MIBs Depot

IPS-AUTH-MIB

Registered at
1.3.6.1.2.1.141
Last updated
2006-05-22 00:00
Organization
IETF IPS Working Group
Revisions
2006-05-22 00:00
Namespace
standard
Source file
IPS-AUTH-MIB
Digest
sha256:02607439ee18886d4f88aa27bd098cf7e3814d9da3209c9e1f107fb83a96c74e

Description

The IP Storage Authorization MIB module. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC 4545; see the RFC itself for full legal notices.

Contact

Mark Bakke Postal: Cisco Systems, Inc 7900 International Drive, Suite 400 Bloomington, MN USA 55425 E-mail: mbakke@cisco.com James Muchow Postal: Qlogic Corp. 6321 Bury Dr. Eden Prairie, MN USA 55346 E-Mail: james.muchow@qlogic.com

Imports

FromSymbols
IANA-ADDRESS-FAMILY-NUMBERS-MIBAddressFamilyNumbers
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMIMODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso, mib-2
SNMPv2-TCAutonomousType, DisplayString, RowStatus, StorageType, TEXTUAL-CONVENTION

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

IANA-ADDRESS-FAMILY-NUMBERS-MIB
IPS-AUTH-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
IpsAuthAddress
TEXTUAL-CONVENTION
IP Storage requires the use of address information that uses not only the InetAddress type defined in the INET-ADDRESS-MIB, but also Fibre Channel type defined in the Fibre Channel Management MIB. Although these address types are recognized in the IANA Address Family Numbers MIB, the addressing mechanisms have not been merged into a well-known, common type. This data type, the IpsAuthAddress, performs the merging for this MIB module. The formats of objects of this type are determined by a corresponding object with syntax AddressFamilyNumbers, and thus every object defined using this TC must identify the object with syntax AddressFamilyNumbers that specifies its type. The syntax and semantics of this object depend on the identified AddressFamilyNumbers object as follows: AddressFamilyNumbers this object ==================== =========== ipV4(1) restricted to the same syntax and semantics as the InetAddressIPv4 TC. ipV6(2) restricted to the same syntax and semantics as the InetAddressIPv6 TC. fibreChannelWWPN (22) & fibreChannelWWNN(23) restricted to the same syntax and semantics as the FcNameIdOrZero TC. Types other than the above should not be used unless the corresponding format of the IpsAuthAddress object is further specified (e.g., in a future revision of this TC).
current

