Re: NETCONF over TLS

[Eliot Lear <lear@cisco.com>]

Mohamad Badra wrote:
> That's right, but if we want alike JUNOS mechanism or an 
> authentication function via third parties, I think we will need to use 
> the <request-login>. This is in order to allow to the server to 
> request the client's password (the manager). With regard to my last 
> mail, the server will continue the authentication process by emitting 
> the <request-login> tag element within an <rpc> tag element:


First, you re-invented the TLS portion of BEEP, and now you are 
reinventing SASL, and you are going to do it far less functionally.  
Have you tried what's there already?

Eliot

--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>