From nobody Wed Apr 1 02:30:34 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E90A1A9032 for ; Wed, 1 Apr 2015 02:30:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.599 X-Spam-Level: X-Spam-Status: No, score=-1.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NW7jlHPSFx0o for ; Wed, 1 Apr 2015 02:30:31 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias245.francetelecom.com [80.12.204.245]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CFDDF1A9026 for ; Wed, 1 Apr 2015 02:30:30 -0700 (PDT) Received: from omfeda08.si.francetelecom.fr (unknown [xx.xx.xx.201]) by omfeda13.si.francetelecom.fr (ESMTP service) with ESMTP id E8EC0190285; Wed, 1 Apr 2015 11:30:28 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.186]) by omfeda08.si.francetelecom.fr (ESMTP service) with ESMTP id 87835384094; Wed, 1 Apr 2015 11:30:28 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH01.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0224.002; Wed, 1 Apr 2015 11:30:28 +0200 From: To: Bernard Aboba , Alan DeKok Thread-Topic: [radext] Start of Call for Adoption for draft-winter-radext-populating-eapidentity-01 Thread-Index: AQHQa91KGZAmzf18QgisvgcZtEu1t50210cAgAAkHgCAAOankA== Date: Wed, 1 Apr 2015 09:30:27 +0000 Message-ID: <14078_1427880628_551BBAB4_14078_5155_1_6B7134B31289DC4FAF731D844122B36EF0B91F@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <11856_1427820628_551AD054_11856_4576_1_6B7134B31289DC4FAF731D844122B36EEF6888@PEXCVZYM13.corporate.adroot.infra.ftgroup> <30317_1427824394_551ADF0A_30317_14370_1_6B7134B31289DC4FAF731D844122B36EEF74CD@PEXCVZYM13.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.6] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.4.1.85420 Archived-At: Cc: Sam Hartman , "radext-chairs@tools.ietf.org" , "radext@ietf.org" Subject: Re: [radext] Start of Call for Adoption for draft-winter-radext-populating-eapidentity-01 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 09:30:33 -0000 Hi, Adopting this work will mean adopting the new charter that will be anyway d= iscussed at the AD/IESG level. Along this process, we will notify DIME, EMU= and EAP mailing lists to let them know that we are working on this issue a= nd they will be invited to comment the document on RADEXT mailing list and = during RADEXT sessions. If there is any concern raised during this process,= we will manage it at this stage. Does it sound acceptable for everyone? Regards, Lionel -----Message d'origine----- De=A0: Bernard Aboba [mailto:bernard_aboba@hotmail.com]=20 Envoy=E9=A0: mardi 31 mars 2015 23:33 =C0=A0: Alan DeKok Cc=A0: Sam Hartman; radext@ietf.org; radext-chairs@tools.ietf.org; MORAND L= ionel IMT/OLN Objet=A0: Re: [radext] Start of Call for Adoption for draft-winter-radext-p= opulating-eapidentity-01 I would support notifying both the EMU and EAP lists.=20 > On Mar 31, 2015, at 12:24 PM, Alan DeKok wrot= e: >=20 >> On Mar 31, 2015, at 2:05 PM, Sam Hartman wrote: >> This has already been discussed in the EAP community I think you may=20 >> be reopening something that we substantially discussed in the past. >=20 > FWIW, the overlap between EMU and RADEXT is pretty large. There were pe= ople on the EMU list who commented on this draft, and those people are pret= ty much all here. >=20 > I would support a notification to the EMU list that RADEXT is thinking a= bout adopting this draft as a WG item. But I think it would be the same pe= ople reviewing it, no matter where it was accepted. >=20 > I support it in RADEXT because while the document talks about EAP, the *= use-case* is largely RADIUS and Diameter roaming. >=20 > Alan DeKok. >=20 > _______________________________________________ > radext mailing list > radext@ietf.org > https://www.ietf.org/mailman/listinfo/radext ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. From nobody Wed Apr 1 05:03:40 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B59E1A8A23 for ; Wed, 1 Apr 2015 05:03:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0G6KDHslVIrz for ; Wed, 1 Apr 2015 05:03:37 -0700 (PDT) Received: from power.freeradius.org (power.freeradius.org [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id F39D41A8A1D for ; Wed, 1 Apr 2015 05:03:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 6C3D222405B3; Wed, 1 Apr 2015 14:03:36 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WFE7mUeeEXb3; Wed, 1 Apr 2015 14:03:36 +0200 (CEST) Received: from [192.168.20.71] (198-84-181-115.cpe.teksavvy.com [198.84.181.115]) by power.freeradius.org (Postfix) with ESMTPSA id B1A4D2240220; Wed, 1 Apr 2015 14:03:34 +0200 (CEST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Alan DeKok In-Reply-To: <14078_1427880628_551BBAB4_14078_5155_1_6B7134B31289DC4FAF731D844122B36EF0B91F@PEXCVZYM13.corporate.adroot.infra.ftgroup> Date: Wed, 1 Apr 2015 08:03:36 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <190D3355-0BB7-48D5-BEA2-55773E9BD785@deployingradius.com> References: <11856_1427820628_551AD054_11856_4576_1_6B7134B31289DC4FAF731D844122B36EEF6888@PEXCVZYM13.corporate.adroot.infra.ftgroup> <30317_1427824394_551ADF0A_30317_14370_1_6B7134B31289DC4FAF731D844122B36EEF74CD@PEXCVZYM13.corporate.adroot.infra.ftgroup> <14078_1427880628_551BBAB4_14078_5155_1_6B7134B31289DC4FAF731D844122B36EF0B91F@PEXCVZYM13.corporate.adroot.infra.ftgroup> To: "lionel.morand@orange.com" X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: Aboba Bernard , Sam Hartman , "radext-chairs@tools.ietf.org" , "radext@ietf.org" Subject: Re: [radext] Start of Call for Adoption for draft-winter-radext-populating-eapidentity-01 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 12:03:39 -0000 On Apr 1, 2015, at 5:30 AM, = wrote: > Adopting this work will mean adopting the new charter that will be = anyway discussed at the AD/IESG level. Along this process, we will = notify DIME, EMU and EAP mailing lists to let them know that we are = working on this issue and they will be invited to comment the document = on RADEXT mailing list and during RADEXT sessions. If there is any = concern raised during this process, we will manage it at this stage. >=20 > Does it sound acceptable for everyone? I'm OK with that. Alan DeKok. From nobody Wed Apr 1 07:46:52 2015 Return-Path: X-Original-To: expand-draft-ietf-radext-dynamic-discovery.all@virtual.ietf.org Delivered-To: radext@ietfa.amsl.com Received: by ietfa.amsl.com (Postfix, from userid 65534) id 290DB1A9177; Wed, 1 Apr 2015 07:20:18 -0700 (PDT) X-Original-To: xfilter-draft-ietf-radext-dynamic-discovery.all@ietfa.amsl.com Delivered-To: xfilter-draft-ietf-radext-dynamic-discovery.all@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06AB41A9151 for ; Wed, 1 Apr 2015 07:20:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.334 X-Spam-Level: X-Spam-Status: No, score=-1.334 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_SOFTFAIL=0.665] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S59gwzU5gw3d for ; Wed, 1 Apr 2015 07:20:13 -0700 (PDT) Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [IPv6:2001:1890:123a::1:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5453C1A916D for ; Wed, 1 Apr 2015 07:20:13 -0700 (PDT) Received: from mail-ob0-x22e.google.com ([2607:f8b0:4003:c01::22e]:33975) by zinfandel.tools.ietf.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1YdJV6-0006GP-4P for draft-ietf-radext-dynamic-discovery.all@tools.ietf.org; Wed, 01 Apr 2015 07:20:13 -0700 Received: by obbgh1 with SMTP id gh1so77562657obb.1 for ; Wed, 01 Apr 2015 07:20:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=0dg89tURZ4MZ4d7ax4Ml5dlJQ7SWYTfp78W0TWhbEFk=; b=jmY5C4pVtdNVrwKzu5gwTbp0Yg5Z/xauwFXkQPlD7LzM6ooq399FbT+D0QnZrx8I0m ZefwSGIDeJDpZtoWgTEeZYtY9d5X62cLpuqqAVbJXPNrENnWlBipu124m9x9Vd+H9+Y7 CtPlgcW7THfSgPlNkvO8p2FUuoQX1kn1g3cWS/hPomOuU+GMpta6miiuE/QlL3ZeuVZB R1g7K4NxgM0s6Qq5gln8qbin66ZR8+NhsgrVjop33xZNqRkalNzKU5vM79i5HaH7xwgX gM3hhkQTiomrtXRj3yhEFybs5Bot7K/KAzxCO1871+O+etWnd1yWkMr5JJ78Ut2LrWPF pvuA== X-Received: by 10.183.24.168 with SMTP id ij8mr41188113obd.15.1427897984976; Wed, 01 Apr 2015 07:19:44 -0700 (PDT) Received: from [198.18.97.107] ([12.190.128.2]) by mx.google.com with ESMTPSA id u9sm1856079obx.13.2015.04.01.07.19.44 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 01 Apr 2015 07:19:44 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Jounikor X-Mailer: iPhone Mail (12D508) In-Reply-To: <779642F1-4094-4524-A6B8-EE4E40B1CF8A@cisco.com> Date: Wed, 1 Apr 2015 08:19:43 -0600 Content-Transfer-Encoding: quoted-printable Message-Id: <780CC07C-5873-47FC-8002-5C8B3BE13F7C@gmail.com> References: <779642F1-4094-4524-A6B8-EE4E40B1CF8A@cisco.com> To: "Brian Weis (bew)" X-SA-Exim-Connect-IP: 2607:f8b0:4003:c01::22e X-SA-Exim-Rcpt-To: draft-ietf-radext-dynamic-discovery.all@tools.ietf.org X-SA-Exim-Mail-From: jounikor@gmail.com X-SA-Exim-Version: 4.2.1 (built Mon, 26 Dec 2011 16:24:06 +0000) X-SA-Exim-Scanned: Yes (on zinfandel.tools.ietf.org) Resent-To: draft-ietf-radext-dynamic-discovery.all@ietf.org Resent-Message-Id: <20150401142013.5453C1A916D@ietfa.amsl.com> Resent-Date: Wed, 1 Apr 2015 07:20:13 -0700 (PDT) Resent-From: jounikor@gmail.com Archived-At: Archived-At: X-Mailman-Approved-At: Wed, 01 Apr 2015 07:46:50 -0700 Cc: The IESG , "draft-ietf-radext-dynamic-discovery.all@tools.ietf.org" , "secdir@ietf.org" Subject: Re: [radext] Secdir review of draft-ietf-radext-dynamic-discovery-13 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 14:20:18 -0000 Thanks Brian! - jouni Sent from a smart phone.. Mind the typos.. > Brian Weis (bew) kirjoitti 31.3.2015 kello 22.54: >=20 > I have reviewed this document as part of the security directorate's ongoin= g effort to review all IETF documents being processed by the IESG. These com= ments were written primarily for the benefit of the security area directors.= =20 >=20 > Previously I reviewed draft-ietf-radext-dynamic-discovery-12, and while I d= idn=E2=80=99t have any particular issues with it there were some questions a= nd suggestions for clarifying trust model. The current draft added some real= ly valuable text and figures. I believe it is ready to be published. >=20 > Brian >=20 >=20 From nobody Wed Apr 1 10:20:21 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F8981A00B2; Wed, 1 Apr 2015 10:20:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TPiO2a5e2zkI; Wed, 1 Apr 2015 10:20:19 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CA26D1A00B5; Wed, 1 Apr 2015 10:20:16 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: , , , , , X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150401172016.29210.59021.idtracker@ietfa.amsl.com> Date: Wed, 01 Apr 2015 10:20:16 -0700 Archived-At: Subject: [radext] New Version Notification - draft-dekok-radext-datatypes-06.txt X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 17:20:20 -0000 A new version (-06) has been submitted for draft-dekok-radext-datatypes: http://www.ietf.org/internet-drafts/draft-dekok-radext-datatypes-06.txt The IETF datatracker page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-dekok-radext-datatypes/ Diff from previous version: http://www.ietf.org/rfcdiff?url2=draft-dekok-radext-datatypes-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. IETF Secretariat. From nobody Wed Apr 1 10:20:32 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA95E1A00B5; Wed, 1 Apr 2015 10:20:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6BqcFo-cIymQ; Wed, 1 Apr 2015 10:20:16 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 94B9A1A009C; Wed, 1 Apr 2015 10:20:16 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150401172016.29210.64653.idtracker@ietfa.amsl.com> Date: Wed, 01 Apr 2015 10:20:16 -0700 Archived-At: Cc: radext@ietf.org Subject: [radext] I-D Action: draft-dekok-radext-datatypes-06.txt X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 17:20:21 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the RADIUS EXTensions Working Group of the IETF. Title : Data Types in the Remote Authentication Dial-In User Service Protocol (RADIUS) Author : Alan DeKok Filename : draft-dekok-radext-datatypes-06.txt Pages : 32 Date : 2015-04-01 Abstract: RADIUS specifications have used data types for two decades without defining them as managed entities. During this time, RADIUS implementations have named the data types, and have used them in attribute definitions. This document updates the specifications to better follow established practice. We do this by naming the data types defined in RFC 6158, which have been used since at least RFC 2865. We provide an IANA registry for the data types, and update the RADIUS Attribute Type registry to include a "Data Type" field for each attribute. Finally, we recommend that authors of RADIUS specifications use these types in preference to existing practice. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-dekok-radext-datatypes/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-dekok-radext-datatypes-06 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-dekok-radext-datatypes-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Apr 6 13:45:25 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06B5F1A9174; Mon, 6 Apr 2015 13:45:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.912 X-Spam-Level: X-Spam-Status: No, score=-101.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KtvCVSnLEZcQ; Mon, 6 Apr 2015 13:45:19 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1900:3001:11::31]) by ietfa.amsl.com (Postfix) with ESMTP id 066D71A9166; Mon, 6 Apr 2015 13:45:19 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 24291180470; Mon, 6 Apr 2015 13:44:50 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 6000:ams_util_lib.php From: rfc-editor@rfc-editor.org Message-Id: <20150406204450.24291180470@rfc-editor.org> Date: Mon, 6 Apr 2015 13:44:50 -0700 (PDT) Archived-At: Cc: drafts-update-ref@iana.org, radext@ietf.org, rfc-editor@rfc-editor.org Subject: [radext] RFC 7499 on Support of Fragmentation of RADIUS Packets X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Apr 2015 20:45:23 -0000 A new Request for Comments is now available in online RFC libraries. RFC 7499 Title: Support of Fragmentation of RADIUS Packets Author: A. Perez-Mendez, Ed., R. Marin-Lopez, F. Pereniguez-Garcia, G. Lopez-Millan, D. Lopez, A. DeKok Status: Experimental Stream: IETF Date: April 2015 Mailbox: alex@um.es, rafa@um.es, pereniguez@um.es, gabilm@um.es, diego@tid.es, aland@networkradius.com Pages: 38 Characters: 83448 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-radext-radius-fragmentation-12.txt URL: https://www.rfc-editor.org/info/rfc7499 The Remote Authentication Dial-In User Service (RADIUS) protocol is limited to a total packet size of 4096 bytes. Provisions exist for fragmenting large amounts of authentication data across multiple packets, via Access-Challenge packets. No similar provisions exist for fragmenting large amounts of authorization data. This document specifies how existing RADIUS mechanisms can be leveraged to provide that functionality. These mechanisms are largely compatible with existing implementations, and they are designed to be invisible to proxies and "fail-safe" to legacy RADIUS Clients and Servers. This document is a product of the RADIUS EXTensions Working Group of the IETF. EXPERIMENTAL: This memo defines an Experimental Protocol for the Internet community. It does not specify an Internet standard of any kind. Discussion and suggestions for improvement are requested. