From nobody Sat Sep  6 16:32:42 2014
Return-Path: <aland@freeradius.org>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A69A1A0181 for <aaa-doctors@ietfa.amsl.com>; Sat,  6 Sep 2014 16:32:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 4.046
X-Spam-Level: ****
X-Spam-Status: No, score=4.046 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_MISMATCH_ORG=0.611, RDNS_DYNAMIC=0.982] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JfhEO9k6YwhS for <aaa-doctors@ietfa.amsl.com>; Sat,  6 Sep 2014 16:32:39 -0700 (PDT)
Received: from power.freeradius.org (195-154-231-44.rev.poneytelecom.eu [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id F009D1A0114 for <aaa-doctors@ietf.org>; Sat,  6 Sep 2014 16:32:38 -0700 (PDT)
Received: by power.freeradius.org (Postfix, from userid 1000) id E42912240190; Sun,  7 Sep 2014 01:32:06 +0200 (CEST)
From: aland@freeradius.org
To: <aaa-doctors@ietf.org>
X-Mailer: mail (GNU Mailutils 2.99.98)
Message-Id: <20140906233206.E42912240190@power.freeradius.org>
Date: Sun,  7 Sep 2014 01:32:06 +0200 (CEST)
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/jwHPJa8YSy_hzFwwrQHHuQI6fwc
Subject: [AAA-DOCTORS] Automatic tech report for Sun Sep 7 01:32:06 CEST 2014
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 06 Sep 2014 23:32:40 -0000

  This is an automatically generated email.  It lists the IETF internet-drafts
which are WG items and which reference RADIUS.  Drafts
from the RADEXT and DIME working groups are not included.

--
draft-ietf-abfab-arch-13                          In IESG processing - ID Tracker state <RFC Ed Queue>	
draft-ietf-softwire-map-radius-02                 Active	


From nobody Mon Sep  8 14:52:38 2014
Return-Path: <bclaise@cisco.com>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C8051A03D9; Mon,  8 Sep 2014 14:52:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.153
X-Spam-Level: 
X-Spam-Status: No, score=-16.153 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.652, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HmDJ8HP9XwKh; Mon,  8 Sep 2014 14:52:33 -0700 (PDT)
Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4C8D1A02A5; Mon,  8 Sep 2014 14:52:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=172; q=dns/txt; s=iport; t=1410213153; x=1411422753; h=message-id:date:from:mime-version:to:subject: content-transfer-encoding; bh=pPX8/N93gk/3Jo79kEAFhPZURk0uOGtnADpq0aEFuc8=; b=POElzzJOvjvXOJc3POLBDTQHeaUH3NCfqDIL8V7RG1TGO+7ELF8TZ0tQ S4drX6fJF4+vmW1QUHH7NUy5KVxRmmft9Jr584YWpPtUUh85WZQDW4DDW zudqOObXUiVUpgrO6DHVbCnINZQWZJqc942BGnGA01geXMtWx5l7KK4Iy 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AskIABskDlStJssW/2dsb2JhbABZg2COGLxAiHx4hEJAPRYYAwIBAgFLAQwIAQGIPg29PAETBJQgAQSccodBjWuDYzuCfgEBAQ
X-IronPort-AV: E=Sophos;i="5.04,488,1406592000"; d="scan'208";a="166333889"
Received: from aer-iport-nat.cisco.com (HELO aer-core-3.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP; 08 Sep 2014 21:52:31 +0000
Received: from [10.60.67.84] (ams-bclaise-8913.cisco.com [10.60.67.84]) by aer-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id s88LqU4S003249; Mon, 8 Sep 2014 21:52:30 GMT
Message-ID: <540E251E.2050206@cisco.com>
Date: Mon, 08 Sep 2014 23:52:30 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.7.0
MIME-Version: 1.0
To: dime mailing list <dime@ietf.org>, "radext@ietf.org" <radext@ietf.org>, "aaa-doctors@ietf.org" <aaa-doctors@ietf.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/HvXn5kYrz-Jkxjhw3Nnk7GMOHiU
Subject: [AAA-DOCTORS] AAA tutorial posted
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Sep 2014 21:52:35 -0000

Dear all,

I (finally) posted the IETF 89 AAA tutorial.
https://www.youtube.com/watch?v=7yMwP1D3Um4
The link is also on both DIME and RADEXT WIKIs.

