so
          that the party clocks are not advanced until after the access
          control check is done; otherwise it is possible for authentic
          parties to advance the clocks of parties to which they do not
          have access.
        - change the initial party configurations such that the sending
          of traps is only required for the noAuth/noPriv parties.
        - explicitly note that agents may send responses to queries
          without checking the ACL table.
        - explicitly state the initial parties are required to exist
          "out of the box".
        - explicitly state that parties in an aclTable entry must use
          identical authentication protocols; this is inferred by the
          requirement that privacy not be supported without
          authentication but not stating it allows a noAuth/noPriv party
          to send requests to a party supporting privacy, which can not
          be properly encoded.

The following technical changes are required or are enhancements
resulting from the SNMPv2 proposals:
        - make use of the authorizationError response.
        - change the aclPrivileges object to support the new PDU types.
        - update the access control parameters for the initial party
          identifiers.
        - update the initial MIB views for the initial party identifiers.
        - update the status objects to use the new textual conventions.
        - drop the use of the ordered delivery mechanism; this includes
          omitting "nonce", "last-timestamp", and the steps in the
          authentication protocol that operate with them.

The following technical changes were discussed and approved:
        - make the privacy protocol optional and note that it is only
          required for new party creation and in those configurations
          where information disclosure is prohibited; this allows
          implementations to claim conformance if they support at least
          authentication and integrity.
        - to simplify agent implementations they are not required to
          support instance level access control.
        - make the clock synchronization algorithm symmetric; this
          simplies the clock synchronization requirements; processing
          currently applied to the originating party's clock apply to
          the receiver's clock, the receiver's (destination) clock is
          also included in the message, and there is a new
          AuthInformation data type to accommodate these changes; the
          format of the new AuthInformation will have the destination
          clock first and the source clock next, so as to be in the same
          order as the destination and source parties occur in the
          message.


There were three outstanding issues after the meetings closed for the
week:


  1. Compliance Levels for Party MIBs with the new SNMPv2 compliance
     macros; it is necessary that compliance levels be specified for the
     party MIB; a proposal to specify three such levels was made

  2. Party Creation without DES; a new proposal was distributed, and
     presented at the meeting, detailing mechanisms by which parties
     could be ``cloned'' from other parties, both to allow party
     creation without DES and to allow systems with limited NVRAM to
     support temporary parties which would be re-created after each
     reboot

  3. Party Proliferation; ``proliferation of parties'' had been passed
     to this Working Group from the SNMPv2 Working Group as a problem to
     be solved; two different presentations were made on this issue; one
     detailed mechanisms to reduce the amount of NVRAM required to
     support SNMP Security through a reduction in the number of parties
     and a recasting of the tables in the Party MIB; the other
     presentation, with the same aims, suggested that spatial and
     temporal semantics should be embodied in the Management Information
     model, which therefore argued against some of the MIB recasting of
     the first proposal.


These three issues were left unresolved due to a lack of time and due to
their inter-dependence (e.g., the number and types of compliance levels
depend on whether DES is required for party creation).

                                   1





Attendees

Steve Alexander          [e-mail]
David Arneson            [e-mail]
Jim Barnes               [e-mail]
Andy Bierman             [e-mail]
Fred Bohle               [e-mail]
Vickie Brown             [e-mail]
J. Nevil Brownlee        [e-mail]
Theodore Brunner         [e-mail]
Matthew Busche           [e-mail]
Stephen Bush             [e-mail]
Dilip Chatwani           [e-mail]
Szusin Chen              [e-mail]
Robert Ching             [e-mail]
Chris Chiotasso          [e-mail]
Bobby Clay               [e-mail]
Tracy Cox                [e-mail]
Juan Cruz                [e-mail]
Dave Cullerot            [e-mail]
Cathy Cunningham         [e-mail]
James Davin              [e-mail]
Cynthia Della Torre      [e-mail]
Art Dertke               [e-mail]
Manuel Diaz              [e-mail]
William Edison
David Engel              [e-mail]
Raphael Freiwirth        [e-mail]
James Galvin             [e-mail]
Richard Graveman         [e-mail]
Maria Greene             [e-mail]
Pete Grillo              [e-mail]
Michel Guittet           [e-mail]
Ed Heiner                [e-mail]
Ken Hirata               [e-mail]
Gerd Holzhauer           [e-mail]
John Hopprich            [e-mail]
Kevin Jackson            [e-mail]
Bob Jeckell              [e-mail]
Mark Kepke               [e-mail]
John Kimmins             [e-mail]
Keith Klamm              [e-mail]
Andrew Knutsen           [e-mail]
Michael Kornegay         [e-mail]
Deirdre Kostick          [e-mail]
David Lin                [e-mail]
David Lindemulder        [e-mail]
John Linn                [e-mail]
Benjamin Lisowski        [e-mail]
John Lunny               [e-mail]
Carl Madison             [e-mail]
Keith McCloghrie         [e-mail]
Evan McGinnis            [e-mail]
Donna McMaster           [e-mail]

                                   2





Douglas Miller           [e-mail]
David Minnich            [e-mail]
Mohammad Mirhakkak       [e-mail]
George Mouradian         [e-mail]
Patrick Mullaney         [e-mail]
Daniel Myers             [e-mail]
Rina Nathaniel           rina!rnd![e-mail]
Bill Norton              [e-mail]
Steven Onishi            [e-mail]
David Perkins            [e-mail]
Ilan Raab                [e-mail]
Richard Ramos            [e-mail]
Venkat Rangan            [e-mail]
Louise Reingold          [e-mail]
Sam Roberts              [e-mail]
Kary Robertson           [e-mail]
Dan Romascanu            [e-mail]
Avraham Rosenbach        [e-mail]
Shawn Routhier           [e-mail]
Chris Rozman             [e-mail]
Assaf Rubissa            [e-mail]
Jon Saperia              [e-mail]
Michael Scanlon          [e-mail]
Sam Schaen               [e-mail]
Jim Scott                [e-mail]
John Seligson            [e-mail]
Timon Sloane             [e-mail]
Robert Snyder            [e-mail]
Roy Spitzer              [e-mail]
Bob Stewart              [e-mail]
Kaj Tesink               [e-mail]
Dean Throop              [e-mail]
Warren Vik               [e-mail]
Ioannis Viniotis         [e-mail]
Steven Waldbusser        [e-mail]
Alice Wang               [e-mail]
Gerry White              [e-mail]
Peter Wilson             [e-mail]
Steven Wong              [e-mail]
Randall Worzella         [e-mail]
Daniel Woycke            [e-mail]
Kiho Yum                 [e-mail]



                                   3