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/rfc.html Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Mon Apr 6 23:23:20 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDD1D1A020D for ; Mon, 6 Apr 2015 23:23:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.909 X-Spam-Level: X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01, WEIRD_PORT=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kUVpqF3czYgH for ; Mon, 6 Apr 2015 23:23:16 -0700 (PDT) Received: from smtprelay.restena.lu (smtprelay.restena.lu [158.64.1.62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6475C1A01FA for ; Mon, 6 Apr 2015 23:23:16 -0700 (PDT) Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id EA7A94102E for ; Tue, 7 Apr 2015 08:23:14 +0200 (CEST) Message-ID: <552377CD.6090300@restena.lu> Date: Tue, 07 Apr 2015 08:23:09 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: radext@ietf.org References: <20150406204450.24291180470@rfc-editor.org> In-Reply-To: <20150406204450.24291180470@rfc-editor.org> OpenPGP: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="pJmGQBK8e4EhQCc9PkrVQaFGRosDDgcVO" Archived-At: Subject: Re: [radext] RFC 7499 on Support of Fragmentation of RADIUS Packets X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 06:23:19 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --pJmGQBK8e4EhQCc9PkrVQaFGRosDDgcVO Content-Type: multipart/mixed; boundary="------------010208020308040403020806" This is a multi-part message in MIME format. --------------010208020308040403020806 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hello, congrats to the authors for getting this done! Greetings, Stefan Winter On 06.04.2015 22:44, rfc-editor@rfc-editor.org wrote: > A new Request for Comments is now available in online RFC libraries. >=20 > =20 > RFC 7499 >=20 > Title: Support of Fragmentation of RADIUS=20 > Packets=20 > Author: A. Perez-Mendez, Ed., > R. Marin-Lopez, F. Pereniguez-Garcia, > G. Lopez-Millan, D. Lopez, > A. DeKok > Status: Experimental > Stream: IETF > Date: April 2015 > Mailbox: alex@um.es,=20 > rafa@um.es,=20 > pereniguez@um.es, > gabilm@um.es,=20 > diego@tid.es,=20 > aland@networkradius.com > Pages: 38 > Characters: 83448 > Updates/Obsoletes/SeeAlso: None >=20 > I-D Tag: draft-ietf-radext-radius-fragmentation-12.txt >=20 > URL: https://www.rfc-editor.org/info/rfc7499 >=20 > The Remote Authentication Dial-In User Service (RADIUS) protocol is > limited to a total packet size of 4096 bytes. Provisions exist for > fragmenting large amounts of authentication data across multiple > packets, via Access-Challenge packets. No similar provisions exist > for fragmenting large amounts of authorization data. This document > specifies how existing RADIUS mechanisms can be leveraged to provide > that functionality. These mechanisms are largely compatible with > existing implementations, and they are designed to be invisible to > proxies and "fail-safe" to legacy RADIUS Clients and Servers. >=20 > This document is a product of the RADIUS EXTensions Working Group of th= e IETF. >=20 >=20 > EXPERIMENTAL: This memo defines an Experimental Protocol for the > Internet community. It does not specify an Internet standard of any > kind. Discussion and suggestions for improvement are requested. > Distribution of this memo is unlimited. >=20 > This announcement is sent to the IETF-Announce and rfc-dist lists. > To subscribe or unsubscribe, see > https://www.ietf.org/mailman/listinfo/ietf-announce > https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist >=20 > For searching the RFC series, see https://www.rfc-editor.org/search > For downloading RFCs, see https://www.rfc-editor.org/rfc.html >=20 > Requests for special distribution should be addressed to either the > author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless= > specifically noted otherwise on the RFC itself, all RFCs are for > unlimited distribution. >=20 >=20 > The RFC Editor Team > Association Management Solutions, LLC >=20 >=20 > _______________________________________________ > radext mailing list > radext@ietf.org > https://www.ietf.org/mailman/listinfo/radext >=20 --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 --------------010208020308040403020806 Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------010208020308040403020806-- --pJmGQBK8e4EhQCc9PkrVQaFGRosDDgcVO Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJVI3fSAAoJEMDeajWKOdxmkwAP/AlNZy+szC9yR7eAR0vpbAOw eTIUBUhome5+mrKEZRkCgQ/soVRssYEhIurDo8JbAKbule8l5Q3vAeRBYZsuxXRU 8gNwBLUEnm8ubh2jr+wBH3ivLGurGL/LkCtCvFKpMYH+drUqZXeoNx0+jHXxdHxu G3dixSZ3rpuvZciBzLEocX4gmvCVL/c7jb8IcJVydJwoWqHLDRs64/9ghlsYHZ8b 12v+SuKtiqXOVTQhNmmyRdmXtKBzZWXqWhkA64czaSaF0ezqHSNct1iZ/gatr4kc vMUMeVDnbzOK1QdEimsuqMGQNm6FFqI8Ty87RvEh/u71/3y0WhTkl9yjKhdTIZzg iK4CijQHegIm6w1+x07L03C1dXlKhuR8KvMo3BhDToaD6CqBl354bAGBuul4y2ss EJzRqQqc7SYHmjuwZzWHb22KGejo6HfmzOoAkHFtPaGVY5U/52kBCzk61ZV72/m8 UySV2H/03ESIun3xqI+E0Hne4JJhSZUg+5IjGCh/QJW0lMyEQ6TPIQ6fXxb3oemi rfl1DrYaG/lM7zZ1JEr3EDGkDuSKS7wxgPN7XG7Xgr9e5YZg5Je3Kt2wSWJ8gEle UpJuYArsPVC+Z1K2is8lTWTaPU2iREDvWlRDsF1OXAyZBtAlG9uXBaSPByL1hqVD 9XtcaW/PlsrjwJegmi9/ =mGRW -----END PGP SIGNATURE----- --pJmGQBK8e4EhQCc9PkrVQaFGRosDDgcVO-- From nobody Tue Apr 7 17:32:52 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6C261A004E; Tue, 7 Apr 2015 17:32:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L3y-etlllf44; Tue, 7 Apr 2015 17:32:49 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E3EE1B2A2A; Tue, 7 Apr 2015 17:32:48 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: , , X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150408003248.16294.74861.idtracker@ietfa.amsl.com> Date: Tue, 07 Apr 2015 17:32:48 -0700 From: IETF Secretariat Archived-At: Subject: [radext] ID Tracker State Update Notice: X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 00:32:51 -0000 IESG state changed to IESG Evaluation from Waiting for AD Go-Ahead ID Tracker URL: http://datatracker.ietf.org/doc/draft-ietf-radext-dynamic-discovery/ From nobody Thu Apr 9 06:08:52 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A17271B2D3A; Thu, 9 Apr 2015 06:08:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.3 X-Spam-Level: X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_37=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ip3D31JMezJd; Thu, 9 Apr 2015 06:08:48 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 843CC1B2D2E; Thu, 9 Apr 2015 06:08:48 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150409130848.17585.83178.idtracker@ietfa.amsl.com> Date: Thu, 09 Apr 2015 06:08:48 -0700 Archived-At: Cc: radext@ietf.org, radext-chairs@ietf.org, jounikor@gmail.com Subject: [radext] Stephen Farrell's Yes on draft-ietf-radext-dynamic-discovery-13: (with COMMENT) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 13:08:49 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-radext-dynamic-discovery-13: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to http://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: http://datatracker.ietf.org/doc/draft-ietf-radext-dynamic-discovery/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I have to say radext drafts are frequently very high quality and this is no exception. Thanks. - 2.1.1.3 - typo: s/PKS/PSK/ - 2.2, just wondering (and not suggesting you change) but did you consider that using san.dNSName with an accompanying policy OID could allow you to use current CA s/w without confusing the semantics (and without requiring the new otherName)? - Thanks for section 6. From nobody Thu Apr 9 06:59:53 2015 Return-Path: X-Original-To: expand-draft-ietf-radext-dynamic-discovery.all@virtual.ietf.org Delivered-To: radext@ietfa.amsl.com Received: by ietfa.amsl.com (Postfix, from userid 65534) id ECC861B2CFC; Thu, 9 Apr 2015 06:13:16 -0700 (PDT) X-Original-To: xfilter-draft-ietf-radext-dynamic-discovery.all@ietfa.amsl.com Delivered-To: xfilter-draft-ietf-radext-dynamic-discovery.all@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C55021A0A6A for ; Thu, 9 Apr 2015 06:13:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zy4gjcDLjGSs for ; Thu, 9 Apr 2015 06:13:16 -0700 (PDT) Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [IPv6:2001:1890:123a::1:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 292611A1B81 for ; Thu, 9 Apr 2015 06:13:09 -0700 (PDT) Received: from p130.piuha.net ([2a00:1d50:2::130]:51114) by zinfandel.tools.ietf.org with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1YgCGZ-0003Lk-Gb for draft-ietf-radext-dynamic-discovery.all@tools.ietf.org; Thu, 09 Apr 2015 06:13:09 -0700 Received: from localhost (localhost [127.0.0.1]) by p130.piuha.net (Postfix) with ESMTP id 9DD6D2CEDC; Thu, 9 Apr 2015 16:12:59 +0300 (EEST) (envelope-from jari.arkko@piuha.net) X-Virus-Scanned: amavisd-new at piuha.net Received: from p130.piuha.net ([127.0.0.1]) by localhost (p130.piuha.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hS2xsKa7N6b7; Thu, 9 Apr 2015 16:12:59 +0300 (EEST) Received: from [127.0.0.1] (p130.piuha.net [IPv6:2a00:1d50:2::130]) by p130.piuha.net (Postfix) with ESMTP id 3AC8C2CEDA; Thu, 9 Apr 2015 16:12:59 +0300 (EEST) (envelope-from jari.arkko@piuha.net) Content-Type: multipart/signed; boundary="Apple-Mail=_001DE30C-1044-4207-8A89-CC5214DB3C38"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Jari Arkko In-Reply-To: Date: Thu, 9 Apr 2015 16:12:56 +0300 Message-Id: References: <550FCBFA.8080008@restena.lu> To: Martin Thomson , Stefan Winter X-Mailer: Apple Mail (2.1878.6) X-SA-Exim-Connect-IP: 2a00:1d50:2::130 X-SA-Exim-Rcpt-To: draft-ietf-radext-dynamic-discovery.all@tools.ietf.org X-SA-Exim-Mail-From: jari.arkko@piuha.net X-SA-Exim-Version: 4.2.1 (built Mon, 26 Dec 2011 16:24:06 +0000) X-SA-Exim-Scanned: Yes (on zinfandel.tools.ietf.org) Resent-To: draft-ietf-radext-dynamic-discovery.all@ietf.org Resent-Message-Id: <20150409131309.292611A1B81@ietfa.amsl.com> Resent-Date: Thu, 9 Apr 2015 06:13:09 -0700 (PDT) Resent-From: jari.arkko@piuha.net Archived-At: Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2015 06:59:52 -0700 Cc: "gen-art@ietf.org" , draft-ietf-radext-dynamic-discovery.all@tools.ietf.org Subject: Re: [radext] Gen-ART review of draft-ietf-radext-dynamic-discovery-13 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 13:13:17 -0000 --Apple-Mail=_001DE30C-1044-4207-8A89-CC5214DB3C38 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Thank you very much for the review, Martin. Stefan, are the edits going = to appear in some document version before the draft is approved? Jari --Apple-Mail=_001DE30C-1044-4207-8A89-CC5214DB3C38 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVJnrZAAoJEM80gCTQU46q+zEQAIsoXKLtSKtiDorrWiOvN9rh R5F6/EZJl19H36sVnn1d2B6SkmwdsT6vlZM0SiN/fjEhjGCLBhr7QtuordROKSTH kXbog9NI7EkJ/U6pI3xWJSAslQCWD8ABdnB14Ire2yIUuAGjGkAYne4z+hTAGolb MZ/UtaXvEbRuOOsvQV8tyccdaXKMm19uqyc++r5C+zpTjfh0OIBh+GAlx68mLxvv k2pdzRQ2/+3Zci8IizYC4o1HkUiWkHb6V0mJWQtHrGfJNLYtpRytb4Pr5hSDIK+d +/2nVD+NFd/Mqh7qq9ZcMPgXFGEl9CqHpjT+3D8BJ4lxeuyw8QbO9lA7BUNAgBGw uMTCN2N2lp8MyWuQEwyXrLAy4n+dRoVO2VLNCkEXbloqPxnJtQDrlK3E/WVy1ZZs G45rIiDeJc+ylYHTw2+O4iw5Q2zuQU+zx+uxmlugEPuM0JFywdvDKl7scZHj7nn1 F22F118H+WXOkACaJJORmcySMWrzUAWGEOHXRY3O/FeZUNELYZbfL+0OJAE3IZS/ tWIJk/dkhPmOeRUDkDvL9eIRXx83m/L41qHH6SVkt8oBn2km9NnJfAGJEp8p57vG UWfKjPIYjPiatbJfnlJPU2P0DzG9ATWpyrFGs0G8Z7qrPOEzUhCQLspQGlvuxGcg 4wWHcDH70urcdQutd3kW =O7+J -----END PGP SIGNATURE----- --Apple-Mail=_001DE30C-1044-4207-8A89-CC5214DB3C38-- From nobody Thu Apr 9 11:12:59 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88DAA1A0377; Thu, 9 Apr 2015 11:12:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, TVD_SPACE_RATIO=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CoJPXZNfy7Xp; Thu, 9 Apr 2015 11:12:56 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 938CE1A017F; Thu, 9 Apr 2015 11:12:56 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: , , X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150409181256.31203.25970.idtracker@ietfa.amsl.com> Date: Thu, 09 Apr 2015 11:12:56 -0700 From: IETF Secretariat Archived-At: Subject: [radext] ID Tracker State Update Notice: X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 18:12:57 -0000 IESG state changed to IESG Evaluation::AD Followup from IESG Evaluation ID Tracker URL: http://datatracker.ietf.org/doc/draft-ietf-radext-dynamic-discovery/ From nobody Thu Apr 9 22:47:09 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4FB571A6EDA for ; Thu, 9 Apr 2015 17:54:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xZCLYLItLUNU for ; Thu, 9 Apr 2015 17:54:40 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3985B1A1BE9 for ; Thu, 9 Apr 2015 17:54:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=13818; q=dns/txt; s=iport; t=1428627281; x=1429836881; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=14LXsuacmogBpq9eFH/xLL6t+K0JuldlqW0Sj0+QKoY=; b=Qf/VJmsv3PzlSU1NASKsuvraQ2T4EnGTA0NXOkR6eB2cFQaJgWwT+FLw Ai+bhf8kyAh79gevq3EPvDnfHu/vfp67l1L+8eYNC5+PV4eUQ1VYFAkmX OPglqyNNkS1aytGVk/0YNOo0tXR3baccWxICGclLjkWN3eqNJs5J1yW4U o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BZCACLHidV/4oNJK1cgkVDUlwFw2M8KgmBSQEJhTNOAoFEOBQBAQEBAQEBfYQfAQEBAwEBAQEaUQYFBQcEAgEIEQQBASgHJwsUCQgBAQQOBQmIGQgNzl0BAQEBAQEBAQEBAQEBAQEBAQEBAQEXiyuEGREBTQQHBoQnBZEBg3iGE4EdOoJ9jEODSyKDb2+BCzl/AQEB X-IronPort-AV: E=Sophos;i="5.11,553,1422921600"; d="scan'208,217";a="139840858" Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-1.cisco.com with ESMTP; 10 Apr 2015 00:54:40 +0000 Received: from xhc-rcd-x05.cisco.com (xhc-rcd-x05.cisco.com [173.37.183.79]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t3A0sdSF032335 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 10 Apr 2015 00:54:39 GMT Received: from xmb-rcd-x15.cisco.com ([169.254.5.199]) by xhc-rcd-x05.cisco.com ([173.37.183.79]) with mapi id 14.03.0195.001; Thu, 9 Apr 2015 19:54:39 -0500 From: "Senthil Sivakumar (ssenthil)" To: "radext@ietf.org" Thread-Topic: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-03 Thread-Index: AdBr0OfvWsGnfW7ITUyirhe2Cq01uwHRyT/wAASDVQA= Date: Fri, 10 Apr 2015 00:54:38 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.8.150116 x-originating-ip: [10.82.222.15] Content-Type: multipart/alternative; boundary="_000_D14C7D4913E981ssenthilciscocom_" MIME-Version: 1.0 Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2015 22:47:07 -0700 Cc: "radext-chairs@tools.ietf.org" Subject: Re: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-03 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 00:54:43 -0000 --_000_D14C7D4913E981ssenthilciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I am not aware of any IPR that pertains to the draft. Thanks Senthil > -----Original Message----- > From: radext [mailto:radext-bounces@ietf.org] On Behalf Of > lionel.morand@orange.com > Sent: Tuesday, March 31, 2015 9:51 AM > To: radext@ietf.org > Cc: radext-chairs@tools.ietf.org > Subject: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-= 03 > > During the RADEXT session at IETF92, the authors of draft-ietf-radext-ip-= port- > radius-ext-03 have asked for a Working Group Last Call. > > This email officially starts a Working Group Last Call for the following > document > > http://tools.ietf.org/html/draft-ietf-radext-ip-port-radius-ext-03 > > Please respond to this email to support the document and/or send comments= by > 2015-04-13. > > In addition, following the strategy for promoting compliance with the IPR > disclosure rules (RFC6702), the chairs would like to check whether there= are > claims of Intellectual Property Rights (IPR) on the document that need to= be > disclosed. Therefore, the following questions are addressed to the WG and > Especially Authors and Contributors of the draft: > > Are you personally aware of any IPR that applies to draft-ietf-radext-ip-= port- > radius-ext-03? If so, has this IPR been disclosed in compliance with IETF= IPR > rules? (See RFCs 3979, 4879, 3669, and 5378 for more details.) > > If you are a document author or listed contributor on this document, plea= se > reply to this email message regardless of whether or not you are personal= ly > aware of any relevant IPR. We might not be able to advance this document= to > the next stage until we have received a reply from each author and listed > contributor. > > If you are on the RADEXT WG email list but are not an author or listed > contributor for this document, you are reminded of your opportunity for a > voluntary IPR disclosure under BCP 79. Please do not reply unless you w= ant > to make such a voluntary disclosure. > > Online tools for filing IPR disclosures can be found at > . > > Regards, > > Lionel & Stefan > > _________________________________________________________________________= _____ > ___________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations > confidentielles ou privilegiees et ne doivent donc pas etre diffuses, > exploites ou copies sans autorisation. Si vous avez recu ce message par e= rreur, > veuillez le signaler a l'expediteur et le detruire ainsi que les pieces > jointes. Les messages electroniques etant susceptibles d'alteration, Oran= ge > decline toute responsabilite si ce message a ete altere, deforme ou falsi= fie. > Merci. > > This message and its attachments may contain confidential or privileged > information that may be protected by law; they should not be distributed,= used > or copied without authorisation. > If you have received this email in error, please notify the sender and de= lete > this message and its attachments. > As emails may be altered, Orange is not liable for messages that have bee= n > modified, changed or falsified. > Thank you. > > _______________________________________________ > radext mailing list > radext@ietf.org > https://www.ietf.org/mailman/listinfo/radext --_000_D14C7D4913E981ssenthilciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: <7AF5D0E9D21377439110AD091309E003@emea.cisco.com> Content-Transfer-Encoding: quoted-printable
I am not aware of any IPR that pertains to the draft. 

