[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: authorization

In answer to both of your questions, access control is beyond the scope of netconf at this time. This is not to say that implementations should have no access control. Indeed user mike might have very different access than user fred. 

As to below,

Andrew Davis wrote:

Using the ssh mapping, if I want to issue an rcp
request on behalf of user fred and then issue another
request on behalf of user mike, do I have to establish
2 separate ssh connections? Is the answer different if
I use beep? What about soap?
netconf is a session-based protocol, and authentication occurs once per session. Therefore, if you want to issue requests on behalf of another user, using their credentials, you would require another session. 

Eliot

--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>