From nobody Fri Sep 15 00:22:32 2017 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 168401321F5 for ; Fri, 15 Sep 2017 00:22:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IJbiW98kt3Hq for ; Fri, 15 Sep 2017 00:22:28 -0700 (PDT) Received: from aer-iport-4.cisco.com (aer-iport-4.cisco.com [173.38.203.54]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85082132055 for ; Fri, 15 Sep 2017 00:22:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6947; q=dns/txt; s=iport; t=1505460147; x=1506669747; h=subject:references:to:from:message-id:date:mime-version: in-reply-to; bh=7VBT9EQgv37Pz1usbgAaR7+/cA5qS9LFylihvWLxqM4=; b=imWt9+TWOqAdCOABThH8UYBzYA9hbfGwK9k7QocClkcMCSRGTmWLsQ6d DtieSSBFgtx3IVBCW4ci+3yUY/ZJDVphUxeUUnpg5Y6vLwxMb8G8hiZTw WPizZLeiT6um+Zr31mFUqLX7HXi8HVdB567AuFlPAzlme5sw32MVLXd5Q Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ATAwBdf7tZ/xbLJq1dGwEBAQMBAQEJA?= =?us-ascii?q?QEBhD5uJ4N3ixSQRiuQaIVADoIECiOFGQKEZhYBAgEBAQEBAQFrHQuFGAEGI2Y?= =?us-ascii?q?cAwECKwICTQIIBg0GAgEBii8Qq0qCJyeLCgEBAQEBAQEBAQEBAQEBAQEBAQEfg?= =?us-ascii?q?yuDUoFjK4J9gTyDBFiCc4JgBYoJEoh7hSeIRZRSghOFaINahyGNXIdVgTkmCya?= =?us-ascii?q?BDTIhCBwVIIVPgXk+NokTAQEB?= X-IronPort-AV: E=Sophos;i="5.42,396,1500940800"; d="scan'208,217";a="657478470" Received: from aer-iport-nat.cisco.com (HELO aer-core-1.cisco.com) ([173.38.203.22]) by aer-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Sep 2017 07:22:12 +0000 Received: from [10.55.221.36] (ams-bclaise-nitro3.cisco.com [10.55.221.36]) by aer-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v8F7MCZF032643 for ; Fri, 15 Sep 2017 07:22:12 GMT References: <20170914200740.335AEB80D6B@rfc-editor.org> To: "aaa-doctors@ietf.org" From: Benoit Claise X-Forwarded-Message-Id: <20170914200740.335AEB80D6B@rfc-editor.org> Message-ID: <8f535198-cae9-78b1-1c4e-f0ad0b40cd98@cisco.com> Date: Fri, 15 Sep 2017 09:22:14 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <20170914200740.335AEB80D6B@rfc-editor.org> Content-Type: multipart/alternative; boundary="------------FE5F895D1A58B49476C2A6C7" Content-Language: en-US Archived-At: Subject: [AAA-DOCTORS] Fwd: [Technical Errata Reported] RFC5090 (5115) X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Sep 2017 07:22:30 -0000 This is a multi-part message in MIME format. --------------FE5F895D1A58B49476C2A6C7 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Dear AAA doctors, Let me know what you think. Regards, Benoit -------- Forwarded Message -------- Subject: [Technical Errata Reported] RFC5090 (5115) Date: Thu, 14 Sep 2017 13:07:40 -0700 From: RFC Errata System To: baruch@kayote.com, dscreat@dscreat.com, david@kayote.com, dwilli@cisco.com, beckw@t-systems.com, bclaise@cisco.com, warren@kumari.net, lionel.morand@orange.com, stefan.winter@restena.lu CC: denis@ovsienko.info, radext@ietf.org, rfc-editor@rfc-editor.org The following errata report has been submitted for RFC5090, "RADIUS Extension for Digest Authentication". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5115 -------------------------------------- Type: Technical Reported by: Denis Ovsienko Section: 3 Original Text ------------- 3.17. Digest-Domain Attribute [...] Length 3 [...] 3.18. Digest-Stale Attribute [...] Length 3 Corrected Text -------------- 3.17. Digest-Domain Attribute [...] Length >= 3 [...] 3.18. Digest-Stale Attribute [...] Length >= 3 Notes ----- Those two attributes contain string values. All other such attributes in Section 3 uniformly define Length >= 3. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC5090 (draft-ietf-radext-rfc4590bis-02) -------------------------------------- Title : RADIUS Extension for Digest Authentication Publication Date : February 2008 Author(s) : B. Sterman, D. Sadolevsky, D. Schwartz, D. Williams, W. Beck Category : PROPOSED STANDARD Source : RADIUS EXTensions Area : Operations and Management Stream : IETF Verifying Party : IESG . --------------FE5F895D1A58B49476C2A6C7 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit Dear AAA doctors,

