ITU-T X 741 CORR 3-2000 Information Technology - Open Systems Interconnection - Systems Management Objects and Attributes for Access Control Series X Data Networks and Open System nc.pdf

1、INTERNATIONAL TELECOMMUN CATION UN ION ITU=T TELECOM M U N I CAT I ON STANDARDIZATION SECTOR OF ITU X.741 Corrigendum 3 ( 02/2 o o O) SERIES X: DATA NETWORKS AND OPEN SYSTEM COMMUN I CATIONS OS1 management - Management functions and ODMA functions I Information technology - Open Systems Interconnect

2、ion - Systems management: Objects and attributes for access control Technical Corrigendum 3 ITU-T Recommendation X.741 - Corrigendum 3 (Formerly CCIlT Recommendation) ITU-T X-SERIES RECOMMENDATIONS DATA NETWORKS AND OPEN SYSTEM COMMUNICATIONS PUBLIC DATA NETWORKS Services and facilities Interfaces T

3、ransmission, signalling and switching Network aspects Maintenance Administrative arrangements Model and notation Service definitions Connection-mode protocol specifications Connectionless-mode protocol specifications PICS proformas Protocol Identification Security Protocols Layer Managed Objects Con

4、formance testing General Satellite data transmission systems IP-based networks MESSAGE HANDLING SYSTEMS DIRECTORY OS1 NETWORKING AND SYSTEM ASPECTS Networking Efficiency Quality of service Naming, Addressing and Registration Abstract Syntax Notation One (ASN. 1) Systems Management framework and arch

5、itecture Management Communication Service and Protocol OPEN SYSTEMS INTERCONNECTION INTERWORKING BETWEEN NETWORKS OS1 MANAGEMENT ent Information s and ODMA func OS1 APPLICATIONS Commitment, Concurrency and Recovery Transaction processing Remote operations OPEN DISTRIBUTED PROCESSING X. 1-X.19 X.20-X

6、.49 X.50-X.89 X.90-X. 149 X.150-X.179 X. 180-X. 199 X.200-X.209 X.210-X.219 X.220-X.229 X.230-X.239 X.240-X.259 X.260-X.269 X.270-X.279 X.280-X.289 X.290-X.299 X. 300-X.349 X.350-X.369 x.370-x.399 X.400-X.499 X.500-X.599 X.600-X.629 X.630-X.639 X.640-X.649 X.650-X.679 X.680-X.699 X.700-X.709 X.710-X

7、.7 19 X.720-X.729 li X.850-X.859 X.860-X.879 X.880-X.899 X.900-X.999 For further details, please refer to the list of ITU-T Recommendations. INTERNATIONAL STANDARD 10164-9 ITU-T RECOMMENDATION X.741 INFORMATION TECHNOLOGY - OPEN SYSTEMS INTERCONNECTION - SYSTEMS MANAGEMENT: OBJECTS AND ATTRIBUTES FO

8、R ACCESS CONTROL TECHNICAL CORRIGENDUM 3 Summary This Recommendation I International Standard (1995) specifies an Access Control Security Model and the management information necessary for creating and administering access control associated with OS1 Systems Management. This Technical Corrigendum 3

9、revises the text to include ASN.1:1997 in 2.1 and 2.2. Source Corrigendum 3 to ITU-T Recommendation X.741 was prepared by ITU-T Study Group 4 (1997-2000) and approved on 4 February 2000. An identical text is also published as Technical Corrigendum 3 to ISO/IEC 10164-9. ITU-T X.741(1995)/Cor.3 (02/20

10、00 E) i FOREWORD The International Telecommunication Union (ITU) is the United Nations specialized agency in the field of telecommunications. The ITU Telecommunication Standardization Sector (ITU-T) is a permanent organ of ITU. ITU-T is responsible for studying technical, operating and tariff questi

11、ons and issuing Recommendations on them with a view to standardizing telecommunications on a worldwide basis. The World Telecommunication Standardization Conference (WTSC), which meets every four years, establishes the topics for study by the ITU-T study groups which, in turn, produce Recommendation

12、s on these topics. The approval of ITU-T Recommendations is covered by the procedure laid down in WTSC Resolution 1. In some areas of information technology which fall within ITU-Ts purview, the necessary standards are prepared on a collaborative basis with IS0 and IEC. NOTE In this Recommendation,

13、the expression “Administration“ is used for conciseness to indicate both a telecommunication administration and a recognized operating agency. INTELLECTUAL PROPERTY RIGHTS ITU draws attention to the possibility that the practice or implementation of this Recommendation may involve the use of a claim

14、ed Intellectual Property Right. ITU takes no position concerning the evidence, validity or applicability of claimed Intellectual Property Rights, whether asserted by ITU members or others outside of the Recommendation development process. As of the date of approval of this Recommendation, ITU had no

15、t received notice of intellectual property, protected by patents, which may be required to implement this Recommendation. However, implementors are cautioned that this may not represent the latest information and are therefore strongly urged to consult the TSB patent database. o ITU 2001 All rights

16、reserved. No part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from ITU. 11 ITU-T X.741(1995)/Cor.3 (02/2000 E) CONTENTS Page i) Subclause 2.1 1 2) Subclause 2.2 . 1 3) Sub