Thanks
Senthil

> -----Original Message-----

> From: radext [mailto:radext-bounces@ietf.org] On Behalf Of

> = lionel.morand@orange.com

> Sent: Tuesday, March 31, 2015 9:51 AM

> To: radex= t@ietf.org

> Cc: radext-chairs@tools.ietf.org

> Subject: [radext] Start of WGLC for draft-ie= tf-radext-ip-port-radius-ext-03

>

> During the RADEXT session at IETF92, the aut= hors of draft-ietf-radext-ip-port-

> radius-ext-03 have asked for a Working Group= Last Call.

>

> This email officially starts a Working Group= Last Call for the following

> document

>

> http://tools.ietf.org= /html/draft-ietf-radext-ip-port-radius-ext-03

>

> Please respond to this email to support the document and/or send= comments by

> 2015-04-13.

>

> In addition, following the strategy for prom= oting compliance with the IPR

> disclosure rules (RFC6702), the chairs would= like to check  whether there are

> claims of Intellectual Property Rights (IPR)= on the document that need to be

> disclosed. Therefore, the following question= s are addressed to the WG and

> Especially Authors and Contributors of the d= raft:

>

> Are you personally aware of any IPR that app= lies to draft-ietf-radext-ip-port-

> radius-ext-03? If so, has this IPR been disc= losed in compliance with IETF IPR

> rules?  (See RFCs 3979, 4879, 3669, and= 5378  for more details.)

>

> If you are a document author or listed contributor on this docum= ent, please

> reply to this email message regardless of whether or not you are= personally

> aware of any relevant IPR.  We might not be able to advance= this document to

> the next stage until we have received a reply from each author a= nd listed

> contributor.

>

> If you are on the RADEXT WG email list but a= re not an author or listed

> contributor for this document, you are remin= ded of your opportunity for a

> voluntary IPR disclosure under BCP 79. = Please do not reply  unless you want

> to make such a voluntary disclosure.

>

> Online tools for filing IPR disclosures can = be found at

> <http://ww= w.ietf.org/ipr/file-disclosure>.

>

> Regards,

>

> Lionel & Stefan

>

> ____________________________________________= __________________________________

> ___________________________________________<= o:p>

>

> Ce message et ses pieces jointes peuvent con= tenir des informations

> confidentielles ou privilegiees et ne doiven= t donc pas etre diffuses,

> exploites ou copies sans autorisation. Si vo= us avez recu ce message par erreur,

> veuillez le signaler a l'expediteur et le de= truire ainsi que les pieces

> jointes. Les messages electroniques etant su= sceptibles d'alteration, Orange

> decline toute responsabilite si ce message a= ete altere, deforme ou falsifie.

> Merci.

>

> This message and its attachments may contain= confidential or privileged

> information that may be protected by law; th= ey should not be distributed, used

> or copied without authorisation.<= /p>

> If you have received this email in error, pl= ease notify the sender and delete

> this message and its attachments.=

> As emails may be altered, Orange is not liab= le for messages that have been

> modified, changed or falsified.

> Thank you.