Let me know what you think.

Regards, Benoit


-------- Forwarded Message --------
Subject: [Technical Errata Reported] RFC5090 (5115)
Date: Thu, 14 Sep 2017 13:07:40 -0700
From: RFC Errata System <rfc-editor@rfc-editor.org>
To: baruch@kayote.com, dscreat@dscreat.com, david@kayote.com, dwilli@cisco.com, beckw@t-systems.com, bclaise@cisco.com, warren@kumari.net, lionel.morand@orange.com, stefan.winter@restena.lu
CC: denis@ovsienko.info, radext@ietf.org, rfc-editor@rfc-editor.org 


The following errata report has been submitted for RFC5090,
"RADIUS Extension for Digest Authentication".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata/eid5115

--------------------------------------
Type: Technical
Reported by: Denis Ovsienko <denis@ovsienko.info>

Section: 3

Original Text
-------------
3.17.  Digest-Domain Attribute
[...]
   Length
         3
[...]

3.18.  Digest-Stale Attribute
[...]
   Length
         3


Corrected Text
--------------
3.17.  Digest-Domain Attribute
[...]
   Length
         >= 3
[...]

3.18.  Digest-Stale Attribute
[...]
   Length
         >= 3


Notes
-----
Those two attributes contain string values. All other such attributes in Section 3 uniformly define Length >= 3.