Objects

NameOIDSyntaxAccessStatus
ipsAuthNotifications
OBJECT-IDENTITY
1.3.6.1.2.1.141.0
ipsAuthObjects
OBJECT-IDENTITY
1.3.6.1.2.1.141.1
ipsAuthDescriptors
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.1
ipsAuthMethodTypes
OBJECT-IDENTITY
Registration point for Authentication Method Types.
1.3.6.1.2.1.141.1.1.1current
ipsAuthMethodNone
OBJECT-IDENTITY
The authoritative identifier when no authentication method is used.
1.3.6.1.2.1.141.1.1.1.1current
ipsAuthMethodSrp
OBJECT-IDENTITY
The authoritative identifier when the authentication method is SRP.
1.3.6.1.2.1.141.1.1.1.2current
ipsAuthMethodChap
OBJECT-IDENTITY
The authoritative identifier when the authentication method is CHAP.
1.3.6.1.2.1.141.1.1.1.3current
ipsAuthMethodKerberos
OBJECT-IDENTITY
The authoritative identifier when the authentication method is Kerberos.
1.3.6.1.2.1.141.1.1.1.4current
ipsAuthInstance
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.2
ipsAuthInstanceAttributesTable
OBJECT-TYPE
A list of Authorization instances present on the system.
1.3.6.1.2.1.141.1.2.2not-accessiblecurrent
ipsAuthInstanceAttributesEntry
OBJECT-TYPE
An entry (row) containing management information applicable to a particular Authorization instance.
1.3.6.1.2.1.141.1.2.2.1not-accessiblecurrent
ipsAuthInstIndex
OBJECT-TYPE
An arbitrary integer used to uniquely identify a particular authorization instance. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots.
1.3.6.1.2.1.141.1.2.2.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
ipsAuthInstDescr
OBJECT-TYPE
A character string, determined by the implementation to describe the authorization instance. When only a single instance is present, this object may be set to the zero-length string; with multiple authorization instances, it must be set to a unique value in an implementation-dependent manner to describe the purpose of the respective instance. If this is deployed in a master agent with more than one subagent implementing this MIB module, the master agent is responsible for ensuring that this object is unique across all subagents.
1.3.6.1.2.1.141.1.2.2.1.2SnmpAdminStringread-writecurrent
ipsAuthInstStorageType
OBJECT-TYPE
The storage type for all read-write objects within this row. Rows in this table are always created via an external process, and may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row. If this object has the value 'volatile', modifications to read-write objects in this row are not persistent across reboots. If this object has the value 'nonVolatile', modifications to objects in this row are persistent. An implementation may choose to allow this object to be set to either 'nonVolatile' or 'volatile', allowing the management application to choose this behavior.
1.3.6.1.2.1.141.1.2.2.1.3StorageTyperead-writecurrent
ipsAuthIdentity
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.3
ipsAuthIdentAttributesTable
OBJECT-TYPE
A list of user identities, each belonging to a particular ipsAuthInstance.
1.3.6.1.2.1.141.1.3.1not-accessiblecurrent
ipsAuthIdentAttributesEntry
OBJECT-TYPE
An entry (row) containing management information describing a user identity within an authorization instance on this node.
1.3.6.1.2.1.141.1.3.1.1not-accessiblecurrent
ipsAuthIdentIndex
OBJECT-TYPE
An arbitrary integer used to uniquely identify a particular identity instance within an authorization instance present on the node. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots.
1.3.6.1.2.1.141.1.3.1.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
ipsAuthIdentDescription
OBJECT-TYPE
A character string describing this particular identity.
1.3.6.1.2.1.141.1.3.1.1.2SnmpAdminStringread-createcurrent
ipsAuthIdentRowStatus
OBJECT-TYPE
This field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthIdentDescription may be set while ipsAuthIdentRowStatus is 'active'.
1.3.6.1.2.1.141.1.3.1.1.3RowStatusread-createcurrent
ipsAuthIdentStorageType
OBJECT-TYPE
The storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
1.3.6.1.2.1.141.1.3.1.1.4StorageTyperead-createcurrent
ipsAuthIdentityName
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.4
ipsAuthIdentNameAttributesTable
OBJECT-TYPE
A list of unique names that can be used to positively identify a particular user identity.
1.3.6.1.2.1.141.1.4.1not-accessiblecurrent
ipsAuthIdentNameAttributesEntry
OBJECT-TYPE
An entry (row) containing management information applicable to a unique identity name, which can be used to identify a user identity within a particular authorization instance.
1.3.6.1.2.1.141.1.4.1.1not-accessiblecurrent
ipsAuthIdentNameIndex
OBJECT-TYPE
An arbitrary integer used to uniquely identify a particular identity name instance within an ipsAuthIdentity within an authorization instance. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots.
1.3.6.1.2.1.141.1.4.1.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
ipsAuthIdentName
OBJECT-TYPE
A character string that is the unique name of an identity that may be used to identify this ipsAuthIdent entry.