>

> ____________________________________________= ___

> radext mailing list

> radext@ietf.org

> https://www.ietf.org/= mailman/listinfo/radext

 --_000_D14C7D4913E981ssenthilciscocom_-- From nobody Thu Apr 9 23:19:12 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB8D91ACE7F for ; Thu, 9 Apr 2015 23:19:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 54TnHl5dX2ze for ; Thu, 9 Apr 2015 23:19:09 -0700 (PDT) Received: from mail-pd0-x234.google.com (mail-pd0-x234.google.com [IPv6:2607:f8b0:400e:c02::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A611B1ACE7B for ; Thu, 9 Apr 2015 23:19:09 -0700 (PDT) Received: by pdea3 with SMTP id a3so12577501pde.3 for ; Thu, 09 Apr 2015 23:19:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=q8vtaFzLzGUNC2bIWNiTYVKAuQlGL1C393vmA3r0IXI=; b=P1Cn2VrlRragLAJ4FcFt1rt9F2TMj4cMc1euhTfYWTpHut6XiVGjfD3ur7G6iGTwnK K8rZoCqODWYpQCMwHalxC1KaYGYNZ96r0b8Fv40qP+zDWJgLKCFMsSPxKcraP+OJCwTn RcZUrb/uAiJMN5Ve+Awq9JTm/u7L0zlMbLUrm4kdDNh9s+bJB63eAUl4/ea25yhoP39Q VulA/bRYCo5gaDnAlHAYCa4dwlVr+2CyaMRdXE5Ln9StAbjAyjWZVNV0p9MnYNuulJKh cgksy6FGYtlMqCGdbL2MRA00XKlf5eHBB1UrIW1mpoMi3PQnSu37Jbw6L+SLwV0lBDTi Pdiw== X-Received: by 10.68.166.98 with SMTP id zf2mr16846pbb.88.1428646749335; Thu, 09 Apr 2015 23:19:09 -0700 (PDT) Received: from ?IPv6:2601:9:3400:6c:8100:e34:107d:8066? ([2601:9:3400:6c:8100:e34:107d:8066]) by mx.google.com with ESMTPSA id ms7sm992962pdb.8.2015.04.09.23.19.06 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 09 Apr 2015 23:19:07 -0700 (PDT) Message-ID: <55276B59.6020100@gmail.com> Date: Thu, 09 Apr 2015 23:19:05 -0700 From: Jouni Korhonen User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: lionel.morand@orange.com, "radext@ietf.org" References: <10094_1427820685_551AD08D_10094_7330_1_6B7134B31289DC4FAF731D844122B36EEF695D@PEXCVZYM13.corporate.adroot.infra.ftgroup> In-Reply-To: <10094_1427820685_551AD08D_10094_7330_1_6B7134B31289DC4FAF731D844122B36EEF695D@PEXCVZYM13.corporate.adroot.infra.ftgroup> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "radext-chairs@tools.ietf.org" Subject: Re: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-03 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 06:19:11 -0000 3/31/2015, 9:51 AM, lionel.morand@orange.com kirjoitti: > If you are a document author or listed contributor on this document, please reply > to this email message regardless of whether or not you are personally aware of any > relevant IPR. We might not be able to advance this document to the next stage until > we have received a reply from each author and listed contributor. Not aware of any IPR on this document. - Jouni From nobody Thu Apr 9 23:34:07 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 170011ACED6; Thu, 9 Apr 2015 23:34:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.309 X-Spam-Level: X-Spam-Status: No, score=-1.309 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_37=0.6, T_RP_MATCHES_RCVD=-0.01, WEIRD_PORT=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pHnfONNAzjDw; Thu, 9 Apr 2015 23:34:03 -0700 (PDT) Received: from smtprelay.restena.lu (smtprelay.restena.lu [IPv6:2001:a18:1::62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E975C1ACED2; Thu, 9 Apr 2015 23:34:02 -0700 (PDT) Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id A16304397A; Fri, 10 Apr 2015 08:34:01 +0200 (CEST) Message-ID: <55276ED9.9010606@restena.lu> Date: Fri, 10 Apr 2015 08:34:01 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Stephen Farrell , The IESG References: <20150409130848.17585.83178.idtracker@ietfa.amsl.com> In-Reply-To: <20150409130848.17585.83178.idtracker@ietfa.amsl.com> OpenPGP: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="E9Tlgox96SdQk9jpXhPh9KdSsRKO79V07" Archived-At: Cc: radext@ietf.org, radext-chairs@ietf.org, jounikor@gmail.com Subject: Re: [radext] Stephen Farrell's Yes on draft-ietf-radext-dynamic-discovery-13: (with COMMENT) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 06:34:04 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --E9Tlgox96SdQk9jpXhPh9KdSsRKO79V07 Content-Type: multipart/mixed; boundary="------------000205010509090502090805" This is a multi-part message in MIME format. --------------000205010509090502090805 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello, thanks for the compliment! > I have to say radext drafts are frequently very high > quality and this is no exception. Thanks. >=20 > - 2.1.1.3 - typo: s/PKS/PSK/ This is fixed in my working copy and will be in -14. > - 2.2, just wondering (and not suggesting you change) > but did you consider that using san.dNSName with an > accompanying policy OID could allow you to use > current CA s/w without confusing the semantics (and > without requiring the new otherName)? It's a bit tricky: a RADIUS server typically has a DNS hostname (and that may want to/need to be placed in the cert for arbitrary reasons), and serves NAI realms on a RADIUS level - but the two are not necessarily identical. So there would be several sAN:DNS entries in the cert, one or more pertaining to the hostname, one or more pertaining to the NAI realms serv= ed. I guess a CA policy could "fix" that ambiguity by hard-wiring that the first sAN:DNS in its certs would semantically mean "the host" and any following ones would be "NAI realms served" but it doesn't strike me as a terribly clean solution. Greetings, Stefan Winter --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=C3=A9seau T=C3=A9l=C3=A9informatique de l'Education= Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 --------------000205010509090502090805 Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------000205010509090502090805-- --E9Tlgox96SdQk9jpXhPh9KdSsRKO79V07 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJVJ27ZAAoJEMDeajWKOdxmOXYP/AozhtM+2R431076/Gpgtw8U v2vt7Fl2GyOOxrD39+FhV6ZmnkYMzG5DJwh0ptd6P4Rrg3pb7gDh8YJDzvWYMBzc TOGBByN+KYdFnMR5lXKdL3Zl232Dw8Vhu57jlVuQHd/6LBEwUGk+ooY2IBdij4Xr amfMO8MtTX+5nauU8W/aEO44Lso+LFl6kV0NRB3UQzWiKt5yPHXQ7f/t+Ki6C6Ze Ec4vVZUXmZWWZKH3DaLGDjEhSs9XEH4wy+U8Ew4RRzgUuAM5zFhLnweEC51jBpWb Hzeyq/z7kaKLNWzX1NBZpAPaQLBlKfa2DCLnDx3igLhUABviF5l5bIrVJXwrBlqf GJjBWuNdaC+BcfLQU4a0cyKtGhRbqlXQxXW+nPUTbPvox+TzNsCq21Is247Fi/Na 53jvySOZ7NXCKeLMR//cifomYaFXfl8MvvZSYgolF08JkNmYhQ7H8y4f67rVpj3n 90C07krB/XDfaa3E7zSKqQKlpNiGBWs5RJ5AAwkAocwLPFsEBY6BxAUmn8n5fztY azNgh94pTYpBUTgI9gOYJkiq+jU49mS5MJzmp2wxZ4ELyt39gLCvMaf3sRLi+XHr 2xudthS8bTjCcV5Eqo3oCY6bcAMRUZLptQoiOs2ApeWLa34NcGR/X9gY/o/GrP9K R+Fxocg5yq3m8u5o+ZCp =qPPF -----END PGP SIGNATURE----- --E9Tlgox96SdQk9jpXhPh9KdSsRKO79V07-- From nobody Thu Apr 9 23:59:45 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9AFA1AD10A; Thu, 9 Apr 2015 23:59:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hBDFVuaNNeJc; Thu, 9 Apr 2015 23:59:41 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CDA1A1AD0D0; Thu, 9 Apr 2015 23:59:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150410065941.24330.59173.idtracker@ietfa.amsl.com> Date: Thu, 09 Apr 2015 23:59:41 -0700 Archived-At: Cc: radext@ietf.org Subject: [radext] I-D Action: draft-ietf-radext-dynamic-discovery-14.txt X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 06:59:43 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the RADIUS EXTensions Working Group of the IETF. Title : NAI-based Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS Authors : Stefan Winter Mike McCauley Filename : draft-ietf-radext-dynamic-discovery-14.txt Pages : 31 Date : 2015-04-09 Abstract: This document specifies a means to find authoritative RADIUS servers for a given realm. It is used in conjunction with either RADIUS/TLS and RADIUS/DTLS. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-radext-dynamic-discovery/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-radext-dynamic-discovery-14 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-radext-dynamic-discovery-14 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Apr 9 23:59:46 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3590C1AD0D2; Thu, 9 Apr 2015 23:59:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SFECfp91feeC; Thu, 9 Apr 2015 23:59:43 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E40A1AD0D3; Thu, 9 Apr 2015 23:59:42 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: , , , , X-Test-IDTracker: no X-IETF-IDTracker: 5.13.0.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150410065942.24330.15857.idtracker@ietfa.amsl.com> Date: Thu, 09 Apr 2015 23:59:42 -0700 Archived-At: Subject: [radext] New Version Notification - draft-ietf-radext-dynamic-discovery-14.txt X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 06:59:44 -0000 A new version (-14) has been submitted for draft-ietf-radext-dynamic-discovery: http://www.ietf.org/internet-drafts/draft-ietf-radext-dynamic-discovery-14.txt The IETF datatracker page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-radext-dynamic-discovery/ Diff from previous version: http://www.ietf.org/rfcdiff?url2=draft-ietf-radext-dynamic-discovery-14 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. IETF Secretariat. From nobody Fri Apr 10 00:02:43 2015 Return-Path: X-Original-To: expand-draft-ietf-radext-dynamic-discovery.all@virtual.ietf.org Delivered-To: radext@ietfa.amsl.com Received: by ietfa.amsl.com (Postfix, from userid 65534) id 3592D1AD33B; Fri, 10 Apr 2015 00:02:08 -0700 (PDT) X-Original-To: xfilter-draft-ietf-radext-dynamic-discovery.all@ietfa.amsl.com Delivered-To: xfilter-draft-ietf-radext-dynamic-discovery.all@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 180BC1AD2C0 for ; Fri, 10 Apr 2015 00:02:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, WEIRD_PORT=0.001] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JWcl3Df2DTnT for ; Fri, 10 Apr 2015 00:02:07 -0700 (PDT) Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [IPv6:2001:1890:123a::1:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 357DD1AD28D for ; Fri, 10 Apr 2015 00:02:07 -0700 (PDT) Received: from smtprelay.restena.lu ([2001:a18:1::62]:54192) by zinfandel.tools.ietf.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1YgSx4-0007bJ-3i for draft-ietf-radext-dynamic-discovery.all@tools.ietf.org; Fri, 10 Apr 2015 00:02:07 -0700 Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 64D7F4397F; Fri, 10 Apr 2015 09:02:02 +0200 (CEST) Message-ID: <5527756A.40807@restena.lu> Date: Fri, 10 Apr 2015 09:02:02 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Jari Arkko , Martin Thomson References: <550FCBFA.8080008@restena.lu> In-Reply-To: OpenPGP: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="MQOdGhq2tcf9L47NGvWQ2OlXvbN32VRg7" X-SA-Exim-Connect-IP: 2001:a18:1::62 X-SA-Exim-Rcpt-To: draft-ietf-radext-dynamic-discovery.all@tools.ietf.org X-SA-Exim-Mail-From: stefan.winter@restena.lu X-SA-Exim-Version: 4.2.1 (built Mon, 26 Dec 2011 16:24:06 +0000) X-SA-Exim-Scanned: Yes (on zinfandel.tools.ietf.org) Resent-To: draft-ietf-radext-dynamic-discovery.all@ietf.org Resent-Message-Id: <20150410070207.357DD1AD28D@ietfa.amsl.com> Resent-Date: Fri, 10 Apr 2015 00:02:07 -0700 (PDT) Resent-From: stefan.winter@restena.lu Archived-At: Archived-At: X-Mailman-Approved-At: Fri, 10 Apr 2015 00:02:41 -0700 Cc: "gen-art@ietf.org" , draft-ietf-radext-dynamic-discovery.all@tools.ietf.org Subject: Re: [radext] Gen-ART review of draft-ietf-radext-dynamic-discovery-13 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 07:02:08 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --MQOdGhq2tcf9L47NGvWQ2OlXvbN32VRg7 Content-Type: multipart/mixed; boundary="------------080501060801090900060307" This is a multi-part message in MIME format. --------------080501060801090900060307 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hello, > Thank you very much for the review, Martin. Stefan, are the edits going= to appear in some document version before the draft is approved? since all updates were fairly minor, I waited for the telechat with the new version. -14 has been posted just now. Greetings, Stefan Winter --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 --------------080501060801090900060307 Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------080501060801090900060307-- --MQOdGhq2tcf9L47NGvWQ2OlXvbN32VRg7 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJVJ3VqAAoJEMDeajWKOdxm7EYQAKkojF03UCKc/IFg7/G92j+F ok6LPb+Rqu3/GKoOmfFLPZRXMA0WDXNcRRt2S8qmllCpNQQRQv0UWx1kFQnyQm2j 88vXv/BXIOWKc5JZRUH4JCIvj0J9gCX+8vMvobMSWTL0RmJrWc7Dy7YZD9pm1DrJ l/zngRU0eOLtxbH472yO9rkTeOBwvTQwAfsccGv4gWDRacSxlax35f/KgXIQX2X8 vqMqc1YZV5/4muBsWcVr4bOilvfNII6mXseLjiiv4iXpSrFTIwEariYH5MrlV6DC rRVIs9wg5JNV8VF3fUGgIM01+8homVKSbh/sPBcbXJ/NIe7Qe9NGwJJoWhbh+zFk SFo3Vmi9vQ5p3JFm2Lt8GPE74wEF7j+PUMmbpam5pWnAUr21QxfG/6jIHeJAwtrb Nnm74V6GsZhoIH4xsR1unDlpFDdszzsMn5d+wPO4jlven3QHt597IUYg3iLoatTf oZW1WlsRUNA/dV1UBX6CopIAT6+MUvU95xm/K6bRFG0ofIS0w00IHpSajOIymoj7 rlOhQa66/R/+ljJgiy0GYVmo6trj6hXU/KL9+cQyIMcKjxh3DLrqRA0f0MF+9Qfj 0hdosaTsjfGf1kd1KzS5dqK+N23SMmJIBVICGggsN4XPvtnTQ6GR19OSCCEbVYbR 6BklNrpwIKFjgCKziGnZ =diDM -----END PGP SIGNATURE----- --MQOdGhq2tcf9L47NGvWQ2OlXvbN32VRg7-- From nobody Fri Apr 10 02:44:53 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CED8C1B2B23; Fri, 10 Apr 2015 02:44:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AyHsgbavQLER; Fri, 10 Apr 2015 02:44:46 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1C481B2B20; Fri, 10 Apr 2015 02:44:46 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 00101BEFA; Fri, 10 Apr 2015 10:44:44 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X5lflelDto3G; Fri, 10 Apr 2015 10:44:43 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 9B8C3BECF; Fri, 10 Apr 2015 10:44:43 +0100 (IST) Message-ID: <55279B88.6050903@cs.tcd.ie> Date: Fri, 10 Apr 2015 10:44:40 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Stefan Winter , The IESG References: <20150409130848.17585.83178.idtracker@ietfa.amsl.com> <55276ED9.9010606@restena.lu> In-Reply-To: <55276ED9.9010606@restena.lu> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="Hj3mQGUNKGarRXQRvklE3eoe6rNvnx0Vu" Archived-At: Cc: radext@ietf.org, radext-chairs@ietf.org, jounikor@gmail.com Subject: Re: [radext] Stephen Farrell's Yes on draft-ietf-radext-dynamic-discovery-13: (with COMMENT) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 09:44:48 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Hj3mQGUNKGarRXQRvklE3eoe6rNvnx0Vu Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 10/04/15 07:34, Stefan Winter wrote: > It's a bit tricky: a RADIUS server typically has a DNS hostname (and > that may want to/need to be placed in the cert for arbitrary reasons), > and serves NAI realms on a RADIUS level - but the two are not > necessarily identical. > So there would be several sAN:DNS entries in the cert, one or more > pertaining to the hostname, one or more pertaining to the NAI realms se= rved. > I guess a CA policy could "fix" that ambiguity by hard-wiring that the > first sAN:DNS in its certs would semantically mean "the host" and any > following ones would be "NAI realms served" but it doesn't strike me as= > a terribly clean solution. Fair enough yeah - if there's other DNS names involved then probably the otherName thing is best. Cheers, S. --Hj3mQGUNKGarRXQRvklE3eoe6rNvnx0Vu Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJVJ5uLAAoJEC88hzaAX42iWf4IAJj8dcGmXrrkvA3eg4bRxI1u FiPxv/iI5zoUerse7VYpJNkbVdxAuBErfw0IvcgSMBLbDVgbhp9VbQ23lbaHwZPE xJC3FnWJKCVa7Gv/+aQa1FttNcMVW51teUu5ypub7PslAaYgqrkfqLVYznxP6VED mjGgDhK7silbBHtASfWeMYwF38HKciTwvhViwJdjU4jssX4J1W4sRj4icHNHZkoB C3VtrlY+wZHRZ8smvN0AyHKbkY2ejlm0W7IN3jLnAzcWecKixCX2g7QBhaA4RCwn 57XWz7GMRV5FFalHNfLtNyq7ZzDCCRWldI2lUPFdCDZKHx04m/hVHfi9w6/fFF4= =+vId -----END PGP SIGNATURE----- --Hj3mQGUNKGarRXQRvklE3eoe6rNvnx0Vu-- From nobody Tue Apr 21 12:15:27 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22E3F1A6FF5 for ; Tue, 21 Apr 2015 10:16:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PZ3rT2VGlxs0 for ; Tue, 21 Apr 2015 10:16:26 -0700 (PDT) Received: from mail-la0-x230.google.com (mail-la0-x230.google.com [IPv6:2a00:1450:4010:c03::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 716B01A1BBC for ; Tue, 21 Apr 2015 10:16:25 -0700 (PDT) Received: by laat2 with SMTP id t2so156332347laa.1 for ; Tue, 21 Apr 2015 10:16:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=m48M3F1I3dUT8DAkK8EDkX75WzZpZVSMiv4FRt5vC3g=; b=Jv9V4cAMQ71VhI+4Z+N1ZAy4n4/ZlYu5REWzmK/Q0rTO+8CeFuvphSWTwqfJhunKNA AJtZdYM5VUn40emg6NZYB2umAnQPxeU/wnYg9/J5HqHkfoM8gGmjU9s/li5NVIiUude3 Q2tu5scgvG3p5/MGSoTJsShj4oUMmPpK8/WWlUBoFAjDytIMUfAKHt2IwOSWoYVdGlJ2 +McXW9SV6NrlzApmk+LCxyC0rxMVBLDIjmDVLQ7kWX+ZRXfb1DYegUEwnDfQ/eYvB5WJ dHz6EWXv97JQMceS78w1dT/O3ArR8AqMqO0gNWbl4I4wgUCMDlCKwA2LBOr3AGvTooA+ SSXw== MIME-Version: 1.0 X-Received: by 10.112.29.36 with SMTP id g4mr21548969lbh.56.1429636583986; Tue, 21 Apr 2015 10:16:23 -0700 (PDT) Received: by 10.112.11.199 with HTTP; Tue, 21 Apr 2015 10:16:23 -0700 (PDT) In-Reply-To: <20150323165024.CFFDA180459@rfc-editor.org> References: <20150323165024.CFFDA180459@rfc-editor.org> Date: Tue, 21 Apr 2015 13:16:23 -0400 Message-ID: From: Kathleen Moriarty To: RFC Errata System Content-Type: multipart/alternative; boundary=001a1133f994bf1a8e05143f34b0 Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 12:15:26 -0700 Cc: "gdommety@cisco.com" , "radext@ietf.org" , Alan DeKok , "" , Stefan Winter , joel jaeggli , bernarda@microsoft.com, "david@mitton.com" , Benoit Claise , "meklund@cisco.com" , "mchiba@cisco.com" Subject: Re: [radext] [Technical Errata Reported] RFC5176 (4311) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 17:16:28 -0000 --001a1133f994bf1a8e05143f34b0 Content-Type: text/plain; charset=UTF-8 Hello, I haven't seen any discussion on this from the Radext WG. The report looks reasonable and make sense to me, but would like to hear from the chairs to confirm. Since this is getting addressed in a new draft, I would be included to mark this as "Hold for Document Update". This puts the errata with this draft (it's not rejected) and can be added to a new revision of this particular draft if it gets updated in the future. Please let me know if you agree/disagree and I'll mark it appropriately. Thanks! On Mon, Mar 23, 2015 at 12:50 PM, RFC Errata System < rfc-editor@rfc-editor.org> wrote: > The following errata report has been submitted for RFC5176, > "Dynamic Authorization Extensions to Remote Authentication Dial In User > Service (RADIUS)". > > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata_search.php?rfc=5176&eid=4311 > > -------------------------------------- > Type: Technical > Reported by: Alan DeKok > > Section: 2.3 > > Original Text > ------------- > Section 2.3 says: > > In CoA-Request and Disconnect-Request packets, all attributes MUST > be treated as mandatory. > > > Corrected Text > -------------- > In CoA-Request and Disconnect-Request packets, all attributes MUST > be treated as mandatory, except Proxy-State. See Section 3.1 for a > discussion of how the NAS must handle Proxy-State. > > Notes > ----- > This was seen with vendor equipment. CoA proxying was done to the NAS, > and the proxy was adding and forwarding Proxy-State as required by Section > 3.1. However, the NAS was returning a CoA-NAK with Error-Cause = > Unsupported-Attribute. > > The issue comes because Proxy-State is called out in Section 3.1 for > special handling. However, that special handling isn't called out in > Section 2.3. As a result, implementors can get confused. > > The RADEXT WG is rechartering with a document to address CoA proxying. We > will also be addressing this issue in that document. There are additional > attributes which a NAS should ignore, OR which should be filtered out by > the proxy closest to the NAS. > > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party (IESG) > can log in to change the status and edit the report, if necessary. > > -------------------------------------- > RFC5176 (draft-ietf-radext-rfc3576bis-13) > -------------------------------------- > Title : Dynamic Authorization Extensions to Remote > Authentication Dial In User Service (RADIUS) > Publication Date : January 2008 > Author(s) : M. Chiba, G. Dommety, M. Eklund, D. Mitton, B. Aboba > Category : INFORMATIONAL > Source : RADIUS EXTensions > Area : Operations and Management > Stream : IETF > Verifying Party : IESG > > _______________________________________________ > radext mailing list > radext@ietf.org > https://www.ietf.org/mailman/listinfo/radext > -- Best regards, Kathleen --001a1133f994bf1a8e05143f34b0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello,

