RE: [kmip] Groups - Import Export Operation uploaded

Hi Anthony,

I’ll be in the air during today’s KMIP call so I won’t be able to attend. If this topic is discussed on the call here are some initial thoughts I have on what needs to be addressed:

Attributes defined as vendor extensions

Drop? Error? Other?

Links

How to handle links to UIDs that don't exist

Should links be allowed to point to non-existent objects?

Should all objects be imported first, and then Add Attribute used?

Incompatible UID format

For example, UID vs URN vs ...

What if a server cannot handle the format of the UID provided in the import?

What if the UID in a link attribute is in a format that the server cannot handle?

Should there be a means for translating the input UID into a format handled by the server

Add a new multi-valued attribute, "Original UID"?

UID clash

This is possible as currently the UID is only required to be unique within a single KM server

Traceability

For some customers it is important to be able to trace back to the source of the object

A new attribute, "Imported From"?

From what?

Wrapped object value

Is this fundamentally different to link?

Are wrapped objects unwrapped during export, or not?

Regards,

John

From: kmip@lists.oasis-open.org [mailto:kmip@lists.oasis-open.org] On Behalf Of Anthony Berglas
Sent: Thursday, 17 November 2016 1:38 AM
To: kmip@lists.oasis-open.org
Subject: [kmip] Groups - Import Export Operation uploaded

Submitter's message
This is an update to the proposal presented at this year's face to face to enable objects to be exported and imported. It addresses the concerns that were raised.
-- Anthony Berglas

Document Name: Import Export Operation

Description
Revised proposal for a simple Import / Export function.
Download Latest Revision
Public Download Link

Submitter: Anthony Berglas
Group: OASIS Key Management Interoperability Protocol (KMIP) TC
Folder: Drafts
Date submitted: 2016-11-16 23:37:31

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service for QuintessenceLabs Pty Ltd.
______________________________________________________________________

kmip message