1.3.6.1.2.1.141.1.4.1.1.2SnmpAdminStringread-createcurrent
ipsAuthIdentNameRowStatus
OBJECT-TYPE
This field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthIdentName may be set when this value is 'active'.
1.3.6.1.2.1.141.1.4.1.1.3RowStatusread-createcurrent
ipsAuthIdentNameStorageType
OBJECT-TYPE
The storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
1.3.6.1.2.1.141.1.4.1.1.4StorageTyperead-createcurrent
ipsAuthIdentityAddress
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.5
ipsAuthIdentAddrAttributesTable
OBJECT-TYPE
A list of address ranges that are allowed to serve as the endpoint addresses of a particular identity. An address range includes a starting and ending address and an optional netmask, and an address type indicator, which can specify whether the address is IPv4, IPv6, FC-WWPN, or FC-WWNN.
1.3.6.1.2.1.141.1.5.1not-accessiblecurrent
ipsAuthIdentAddrAttributesEntry
OBJECT-TYPE
An entry (row) containing management information applicable to an address range that is used as part of the authorization of an identity within an authorization instance on this node.
1.3.6.1.2.1.141.1.5.1.1not-accessiblecurrent
ipsAuthIdentAddrIndex
OBJECT-TYPE
An arbitrary integer used to uniquely identify a particular ipsAuthIdentAddress instance within an ipsAuthIdentity within an authorization instance present on the node. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots.
1.3.6.1.2.1.141.1.5.1.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
ipsAuthIdentAddrType
OBJECT-TYPE
The address types used in the ipsAuthIdentAddrStart and ipsAuthAddrEnd objects. This type is taken from the IANA address family types.
1.3.6.1.2.1.141.1.5.1.1.2AddressFamilyNumbersread-createcurrent
ipsAuthIdentAddrStart
OBJECT-TYPE
The starting address of the allowed address range. The format of this object is determined by ipsAuthIdentAddrType.
1.3.6.1.2.1.141.1.5.1.1.3IpsAuthAddressread-createcurrent
ipsAuthIdentAddrEnd
OBJECT-TYPE
The ending address of the allowed address range. If the ipsAuthIdentAddrEntry specifies a single address, this shall match the ipsAuthIdentAddrStart. The format of this object is determined by ipsAuthIdentAddrType.
1.3.6.1.2.1.141.1.5.1.1.4IpsAuthAddressread-createcurrent
ipsAuthIdentAddrRowStatus
OBJECT-TYPE
This field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The values of ipsAuthIdentAddrStart and ipsAuthIdentAddrEnd may be set when this value is 'active'. The value of ipsAuthIdentAddrType may not be set when this value is 'active'.
1.3.6.1.2.1.141.1.5.1.1.5RowStatusread-createcurrent
ipsAuthIdentAddrStorageType
OBJECT-TYPE
The storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
1.3.6.1.2.1.141.1.5.1.1.6StorageTyperead-createcurrent
ipsAuthCredential
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.6
ipsAuthCredentialAttributesTable
OBJECT-TYPE
A list of credentials related to user identities that are allowed as valid authenticators of the particular identity.
1.3.6.1.2.1.141.1.6.1not-accessiblecurrent
ipsAuthCredentialAttributesEntry
OBJECT-TYPE
An entry (row) containing management information applicable to a credential that verifies a user identity within an authorization instance. To provide complete information in this MIB for a credential, the management station must not only create the row in this table but must also create a row in another table, where the other table is determined by the value of ipsAuthCredAuthMethod, e.g., if ipsAuthCredAuthMethod has the value ipsAuthMethodChap, a row must be created in the ipsAuthCredChapAttributesTable.
1.3.6.1.2.1.141.1.6.1.1not-accessiblecurrent
ipsAuthCredIndex
OBJECT-TYPE
An arbitrary integer used to uniquely identify a particular Credential instance within an instance present on the node. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots.
1.3.6.1.2.1.141.1.6.1.1.1Unsigned32 (1..4294967295)not-accessiblecurrent
ipsAuthCredAuthMethod
OBJECT-TYPE
This object contains an OBJECT IDENTIFIER that identifies the authentication method used with this credential. When a row is created in this table, a corresponding row must be created by the management station in a corresponding table specified by this value. When a row is deleted from this table, the corresponding row must be automatically deleted by the agent in the corresponding table specified by this value. If the value of this object is ipsAuthMethodNone, no corresponding rows are created or deleted from other tables. Some standardized values for this object are defined within the ipsAuthMethodTypes subtree.
1.3.6.1.2.1.141.1.6.1.1.2AutonomousTyperead-createcurrent
ipsAuthCredRowStatus
OBJECT-TYPE
This field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthCredAuthMethod must not be changed while this row is 'active'.
1.3.6.1.2.1.141.1.6.1.1.3RowStatusread-createcurrent
ipsAuthCredStorageType
OBJECT-TYPE
The storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
