ACP 137

UNCLASSIFIED
ACP 137
e. In the event of the constituent data files of a segmented sequence not being
restored correctly or the hash of the complete file being incorrect, the whole sequence
of files should be rejected and the sending nation should be informed and requested to
send the complete sequence of messages again, using the same Datafile Sequence
Number.
NATIONAL RESPONSIBILITIES
465. The following National Responsibilities have been identified:
a. Nations will determine which entries and values they are willing to share with
the peer nation. They are responsible for filtering entries from their national directory
system.
b. Nations are responsible for applying LDIF and other data format files sent by
other nations to their national directories. LDIF files will conform to RFC 2849 [Ref.
3].
c. All access to the shared directory will take place within a given nation. Nations
may, by agreement, allow access to their directory system to other nations. However,
the definition of such an arrangement is outside the scope of this document. It should
be further noted that where a nation chooses to share another nation’s information
with a third nation, it is the sharing nation’s responsibility to ensure that no leakage of
classified information can occur.
d. Nations are responsible for defining the means by which the replicated data is
accessible from the national email and MM systems (e.g. web interface, loaded into
GAL, etc).
e. It is incumbent on the originating nation to build email addresses that
correspond to the allowed information domains for each user. For example:
(a) 5-Eye Canadian: doej@xxx.yyy.AUSCANNZUKUS.ca
(b)
Canadian CA - US bilateral: doej@xxx.yyy.CANUS.ca
f. Only Griffin informal messaging addresses will be populated by the nation (no
national internal SMTP based email address should be populated within the CCEB).
Likewise, only externally usable X.400 addresses should be populated.
g. Nations will need to derive the email values to be replicated within an
information domain from the RHS of email addresses.
h. Nations must ensure that any changes associated with the replication partner are
chronological and not included multiple times. LDIF files will be imported in a timely
fashion and in the correct order that they are received.
4-14
UNCLASSIFIED
Original