Re: question on key localizaton
Uri Blumenthal <[email protected]>
| Newsgroups | gmane.ietf.snmpv3 |
|---|---|
| Organization | Lucent Technologies |
| Message-ID | <[email protected]> |
Bob Natale wrote: > I must say that this is a most surprising twist > of events! Yes it is... > While admittedly I can't find the e-mail trail > in my personal SNMPv3 archives now, I am quite > certain this issue was discussed on this list in > the early days of SNMPv3 development. Of course it must have. Probably in the days of finding a compromise solution. > If I recall correctly, the explanation as to why > Inform-Receivers (but not Trap-Receivers) are > authoritative is that they issue the Response > (or Report) PDU(s)...just like Command-Responders > do...which I guess relates to the "Confirmed" > PDU class thing. Well, it broke the convenient security administration and forced users of INFORM to deploy their unique keys per NMS<->agent pair. No big deal architecturally, just a royal pain in the neck for admins. On the other hand, it may boost sales of automated configuration software. > Personally, I preferred to consider Notification- > Originators as implicit Command-Responders and, > therefore, authoritative... Yeah, me too...