Subject: [sacm] Test case: External attribute collector that uses a management protocol

From: Clifford Kahn <[email-masked]>
Date: Fri, 24 Apr 2015 14:06:50 +0000

Example management protocols:
* NETCONF (over ssh or tls)
* SNMPv2
* SNMPv3
* Proprietary management protocol
    - ssh into the endpoint and run proprietary commands

This test case has one major difference from the internal attribute collector: *there are two endpoints to identify*. 
* The identity of the external attribute collector, and/or the endpoint on which it runs. This is part of the *provenance* of the endpoint attribute assertion, but it is not the endpoint's identity.
* The identity of the endpoint, as attested by the collector. 
   - The IP address to which the collector communicates
   - For NETCONF over ssh, a public key
   - For NETCONF over tls, a certificate, or just a public key
 
Best,
			Cliff

Clifford Kahn
Principal Engineeer, Technical Lead