Regards, Benoit


From nobody Tue Sep  9 01:04:17 2014
Return-Path: <bclaise@cisco.com>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13F831A0BEB; Tue,  9 Sep 2014 01:04:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.153
X-Spam-Level: 
X-Spam-Status: No, score=-16.153 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.652, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fr2b28zxmRjL; Tue,  9 Sep 2014 01:04:07 -0700 (PDT)
Received: from aer-iport-1.cisco.com (aer-iport-1.cisco.com [173.38.203.51]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E2671A0B7D; Tue,  9 Sep 2014 01:04:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=288; q=dns/txt; s=iport; t=1410249847; x=1411459447; h=message-id:date:from:mime-version:to:subject:references: in-reply-to:content-transfer-encoding; bh=1SsgyAEr2fYHihgawLT8enTEQGXHAO4aiGk38cKXt3Y=; b=ZAkq9fv6djeUfEvcJ0Q6/5GcRQtPvWVs7YpbtMscwcxn0NHh8j/heFYI 7V3gf20XLXtZ0FFaieqLJIDAzf3INycBVlGTxfVb8mPSlg3/Z0wg12VEr +2XDihlnroHCfQ8GXqC4kKtllFrNJ8oPdd5vpfmynxmXrKW3ST4KyQIBp 0=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AkEHAEC0DlStJssW/2dsb2JhbABZg2COGLxRh0wBgSl4hAQBAQQ4UQshJQ8CRgYBDAgBAYg+DbxMARMEj1SETAEEnHOHQY1tg2M7gn4BAQE
X-IronPort-AV: E=Sophos;i="5.04,491,1406592000"; d="scan'208";a="171501614"
Received: from aer-iport-nat.cisco.com (HELO aer-core-4.cisco.com) ([173.38.203.22]) by aer-iport-1.cisco.com with ESMTP; 09 Sep 2014 08:04:03 +0000
Received: from [10.60.67.84] (ams-bclaise-8913.cisco.com [10.60.67.84]) by aer-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id s89843iH017674; Tue, 9 Sep 2014 08:04:03 GMT
Message-ID: <540EB473.20302@cisco.com>
Date: Tue, 09 Sep 2014 10:04:03 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.7.0
MIME-Version: 1.0
To: dime mailing list <dime@ietf.org>, "radext@ietf.org" <radext@ietf.org>, "aaa-doctors@ietf.org" <aaa-doctors@ietf.org>
References: <540E251E.2050206@cisco.com>
In-Reply-To: <540E251E.2050206@cisco.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/OPsJ2MK0s-twOkes4d6IAOmQ-v4
Subject: Re: [AAA-DOCTORS] AAA tutorial posted
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Sep 2014 08:04:09 -0000

Dear all,

I didn't realize that this video was posted as private. Now corrected.

Regards, Benoit
> Dear all,
>
> I (finally) posted the IETF 89 AAA tutorial.
> https://www.youtube.com/watch?v=7yMwP1D3Um4
> The link is also on both DIME and RADEXT WIKIs.
>
> Regards, Benoit


From nobody Fri Sep 12 02:28:43 2014
Return-Path: <bclaise@cisco.com>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42EA71A0643; Fri, 12 Sep 2014 02:28:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.153
X-Spam-Level: 
X-Spam-Status: No, score=-16.153 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.652, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W14N2HxbgpXX; Fri, 12 Sep 2014 02:28:38 -0700 (PDT)
Received: from aer-iport-2.cisco.com (aer-iport-2.cisco.com [173.38.203.52]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34C5A1A069B; Fri, 12 Sep 2014 02:28:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3751; q=dns/txt; s=iport; t=1410514118; x=1411723718; h=message-id:date:from:mime-version:to:subject:references: in-reply-to:content-transfer-encoding; bh=HBVqb6VYLEg0tnvSU5yaaK+A+8cjzAoEnsHOK2TGifc=; b=UyHtqAy1rbA3ZA4hA08fZPYQV+/z4ILRISgp/AiTB1jy/rkZJQH9SMXN 0z28BoqTTnzNZ3360TXcNLnzH6hh1cjf6eDul8egXBsX1UcqdW9q9ha7I 8XNlf0cdFTv9B5vGxk5PdAccF+/Ne41OyFI/N+Qg7nng6UYoWVVeDyYY1 Q=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AqcEAHC8ElStJssW/2dsb2JhbABfg2BXyGeHTgGBJniEBAEBBDhADQQsFg8JAwIBAgEPLAoGAQwGAgEBF4gTAxENtnsNhn4BEwSMHoECgUsRAVeETAEElgCEc4IQh0SEYYJZhj2CG4FIOy+BD4FAAQEB
X-IronPort-AV: E=Sophos;i="5.04,511,1406592000"; d="scan'208";a="174576614"
Received: from aer-iport-nat.cisco.com (HELO aer-core-1.cisco.com) ([173.38.203.22]) by aer-iport-2.cisco.com with ESMTP; 12 Sep 2014 09:28:34 +0000
Received: from [10.60.67.84] (ams-bclaise-8913.cisco.com [10.60.67.84]) by aer-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id s8C9SYkj007730; Fri, 12 Sep 2014 09:28:34 GMT
Message-ID: <5412BCC2.4070408@cisco.com>
Date: Fri, 12 Sep 2014 11:28:34 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.7.0
MIME-Version: 1.0
To: "aaa-doctors@ietf.org" <aaa-doctors@ietf.org>, "MIB Doctors (E-mail)" <mib-doctors@ietf.org>, YANG Doctors <yang-doctors@ietf.org>, "ops-dir@ietf.org" <ops-dir@ietf.org>, "pm-dir@ietf.org" <pm-dir@ietf.org>, IETF DNS Directorate <dns-dir@ietf.org>
References: <20140911211704.7607.1239.idtracker@ietfa.amsl.com>
In-Reply-To: <20140911211704.7607.1239.idtracker@ietfa.amsl.com>
X-Forwarded-Message-Id: <20140911211704.7607.1239.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/bURNdZjZOcEmzEojpORtEaHYJFA
Subject: [AAA-DOCTORS] Fwd: [IESG-AGENDA-DIST] Summarized Agenda for the 2014-09-18 IESG Teleconference
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Sep 2014 09:28:40 -0000

Dear all,

Please find below the agenda of the Sept 18th IESG telechat.
Please send your questions, comments and concerns before Sept 17th COB.

Thanks and Regards, Benoit.