I haven't seen any discussio= n on this from the Radext WG.=C2=A0 The report looks reasonable and make se= nse to me, but would like to hear from the chairs to confirm.=C2=A0 Since t= his is getting addressed in a new draft, I would be included to mark this a= s "Hold for Document Update".=C2=A0 This puts the errata with thi= s draft (it's not rejected) and can be added to a new revision of this = particular draft if it gets updated in the future.

Please let me know if you agree/disagree and I'll mark it appropriatel= y.

Thanks!
<= br>
On Mon, Mar 23, 2015 at 12:50 PM, RFC Errata = System <rfc-editor@rfc-editor.org> wrote:
The following errata report has been submitted for = RFC5176,
"Dynamic Authorization Extensions to Remote Authentication Dial In Use= r Service (RADIUS)".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc= =3D5176&eid=3D4311

--------------------------------------
Type: Technical
Reported by: Alan DeKok <aland@f= reeradius.org>

Section: 2.3

Original Text
-------------
Section 2.3 says:

=C2=A0 =C2=A0 =C2=A0 In CoA-Request and Disconnect-Request packets, all att= ributes MUST
=C2=A0 =C2=A0 =C2=A0 be treated as mandatory.


Corrected Text
--------------
In CoA-Request and Disconnect-Request packets, all attributes MUST
be treated as mandatory, except Proxy-State.=C2=A0 See Section 3.1 for a discussion of how the NAS must handle Proxy-State.

Notes
-----
This was seen with vendor equipment.=C2=A0 CoA proxying was done to the NAS= , and the proxy was adding and forwarding Proxy-State as required by Sectio= n 3.1.=C2=A0 However, the NAS was returning a CoA-NAK with Error-Cause =3D = Unsupported-Attribute.

The issue comes because Proxy-State is called out in Section 3.1 for specia= l handling.=C2=A0 However, that special handling isn't called out in Se= ction 2.3.=C2=A0 As a result, implementors can get confused.

The RADEXT WG is rechartering with a document to address CoA proxying.=C2= =A0 We will also be addressing this issue in that document.=C2=A0 There are= additional attributes which a NAS should ignore, OR which should be filter= ed out by the proxy closest to the NAS.

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, ple= ase
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary.

--------------------------------------
RFC5176 (draft-ietf-radext-rfc3576bis-13)
--------------------------------------
Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: Dynamic Autho= rization Extensions to Remote Authentication Dial In User Service (RADIUS)<= br> Publication Date=C2=A0 =C2=A0 : January 2008
Author(s)=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: M. Chiba, G. Dommety, M= . Eklund, D. Mitton, B. Aboba
Category=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : INFORMATIONAL
Source=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : RADIUS EXTensions<= br> Area=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Operations an= d Management
Stream=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : IETF
Verifying Party=C2=A0 =C2=A0 =C2=A0: IESG

_______________________________________________
radext mailing list
radext@ietf.org
= https://www.ietf.org/mailman/listinfo/radext



--

Best regards,
Kath= leen
--001a1133f994bf1a8e05143f34b0-- From nobody Tue Apr 21 12:15:29 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AA281B29AB for ; Tue, 21 Apr 2015 10:20:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, WEIRD_PORT=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HZKmEwxjotIe for ; Tue, 21 Apr 2015 10:20:29 -0700 (PDT) Received: from mail-la0-x22f.google.com (mail-la0-x22f.google.com [IPv6:2a00:1450:4010:c03::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69EAB1A700C for ; Tue, 21 Apr 2015 10:20:27 -0700 (PDT) Received: by laat2 with SMTP id t2so156412017laa.1 for ; Tue, 21 Apr 2015 10:20:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=30Fa3enx3PdPkn3v5Q0gsplwkDqA17XLxNA2nmnrKks=; b=OHIEH0ljeu6wPDhR3A4Qz4KXXCmaF8S+rSFnqKyI9IsCgmWsXxZ0tECENYJLcBN5LZ t3TZ3ieEgEcw0Ya/DTufKX4FBHwfJfk10kYvA/9jHDU0yGOoQN2HyrOJy0jAQc4KRiUq VWC0eqjnyOppYcQhMdzhFFP9NkKXei8vFxE5ExIaYt4xdE/usiqYiOP95l3VzsWDmRsC nfwdw4oil9fvaGg55jD8rBvCzpmLp6OBvSQ3R4A4bi3IB9pG+g9uv43TzOVVPXRwNOsX grti/bCev9rYhodqVTPaeSPibi4wIabVbn9ajJCoyRP4VUYg7obTxXdOWZQ9zgvQXnQ4 rc3g== MIME-Version: 1.0 X-Received: by 10.152.27.194 with SMTP id v2mr20639036lag.75.1429636825938; Tue, 21 Apr 2015 10:20:25 -0700 (PDT) Received: by 10.112.11.199 with HTTP; Tue, 21 Apr 2015 10:20:25 -0700 (PDT) In-Reply-To: <16769_1427124080_55102F70_16769_5008_1_6B7134B31289DC4FAF731D844122B36EE83D0A@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <20150224204147.6CCC6181B3D@rfc-editor.org> <9BE727B3-42D6-4C3C-84E5-398B32D2D538@freeradius.org> <550FD189.9050600@restena.lu> <16769_1427124080_55102F70_16769_5008_1_6B7134B31289DC4FAF731D844122B36EE83D0A@PEXCVZYM13.corporate.adroot.infra.ftgroup> Date: Tue, 21 Apr 2015 13:20:25 -0400 Message-ID: From: Kathleen Moriarty To: "" Content-Type: multipart/alternative; boundary=089e0158c2ac2b00bc05143f4316 Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 12:15:26 -0700 Cc: "gdommety@cisco.com" , "radext@ietf.org" , "david@mitton.com" , Stefan Winter , "joelja@bogus.com" , Bernard Aboba , Alan DeKok , "bclaise@cisco.com" , "meklund@cisco.com" , "mchiba@cisco.com" , RFC Errata System Subject: Re: [radext] [Technical Errata Reported] RFC5176 (4280) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 17:20:32 -0000 --089e0158c2ac2b00bc05143f4316 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hello, Where do we stand on this, is there a second errata or should I reject 4280 and wait for a new one that covers everything to be submitted? Thank you, Kathleen On Mon, Mar 23, 2015 at 11:21 AM, wrote: > Hi, > > I think also that two separate Errata should be created. > > Regards, > > Lionel > > -----Message d'origine----- > De : Stefan Winter [mailto:stefan.winter@restena.lu] > Envoy=C3=A9 : lundi 23 mars 2015 09:41 > =C3=80 : Kathleen Moriarty; Alan DeKok > Cc : gdommety@cisco.com; radext@ietf.org; MORAND Lionel IMT/OLN; > joelja@bogus.com; Bernard Aboba; david@mitton.com; bclaise@cisco.com; > meklund@cisco.com; mchiba@cisco.com; RFC Errata System > Objet : Re: [radext] [Technical Errata Reported] RFC5176 (4280) > > Hello, > > > Is there agreement on the changes and do additional errata need to be > > filed for the added text in this thread? > > There was no disagreement on the Errata - it seems to be correct. > > I'm not enough into process questions to answer the second part, so: the > text sketches make sense, but do we need to file a second errata, or can = we > "mangle" the original errata text to include this? Seems a bit strange to > me to have two Errata for one underlying issue; I'd prefer to have all > changes in one ... > > Since most of you are in Denver, maybe shortly touching this question in > the meeting makes sense? > > Greetings, > > Stefan Winter > > > > > Thank you, > > Kathleen > > > > On Wed, Feb 25, 2015 at 9:46 AM, Alan DeKok > > wrote: > > > > I agree. There should be an additional paragraph after the > > paragraph below, saying: > > > > ... > > Error-Cause MAY be included in a CoA-ACK and Disconnect-ACK > packet to > > indicate successful actions. If it is included in those packets= , > > the Value MUST > > be within the range 200-299. > > ... > > > > There is further discussion of CoA-ACK in the text describing the > > allowed VALUEs. But there should be a short sentence in the > > Description, too. > > > > On Feb 24, 2015, at 6:07 PM, Bernard Aboba > > > > > wrote: > > > > > The Description text should also be addressed in this Errata: > > > > > > Description > > > > > > It is possible that a Dynamic Authorization Server cannot > honor > > > Disconnect-Request or CoA-Request packets for some reason. > The > > > Error-Cause Attribute provides more detail on the cause of t= he > > > problem. It MAY be included within CoA-NAK and Disconnect-N= AK > > > packets. > > > > > > > > > -----Original Message----- > > > From: RFC Errata System [mailto:rfc-editor@rfc-editor.org > > ] > > > Sent: Tuesday, February 24, 2015 12:42 PM > > > To: mchiba@cisco.com ; gdommety@cisco.co= m > > ; meklund@cisco.com > > ; david@mitton.com > > ; Bernard Aboba; bclaise@cisco.com > > ; joelja@bogus.com > > ; stefan.winter@restena.lu > > ; lionel.morand@orange.com > > > > > Cc: aland@freeradius.org ; > > radext@ietf.org ; rfc-editor@rfc-editor.org > > > > > Subject: [Technical Errata Reported] RFC5176 (4280) > > > > > > The following errata report has been submitted for RFC5176, > > "Dynamic Authorization Extensions to Remote Authentication Dial In > > User Service (RADIUS)". > > > > > > -------------------------------------- > > > You may review the report below and at: > > > http://www.rfc-editor.org/errata_search.php?rfc=3D5176&eid=3D4280 > > > > > > -------------------------------------- > > > Type: Technical > > > Reported by: Alan DeKok > > > > > > > > Section: 3.6 > > > > > > Original Text > > > ------------- > > > 0 0 0+ 101 Error-Cause > > > > > > > > > In both tables, for CoA and Disconnect messages. > > > > > > Corrected Text > > > -------------- > > > 0 0+ 0+ 101 Error-Cause > > > > > > > > > In both tables, for CoA and Disconnect messages. > > > > > > Notes > > > ----- > > > Section 3.5 says that Error-Cause may be sent in a CoA-ACK or > > Disconnect-ACK packet: > > > > > > ... > > > Values 200-299 represent successful completion, so that thes= e > > > values may only be sent within CoA-ACK or Disconnect-ACK > packets > > > > > > Instructions: > > > ------------- > > > This erratum is currently posted as "Reported". If necessary, > > please use "Reply All" to discuss whether it should be verified or > > rejected. When a decision is reached, the verifying party (IESG) ca= n > > log in to change the status and edit the report, if necessary. > > > > > > -------------------------------------- > > > RFC5176 (draft-ietf-radext-rfc3576bis-13) > > > -------------------------------------- > > > Title : Dynamic Authorization Extensions to Remote > > Authentication Dial In User Service (RADIUS) > > > Publication Date : January 2008 > > > Author(s) : M. Chiba, G. Dommety, M. Eklund, D. Mitton, > > B. Aboba > > > Category : INFORMATIONAL > > > Source : RADIUS EXTensions > > > Area : Operations and Management > > > Stream : IETF > > > Verifying Party : IESG > > > > > > > _______________________________________________ > > radext mailing list > > radext@ietf.org > > https://www.ietf.org/mailman/listinfo/radext > > > > > > > > > > -- > > > > Best regards, > > Kathleen > > > > > > _______________________________________________ > > radext mailing list > > radext@ietf.org > > https://www.ietf.org/mailman/listinfo/radext > > > > > -- > Stefan WINTER > Ingenieur de Recherche > Fondation RESTENA - R=C3=A9seau T=C3=A9l=C3=A9informatique de l'Education= Nationale et de > la Recherche 6, rue Richard Coudenhove-Kalergi > L-1359 Luxembourg > > Tel: +352 424409 1 > Fax: +352 422473 > > PGP key updated to 4096 Bit RSA - I will encrypt all mails if the > recipient's key is known to me > > http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 > > > _________________________________________________________________________= ________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations > confidentielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez > recu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages > electroniques etant susceptibles d'alteration, > Orange decline toute responsabilite si ce message a ete altere, deforme o= u > falsifie. Merci. > > This message and its attachments may contain confidential or privileged > information that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and > delete this message and its attachments. > As emails may be altered, Orange is not liable for messages that have bee= n > modified, changed or falsified. > Thank you. > > --=20 Best regards, Kathleen --089e0158c2ac2b00bc05143f4316 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello,

Where do we stand on this, is th= ere a second errata or should I reject 4280 and wait for a new one that cov= ers everything to be submitted?

Thank you,
Kathleen

On Mon, Mar 23, 2015 at 11:21 AM, <lionel.morand@orange.com<= /a>> wrote:
Hi,

I think also that two separate Errata should be created.

