« Back to Technical Discussions

aaaLogin and encryption

Combination View Flat View Tree View
Threads [ Previous | Next ]
aaaLogin and encryption
Answer
8/26/10 8:38 PM
Hello,
 
I'm currently using the UCM Emulator and I saw that the aaaLogin xml response contains 2 attributes: outChannel and outEvtChannel.
 
Except noencssl, what are the possible values ? What should the implementer do if a value other than noencssl is received  ?
Do you have a sample code ?
 
Thanks
Seb
Flag

RE: aaaLogin and encryption
Answer
8/27/10 12:23 PM as a reply to Sebastien Bouchex Bellomie.
<aaaLogin response="yes" outCookie="1217377205/85f7ff49-e4ec-42fc-9437-da77a1a2c4bf" outRefreshPeriod="600" outPriv="aaa,ext-lan-policy,ext-lan-qos,ext-san-policy,operations,pod-policy,pod-qos,read-only" outDomains="mgmt02-dummy" outChannel="noencssl" outEvtChannel="noencssl"> </aaaLogin>
 
Can you please unicast me about what you are trying to get out of the variables here?
 
Pramod
Flag

RE: aaaLogin and encryption
Answer
8/27/10 12:55 PM as a reply to Pramod Borkar.
<aaaLogin response="yes" outCookie="1217377205/85f7ff49-e4ec-42fc-9437-da77a1a2c4bf" outRefreshPeriod="600" outPriv="aaa,ext-lan-policy,ext-lan-qos,ext-san-policy,operations,pod-policy,pod-qos,read-only" outDomains="mgmt02-dummy" outChannel="noencssl" outEvtChannel="noencssl"> </aaaLogin>
 
Can you please unicast me about what you are trying to get out of the variables here?
 
Pramod

 
Hello,
 
I don't speak about the outPriv but rather the encryption related variables.
 
We are studying the API and we were wondering how we would handle the variables and more precisely the content of the HTTP request if encryption is enabled.
 
Seb
Flag

RE: aaaLogin and encryption
Answer
9/1/10 8:02 PM as a reply to Sebastien Bouchex Bellomie.

<aaaLogin response="yes" outCookie="1217377205/85f7ff49-e4ec-42fc-9437-da77a1a2c4bf" outRefreshPeriod="600" outPriv="aaa,ext-lan-policy,ext-lan-qos,ext-san-policy,operations,pod-policy,pod-qos,read-only" outDomains="mgmt02-dummy" outChannel="noencssl" outEvtChannel="noencssl"> </aaaLogin>
 
Can you please unicast me about what you are trying to get out of the variables here?
 
Pramod


 
Hello,
 
I don't speak about the outPriv but rather the encryption related variables.
 
We are studying the API and we were wondering how we would handle the variables and more precisely the content of the HTTP request if encryption is enabled.
 
Seb




Seb:
 
Following are the values  for outChannel and outEvtChannel:
 

fullssl
noencssl
plain
 
You can find them in UCSM-OUT.xsd in cluded in the xml schema zip files that can be downloaded from UCS emulator interface.
 
Dipti
Flag

RE: aaaLogin and encryption
Answer
9/1/10 8:41 PM as a reply to Dipti Joshi.
Yes but that¿s incomplete:



-    What should we do when the fullssl is defined in the login response
? What are the encryption algorithms (such as cipher, etc¿) ? Where the
encryption keys are stored ? How to we handle hand-shaking during the
encyption phase ? A sample would be very helpful.

-    What is the difference between plain et noencssl ?
 
Thanks
seb
Flag

RE: aaaLogin and encryption
Answer
10/29/10 5:20 AM as a reply to Sebastien Bouchex Bellomie.
Yes but that¿s incomplete:



-    What should we do when the fullssl is defined in the login response
? What are the encryption algorithms (such as cipher, etc¿) ? Where the
encryption keys are stored ? How to we handle hand-shaking during the
encyption phase ? A sample would be very helpful.

-    What is the difference between plain et noencssl ?
 
Thanks
seb



Values of outChannel and outEvtChannel are experimental and can be safely ignored.
 
The idea with these fields was to provide SSL mode with encryption and SSL mode with no encryption (authentication only).
Flag