-------- Original Message --------

INTERNET ENGINEERING STEERING GROUP (IESG)
Summarized Agenda for the 2014-09-18 IESG Teleconference

This agenda was generated at 2014-09-11 14:15:12 PDT
Up-to-date web version of this agenda can be found at:
https://datatracker.ietf.org/iesg/agenda/



2. Protocol Actions
2.1 WG Submissions
2.1.1 New Items
     
   o draft-ietf-netmod-snmp-cfg-07  - IETF stream
     A YANG Data Model for SNMP Configuration (Proposed Standard)
     Token: Benoit Claise
     IANA Review: IANA OK - Actions Needed
     Consensus: Yes

   o draft-ietf-dnsop-child-syncronization-03  - IETF stream
     Child To Parent Synchronization in DNS (Proposed Standard)
     Token: Joel Jaeggli
     IANA Review: Version Changed - Review Needed
     Consensus: Yes

   o draft-ietf-6lo-ghc-04  - IETF stream
     6LoWPAN Generic Compression of Headers and Header-like Payloads
     (Proposed Standard)
     Token: Brian Haberman
     IANA Review: IANA OK - Actions Needed
     Consensus: Yes

2.1.2 Returning Items
     
   o draft-ietf-savi-dhcp-29  - IETF stream
     SAVI Solution for DHCP (Proposed Standard)
     Note: Jean-Michel Combes (jeanmichel.combes@gmail.com) is the
     Document Shepherd.
     Token: Ted Lemon
     IANA Review: IANA OK - No Actions Needed
     Consensus: Yes

2.2 Individual Submissions
2.2.1 New Items
     
   o draft-masotta-tftpexts-windowsize-opt-11  - IETF stream
     TFTP Windowsize Option (Proposed Standard)
     Token: Joel Jaeggli
     IANA Review: IANA OK - No Actions Needed
     Consensus: Unknown

2.2.2 Returning Items

   NONE

2.3 Status Changes
2.3.1 New Items

   NONE

2.3.2 Returning Items

   NONE

3. Document Actions
3.1 WG Submissions
3.1.1 New Items
     
   o draft-ietf-bfd-intervals-04  - IETF stream
     Common Interval Support in Bidirectional Forwarding Detection
     (Informational)
     Token: Adrian Farrel
     IANA Review: IANA OK - No Actions Needed
     Consensus: Yes

3.1.2 Returning Items

   NONE

3.2 Individual Submissions Via AD
3.2.1 New Items
     
   o draft-moonesamy-sshfp-ed25519-02  - IETF stream
     Using ED25519 in SSHFP Resource Records (Informational)
     Token: Stephen Farrell
     IANA Review: IANA OK - Actions Needed
     Consensus: Unknown

3.2.2 Returning Items
     
   o draft-dukhovni-opportunistic-security-04  - IETF stream
     Opportunistic Security: Some Protection Most of the Time
     (Informational)
     Token: Stephen Farrell
     IANA Review: IANA OK - No Actions Needed
     Consensus: Unknown

3.3 Status Changes
3.3.1 New Items

   NONE

3.3.2 Returning Items

   NONE

3.4 IRTF and Independent Submission Stream Documents
3.4.1 New Items

   o conflict-review-zeilenga-email-seclabel-00
     IETF conflict review for draft-zeilenga-email-seclabel
       draft-zeilenga-email-seclabel-08
       Security Labels in Internet Email (ISE: Informational)
     Token: Barry Leiba

3.4.2 Returning Items

   o conflict-review-deng-pcp-ddns-00
     IETF conflict review for draft-deng-pcp-ddns
       draft-deng-pcp-ddns-06
       Using Port Control Protocol (PCP) to update dynamic DNS (ISE:
     Informational)
     Token: Ted Lemon

4. Working Group Actions
4.1 WG Creation
4.1.1 Proposed for IETF Review

   o Web-Based Push Notifications (webpush)

4.1.2 Proposed for Approval

   NONE

4.2 WG Rechartering
4.2.1 Under Evaluation for IETF Review

   NONE

4.2.2 Proposed for Approval

   NONE




From nobody Sat Sep 13 16:32:40 2014
Return-Path: <aland@freeradius.org>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 105451A0104 for <aaa-doctors@ietfa.amsl.com>; Sat, 13 Sep 2014 16:32:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.746
X-Spam-Level: **
X-Spam-Status: No, score=2.746 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_MISMATCH_ORG=0.611, RDNS_DYNAMIC=0.982] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id toyWk9S9jHIQ for <aaa-doctors@ietfa.amsl.com>; Sat, 13 Sep 2014 16:32:38 -0700 (PDT)
Received: from power.freeradius.org (195-154-231-44.rev.poneytelecom.eu [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id A3A071A00A5 for <aaa-doctors@ietf.org>; Sat, 13 Sep 2014 16:32:38 -0700 (PDT)
Received: by power.freeradius.org (Postfix, from userid 1000) id CA0B22240650; Sun, 14 Sep 2014 01:32:06 +0200 (CEST)
From: aland@freeradius.org
To: <aaa-doctors@ietf.org>
X-Mailer: mail (GNU Mailutils 2.99.98)
Message-Id: <20140913233206.CA0B22240650@power.freeradius.org>
Date: Sun, 14 Sep 2014 01:32:06 +0200 (CEST)
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/4fPX2S92GRi_U9_IZlHbDrhGN04
Subject: [AAA-DOCTORS] Automatic tech report for Sun Sep 14 01:32:06 CEST 2014
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Sep 2014 23:32:40 -0000

  This is an automatically generated email.  It lists the IETF internet-drafts
which are WG items and which reference RADIUS.  Drafts
from the RADEXT and DIME working groups are not included.