1.3.6.1.2.1.141.1.6.1.1.4StorageTyperead-createcurrent
ipsAuthCredChap
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.7
ipsAuthCredChapAttributesTable
OBJECT-TYPE
A list of CHAP attributes for credentials that use ipsAuthMethodChap as their ipsAuthCredAuthMethod. A row in this table can only exist when an instance of the ipsAuthCredAuthMethod object exists (or is created simultaneously) having the same instance identifiers and a value of 'ipsAuthMethodChap'.
1.3.6.1.2.1.141.1.7.1not-accessiblecurrent
ipsAuthCredChapAttributesEntry
OBJECT-TYPE
An entry (row) containing management information applicable to a credential that uses ipsAuthMethodChap as their ipsAuthCredAuthMethod. When a row is created in ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredChap, the management station must create a corresponding row in this table. When a row is deleted from ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredChap, the agent must delete the corresponding row (if any) in this table.
1.3.6.1.2.1.141.1.7.1.1not-accessiblecurrent
ipsAuthCredChapUserName
OBJECT-TYPE
A character string containing the CHAP user name for this credential.
1.3.6.1.2.1.141.1.7.1.1.1SnmpAdminStringread-createcurrent
ipsAuthCredChapRowStatus
OBJECT-TYPE
This field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthCredChapUserName may be changed while this row is 'active'.
1.3.6.1.2.1.141.1.7.1.1.2RowStatusread-createcurrent
ipsAuthCredChapStorageType
OBJECT-TYPE
The storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
1.3.6.1.2.1.141.1.7.1.1.3StorageTyperead-createcurrent
ipsAuthCredSrp
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.8
ipsAuthCredSrpAttributesTable
OBJECT-TYPE
A list of SRP attributes for credentials that use ipsAuthMethodSrp as its ipsAuthCredAuthMethod. A row in this table can only exist when an instance of the ipsAuthCredAuthMethod object exists (or is created simultaneously) having the same instance identifiers and a value of 'ipsAuthMethodSrp'.
1.3.6.1.2.1.141.1.8.1not-accessiblecurrent
ipsAuthCredSrpAttributesEntry
OBJECT-TYPE
An entry (row) containing management information applicable to a credential that uses ipsAuthMethodSrp as their ipsAuthCredAuthMethod. When a row is created in ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredSrp, the management station must create a corresponding row in this table. When a row is deleted from ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredSrp, the agent must delete the corresponding row (if any) in this table.
1.3.6.1.2.1.141.1.8.1.1not-accessiblecurrent
ipsAuthCredSrpUserName
OBJECT-TYPE
A character string containing the SRP user name for this credential.
1.3.6.1.2.1.141.1.8.1.1.1SnmpAdminStringread-createcurrent
ipsAuthCredSrpRowStatus
OBJECT-TYPE
This field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthCredSrpUserName may be changed while the status of this row is 'active'.
1.3.6.1.2.1.141.1.8.1.1.2RowStatusread-createcurrent
ipsAuthCredSrpStorageType
OBJECT-TYPE
The storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
1.3.6.1.2.1.141.1.8.1.1.3StorageTyperead-createcurrent
ipsAuthCredKerberos
OBJECT-IDENTITY
1.3.6.1.2.1.141.1.9
ipsAuthCredKerbAttributesTable
OBJECT-TYPE
A list of Kerberos attributes for credentials that use ipsAuthMethodKerberos as their ipsAuthCredAuthMethod. A row in this table can only exist when an instance of the ipsAuthCredAuthMethod object exists (or is created simultaneously) having the same instance identifiers and a value of 'ipsAuthMethodKerb'.
1.3.6.1.2.1.141.1.9.1not-accessiblecurrent
ipsAuthCredKerbAttributesEntry
OBJECT-TYPE
An entry (row) containing management information applicable to a credential that uses ipsAuthMethodKerberos as its ipsAuthCredAuthMethod. When a row is created in ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredKerberos, the management station must create a corresponding row in this table. When a row is deleted from ipsAuthCredentialAttributesTable with ipsAuthCredAuthMethod = ipsAuthCredKerberos, the agent must delete the corresponding row (if any) in this table.
1.3.6.1.2.1.141.1.9.1.1not-accessiblecurrent
ipsAuthCredKerbPrincipal
OBJECT-TYPE
A character string containing a Kerberos principal for this credential.
1.3.6.1.2.1.141.1.9.1.1.1SnmpAdminStringread-createcurrent
ipsAuthCredKerbRowStatus
OBJECT-TYPE
This field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. Rows may be discarded using RowStatus. The value of ipsAuthCredKerbPrincipal may be changed while this row is 'active'.
1.3.6.1.2.1.141.1.9.1.1.2RowStatusread-createcurrent
ipsAuthCredKerbStorageType
OBJECT-TYPE
The storage type for all read-create objects in this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent. Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row.
1.3.6.1.2.1.141.1.9.1.1.3StorageTyperead-createcurrent
ipsAuthConformance
OBJECT-IDENTITY
1.3.6.1.2.1.141.2
ipsAuthCompliances
OBJECT-IDENTITY
1.3.6.1.2.1.141.2.1
ipsAuthGroups
OBJECT-IDENTITY
1.3.6.1.2.1.141.2.2