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC5090 (draft-ietf-radext-rfc4590bis-02)
--------------------------------------
Title               : RADIUS Extension for Digest Authentication
Publication Date    : February 2008
Author(s)           : B. Sterman, D. Sadolevsky, D. Schwartz, D. Williams, W. Beck
Category            : PROPOSED STANDARD
Source              : RADIUS EXTensions
Area                : Operations and Management
Stream              : IETF
Verifying Party     : IESG
.
--------------FE5F895D1A58B49476C2A6C7-- From nobody Fri Sep 15 04:13:32 2017 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11223133187 for ; Fri, 15 Sep 2017 04:13:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h9NEOvxFaHMh for ; Fri, 15 Sep 2017 04:13:26 -0700 (PDT) Received: from mail.networkradius.com (mail.networkradius.com [62.210.147.122]) by ietfa.amsl.com (Postfix) with ESMTP id 92DA71330C1 for ; Fri, 15 Sep 2017 04:13:26 -0700 (PDT) Received: from [192.168.120.42] (23-233-24-114.cpe.pppoe.ca [23.233.24.114]) by mail.networkradius.com (Postfix) with ESMTPSA id 83502161; Fri, 15 Sep 2017 11:13:25 +0000 (UTC) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Alan DeKok In-Reply-To: <8f535198-cae9-78b1-1c4e-f0ad0b40cd98@cisco.com> Date: Fri, 15 Sep 2017 07:13:23 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <58EEE559-D99B-4D53-82FD-8E74272F3E39@deployingradius.com> References: <20170914200740.335AEB80D6B@rfc-editor.org> <8f535198-cae9-78b1-1c4e-f0ad0b40cd98@cisco.com> To: Benoit Claise , aaa-doctors@ietf.org X-Mailer: Apple Mail (2.3124) Archived-At: Subject: Re: [AAA-DOCTORS] [Technical Errata Reported] RFC5090 (5115) X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Sep 2017 11:13:29 -0000 Looks good to me. An attribute carrying a string 'true' can't be 3 = octets in length. If we want to be pedantic, Digest-Stale should be: >=3D 3 <=3D 7 Because it can only contain the strings 'true' and 'false'. But we don't make that distinction for other attributes. e.g. = Digest-HA1 which is the output of a hash, and should be fixed length. I think it's fine to just use ">=3D 3" here. > On Sep 15, 2017, at 3:22 AM, Benoit Claise wrote: >=20 > Dear AAA doctors, >=20 > Let me know what you think. >=20 > Regards, Benoit >=20 >=20 > -------- Forwarded Message -------- > Subject: [Technical Errata Reported] RFC5090 (5115) > Date: Thu, 14 Sep 2017 13:07:40 -0700 > From: RFC Errata System > To: baruch@kayote.com, dscreat@dscreat.com, david@kayote.com, = dwilli@cisco.com, beckw@t-systems.com, bclaise@cisco.com, = warren@kumari.net, lionel.morand@orange.com, stefan.winter@restena.lu > CC: denis@ovsienko.info, radext@ietf.org, rfc-editor@rfc-editor.org >=20 >=20 > The following errata report has been submitted for RFC5090, > "RADIUS Extension for Digest Authentication". >=20 > -------------------------------------- > You may review the report below and at: >=20 > http://www.rfc-editor.org/errata/eid5115 >=20 >=20 > -------------------------------------- > Type: Technical > Reported by: Denis Ovsienko=20 > >=20 >=20 > Section: 3 >=20 > Original Text > ------------- > 3.17. Digest-Domain Attribute > [...] > Length > 3 > [...] >=20 > 3.18. Digest-Stale Attribute > [...] > Length > 3 >=20 >=20 > Corrected Text > -------------- > 3.17. Digest-Domain Attribute > [...] > Length > >=3D 3 > [...] >=20 > 3.18. Digest-Stale Attribute > [...] > Length > >=3D 3 >=20 >=20 > Notes > ----- > Those two attributes contain string values. All other such attributes = in Section 3 uniformly define Length >=3D 3. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party =20 > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC5090 (draft-ietf-radext-rfc4590bis-02) > -------------------------------------- > Title : RADIUS Extension for Digest Authentication > Publication Date : February 2008 > Author(s) : B. Sterman, D. Sadolevsky, D. Schwartz, D. = Williams, W. Beck > Category : PROPOSED STANDARD > Source : RADIUS EXTensions > Area : Operations and Management > Stream : IETF > Verifying Party : IESG > . >=20 >=20 > _______________________________________________ > AAA-DOCTORS mailing list > AAA-DOCTORS@ietf.org > https://www.ietf.org/mailman/listinfo/aaa-doctors From nobody Fri Sep 15 12:35:21 2017 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68E8F132D41 for ; Fri, 15 Sep 2017 12:35:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kZkLkcM57sqy for ; Fri, 15 Sep 2017 12:35:18 -0700 (PDT) Received: from aer-iport-4.cisco.com (aer-iport-4.cisco.com [173.38.203.54]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A3B313292F for ; Fri, 15 Sep 2017 12:35:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3121; q=dns/txt; s=iport; t=1505504118; x=1506713718; h=subject:to:references:from:message-id:date:mime-version: in-reply-to:content-transfer-encoding; bh=xeDGlBWxjb68Vc/WV9ULhH1qSjLZEjkqSROlXz6tVPQ=; b=MxaMSYxH/5ZseJhGScu8Mw/XYd9qLELFJ56ximXsdqnoxQbMV/fflgIx hiZHMWis/Xm+7fYW6S3GL5fMxXjYy7Tp9t0FocEE61ZQ0EsNdd8Zy1Mdg McSUD8uH37K8pIUewnGSQaovTGfjhglP/YE6vZwyhPoj4246ZjY/ZylLw 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CcAAAdK7xZ/xbLJq1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBhD5uJ4N1iiB0kEgJIpYnDoIEChgLhRkChGkYAQIBAQEBAQEBayi?