17、clause 13.1 1 4) Subclause A.6 . 2 . ITU-T X.741(1995)/Cor.3 (02/2000 E) . 111 ISO/IEC 10164-9 : 19951Cor.3 : 2001 (E) INTERNATIONAL STANDARD ITU-T RECOMMENDATION INFORMATION TECHNOLOGY - OPEN SYSTEMS INTERCONNECTION - SYSTEMS MANAGEMENT: OBJECTS AND ATTRIBUTES FOR ACCESS CONTROL TECHNICAL CORRIGEND

18、UM 3 1) Subclause 2.1 Insert the following references alphanumerically: - ITU-T Recommendation X.680 (1997) I ISO/IEC 8824-1:1998, Information technology -Abstract Syntax Notation One (ASN.1): Specification of basic notation. ITU-T Recommendation X.681 (1997) 1 ISO/IEC 8824-2:1998, Information techn

19、ology -Abstract Syntax Notation One (ASN.1): Information object specification. ITU-T Recommendation X.682 (1997) I ISO/IEC 8824-3: 1998, Information technology -Abstract Syntax Notation One (ASN.1): Constraint specification. ITU-T Recommendation X.690 (1997) 1 ISO/IEC 8825-1: 1998, Information techn

20、ology - ASN.1 encoding rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER). ITU-T Recommendation X.710 (1997) I ISO/IEC 9595:1998, Information technology - Open Systems Interconnection - Common management information service. ITU-

21、T Recommendation X.71 1 (1997) I ISO/IEC 9596-1:1998, Information technology - Open Systems Interconnection - Common management information protocol: Specijcation. - - - - - 2) Subclause 2.2 Remove the following paired references: - CCITT Recommendation X.208 (1988), Specification of Abstract Syntax

22、 Notation One (ASN.1). ISO/IEC 8824: 1990, Information technology - Open Systems Interconnection - Specification of Abstract Syntax Notation One (ASNA). CCITT Recommendation X.209 (1988), Specification of Basic Encoding Rules for Abstract Syntax Notation One (ASN.1). ISO/IEC 8825: 1990, Information

23、technology - Open Systems Interconnection - Specification of Basic Encoding Rules for Abstract Syntax Notation One (ASN.1). CCITT Recommendation X.710 (1991), Common management information service definition for CCIT applications. ISO/IEC 9595: 1991, Information technology - Open Systems Interconnec

24、tion - Common management information service definition. CCITT Recommendation X.711 (1991), Common management information protocol specification for CCITT applications. ISO/IEC 9596-1 : 1991, Information technology - Open Systems Interconnection - Common management information protocol - Part I : Sp

25、ecification. - - - 3) Subclause 13.1 Replace “CCITT Rec. X.209 I ISO/IEC 8825“ with “ITU-T Rec. X.690 I ISO/IEC 8825-1“ ITU-T X.741 (1995)/Cor.3 (02/2000 E) 1 ISOIIEC 10164-9 : 199Wor.3 : 2001 (E) 4) Subclause A.6 a) In the IMPORTS FROM CMIP-1, insert the following before Objectclass: DistinguishedN

26、ame,“ b) “ DistinguishedName Remove the following IMPORTS statement: FROM InformationFramework joint-so-ccitt ds(5) modules(1) informationFramework(1) I1 c) In the IMPORTS FROM Attribute-ASNlModule, insert the following before DiscriminatorConstruct: DMI-TYPE-IDENTIFIER,“ d) Replace the production f

27、or Proxy with the following ASN.1 production: “ AC-PROXY : := DMI-TYPE-IDENTIFIER“ Proxy := SEQUENCE proxyld O IMPLICIT AC-PROXY.&id (ProxySet), proxyvalue 11 AC-PROXY.&Value (ProxySet .proxyId) ProxySet AC-PROXY := I. 11 e) Replace the production for AuthenticationContext with the following ASN.1 p

28、roduction: “ AC-AUTH-CONTEXT := DMI-TYPE-IDENTIFIER AuthenticationContext := SEQUENCE authenticationPolicyId requirements 11 AC-AUTH-CONTEXT.&Value (AuthenticationContextSet O IMPLICIT AC-AUTH-CONTEXT.&id ( AuthenticationContextSet), .authenticationPolicyId) AuthenticationContextSet AC-AUTH-CONTEXT

29、:= . 11 f) Replace the production for CapabilityIdentitiesList with the following ASN.1 production: AC-CAP-IDENTITY : := DMI-TYPE-IDENTIFIER CapabilityIdentitiesList := SET OF CHOICE knownForm O SEQUENCE initiatorName InitiatorName, sdaList SdaList OPTIONAL ), identifier AC-CAP-IDENTITY.&id (CapabilityIdentitiesSet), value AC-CAP-IDENTITY.&Value (CapabilityIdentitiesSet .identifier) unknownForm i SEQUENCE 1 CapabilityIdentitiesSet AC-CAP-IDENTITY := .) 11 2 ITU-T X.741(1995)/Cor.3 (02/2000 E)