Conformance

NameOIDStatus
ipsAuthComplianceV1
MODULE-COMPLIANCE
Initial version of compliance statement based on initial version of this MIB module. The Instance and Identity groups are mandatory; at least one of the other groups (Name, Address, Credential, Certificate) is also mandatory for any given implementation.
1.3.6.1.2.1.141.2.1.1current
ipsAuthInstanceAttributesGroup
OBJECT-GROUP
A collection of objects providing information about authorization instances.
1.3.6.1.2.1.141.2.2.1current
ipsAuthIdentAttributesGroup
OBJECT-GROUP
A collection of objects providing information about user identities within an authorization instance.
1.3.6.1.2.1.141.2.2.2current
ipsAuthIdentNameAttributesGroup
OBJECT-GROUP
A collection of objects providing information about user names within user identities within an authorization instance.
1.3.6.1.2.1.141.2.2.3current
ipsAuthIdentAddrAttributesGroup
OBJECT-GROUP
A collection of objects providing information about address ranges within user identities within an authorization instance.
1.3.6.1.2.1.141.2.2.4current
ipsAuthIdentCredAttributesGroup
OBJECT-GROUP
A collection of objects providing information about credentials within user identities within an authorization instance.
1.3.6.1.2.1.141.2.2.5current
ipsAuthIdentChapAttrGroup
OBJECT-GROUP
A collection of objects providing information about CHAP credentials within user identities within an authorization instance.
1.3.6.1.2.1.141.2.2.6current
ipsAuthIdentSrpAttrGroup
OBJECT-GROUP
A collection of objects providing information about SRP credentials within user identities within an authorization instance.
1.3.6.1.2.1.141.2.2.7current
ipsAuthIdentKerberosAttrGroup
OBJECT-GROUP
A collection of objects providing information about Kerberos credentials within user identities within an authorization instance.
1.3.6.1.2.1.141.2.2.8current