Subject: [Isms] COMMENT: draft-ietf-isms-radius-usage

From: Alexey Melnikov <[email-masked]>
Date: Sun, 3 May 2009 14:44:00 +0200

Comment:
2.3.  SNMP Service Authorization

 [...]

   There are no combinations of RADIUS attributes that denote the
   equivalent of SNMP noAuthNoPriv access, as RADIUS always involves the
   authentication of a user (i.e. a principal) as a prerequisite for
   authorization.  RADIUS can be used to to provide an "Authorize-Only"

Extra "to".

   service, but only when the request contains a "cookie" from a
   previous successful authentication with the same RADIUS server (i.e.
   the RADIUS State Attribute).

5.  Security Considerations

 [...]

   The Message-Authenticator (80) attribute [RFC3579] SHOULD be used
   with RADIUS messages that are described in this memo.

Some explanation of why would be helpful here.