Skip to main content

RADIUS Extension for Certificate-based SSH Authentication
draft-vishwakarma-opsawg-ssh-cert-radius-02

Document Type Expired Internet-Draft (individual)
Expired & archived
Authors Devendra Vishwakarma , Prakash Suthar , Vivek Agarwal , Anil Jangam
Last updated 2022-07-01 (Latest revision 2021-12-28)
RFC stream (None)
Intended RFC status (None)
Formats
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

A scalable and centralized mechanism is required for a certificate- based administrative access to multitude of virtualized and physical network functions. While there are mechanisms that exist today to provide secure administrative command-line and API-based access, there are certain management and maintenance overheads as well as certain scalability challenges related to it. In this draft we discuss these challenges and propose a standardized, centralized server-based mechanism to authenticate a user over an SSH session using its client certificate.

Authors

Devendra Vishwakarma
Prakash Suthar
Vivek Agarwal
Anil Jangam

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)