--
draft-ietf-abfab-arch-13                          In IESG processing - ID Tracker state <RFC Ed Queue>	
draft-ietf-softwire-map-radius-02                 Active	


From nobody Wed Sep 17 11:27:13 2014
Return-Path: <bclaise@cisco.com>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C700F1A0332 for <aaa-doctors@ietfa.amsl.com>; Wed, 17 Sep 2014 11:27:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.152
X-Spam-Level: 
X-Spam-Status: No, score=-16.152 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.652, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z35_3VD2hpV9 for <aaa-doctors@ietfa.amsl.com>; Wed, 17 Sep 2014 11:27:09 -0700 (PDT)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 540F31A036B for <aaa-doctors@ietf.org>; Wed, 17 Sep 2014 11:27:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9135; q=dns/txt; s=iport; t=1410978429; x=1412188029; h=message-id:date:from:mime-version:to:subject:references: in-reply-to; bh=aeV8mcwogw7sSex0r8VRTZvyfv9pX7C9Q5ZtiPi89DM=; b=EgNjrdTCzy+UYpqbRaQWQWKYY+n3Yo2VgPrPYUmQuHP1c2QsjpVyO45c Hz1YgkrvtBKhS0o4pRoCrWefCQSMwrXiezs1jOe9GgkqD3qy5rxeVLwT6 pWmIrk1T7YfM0+XkYDfHg/PF6UWT0z+jP0+rzFk8a5gROmdpP7NU48KGH g=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AgULAEXSGVStJA2N/2dsb2JhbABHGoMNU4kwwFOHTQGBFhYBcQiEAwEBAQR4DQQcAwECChYPCQMCAQIBOwIIBg0GAgEBiDoNNr8oAReMQoMkGAaERQWGH5Zth0mNf4FpAhqBWzsvAROCNgEBAQ
X-IronPort-AV: E=Sophos;i="5.04,541,1406592000";  d="scan'208,217";a="356047580"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-6.cisco.com with ESMTP; 17 Sep 2014 18:27:09 +0000
Received: from [10.131.25.47] (dhcp-10-131-25-47.cisco.com [10.131.25.47]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id s8HIR8a0008173 for <aaa-doctors@ietf.org>; Wed, 17 Sep 2014 18:27:08 GMT
Message-ID: <5419D27B.2040501@cisco.com>
Date: Wed, 17 Sep 2014 20:27:07 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.7.0
MIME-Version: 1.0
To: "aaa-doctors@ietf.org" <aaa-doctors@ietf.org>
References: <20140810145702.EF9E81801A4@rfc-editor.org>
In-Reply-To: <20140810145702.EF9E81801A4@rfc-editor.org>
X-Forwarded-Message-Id: <20140810145702.EF9E81801A4@rfc-editor.org>
Content-Type: multipart/alternative; boundary="------------030904020503040604050508"
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/9mogtU2CadbDRos6Nxlr6larvMo
Subject: [AAA-DOCTORS] Fwd: [Technical Errata Reported] RFC2865 (4077)
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Sep 2014 18:27:12 -0000

This is a multi-part message in MIME format.
--------------030904020503040604050508
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

AAA doctors,

What do you think of this?

Regards, Beonit


-------- Original Message --------
Subject: 	[Technical Errata Reported] RFC2865 (4077)
Date: 	Sun, 10 Aug 2014 07:57:02 -0700
From: 	RFC Errata System <rfc-editor@rfc-editor.org>
To: 	<cdr@telemancy.com>, <acr@merit.edu>, <wsimpson@greendragon.com>, 
<steve@livingston.com>, <bclaise@cisco.com>, <joelja@bogus.com>
CC: 	<axel.luttgens@skynet.be>, <rfc-editor@rfc-editor.org>



The following errata report has been submitted for RFC2865,
"Remote Authentication Dial In User Service (RADIUS)".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=2865&eid=4077

--------------------------------------
Type: Technical
Reported by: Axel Luttgens <axel.luttgens@skynet.be>

Section: 3

Original Text
-------------
       Response Authenticator

          The value of the Authenticator field in Access-Accept, Access-
          Reject, and Access-Challenge packets is called the Response
          Authenticator, and contains a one-way MD5 hash calculated over
          a stream of octets consisting of: the RADIUS packet, beginning
          with the Code field, including the Identifier, the Length, the
          Request Authenticator field from the Access-Request packet, and
          the response Attributes, followed by the shared secret.  That
          is, ResponseAuth =
          MD5(Code+ID+Length+RequestAuth+Attributes+Secret) where +
          denotes concatenation.


Corrected Text
--------------
       Response Authenticator

          The value of the Authenticator field in Access-Accept, Access-
          Reject, and Access-Challenge packets is called the Response
          Authenticator, and contains a one-way MD5 hash calculated over
          a stream of octets consisting of: the response Code field, the
          Identifier, the response Length, the Request Authenticator, the
          response Attributes, and finally the shared secret.
          That is, ResponseAuth =
          MD5(Code+ID+Length+RequestAuth+Attributes+Secret) where +
          denotes concatenation.


