Re: snmpconf Comments on BCP-09
Randy Presuhn <[email protected]> Tue, 13 Aug 2002 09:05:55 -0700 (PDT)
| Newsgroups | gmane.ietf.snmpconf |
|---|---|
| Message-ID | <[email protected]> |
Hi - > Date: Tue, 13 Aug 2002 11:13:48 +0200 > Message-Id: <[email protected]> > From: Juergen Schoenwaelder <[email protected]> > To: [email protected] > In-reply-to: <[email protected]> > ([email protected]) > Subject: Re: snmpconf Comments on BCP-09 > References: <[email protected]> > <[email protected]> > <[email protected]> > <[email protected]> <5.1.0.14.2.20020805130= [email protected]> > Reply-To: [email protected] >=20 >=20 > >>>>> David T Perkins writes: >=20 > David> 6) David> Fine grained access control assignment - a desirable > David> property is to allow management apps to create resource > David> instances via an SNMP set, and to gain "exclusive" or "owner" > David> access as found in file creation operations found in many > David> operating systems, such as the Unix variants. However, the > David> VACM-based access control is VERY different than Unix-like file > David> access control. A design pattern was introduced in the MIB > David> modules from the DISMAN WG which attempted to mimic the > David> Unix-like access control behavior on creation. This design > David> pattern is flawed (and many have not yet realized it). Please > David> describe the objective, show the MIB design pattern and > David> describe how it is flawed. >=20 > Can you please send a message to the DISMAN WG list which explains why > the design pattern is flawed so that we can all understand the issue > and either fix it or at least document it somewhere? ... As disman WG chair, I'd welcome such a discussion on the disman WG mailing list. ------------------------------------------------------ Randy Presuhn BMC Software, Inc. SJC-1.3141 [email protected] 2141 North First Street Tel: +1 408 546-1006 San Jos=E9, California 95131 USA ------------------------------------------------------ My opinions and BMC's are independent variables. ------------------------------------------------------