= =?us-ascii?q?FGAEBAQEDAQEhFTYbCxEDAQIBAgImAgInKAgGAQwGAgEBii8Qq36CJ4stAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBHYEOgh2DUoFjKwuCcoE8gwSDS4JBHwWKChKIe41?= =?us-ascii?q?ulFWCE4Vqg1qHIY1eh1aBOR84gQ0yIQgcFR8qhRgNEIFpPjaJFQEBAQ?= X-IronPort-AV: E=Sophos;i="5.42,398,1500940800"; d="scan'208";a="657493191" Received: from aer-iport-nat.cisco.com (HELO aer-core-1.cisco.com) ([173.38.203.22]) by aer-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Sep 2017 19:35:16 +0000 Received: from [10.55.221.36] (ams-bclaise-nitro3.cisco.com [10.55.221.36]) by aer-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v8FJZFvr017168; Fri, 15 Sep 2017 19:35:15 GMT To: Alan DeKok , aaa-doctors@ietf.org, Warren Kumari References: <20170914200740.335AEB80D6B@rfc-editor.org> <8f535198-cae9-78b1-1c4e-f0ad0b40cd98@cisco.com> <58EEE559-D99B-4D53-82FD-8E74272F3E39@deployingradius.com> From: Benoit Claise Message-ID: <96d0c7ab-4f5f-6e29-0295-ebc7081f7726@cisco.com> Date: Fri, 15 Sep 2017 21:35:15 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <58EEE559-D99B-4D53-82FD-8E74272F3E39@deployingradius.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: Re: [AAA-DOCTORS] [Technical Errata Reported] RFC5090 (5115) X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Sep 2017 19:35:20 -0000 Thanks Alan. Errata Verified. Regards, B. > Looks good to me. An attribute carrying a string 'true' can't be 3 octets in length. > > If we want to be pedantic, Digest-Stale should be: > > >= 3 > <= 7 > > Because it can only contain the strings 'true' and 'false'. > > But we don't make that distinction for other attributes. e.g. Digest-HA1 which is the output of a hash, and should be fixed length. > > I think it's fine to just use ">= 3" here. > >> On Sep 15, 2017, at 3:22 AM, Benoit Claise wrote: >> >> Dear AAA doctors, >> >> Let me know what you think. >> >> Regards, Benoit >> >> >> -------- Forwarded Message -------- >> Subject: [Technical Errata Reported] RFC5090 (5115) >> Date: Thu, 14 Sep 2017 13:07:40 -0700 >> From: RFC Errata System >> To: baruch@kayote.com, dscreat@dscreat.com, david@kayote.com, dwilli@cisco.com, beckw@t-systems.com, bclaise@cisco.com, warren@kumari.net, lionel.morand@orange.com, stefan.winter@restena.lu >> CC: denis@ovsienko.info, radext@ietf.org, rfc-editor@rfc-editor.org >> >> >> The following errata report has been submitted for RFC5090, >> "RADIUS Extension for Digest Authentication". >> >> -------------------------------------- >> You may review the report below and at: >> >> http://www.rfc-editor.org/errata/eid5115 >> >> >> -------------------------------------- >> Type: Technical >> Reported by: Denis Ovsienko >> >> >> >> Section: 3 >> >> Original Text >> ------------- >> 3.17. Digest-Domain Attribute >> [...] >> Length >> 3 >> [...] >> >> 3.18. Digest-Stale Attribute >> [...] >> Length >> 3 >> >> >> Corrected Text >> -------------- >> 3.17. Digest-Domain Attribute >> [...] >> Length >> >= 3 >> [...] >> >> 3.18. Digest-Stale Attribute >> [...] >> Length >> >= 3 >> >> >> Notes >> ----- >> Those two attributes contain string values. All other such attributes in Section 3 uniformly define Length >= 3. >> >> Instructions: >> ------------- >> This erratum is currently posted as "Reported". If necessary, please >> use "Reply All" to discuss whether it should be verified or >> rejected. When a decision is reached, the verifying party >> can log in to change the status and edit the report, if necessary. >> >> -------------------------------------- >> RFC5090 (draft-ietf-radext-rfc4590bis-02) >> -------------------------------------- >> Title : RADIUS Extension for Digest Authentication >> Publication Date : February 2008 >> Author(s) : B. Sterman, D. Sadolevsky, D. Schwartz, D. Williams, W. Beck >> Category : PROPOSED STANDARD >> Source : RADIUS EXTensions >> Area : Operations and Management >> Stream : IETF >> Verifying Party : IESG >> . >> >> >> _______________________________________________ >> AAA-DOCTORS mailing list >> AAA-DOCTORS@ietf.org >> https://www.ietf.org/mailman/listinfo/aaa-doctors > . >