Notes
-----
This sentence fragment "[...] consisting of: the RADIUS packet, [...]" tends to imply one is considering either the Access-Request packet, or the reply packet being under construction.

But this is inconsistent with the idea of having the the MD5 hash calculated over both the Request Authenticator and the response Attributes...

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary.

--------------------------------------
RFC2865 (draft-ietf-radius-radius-v2-06)
--------------------------------------
Title               : Remote Authentication Dial In User Service (RADIUS)
Publication Date    : June 2000
Author(s)           : C. Rigney, S. Willens, A. Rubens, W. Simpson
Category            : DRAFT STANDARD
Source              : Remote Authentication Dial-In User Service
Area                : Operations and Management
Stream              : IETF
Verifying Party     : IESG

.




--------------030904020503040604050508
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    AAA doctors,<br>
    <br>
    What do you think of this?<br>
    <br>
    Regards, Beonit<br>
    <div class="moz-forward-container"><br>
      <br>
      -------- Original Message --------
      <table class="moz-email-headers-table" cellpadding="0"
        cellspacing="0" border="0">
        <tbody>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Subject:
            </th>
            <td>[Technical Errata Reported] RFC2865 (4077)</td>
          </tr>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Date: </th>
            <td>Sun, 10 Aug 2014 07:57:02 -0700</td>
          </tr>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">From: </th>
            <td>RFC Errata System <a class="moz-txt-link-rfc2396E" href="mailto:rfc-editor@rfc-editor.org">&lt;rfc-editor@rfc-editor.org&gt;</a></td>
          </tr>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">To: </th>
            <td><a class="moz-txt-link-rfc2396E" href="mailto:cdr@telemancy.com">&lt;cdr@telemancy.com&gt;</a>, <a class="moz-txt-link-rfc2396E" href="mailto:acr@merit.edu">&lt;acr@merit.edu&gt;</a>,
              <a class="moz-txt-link-rfc2396E" href="mailto:wsimpson@greendragon.com">&lt;wsimpson@greendragon.com&gt;</a>,
              <a class="moz-txt-link-rfc2396E" href="mailto:steve@livingston.com">&lt;steve@livingston.com&gt;</a>, <a class="moz-txt-link-rfc2396E" href="mailto:bclaise@cisco.com">&lt;bclaise@cisco.com&gt;</a>,
              <a class="moz-txt-link-rfc2396E" href="mailto:joelja@bogus.com">&lt;joelja@bogus.com&gt;</a></td>
          </tr>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">CC: </th>
            <td><a class="moz-txt-link-rfc2396E" href="mailto:axel.luttgens@skynet.be">&lt;axel.luttgens@skynet.be&gt;</a>,
              <a class="moz-txt-link-rfc2396E" href="mailto:rfc-editor@rfc-editor.org">&lt;rfc-editor@rfc-editor.org&gt;</a></td>
          </tr>
        </tbody>
      </table>
      <br>
      <br>
      <pre>The following errata report has been submitted for RFC2865,
"Remote Authentication Dial In User Service (RADIUS)".

--------------------------------------
You may review the report below and at:
<a class="moz-txt-link-freetext" href="http://www.rfc-editor.org/errata_search.php?rfc=2865&amp;eid=4077">http://www.rfc-editor.org/errata_search.php?rfc=2865&amp;eid=4077</a>

--------------------------------------
Type: Technical
Reported by: Axel Luttgens <a class="moz-txt-link-rfc2396E" href="mailto:axel.luttgens@skynet.be">&lt;axel.luttgens@skynet.be&gt;</a>

Section: 3

Original Text
-------------
      Response Authenticator

         The value of the Authenticator field in Access-Accept, Access-
         Reject, and Access-Challenge packets is called the Response
         Authenticator, and contains a one-way MD5 hash calculated over
         a stream of octets consisting of: the RADIUS packet, beginning
         with the Code field, including the Identifier, the Length, the
         Request Authenticator field from the Access-Request packet, and
         the response Attributes, followed by the shared secret.  That
         is, ResponseAuth =
         MD5(Code+ID+Length+RequestAuth+Attributes+Secret) where +
         denotes concatenation.


Corrected Text
--------------
      Response Authenticator

         The value of the Authenticator field in Access-Accept, Access-
         Reject, and Access-Challenge packets is called the Response
         Authenticator, and contains a one-way MD5 hash calculated over
         a stream of octets consisting of: the response Code field, the
         Identifier, the response Length, the Request Authenticator, the
         response Attributes, and finally the shared secret. 
         That is, ResponseAuth =
         MD5(Code+ID+Length+RequestAuth+Attributes+Secret) where +
         denotes concatenation.


Notes
-----
This sentence fragment "[...] consisting of: the RADIUS packet, [...]" tends to imply one is considering either the Access-Request packet, or the reply packet being under construction.

But this is inconsistent with the idea of having the the MD5 hash calculated over both the Request Authenticator and the response Attributes...

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC2865 (draft-ietf-radius-radius-v2-06)
--------------------------------------
Title               : Remote Authentication Dial In User Service (RADIUS)
Publication Date    : June 2000
Author(s)           : C. Rigney, S. Willens, A. Rubens, W. Simpson
Category            : DRAFT STANDARD
Source              : Remote Authentication Dial-In User Service
Area                : Operations and Management
Stream              : IETF
Verifying Party     : IESG

.

