Project

General

Profile

Actions

Task #1227

closed

Command authentication and authorization

Added by Junxiao Shi about 10 years ago. Updated about 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Management
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
6.00 h

Description

Develop a module that provides authentication and authorization on a ControlCommand.

  • A section in the configuration file specifies a list of trusted keys, each record contains:
    • Name for the key
    • public key
    • a set of granted privileges
  • Upon receiving a control command Interest, the security library is invoked to determine the signing key of that signed Interest, and verify the signature.
    • The security library should be configured to trust only the keys supplied from NFD configuration, and should not attempt to retrieve keys from network.
  • The command is authorized if the signing key has been granted the required privilege for the requested management module and command verb.

Related issues 1 (0 open1 closed)

Blocked by NFD - Task #1120: Configuration file parserClosed01/21/2014

Actions
Actions #1

Updated by Junxiao Shi about 10 years ago

@Yingdi Yu should confirm the security library can provide the features mentioned.

Actions #2

Updated by Yingdi Yu about 10 years ago

  • Assignee changed from Anonymous to Yingdi Yu
Actions #3

Updated by Yingdi Yu about 10 years ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

I forgot to update this issue, the coding work is done, and the commit has been merged into the repo.

Commit hash: 17bc3012bba11a07e9f3bda042e2216be338a636

Actions #4

Updated by Junxiao Shi about 10 years ago

  • Status changed from Closed to Feedback

This task is to add authentication and authorization in NFD's management module. This functionality does not exist in NFD, so it's not resolved.

Commit 17bc3012bba11a07e9f3bda042e2216be338a636 contains related library features, but it does not solve this task.

Actions #5

Updated by Anonymous about 10 years ago

Is it just the management side remaining? If so, I can take the remainder of the task.

Actions #6

Updated by Junxiao Shi about 10 years ago

  • Status changed from Feedback to New
  • Assignee changed from Yingdi Yu to Anonymous

Yes, only mgmt side is remaining.
This task is now passed to @Steve.

Actions #7

Updated by Anonymous about 10 years ago

  • Status changed from New to In Progress
  • % Done changed from 100 to 50
Actions #8

Updated by Anonymous about 10 years ago

  • Status changed from In Progress to Code review
  • % Done changed from 50 to 100
Actions #9

Updated by Anonymous about 10 years ago

  • Status changed from Code review to Closed
Actions

Also available in: Atom PDF