Re: [Isms] d) was dublin isms meeting minutes

[Juergen Schoenwaelder <j.schoenwaelder at jacobs-university.de>]

On Tue, Sep 02, 2008 at 04:56:28PM -0400, Ira McDonald wrote:
 
> RFC 5198 compliant normalization (NFC) of the security
> name presented by SSHTM should be REQUIRED.

I think the SNMPv3 specifications never talk about normalization of
SnmpAdminStrings. So the issue is of much larger scope and to tackle
this, someone needs to write a separate document about UTF-8 string
normalization in the whole SNMP framework. But this then is clearly
not in the scope of ISMS.

All ISMS could do is to require normalization for TSM and SSHTM but
that would not really solve the general problem as long as all other
configuration tables and in particular VACM are agnostic to string
normalization.

Perhaps someone should write a best practices like document that
SnmpAdminString values really should be normalized (but that causes
nasty length changes) or that SnmpAdminString values should be
normalized before any comparisons are done.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>
_______________________________________________
Isms mailing list
Isms at ietf.org
https://www.ietf.org/mailman/listinfo/isms