Regards,

Lionel

-----Message d'origine-----
De=C2=A0: Stefan Winter [mailto:stefan.winter@restena.lu]
Envoy=C3=A9=C2=A0: lundi 23 mars 2015 09:41
=C3=80=C2=A0: Kathleen Moriarty; Alan DeKok
Cc=C2=A0: gdommety@cisco.com; radext@ietf.org; MORAND Lionel IMT/OLN;= joelja@bogus.com; Bernard Aboba; <= a href=3D"mailto:david@mitton.com">david@mitton.com; bclaise@cisco.com; meklund@cisco.com; mchiba@cisco= .com; RFC Errata System
Objet=C2=A0: Re: [radext] [Technical Errata Reported] RFC5176 (4280)

Hello,

> Is there agreement on the changes and do additional errata need to be<= br> > filed for the added text in this thread?

There was no disagreement on the Errata - it seems to be correct.

I'm not enough into process questions to answer the second part, so: th= e text sketches make sense, but do we need to file a second errata, or can = we "mangle" the original errata text to include this? Seems a bit= strange to me to have two Errata for one underlying issue; I'd prefer = to have all changes in one ...

Since most of you are in Denver, maybe shortly touching this question in th= e meeting makes sense?

Greetings,

Stefan Winter

>
> Thank you,
> Kathleen
>
> On Wed, Feb 25, 2015 at 9:46 AM, Alan DeKok <aland@freeradius.org
> <mailto:aland@freeradius.or= g>> wrote:
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0I agree.=C2=A0 There should be an additional= paragraph after the
>=C2=A0 =C2=A0 =C2=A0paragraph below, saying:
>
>=C2=A0 =C2=A0 =C2=A0...
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 Error-Cause MAY be included in a CoA-ACK an= d Disconnect-ACK packet to
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 indicate successful actions.=C2=A0 If it is= included in those packets,
>=C2=A0 =C2=A0 =C2=A0the Value MUST
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 be within the range 200-299.
>=C2=A0 =C2=A0 =C2=A0...
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0There is further discussion of CoA-ACK in th= e text describing the
>=C2=A0 =C2=A0 =C2=A0allowed VALUEs.=C2=A0 But there should be a short s= entence in the
>=C2=A0 =C2=A0 =C2=A0Description, too.
>
>=C2=A0 =C2=A0 =C2=A0On Feb 24, 2015, at 6:07 PM, Bernard Aboba
>=C2=A0 =C2=A0 =C2=A0<= Bernard.Aboba@microsoft.com <mailto:Bernard.Aboba@microsoft.com>>
>=C2=A0 =C2=A0 =C2=A0wrote:
>
>=C2=A0 =C2=A0 =C2=A0> The Description text should also be addressed = in this Errata:
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0Description
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 It is possible that a Dyna= mic Authorization Server cannot honor
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 Disconnect-Request or CoA-= Request packets for some reason.=C2=A0 The
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 Error-Cause Attribute prov= ides more detail on the cause of the
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 problem.=C2=A0 It MAY be i= ncluded within CoA-NAK and Disconnect-NAK
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 packets.
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> -----Original Message-----
>=C2=A0 =C2=A0 =C2=A0> From: RFC Errata System [mailto:rfc-editor@rfc-editor.org
>=C2=A0 =C2=A0 =C2=A0<mailto:rfc-editor@rfc-editor.org>]
>=C2=A0 =C2=A0 =C2=A0> Sent: Tuesday, February 24, 2015 12:42 PM
>=C2=A0 =C2=A0 =C2=A0> To: mchiba= @cisco.com <mailto:mchiba@cisco.= com>; gdommety@cisco.com >=C2=A0 =C2=A0 =C2=A0<mailto:gd= ommety@cisco.com>; meklund@cisc= o.com
>=C2=A0 =C2=A0 =C2=A0<mailto:mek= lund@cisco.com>; david@mitton.co= m
>=C2=A0 =C2=A0 =C2=A0<mailto:davi= d@mitton.com>; Bernard Aboba; b= claise@cisco.com
>=C2=A0 =C2=A0 =C2=A0<mailto:bcl= aise@cisco.com>; joelja@bogus.co= m
>=C2=A0 =C2=A0 =C2=A0<mailto:joel= ja@bogus.com>; stefan.wi= nter@restena.lu
>=C2=A0 =C2=A0 =C2=A0<mailto:stefan.winter@restena.lu>; lionel.morand@orange.com
>=C2=A0 =C2=A0 =C2=A0<mailto:lionel.morand@orange.com>
>=C2=A0 =C2=A0 =C2=A0> Cc: al= and@freeradius.org <mailto:a= land@freeradius.org>;
>=C2=A0 =C2=A0 =C2=A0radext@ietf.org<= /a> <mailto:radext@ietf.org>; = rfc-editor@rfc-editor.org<= br> >=C2=A0 =C2=A0 =C2=A0<mailto:rfc-editor@rfc-editor.org>
>=C2=A0 =C2=A0 =C2=A0> Subject: [Technical Errata Reported] RFC5176 (= 4280)
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> The following errata report has been submitted= for RFC5176,
>=C2=A0 =C2=A0 =C2=A0"Dynamic Authorization Extensions to Remote Au= thentication Dial In
>=C2=A0 =C2=A0 =C2=A0User Service (RADIUS)".
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> --------------------------------------
>=C2=A0 =C2=A0 =C2=A0> You may review the report below and at:
>=C2=A0 =C2=A0 =C2=A0> http://www.rfc-editor= .org/errata_search.php?rfc=3D5176&eid=3D4280
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> --------------------------------------
>=C2=A0 =C2=A0 =C2=A0> Type: Technical
>=C2=A0 =C2=A0 =C2=A0> Reported by: Alan DeKok <aland@freeradius.org
>=C2=A0 =C2=A0 =C2=A0<mailto:= aland@freeradius.org>>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Section: 3.6
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Original Text
>=C2=A0 =C2=A0 =C2=A0> -------------
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A00=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A00=C2=A0 =C2=A0 =C2=A0 =C2=A0 0+=C2=A0 101=C2=A0 =C2=A0Error-Cause
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> In both tables, for CoA and Disconnect message= s.
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Corrected Text
>=C2=A0 =C2=A0 =C2=A0> --------------
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A00=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A00+=C2=A0 =C2=A0 =C2=A0 =C2=A0 0+=C2=A0 101=C2=A0 =C2=A0Error-Cause
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> In both tables, for CoA and Disconnect message= s.
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Notes
>=C2=A0 =C2=A0 =C2=A0> -----
>=C2=A0 =C2=A0 =C2=A0> Section 3.5 says that Error-Cause may be sent = in a CoA-ACK or
>=C2=A0 =C2=A0 =C2=A0Disconnect-ACK packet:
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 ...
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 Values 200-299 represent s= uccessful completion, so that these
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 values may only be sent wi= thin CoA-ACK or Disconnect-ACK packets
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Instructions:
>=C2=A0 =C2=A0 =C2=A0> -------------
>=C2=A0 =C2=A0 =C2=A0> This erratum is currently posted as "Repo= rted". If necessary,
>=C2=A0 =C2=A0 =C2=A0please use "Reply All" to discuss whether= it should be verified or
>=C2=A0 =C2=A0 =C2=A0rejected. When a decision is reached, the verifying= party (IESG) can
>=C2=A0 =C2=A0 =C2=A0log in to change the status and edit the report, if= necessary.
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> --------------------------------------
>=C2=A0 =C2=A0 =C2=A0> RFC5176 (draft-ietf-radext-rfc3576bis-13)
>=C2=A0 =C2=A0 =C2=A0> --------------------------------------
>=C2=A0 =C2=A0 =C2=A0> Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0: Dynamic Authorization Extensions to Remote
>=C2=A0 =C2=A0 =C2=A0Authentication Dial In User Service (RADIUS)
>=C2=A0 =C2=A0 =C2=A0> Publication Date=C2=A0 =C2=A0 : January 2008 >=C2=A0 =C2=A0 =C2=A0> Author(s)=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0: M. Chiba, G. Dommety, M. Eklund, D. Mitton,
>=C2=A0 =C2=A0 =C2=A0B. Aboba
>=C2=A0 =C2=A0 =C2=A0> Category=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 : INFORMATIONAL
>=C2=A0 =C2=A0 =C2=A0> Source=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 : RADIUS EXTensions
>=C2=A0 =C2=A0 =C2=A0> Area=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 : Operations and Management
>=C2=A0 =C2=A0 =C2=A0> Stream=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 : IETF
>=C2=A0 =C2=A0 =C2=A0> Verifying Party=C2=A0 =C2=A0 =C2=A0: IESG
>=C2=A0 =C2=A0 =C2=A0>
>
>=C2=A0 =C2=A0 =C2=A0_______________________________________________
>=C2=A0 =C2=A0 =C2=A0radext mailing list
>=C2=A0 =C2=A0 =C2=A0radext@ietf.org<= /a> <mailto:radext@ietf.org> >=C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mailman/listinfo/radext >
>
>
>
> --
>
> Best regards,
> Kathleen
>
>
> _______________________________________________
> radext mailing list
> radext@ietf.org
> https://www.ietf.org/mailman/listinfo/radext
>


--
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - R=C3=A9seau T=C3=A9l=C3=A9informatique de l'Educati= on Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 = 1
Fax: +352 422473
PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient= 's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=3Dge= t&search=3D0xC0DE6A358A39DC66

_______________________________________________________________= __________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les message= s electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci.

This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele= te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified.
Thank you.




