Internet Info 1997 December/Internet_Info_CD-ROM_Walnut_Creek_December_1997.iso/ietf/snmpsec/snmpsec-minutes-91nov.txt

Text File | 1993-02-17 | 6KB | 174 lines

CURRENT_MEETING_REPORT_



Reported by James Galvin/TIS and Keith McCloghrie/Hughes

SNMPSEC Minutes

The SNMP Security Working Group met on Wednesday evening, November 20.
The Agenda was as follows.

   o Document Finalization
   o Interoperability Reports
   o Other Comments
   o Steps to Publication


In particular, the Working Group wanted to see revised documents and
implementation experience before it would consider recommending the
documents for publication.

Two of the three documents had been revised and distributed prior to the
meeting:  SNMP Security Protocols and Definitions of Managed Objects for
Administration of SNMP Parties.  There were no non-editorial changes to
be made to the SNMP Administrative Model document so it was not revised
for this meeting.

Document Finalization

Two editorial changes had been suggested on the mailing list for the
revised SNMP Security Protocols document.  These changes were noted for
the Working Group.

The editorial changes required of the SNMP Administrative Model document
were noted for the Working group.

Interoperability Reports

There are four known implementations of the suite of documents; the only
feature not implemented in any of them was support for proxy.  Three of
them have interoperated with each other, using noAuth/noPriv, using MD4,
and using DES. The Working Group requested that the implementations be
upgraded to include support for proxy.  [Editors' note:  two of the
implementations were so upgraded within a few days of the meeting.]

A number of minor changes were suggested as feedback from the
implementation experience, the most significant being:  changing the
units of the party clock to be in seconds, and adding a new MIB object
to the party table to specify the largest SNMP message size that a party
would accept.  These changes were presented to the Working Group and all
were approved.  A suggestion that additional MIB objects were required
to support proxy to non-SNMP-party based proxied agents was also agreed,
but that these additional objects were considered to be the subject of
separate follow-on document(s).

                                   1





In addition, some performance data was presented comparing the use of
MD4 and MD5 as authentication digest algorithms.  The data indicated
that using MD5 took 15MD4 took 5the MD4 implementation was an
``optimized'' implementation, while the MD5 implementation was the one
directly out of the internet draft.  This suggests that the reported
difference should be a worst case scenario.

Next, it was reported to the meeting that the authors of MD4 have
decided that the MD4 algorithm is suitable for use in all applications
except those which are long-lived.  In particular, a protocol standard
is considered long-lived.  Consequently, the Working Group decided to
adopt MD5 instead of MD4.

Other Comments

A number of other wording changes to the documents were suggested by
meeting attendees.  All suggestions were noted and adopted.

Steps to Publication

The Working Group agreed that its work was ready for publication.  The
following steps were specified.


  1. The documents would be revised according to the comments discussed
     at the meeting by Friday, November 22.

  2. The documents will be submitted as internet drafts by Monday,
     November 25.

  3. The three weeks immediately following their availability as
     internet drafts will be set aside for final review of the documents
     by the Working Group.

  4. At the end of three weeks, the documents will be revised (if
     necessary) according to any discussions on the mailing list, and
     submitted to the IESG with a recommendation they be published as a
     Proposed Standard.


Attendees

Steve Alexander          [e-mail]
James Barnes             [e-mail]
Larry Blunk              [e-mail]
Steve Bostock            [e-mail]
David Bridgham           [e-mail]
Theodore Brunner         [e-mail]
Philip Budne             [e-mail]
Jeffrey Buffum           [e-mail]
Jeffrey Case             [e-mail]
Richard Cherry           [e-mail]
James Codespote          [e-mail]

                                   2





Stephen Crocker          [e-mail]
Dave Cullerot            [e-mail]
James Davin              [e-mail]
Michael Erlinger         [e-mail]
Jeff Erwin
Bill Fardy               [e-mail]
Shawn Gallagher          [e-mail]
James Galvin             [e-mail]
William Jackson          [e-mail]
Ole Jacobsen             [e-mail]
Ron Jacoby               [e-mail]
Satish Joshi             [e-mail]
Frank Kastenholz         [e-mail]
David Kaufman
Manu Kaycee              [e-mail]
Mark Kepke               [e-mail]
Yoav Kluger              [e-mail]
Deidre Kostick           [e-mail]
Ron Lau
Kenneth Laube            [e-mail]
Walter Lazear            [e-mail]
John Linn                [e-mail]
Keith McCloghrie         [e-mail]
Ellen McDermott          [e-mail]
Evan McGinnis            [e-mail]
David Minnich            [e-mail]
Lynn Monsanto            [e-mail]
David Perkins            [e-mail]
David Piscitello         [e-mail]
Robert Purvy             [e-mail]
Anil Rijsinghani         [e-mail]
Marshall Rose            [e-mail]
Gregory Ruth             [e-mail]
Jonathan Saperia         [e-mail]
Mark Schaefer            [e-mail]
John Seligson            [e-mail]
William Simpson          [e-mail]
Timon Sloane             peernet![e-mail]
Bruce Taber              [e-mail]
Iris Tal                 [e-mail]
Kaj Tesink               [e-mail]
Mark Therieau            [e-mail]
Dean Throop              [e-mail]
Steven Waldbusser        [e-mail]
Jeremy Wilson
Preston Wilson           [e-mail]
John Ziegler             [e-mail]



                                   3