View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
000278610000-005: Information ModelSpecpublic2014-05-13 19:342015-01-16 19:00
ReporterCONDEMINE Assigned ToWolfgang Mahnke  
PrioritynormalSeveritytextReproducibilityalways
Status closedResolutionfixed 
Product Version1.02 
Target Version1.03Fixed in Version1.03 
Summary0002786: SessionSecurityDiagnosticsType attribute AuthenticationMechanism needs clarification
Description

Hello,
The AuthenticationMechanism attribute of the SessionSecurityDiagnosticsType VariableType is define as a String. But the expected content for this string is not clearly specified.
References in Part 5 v1.02 are :

  • §7.18 describe this attribute as a string in Table 77
  • §12.12 describe this attribute as a string Table 146 and tell us :"Type of authentication (user name and password, X.509, Kerberos)."

I suppose the string should contain one of the User Token URI described at http://opcf.org/profilereporting/ :
http://opcfoundation.org/UA-Profile/Security/UserToken/Anonymous
http://opcfoundation.org/UA-Profile/Security/UserToken/Server/UserNamePassword
http://opcfoundation.org/UA-Profile/Security/UserToken/Server/X509Certificate
...

But it's not specified anywhere in the specification

Best regards
Michel

TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Jim Luth

2014-06-24 16:32

administrator   ~0005365

All of the fields in table 77 of type String or String[] (not just AuthenticationMechanism ) should specify allowed string values so they can be programmed against. If they were meant to be free-form human readable, then the type should be changed to LocalizedText.

Wolfgang Mahnke

2014-08-25 08:58

developer   ~0005465

Table 146 defines how the strings shall be used. Some values are defined, some are defined but open (e.g. encoding having XML or UA Binary as examples as we do support potintially more endocdings). If there is still information missing we need to discuss based on table 146 (SessionSecurityDiagnosticsDataType). In case of authenticationMechanism I would expect to have "use name and password" or "X.509" or "Kerberos".

Wolfgang Mahnke

2015-01-16 18:59

developer   ~0005780

fixed text in 1.03 draft 09

Jim Luth

2015-01-16 19:00

administrator   ~0005781

Agreed to text updated in the UA Meeting.

Issue History

Date Modified Username Field Change
2014-05-13 19:34 CONDEMINE New Issue
2014-06-24 16:32 Jim Luth Note Added: 0005365
2014-06-24 16:32 Jim Luth Status new => assigned
2014-06-24 16:32 Jim Luth Assigned To => Wolfgang Mahnke
2014-08-25 08:58 Wolfgang Mahnke Note Added: 0005465
2014-08-26 16:21 Jim Luth Category (No Category) => Spec
2014-08-26 16:21 Jim Luth Target Version => 1.03
2015-01-16 18:59 Wolfgang Mahnke Note Added: 0005780
2015-01-16 18:59 Wolfgang Mahnke Status assigned => resolved
2015-01-16 18:59 Wolfgang Mahnke Resolution open => fixed
2015-01-16 19:00 Jim Luth Note Added: 0005781
2015-01-16 19:00 Jim Luth Status resolved => closed
2015-01-16 19:00 Jim Luth Fixed in Version => 1.03