</pre>
      <br>
    </div>
    <br>
  </body>
</html>

--------------030904020503040604050508--


From nobody Wed Sep 17 12:17:26 2014
Return-Path: <aland@deployingradius.com>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D93F1A0462 for <aaa-doctors@ietfa.amsl.com>; Wed, 17 Sep 2014 12:17:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.346
X-Spam-Level: *
X-Spam-Status: No, score=1.346 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_MISMATCH_ORG=0.611, RDNS_DYNAMIC=0.982] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9C5rIyECSyQD for <aaa-doctors@ietfa.amsl.com>; Wed, 17 Sep 2014 12:17:23 -0700 (PDT)
Received: from power.freeradius.org (195-154-231-44.rev.poneytelecom.eu [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id F211D1A0AE0 for <aaa-doctors@ietf.org>; Wed, 17 Sep 2014 12:17:22 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id E66E42240582; Wed, 17 Sep 2014 21:16:51 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at power.freeradius.org
Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vrY3hId8Vomd; Wed, 17 Sep 2014 21:16:51 +0200 (CEST)
Received: from Thor.local (unknown [70.50.218.244]) by power.freeradius.org (Postfix) with ESMTPSA id 5EF70224020D; Wed, 17 Sep 2014 21:16:51 +0200 (CEST)
Message-ID: <5419DE22.9030205@deployingradius.com>
Date: Wed, 17 Sep 2014 15:16:50 -0400
From: Alan DeKok <aland@deployingradius.com>
User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228)
MIME-Version: 1.0
To: Benoit Claise <bclaise@cisco.com>
References: <20140810145702.EF9E81801A4@rfc-editor.org> <5419D27B.2040501@cisco.com>
In-Reply-To: <5419D27B.2040501@cisco.com>
X-Enigmail-Version: 0.96.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/xtJ-kbilq3J1X6jIfOoLhJk6O50
Cc: "aaa-doctors@ietf.org" <aaa-doctors@ietf.org>
Subject: Re: [AAA-DOCTORS] Fwd: [Technical Errata Reported] RFC2865 (4077)
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Sep 2014 19:17:24 -0000

Benoit Claise wrote:
>  AAA doctors,
> 
> What do you think of this?

  I don't see this as having caused problems in the last 20 years.  So
the text is likely fine.

> This sentence fragment "[...] consisting of: the RADIUS packet, [...]" tends to imply one is considering either the Access-Request packet, or the reply packet being under construction.

  Well, no.  It should be interpreted as "the RADIUS packet under
construction".  I don't see a reason why it would refer to some other
packet.

> But this is inconsistent with the idea of having the the MD5 hash calculated over both the Request Authenticator and the response Attributes...

  Which is why the Request Authenticator is specifically called out as
being different.

  The MD5 calculation can be done on each field individually.  i.e. it
can be done directly on the Request Authenticator from the
Access-Request packet.

  In practice, implementations usually just memcpy() the Request
Authenticator to the Response Authenticator, and do an MD5 over the
entire packet.  This is faster than doing it field by field.

  But there is no *requirement* for that to be done.

  His suggested text changes:

... the RADIUS packet, beginning with the Code field, including the
Identifier, the Length, the Request Authenticator field from the
Access-Request packet, and the response Attributes

  To:

.. the response Code field, the Identifier, the response
Length, the Request Authenticator, the response Attributes

  Note he doesn't say "the response Identifier".  So the suggested
change is still ambiguous.

  I don't see the "RADIUS packet" as being ambiguous.  The Response
Authenticator is being calculated for a specific packet, and the term
"RADIUS packet" clearly refers to the packet under construction.  I
don't see it as reasonable to assume that "RADIUS packet" in this
context refers to some *other* packet.

  Alan DeKok.


From nobody Sat Sep 20 16:32:41 2014
Return-Path: <aland@freeradius.org>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D73041A02E1 for <aaa-doctors@ietfa.amsl.com>; Sat, 20 Sep 2014 16:32:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 3.245
X-Spam-Level: ***
X-Spam-Status: No, score=3.245 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_MISMATCH_ORG=0.611, RDNS_DYNAMIC=0.982] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z6pXeGGwGTuH for <aaa-doctors@ietfa.amsl.com>; Sat, 20 Sep 2014 16:32:38 -0700 (PDT)
Received: from power.freeradius.org (195-154-231-44.rev.poneytelecom.eu [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id 79D221A02DF for <aaa-doctors@ietf.org>; Sat, 20 Sep 2014 16:32:38 -0700 (PDT)
Received: by power.freeradius.org (Postfix, from userid 1000) id B519122408FE; Sun, 21 Sep 2014 01:32:06 +0200 (CEST)
From: aland@freeradius.org
To: <aaa-doctors@ietf.org>
X-Mailer: mail (GNU Mailutils 2.99.98)
Message-Id: <20140920233206.B519122408FE@power.freeradius.org>
Date: Sun, 21 Sep 2014 01:32:06 +0200 (CEST)
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/W65EoMbgJGlxwgGyuf0_b6qVCVg
Subject: [AAA-DOCTORS] Automatic tech report for Sun Sep 21 01:32:06 CEST 2014
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Sep 2014 23:32:40 -0000

  This is an automatically generated email.  It lists the IETF internet-drafts
which are WG items and which reference RADIUS.  Drafts
from the RADEXT and DIME working groups are not included.

--
draft-ietf-abfab-arch-13                          In IESG processing - ID Tracker state <RFC Ed Queue>	
draft-ietf-softwire-map-radius-02                 Active	


From nobody Mon Sep 22 03:28:06 2014
Return-Path: <bclaise@cisco.com>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBBB21A1A9C for <aaa-doctors@ietfa.amsl.com>; Mon, 22 Sep 2014 03:28:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -13.887
X-Spam-Level: 
X-Spam-Status: No, score=-13.887 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cotIYIaik7Qp for <aaa-doctors@ietfa.amsl.com>; Mon, 22 Sep 2014 03:28:02 -0700 (PDT)
Received: from aer-iport-1.cisco.com (aer-iport-1.cisco.com [173.38.203.51]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE35B1A1A9B for <aaa-doctors@ietf.org>; Mon, 22 Sep 2014 03:28:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2204; q=dns/txt; s=iport; t=1411381682; x=1412591282; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=h4LBHlOE22QhC60ftwE8aAO3HqhrkwM8V3CVxtuLHcQ=; b=FbZvOD52ENJj5yyjCJbdPjIOi2W1HT6AxJb84swjnq5QhNcNTq/M13vL zbVKOdm87XIT1tCy8ZSxJ1GN2AEuy47vD65kgVBk8oMPMup7nb7ta1bsI 6PCSFsbbdev96DWfUwHvg0qNwQEsbFQaJTA1wNnSqiLG1nY3uvii2PKQG o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AgsOAI/4H1StJssW/2dsb2JhbABgzxKHQgGBIAF5hAQBAQQ4QAEQCxgJFg8JAwIBAgFFBg0BBwEBiDrECgEXjE6DOAeESwEEnRaHTI4GgWsCDA+BWzuCeQEBAQ
X-IronPort-AV: E=Sophos;i="5.04,571,1406592000"; d="scan'208";a="185966907"
Received: from aer-iport-nat.cisco.com (HELO aer-core-3.cisco.com) ([173.38.203.22]) by aer-iport-1.cisco.com with ESMTP; 22 Sep 2014 10:27:59 +0000
Received: from [10.60.67.84] (ams-bclaise-8913.cisco.com [10.60.67.84]) by aer-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id s8MARxBu027265; Mon, 22 Sep 2014 10:27:59 GMT
Message-ID: <541FF9AF.2010404@cisco.com>
Date: Mon, 22 Sep 2014 12:27:59 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.7.0
MIME-Version: 1.0
To: Alan DeKok <aland@deployingradius.com>
References: <20140810145702.EF9E81801A4@rfc-editor.org> <5419D27B.2040501@cisco.com> <5419DE22.9030205@deployingradius.com>
In-Reply-To: <5419DE22.9030205@deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/-XHOTlKzMNy7Y-0UIML0D1tARTs
Cc: "aaa-doctors@ietf.org" <aaa-doctors@ietf.org>, axel.luttgens@skynet.be
Subject: Re: [AAA-DOCTORS] Fwd: [Technical Errata Reported] RFC2865 (4077)
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Sep 2014 10:28:03 -0000

Thanks Alan,

Including Axel in cc, just in case he wants to reply.
Otherwise, I lean towards "rejected" and will do so in a couple of days.

Regards, Benoit
> Benoit Claise wrote:
>>   AAA doctors,
>>
>> What do you think of this?
>    I don't see this as having caused problems in the last 20 years.  So
> the text is likely fine.
>
>> This sentence fragment "[...] consisting of: the RADIUS packet, [...]" tends to imply one is considering either the Access-Request packet, or the reply packet being under construction.
>    Well, no.  It should be interpreted as "the RADIUS packet under
> construction".  I don't see a reason why it would refer to some other
> packet.
>
>> But this is inconsistent with the idea of having the the MD5 hash calculated over both the Request Authenticator and the response Attributes...
>    Which is why the Request Authenticator is specifically called out as
> being different.
>
>    The MD5 calculation can be done on each field individually.  i.e. it
> can be done directly on the Request Authenticator from the
> Access-Request packet.
>
>    In practice, implementations usually just memcpy() the Request
> Authenticator to the Response Authenticator, and do an MD5 over the
> entire packet.  This is faster than doing it field by field.
>
>    But there is no *requirement* for that to be done.
>
>    His suggested text changes:
>
> ... the RADIUS packet, beginning with the Code field, including the
> Identifier, the Length, the Request Authenticator field from the
> Access-Request packet, and the response Attributes
>
>    To:
>
> .. the response Code field, the Identifier, the response
> Length, the Request Authenticator, the response Attributes
>
>    Note he doesn't say "the response Identifier".  So the suggested
> change is still ambiguous.
>
>    I don't see the "RADIUS packet" as being ambiguous.  The Response
> Authenticator is being calculated for a specific packet, and the term
> "RADIUS packet" clearly refers to the packet under construction.  I
> don't see it as reasonable to assume that "RADIUS packet" in this
> context refers to some *other* packet.
>
>    Alan DeKok.
> .
>


From nobody Mon Sep 22 14:56:22 2014
Return-Path: <aland@deployingradius.com>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8471A1A1A69 for <aaa-doctors@ietfa.amsl.com>; Mon, 22 Sep 2014 14:56:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yb6PD35Qdh-s for <aaa-doctors@ietfa.amsl.com>; Mon, 22 Sep 2014 14:56:18 -0700 (PDT)
Received: from power.freeradius.org (power.freeradius.org [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id 20B381A1B14 for <aaa-doctors@ietf.org>; Mon, 22 Sep 2014 14:56:18 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 3E2EC22407D8; Mon, 22 Sep 2014 23:55:47 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at power.freeradius.org
Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uy5WQ6lD8bw7; Mon, 22 Sep 2014 23:55:47 +0200 (CEST)
Received: from Thor.local (bas1-ottawa11-1176223843.dsl.bell.ca [70.27.192.99]) by power.freeradius.org (Postfix) with ESMTPSA id 8DEE8224016D; Mon, 22 Sep 2014 23:55:46 +0200 (CEST)
Message-ID: <54209AE1.3090708@deployingradius.com>
Date: Mon, 22 Sep 2014 17:55:45 -0400
From: Alan DeKok <aland@deployingradius.com>
User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228)
MIME-Version: 1.0
To: Axel Luttgens <axel.luttgens@skynet.be>
References: <20140810145702.EF9E81801A4@rfc-editor.org> <5419D27B.2040501@cisco.com> <5419DE22.9030205@deployingradius.com> <541FF9AF.2010404@cisco.com> <C98DB65D-3C59-422E-8F85-34C8FA752BE0@skynet.be>
In-Reply-To: <C98DB65D-3C59-422E-8F85-34C8FA752BE0@skynet.be>
X-Enigmail-Version: 0.96.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/6CUSP8CP2J8BkRwMuKFu6rrQ3hA
Cc: "aaa-doctors@ietf.org" <aaa-doctors@ietf.org>
Subject: Re: [AAA-DOCTORS] [Technical Errata Reported] RFC2865 (4077)
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Sep 2014 21:56:20 -0000

Axel Luttgens wrote:
> Assuming "the RADIUS packet" designates the packet under construction, it can't include the "Request Authenticator field from the Access-Request packet".

  Which is why the text specifically calls it out as being from
*another* packet.

> In which case "the RADIUS packet" must designate the request packet; but then it can't include the response Attributes.

  I don't see how that interpretation is possible.

> So, maybe is "the RADIUS packet" just a leftover of an erroneous copy/paste operation and should be removed;

  No.

> but then, why not take the opportunity be explicit about the various parts involved in the calculation, for the sake of clarity and an easier reading?

  The text has been OK for about twenty years.  I don't think there are
critical issues with it that prevent implementations from being written.

>>>   Note he doesn't say "the response Identifier".  So the suggested
>>> change is still ambiguous.
> 
> Isn't the value of the response Identifier copied from the identifier of the request that triggered the response?

  You're missing my point.

  Your text said:

	Identifier
	RESPONSE Code
	RESPONSE Length
	..

  i.e. you carefully qualified every field with the word RESPONSE.  But
you didn't do it for the Identifier field.  So... the same ambiguity
applies.  Your suggested text could be taken to mean it refers to the
REQUEST authenticator.

> In which case there is a single value to consider, and adding a qualifier to "the Identifier" would have brought ambiguity.

  If that's true, why add the qualifier "Response" to all of the OTHER
fields of the response packet?

  You're trying to have it both ways.  Stating that some fields
*require* the "Response" qualifiers, but that others in the same packet
don't require that qualifier.

  It makes no sense.  Either use "Response" for ALL fields of the
response packet, or NONE of them.

  Alan DeKok.


From nobody Sat Sep 27 16:32:13 2014
Return-Path: <aland@freeradius.org>
X-Original-To: aaa-doctors@ietfa.amsl.com
Delivered-To: aaa-doctors@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34A551A0068 for <aaa-doctors@ietfa.amsl.com>; Sat, 27 Sep 2014 16:32:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.788
X-Spam-Level: 
X-Spam-Status: No, score=-0.788 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ctFTR9vGtm82 for <aaa-doctors@ietfa.amsl.com>; Sat, 27 Sep 2014 16:32:09 -0700 (PDT)
Received: from power.freeradius.org (power.freeradius.org [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id 695831A0067 for <aaa-doctors@ietf.org>; Sat, 27 Sep 2014 16:32:08 -0700 (PDT)
Received: by power.freeradius.org (Postfix, from userid 1000) id 42C5D22405FB; Sun, 28 Sep 2014 01:32:07 +0200 (CEST)
From: aland@freeradius.org
To: <aaa-doctors@ietf.org>
X-Mailer: mail (GNU Mailutils 2.99.98)
Message-Id: <20140927233207.42C5D22405FB@power.freeradius.org>
Date: Sun, 28 Sep 2014 01:32:07 +0200 (CEST)
Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/9fKXB9W9FQfjuBcUj5DO6v_yubA
Subject: [AAA-DOCTORS] Automatic tech report for Sun Sep 28 01:32:06 CEST 2014
X-BeenThere: aaa-doctors@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: AAA Doctors E-mail List <aaa-doctors.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aaa-doctors/>
List-Post: <mailto:aaa-doctors@ietf.org>
List-Help: <mailto:aaa-doctors-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aaa-doctors>, <mailto:aaa-doctors-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 27 Sep 2014 23:32:11 -0000

  This is an automatically generated email.  It lists the IETF internet-drafts
which are WG items and which reference RADIUS.  Drafts
from the RADEXT and DIME working groups are not included.

--
draft-ietf-abfab-arch-13                          In IESG processing - ID Tracker state <RFC Ed Queue>	
draft-ietf-softwire-map-radius-02                 Active