--

Best regards,
Kath= leen
--089e0158c2ac2b00bc05143f4316-- From nobody Tue Apr 21 12:25:37 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B506E1B2A99 for ; Tue, 21 Apr 2015 12:24:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.597 X-Spam-Level: X-Spam-Status: No, score=-2.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, WEIRD_PORT=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AqonkpMcCyEB for ; Tue, 21 Apr 2015 12:23:57 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias245.francetelecom.com [80.12.204.245]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D98611B2A96 for ; Tue, 21 Apr 2015 12:23:56 -0700 (PDT) Received: from omfeda08.si.francetelecom.fr (unknown [xx.xx.xx.201]) by omfeda13.si.francetelecom.fr (ESMTP service) with ESMTP id 3351B1901D0; Tue, 21 Apr 2015 21:23:54 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.183]) by omfeda08.si.francetelecom.fr (ESMTP service) with ESMTP id 0CC0E38408F; Tue, 21 Apr 2015 21:23:54 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH02.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0224.002; Tue, 21 Apr 2015 21:23:53 +0200 From: To: Kathleen Moriarty Thread-Topic: [radext] [Technical Errata Reported] RFC5176 (4280) Thread-Index: AQHQfFd2wbyZSgO2V0e2KrCcM/SuKJ1X1ngg Date: Tue, 21 Apr 2015 19:23:52 +0000 Message-ID: <3568_1429644234_5536A3CA_3568_7456_1_6B7134B31289DC4FAF731D844122B36E0103AF2A@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <20150224204147.6CCC6181B3D@rfc-editor.org> <9BE727B3-42D6-4C3C-84E5-398B32D2D538@freeradius.org> <550FD189.9050600@restena.lu> <16769_1427124080_55102F70_16769_5008_1_6B7134B31289DC4FAF731D844122B36EE83D0A@PEXCVZYM13.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.6] Content-Type: multipart/alternative; boundary="_000_6B7134B31289DC4FAF731D844122B36E0103AF2APEXCVZYM13corpo_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.4.21.145424 Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 12:25:35 -0700 Cc: "gdommety@cisco.com" , "radext@ietf.org" , "david@mitton.com" , Stefan Winter , "joelja@bogus.com" , Bernard Aboba , Alan DeKok , "bclaise@cisco.com" , "meklund@cisco.com" , "mchiba@cisco.com" , RFC Errata System Subject: Re: [radext] [Technical Errata Reported] RFC5176 (4280) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 19:24:02 -0000 --_000_6B7134B31289DC4FAF731D844122B36E0103AF2APEXCVZYM13corpo_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 aXQgd2FzIGFncmVlZCB0byBoYXZlIHR3byBkaXN0aW5jdCBlcnJhdGEgYW5kIEkgd2FzIGV4cGVj dGluZyBhIG5ldyBvbmUgZnJvbSBBbGFuLiBJIHdpbGwgaXNzdWUgYSBuZXcgb25lIHRvbW9ycm93 Lg0KVGhlIHN0ZXAgZm9yIHRoaXMgY3VycmVudCBlcnJhdGEgcmVwb3J0IGNhbiBiZSBzZXQgdG8g InZlcmlmaWVkIi4NCkFuZCBpdCB3aWxsIGJlIHRoZSBzYW1lIHN0ZXAgZm9yIHRoZSBuZXh0IHRv IGNvbWUuDQoNClJlZ2FyZHMsDQoNCkxpb25lbA0KDQpEZSA6IEthdGhsZWVuIE1vcmlhcnR5IFtt YWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb21dDQpFbnZvecOpIDogbWFyZGkg MjEgYXZyaWwgMjAxNSAxOToyMA0Kw4AgOiBNT1JBTkQgTGlvbmVsIElNVC9PTE4NCkNjIDogU3Rl ZmFuIFdpbnRlcjsgQWxhbiBEZUtvazsgZ2RvbW1ldHlAY2lzY28uY29tOyByYWRleHRAaWV0Zi5v cmc7IGpvZWxqYUBib2d1cy5jb207IEJlcm5hcmQgQWJvYmE7IGRhdmlkQG1pdHRvbi5jb207IGJj bGFpc2VAY2lzY28uY29tOyBtZWtsdW5kQGNpc2NvLmNvbTsgbWNoaWJhQGNpc2NvLmNvbTsgUkZD IEVycmF0YSBTeXN0ZW0NCk9iamV0IDogUmU6IFtyYWRleHRdIFtUZWNobmljYWwgRXJyYXRhIFJl cG9ydGVkXSBSRkM1MTc2ICg0MjgwKQ0KDQpIZWxsbywNCg0KV2hlcmUgZG8gd2Ugc3RhbmQgb24g dGhpcywgaXMgdGhlcmUgYSBzZWNvbmQgZXJyYXRhIG9yIHNob3VsZCBJIHJlamVjdCA0MjgwIGFu ZCB3YWl0IGZvciBhIG5ldyBvbmUgdGhhdCBjb3ZlcnMgZXZlcnl0aGluZyB0byBiZSBzdWJtaXR0 ZWQ/DQoNClRoYW5rIHlvdSwNCkthdGhsZWVuDQoNCk9uIE1vbiwgTWFyIDIzLCAyMDE1IGF0IDEx OjIxIEFNLCA8bGlvbmVsLm1vcmFuZEBvcmFuZ2UuY29tPG1haWx0bzpsaW9uZWwubW9yYW5kQG9y YW5nZS5jb20+PiB3cm90ZToNCkhpLA0KDQpJIHRoaW5rIGFsc28gdGhhdCB0d28gc2VwYXJhdGUg RXJyYXRhIHNob3VsZCBiZSBjcmVhdGVkLg0KDQpSZWdhcmRzLA0KDQpMaW9uZWwNCg0KLS0tLS1N ZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQpEZSA6IFN0ZWZhbiBXaW50ZXIgW21haWx0bzpzdGVmYW4u d2ludGVyQHJlc3RlbmEubHU8bWFpbHRvOnN0ZWZhbi53aW50ZXJAcmVzdGVuYS5sdT5dDQpFbnZv ecOpIDogbHVuZGkgMjMgbWFycyAyMDE1IDA5OjQxDQrDgCA6IEthdGhsZWVuIE1vcmlhcnR5OyBB bGFuIERlS29rDQpDYyA6IGdkb21tZXR5QGNpc2NvLmNvbTxtYWlsdG86Z2RvbW1ldHlAY2lzY28u Y29tPjsgcmFkZXh0QGlldGYub3JnPG1haWx0bzpyYWRleHRAaWV0Zi5vcmc+OyBNT1JBTkQgTGlv bmVsIElNVC9PTE47IGpvZWxqYUBib2d1cy5jb208bWFpbHRvOmpvZWxqYUBib2d1cy5jb20+OyBC ZXJuYXJkIEFib2JhOyBkYXZpZEBtaXR0b24uY29tPG1haWx0bzpkYXZpZEBtaXR0b24uY29tPjsg YmNsYWlzZUBjaXNjby5jb208bWFpbHRvOmJjbGFpc2VAY2lzY28uY29tPjsgbWVrbHVuZEBjaXNj by5jb208bWFpbHRvOm1la2x1bmRAY2lzY28uY29tPjsgbWNoaWJhQGNpc2NvLmNvbTxtYWlsdG86 bWNoaWJhQGNpc2NvLmNvbT47IFJGQyBFcnJhdGEgU3lzdGVtDQpPYmpldCA6IFJlOiBbcmFkZXh0 XSBbVGVjaG5pY2FsIEVycmF0YSBSZXBvcnRlZF0gUkZDNTE3NiAoNDI4MCkNCg0KSGVsbG8sDQoN Cj4gSXMgdGhlcmUgYWdyZWVtZW50IG9uIHRoZSBjaGFuZ2VzIGFuZCBkbyBhZGRpdGlvbmFsIGVy cmF0YSBuZWVkIHRvIGJlDQo+IGZpbGVkIGZvciB0aGUgYWRkZWQgdGV4dCBpbiB0aGlzIHRocmVh ZD8NCg0KVGhlcmUgd2FzIG5vIGRpc2FncmVlbWVudCBvbiB0aGUgRXJyYXRhIC0gaXQgc2VlbXMg dG8gYmUgY29ycmVjdC4NCg0KSSdtIG5vdCBlbm91Z2ggaW50byBwcm9jZXNzIHF1ZXN0aW9ucyB0 byBhbnN3ZXIgdGhlIHNlY29uZCBwYXJ0LCBzbzogdGhlIHRleHQgc2tldGNoZXMgbWFrZSBzZW5z ZSwgYnV0IGRvIHdlIG5lZWQgdG8gZmlsZSBhIHNlY29uZCBlcnJhdGEsIG9yIGNhbiB3ZSAibWFu Z2xlIiB0aGUgb3JpZ2luYWwgZXJyYXRhIHRleHQgdG8gaW5jbHVkZSB0aGlzPyBTZWVtcyBhIGJp dCBzdHJhbmdlIHRvIG1lIHRvIGhhdmUgdHdvIEVycmF0YSBmb3Igb25lIHVuZGVybHlpbmcgaXNz dWU7IEknZCBwcmVmZXIgdG8gaGF2ZSBhbGwgY2hhbmdlcyBpbiBvbmUgLi4uDQoNClNpbmNlIG1v c3Qgb2YgeW91IGFyZSBpbiBEZW52ZXIsIG1heWJlIHNob3J0bHkgdG91Y2hpbmcgdGhpcyBxdWVz dGlvbiBpbiB0aGUgbWVldGluZyBtYWtlcyBzZW5zZT8NCg0KR3JlZXRpbmdzLA0KDQpTdGVmYW4g V2ludGVyDQoNCj4NCj4gVGhhbmsgeW91LA0KPiBLYXRobGVlbg0KPg0KPiBPbiBXZWQsIEZlYiAy NSwgMjAxNSBhdCA5OjQ2IEFNLCBBbGFuIERlS29rIDxhbGFuZEBmcmVlcmFkaXVzLm9yZzxtYWls dG86YWxhbmRAZnJlZXJhZGl1cy5vcmc+DQo+IDxtYWlsdG86YWxhbmRAZnJlZXJhZGl1cy5vcmc8 bWFpbHRvOmFsYW5kQGZyZWVyYWRpdXMub3JnPj4+IHdyb3RlOg0KPg0KPiAgICAgICBJIGFncmVl LiAgVGhlcmUgc2hvdWxkIGJlIGFuIGFkZGl0aW9uYWwgcGFyYWdyYXBoIGFmdGVyIHRoZQ0KPiAg ICAgcGFyYWdyYXBoIGJlbG93LCBzYXlpbmc6DQo+DQo+ICAgICAuLi4NCj4gICAgICAgIEVycm9y LUNhdXNlIE1BWSBiZSBpbmNsdWRlZCBpbiBhIENvQS1BQ0sgYW5kIERpc2Nvbm5lY3QtQUNLIHBh Y2tldCB0bw0KPiAgICAgICAgaW5kaWNhdGUgc3VjY2Vzc2Z1bCBhY3Rpb25zLiAgSWYgaXQgaXMg aW5jbHVkZWQgaW4gdGhvc2UgcGFja2V0cywNCj4gICAgIHRoZSBWYWx1ZSBNVVNUDQo+ICAgICAg ICBiZSB3aXRoaW4gdGhlIHJhbmdlIDIwMC0yOTkuDQo+ICAgICAuLi4NCj4NCj4gICAgICAgVGhl cmUgaXMgZnVydGhlciBkaXNjdXNzaW9uIG9mIENvQS1BQ0sgaW4gdGhlIHRleHQgZGVzY3JpYmlu ZyB0aGUNCj4gICAgIGFsbG93ZWQgVkFMVUVzLiAgQnV0IHRoZXJlIHNob3VsZCBiZSBhIHNob3J0 IHNlbnRlbmNlIGluIHRoZQ0KPiAgICAgRGVzY3JpcHRpb24sIHRvby4NCj4NCj4gICAgIE9uIEZl YiAyNCwgMjAxNSwgYXQgNjowNyBQTSwgQmVybmFyZCBBYm9iYQ0KPiAgICAgPEJlcm5hcmQuQWJv YmFAbWljcm9zb2Z0LmNvbTxtYWlsdG86QmVybmFyZC5BYm9iYUBtaWNyb3NvZnQuY29tPiA8bWFp bHRvOkJlcm5hcmQuQWJvYmFAbWljcm9zb2Z0LmNvbTxtYWlsdG86QmVybmFyZC5BYm9iYUBtaWNy b3NvZnQuY29tPj4+DQo+ICAgICB3cm90ZToNCj4NCj4gICAgID4gVGhlIERlc2NyaXB0aW9uIHRl eHQgc2hvdWxkIGFsc28gYmUgYWRkcmVzc2VkIGluIHRoaXMgRXJyYXRhOg0KPiAgICAgPg0KPiAg ICAgPiAgIERlc2NyaXB0aW9uDQo+ICAgICA+DQo+ICAgICA+ICAgICAgSXQgaXMgcG9zc2libGUg dGhhdCBhIER5bmFtaWMgQXV0aG9yaXphdGlvbiBTZXJ2ZXIgY2Fubm90IGhvbm9yDQo+ICAgICA+ ICAgICAgRGlzY29ubmVjdC1SZXF1ZXN0IG9yIENvQS1SZXF1ZXN0IHBhY2tldHMgZm9yIHNvbWUg cmVhc29uLiAgVGhlDQo+ICAgICA+ICAgICAgRXJyb3ItQ2F1c2UgQXR0cmlidXRlIHByb3ZpZGVz IG1vcmUgZGV0YWlsIG9uIHRoZSBjYXVzZSBvZiB0aGUNCj4gICAgID4gICAgICBwcm9ibGVtLiAg SXQgTUFZIGJlIGluY2x1ZGVkIHdpdGhpbiBDb0EtTkFLIGFuZCBEaXNjb25uZWN0LU5BSw0KPiAg ICAgPiAgICAgIHBhY2tldHMuDQo+ICAgICA+DQo+ICAgICA+DQo+ICAgICA+IC0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQo+ICAgICA+IEZyb206IFJGQyBFcnJhdGEgU3lzdGVtIFttYWlsdG86 cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZzxtYWlsdG86cmZjLWVkaXRvckByZmMtZWRpdG9yLm9y Zz4NCj4gICAgIDxtYWlsdG86cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZzxtYWlsdG86cmZjLWVk aXRvckByZmMtZWRpdG9yLm9yZz4+XQ0KPiAgICAgPiBTZW50OiBUdWVzZGF5LCBGZWJydWFyeSAy NCwgMjAxNSAxMjo0MiBQTQ0KPiAgICAgPiBUbzogbWNoaWJhQGNpc2NvLmNvbTxtYWlsdG86bWNo aWJhQGNpc2NvLmNvbT4gPG1haWx0bzptY2hpYmFAY2lzY28uY29tPG1haWx0bzptY2hpYmFAY2lz Y28uY29tPj47IGdkb21tZXR5QGNpc2NvLmNvbTxtYWlsdG86Z2RvbW1ldHlAY2lzY28uY29tPg0K PiAgICAgPG1haWx0bzpnZG9tbWV0eUBjaXNjby5jb208bWFpbHRvOmdkb21tZXR5QGNpc2NvLmNv bT4+OyBtZWtsdW5kQGNpc2NvLmNvbTxtYWlsdG86bWVrbHVuZEBjaXNjby5jb20+DQo+ICAgICA8 bWFpbHRvOm1la2x1bmRAY2lzY28uY29tPG1haWx0bzptZWtsdW5kQGNpc2NvLmNvbT4+OyBkYXZp ZEBtaXR0b24uY29tPG1haWx0bzpkYXZpZEBtaXR0b24uY29tPg0KPiAgICAgPG1haWx0bzpkYXZp ZEBtaXR0b24uY29tPG1haWx0bzpkYXZpZEBtaXR0b24uY29tPj47IEJlcm5hcmQgQWJvYmE7IGJj bGFpc2VAY2lzY28uY29tPG1haWx0bzpiY2xhaXNlQGNpc2NvLmNvbT4NCj4gICAgIDxtYWlsdG86 YmNsYWlzZUBjaXNjby5jb208bWFpbHRvOmJjbGFpc2VAY2lzY28uY29tPj47IGpvZWxqYUBib2d1 cy5jb208bWFpbHRvOmpvZWxqYUBib2d1cy5jb20+DQo+ICAgICA8bWFpbHRvOmpvZWxqYUBib2d1 cy5jb208bWFpbHRvOmpvZWxqYUBib2d1cy5jb20+Pjsgc3RlZmFuLndpbnRlckByZXN0ZW5hLmx1 PG1haWx0bzpzdGVmYW4ud2ludGVyQHJlc3RlbmEubHU+DQo+ICAgICA8bWFpbHRvOnN0ZWZhbi53 aW50ZXJAcmVzdGVuYS5sdTxtYWlsdG86c3RlZmFuLndpbnRlckByZXN0ZW5hLmx1Pj47IGxpb25l bC5tb3JhbmRAb3JhbmdlLmNvbTxtYWlsdG86bGlvbmVsLm1vcmFuZEBvcmFuZ2UuY29tPg0KPiAg ICAgPG1haWx0bzpsaW9uZWwubW9yYW5kQG9yYW5nZS5jb208bWFpbHRvOmxpb25lbC5tb3JhbmRA b3JhbmdlLmNvbT4+DQo+ICAgICA+IENjOiBhbGFuZEBmcmVlcmFkaXVzLm9yZzxtYWlsdG86YWxh bmRAZnJlZXJhZGl1cy5vcmc+IDxtYWlsdG86YWxhbmRAZnJlZXJhZGl1cy5vcmc8bWFpbHRvOmFs YW5kQGZyZWVyYWRpdXMub3JnPj47DQo+ICAgICByYWRleHRAaWV0Zi5vcmc8bWFpbHRvOnJhZGV4 dEBpZXRmLm9yZz4gPG1haWx0bzpyYWRleHRAaWV0Zi5vcmc8bWFpbHRvOnJhZGV4dEBpZXRmLm9y Zz4+OyByZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPG1haWx0bzpyZmMtZWRpdG9yQHJmYy1lZGl0 b3Iub3JnPg0KPiAgICAgPG1haWx0bzpyZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPG1haWx0bzpy ZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPj4NCj4gICAgID4gU3ViamVjdDogW1RlY2huaWNhbCBF cnJhdGEgUmVwb3J0ZWRdIFJGQzUxNzYgKDQyODApDQo+ICAgICA+DQo+ICAgICA+IFRoZSBmb2xs b3dpbmcgZXJyYXRhIHJlcG9ydCBoYXMgYmVlbiBzdWJtaXR0ZWQgZm9yIFJGQzUxNzYsDQo+ICAg ICAiRHluYW1pYyBBdXRob3JpemF0aW9uIEV4dGVuc2lvbnMgdG8gUmVtb3RlIEF1dGhlbnRpY2F0 aW9uIERpYWwgSW4NCj4gICAgIFVzZXIgU2VydmljZSAoUkFESVVTKSIuDQo+ICAgICA+DQo+ICAg ICA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ICAgICA+IFlvdSBt YXkgcmV2aWV3IHRoZSByZXBvcnQgYmVsb3cgYW5kIGF0Og0KPiAgICAgPiBodHRwOi8vd3d3LnJm Yy1lZGl0b3Iub3JnL2VycmF0YV9zZWFyY2gucGhwP3JmYz01MTc2JmVpZD00MjgwDQo+ICAgICA+ DQo+ICAgICA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ICAgICA+ IFR5cGU6IFRlY2huaWNhbA0KPiAgICAgPiBSZXBvcnRlZCBieTogQWxhbiBEZUtvayA8YWxhbmRA ZnJlZXJhZGl1cy5vcmc8bWFpbHRvOmFsYW5kQGZyZWVyYWRpdXMub3JnPg0KPiAgICAgPG1haWx0 bzphbGFuZEBmcmVlcmFkaXVzLm9yZzxtYWlsdG86YWxhbmRAZnJlZXJhZGl1cy5vcmc+Pj4NCj4g ICAgID4NCj4gICAgID4gU2VjdGlvbjogMy42DQo+ICAgICA+DQo+ICAgICA+IE9yaWdpbmFsIFRl eHQNCj4gICAgID4gLS0tLS0tLS0tLS0tLQ0KPiAgICAgPiAgIDAgICAgICAgICAwICAgICAgICAw KyAgMTAxICAgRXJyb3ItQ2F1c2UNCj4gICAgID4NCj4gICAgID4NCj4gICAgID4gSW4gYm90aCB0 YWJsZXMsIGZvciBDb0EgYW5kIERpc2Nvbm5lY3QgbWVzc2FnZXMuDQo+ICAgICA+DQo+ICAgICA+ IENvcnJlY3RlZCBUZXh0DQo+ICAgICA+IC0tLS0tLS0tLS0tLS0tDQo+ICAgICA+ICAgMCAgICAg ICAgIDArICAgICAgICAwKyAgMTAxICAgRXJyb3ItQ2F1c2UNCj4gICAgID4NCj4gICAgID4NCj4g ICAgID4gSW4gYm90aCB0YWJsZXMsIGZvciBDb0EgYW5kIERpc2Nvbm5lY3QgbWVzc2FnZXMuDQo+ ICAgICA+DQo+ICAgICA+IE5vdGVzDQo+ICAgICA+IC0tLS0tDQo+ICAgICA+IFNlY3Rpb24gMy41 IHNheXMgdGhhdCBFcnJvci1DYXVzZSBtYXkgYmUgc2VudCBpbiBhIENvQS1BQ0sgb3INCj4gICAg IERpc2Nvbm5lY3QtQUNLIHBhY2tldDoNCj4gICAgID4NCj4gICAgID4gICAgICAuLi4NCj4gICAg ID4gICAgICBWYWx1ZXMgMjAwLTI5OSByZXByZXNlbnQgc3VjY2Vzc2Z1bCBjb21wbGV0aW9uLCBz byB0aGF0IHRoZXNlDQo+ICAgICA+ICAgICAgdmFsdWVzIG1heSBvbmx5IGJlIHNlbnQgd2l0aGlu IENvQS1BQ0sgb3IgRGlzY29ubmVjdC1BQ0sgcGFja2V0cw0KPiAgICAgPg0KPiAgICAgPiBJbnN0 cnVjdGlvbnM6DQo+ICAgICA+IC0tLS0tLS0tLS0tLS0NCj4gICAgID4gVGhpcyBlcnJhdHVtIGlz IGN1cnJlbnRseSBwb3N0ZWQgYXMgIlJlcG9ydGVkIi4gSWYgbmVjZXNzYXJ5LA0KPiAgICAgcGxl YXNlIHVzZSAiUmVwbHkgQWxsIiB0byBkaXNjdXNzIHdoZXRoZXIgaXQgc2hvdWxkIGJlIHZlcmlm aWVkIG9yDQo+ICAgICByZWplY3RlZC4gV2hlbiBhIGRlY2lzaW9uIGlzIHJlYWNoZWQsIHRoZSB2 ZXJpZnlpbmcgcGFydHkgKElFU0cpIGNhbg0KPiAgICAgbG9nIGluIHRvIGNoYW5nZSB0aGUgc3Rh dHVzIGFuZCBlZGl0IHRoZSByZXBvcnQsIGlmIG5lY2Vzc2FyeS4NCj4gICAgID4NCj4gICAgID4g LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgID4gUkZDNTE3NiAo ZHJhZnQtaWV0Zi1yYWRleHQtcmZjMzU3NmJpcy0xMykNCj4gICAgID4gLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgID4gVGl0bGUgICAgICAgICAgICAgICA6IER5 bmFtaWMgQXV0aG9yaXphdGlvbiBFeHRlbnNpb25zIHRvIFJlbW90ZQ0KPiAgICAgQXV0aGVudGlj YXRpb24gRGlhbCBJbiBVc2VyIFNlcnZpY2UgKFJBRElVUykNCj4gICAgID4gUHVibGljYXRpb24g RGF0ZSAgICA6IEphbnVhcnkgMjAwOA0KPiAgICAgPiBBdXRob3IocykgICAgICAgICAgIDogTS4g Q2hpYmEsIEcuIERvbW1ldHksIE0uIEVrbHVuZCwgRC4gTWl0dG9uLA0KPiAgICAgQi4gQWJvYmEN Cj4gICAgID4gQ2F0ZWdvcnkgICAgICAgICAgICA6IElORk9STUFUSU9OQUwNCj4gICAgID4gU291 cmNlICAgICAgICAgICAgICA6IFJBRElVUyBFWFRlbnNpb25zDQo+ICAgICA+IEFyZWEgICAgICAg ICAgICAgICAgOiBPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50DQo+ICAgICA+IFN0cmVhbSAgICAg ICAgICAgICAgOiBJRVRGDQo+ICAgICA+IFZlcmlmeWluZyBQYXJ0eSAgICAgOiBJRVNHDQo+ICAg ICA+DQo+DQo+ICAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KPiAgICAgcmFkZXh0IG1haWxpbmcgbGlzdA0KPiAgICAgcmFkZXh0QGlldGYub3JnPG1h aWx0bzpyYWRleHRAaWV0Zi5vcmc+IDxtYWlsdG86cmFkZXh0QGlldGYub3JnPG1haWx0bzpyYWRl eHRAaWV0Zi5vcmc+Pg0KPiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9yYWRleHQNCj4NCj4NCj4NCj4NCj4gLS0NCj4NCj4gQmVzdCByZWdhcmRzLA0KPiBLYXRobGVl bg0KPg0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KPiByYWRleHQgbWFpbGluZyBsaXN0DQo+IHJhZGV4dEBpZXRmLm9yZzxtYWlsdG86cmFkZXh0 QGlldGYub3JnPg0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhZGV4 dA0KPg0KDQoNCi0tDQpTdGVmYW4gV0lOVEVSDQpJbmdlbmlldXIgZGUgUmVjaGVyY2hlDQpGb25k YXRpb24gUkVTVEVOQSAtIFLDqXNlYXUgVMOpbMOpaW5mb3JtYXRpcXVlIGRlIGwnRWR1Y2F0aW9u IE5hdGlvbmFsZSBldCBkZSBsYSBSZWNoZXJjaGUgNiwgcnVlIFJpY2hhcmQgQ291ZGVuaG92ZS1L YWxlcmdpDQpMLTEzNTkgTHV4ZW1ib3VyZw0KDQpUZWw6ICszNTIgNDI0NDA5IDE8dGVsOiUyQjM1 MiUyMDQyNDQwOSUyMDE+DQpGYXg6ICszNTIgNDIyNDczPHRlbDolMkIzNTIlMjA0MjI0NzM+DQoN ClBHUCBrZXkgdXBkYXRlZCB0byA0MDk2IEJpdCBSU0EgLSBJIHdpbGwgZW5jcnlwdCBhbGwgbWFp bHMgaWYgdGhlIHJlY2lwaWVudCdzIGtleSBpcyBrbm93biB0byBtZQ0KDQpodHRwOi8vcGdwLm1p dC5lZHU6MTEzNzEvcGtzL2xvb2t1cD9vcD1nZXQmc2VhcmNoPTB4QzBERTZBMzU4QTM5REM2Ng0K X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KDQpDZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRl bmlyIGRlcyBpbmZvcm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBu ZSBkb2l2ZW50IGRvbmMNCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3UgY29waWVzIHNh bnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBhciBlcnJldXIs IHZldWlsbGV6IGxlIHNpZ25hbGVyDQphIGwnZXhwZWRpdGV1ciBldCBsZSBkZXRydWlyZSBhaW5z aSBxdWUgbGVzIHBpZWNlcyBqb2ludGVzLiBMZXMgbWVzc2FnZXMgZWxlY3Ryb25pcXVlcyBldGFu dCBzdXNjZXB0aWJsZXMgZCdhbHRlcmF0aW9uLA0KT3JhbmdlIGRlY2xpbmUgdG91dGUgcmVzcG9u c2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFsc2lmaWUu IE1lcmNpLg0KDQpUaGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cyBtYXkgY29udGFpbiBj b25maWRlbnRpYWwgb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbiB0aGF0IG1heSBiZSBwcm90ZWN0 ZWQgYnkgbGF3Ow0KdGhleSBzaG91bGQgbm90IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9yIGNvcGll ZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uDQpJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVtYWls IGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1lc3Nh Z2UgYW5kIGl0cyBhdHRhY2htZW50cy4NCkFzIGVtYWlscyBtYXkgYmUgYWx0ZXJlZCwgT3Jhbmdl IGlzIG5vdCBsaWFibGUgZm9yIG1lc3NhZ2VzIHRoYXQgaGF2ZSBiZWVuIG1vZGlmaWVkLCBjaGFu Z2VkIG9yIGZhbHNpZmllZC4NClRoYW5rIHlvdS4NCg0KDQoNCi0tDQoNCkJlc3QgcmVnYXJkcywN CkthdGhsZWVuDQoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBldCBzZXMgcGllY2VzIGpvaW50ZXMgcGV1 dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVudGllbGxlcyBvdSBwcml2aWxl Z2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3Ug Y29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBh ciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEgbCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1 aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBlbGVjdHJvbmlx dWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sCk9yYW5nZSBkZWNsaW5lIHRvdXRl IHJlc3BvbnNhYmlsaXRlIHNpIGNlIG1lc3NhZ2UgYSBldGUgYWx0ZXJlLCBkZWZvcm1lIG91IGZh bHNpZmllLiBNZXJjaS4KClRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzIG1heSBjb250 YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uIHRoYXQgbWF5IGJlIHBy b3RlY3RlZCBieSBsYXc7CnRoZXkgc2hvdWxkIG5vdCBiZSBkaXN0cmlidXRlZCwgdXNlZCBvciBj b3BpZWQgd2l0aG91dCBhdXRob3Jpc2F0aW9uLgpJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVt YWlsIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1l c3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cy4KQXMgZW1haWxzIG1heSBiZSBhbHRlcmVkLCBPcmFu Z2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZlIGJlZW4gbW9kaWZpZWQsIGNo YW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCgo= --_000_6B7134B31289DC4FAF731D844122B36E0103AF2APEXCVZYM13corpo_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0 YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IlRleHRlIGRlIGJ1bGxlcyBDYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fu cy1zZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwt cmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0 OTdEO30NCnNwYW4uVGV4dGVkZWJ1bGxlc0Nhcg0KCXttc28tc3R5bGUtbmFtZToiVGV4dGUgZGUg YnVsbGVzIENhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJU ZXh0ZSBkZSBidWxsZXMiOw0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjsNCglt c28tZmFyZWFzdC1sYW5ndWFnZTpGUjt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlw ZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCW1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYx Mi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAuODVwdCA3MC44NXB0IDcwLjg1cHQgNzAuODVwdDt9 DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlk bWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0 YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxi b2R5IGxhbmc9IkZSIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9Ildv cmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPml0IHdhcyBhZ3JlZWQgdG8gaGF2ZSB0 d28gZGlzdGluY3QgZXJyYXRhIGFuZCBJIHdhcyBleHBlY3RpbmcgYSBuZXcgb25lIGZyb20gQWxh bi4gSSB3aWxsIGlzc3VlIGEgbmV3IG9uZSB0b21vcnJvdy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlRoZSBzdGVwIGZvciB0aGlzIGN1cnJlbnQgZXJyYXRhIHJl cG9ydCBjYW4gYmUgc2V0IHRvICZxdW90O3ZlcmlmaWVkJnF1b3Q7LjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QW5kIGl0IHdpbGwgYmUgdGhlIHNhbWUgc3RlcCBm b3IgdGhlIG5leHQgdG8gY29tZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+TGlvbmVsPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEth dGhsZWVuIE1vcmlhcnR5IFttYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb21d DQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWFyZGkgMjEgYXZyaWwgMjAxNSAxOToyMDxi cj4NCjxiPsOAJm5ic3A7OjwvYj4gTU9SQU5EIExpb25lbCBJTVQvT0xOPGJyPg0KPGI+Q2MmbmJz cDs6PC9iPiBTdGVmYW4gV2ludGVyOyBBbGFuIERlS29rOyBnZG9tbWV0eUBjaXNjby5jb207IHJh ZGV4dEBpZXRmLm9yZzsgam9lbGphQGJvZ3VzLmNvbTsgQmVybmFyZCBBYm9iYTsgZGF2aWRAbWl0 dG9uLmNvbTsgYmNsYWlzZUBjaXNjby5jb207IG1la2x1bmRAY2lzY28uY29tOyBtY2hpYmFAY2lz Y28uY29tOyBSRkMgRXJyYXRhIFN5c3RlbTxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gUmU6IFty YWRleHRdIFtUZWNobmljYWwgRXJyYXRhIFJlcG9ydGVkXSBSRkM1MTc2ICg0MjgwKTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhlbGxvLDxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2hlcmUgZG8gd2Ugc3RhbmQgb24gdGhpcywgaXMg dGhlcmUgYSBzZWNvbmQgZXJyYXRhIG9yIHNob3VsZCBJIHJlamVjdCA0MjgwIGFuZCB3YWl0IGZv ciBhIG5ldyBvbmUgdGhhdCBjb3ZlcnMgZXZlcnl0aGluZyB0byBiZSBzdWJtaXR0ZWQ/PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rIHlv dSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkth dGhsZWVuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPk9uIE1vbiwgTWFyIDIzLCAyMDE1IGF0IDExOjIxIEFNLCAmbHQ7PGEgaHJlZj0ibWFpbHRv Omxpb25lbC5tb3JhbmRAb3JhbmdlLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmxpb25lbC5tb3JhbmRA b3JhbmdlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SGksPGJyPg0KPGJyPg0KSSB0aGluayBhbHNvIHRoYXQgdHdvIHNlcGFyYXRlIEVycmF0 YSBzaG91bGQgYmUgY3JlYXRlZC48YnI+DQo8YnI+DQpSZWdhcmRzLDxicj4NCjxicj4NCkxpb25l bDxicj4NCjxicj4NCi0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLTxicj4NCkRlJm5ic3A7OiBT dGVmYW4gV2ludGVyIFttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnN0ZWZhbi53aW50ZXJAcmVzdGVu YS5sdSI+c3RlZmFuLndpbnRlckByZXN0ZW5hLmx1PC9hPl08YnI+DQpFbnZvecOpJm5ic3A7OiBs dW5kaSAyMyBtYXJzIDIwMTUgMDk6NDE8YnI+DQrDgCZuYnNwOzogS2F0aGxlZW4gTW9yaWFydHk7 IEFsYW4gRGVLb2s8YnI+DQpDYyZuYnNwOzogPGEgaHJlZj0ibWFpbHRvOmdkb21tZXR5QGNpc2Nv LmNvbSI+Z2RvbW1ldHlAY2lzY28uY29tPC9hPjsgPGEgaHJlZj0ibWFpbHRvOnJhZGV4dEBpZXRm Lm9yZyI+DQpyYWRleHRAaWV0Zi5vcmc8L2E+OyBNT1JBTkQgTGlvbmVsIElNVC9PTE47IDxhIGhy ZWY9Im1haWx0bzpqb2VsamFAYm9ndXMuY29tIj5qb2VsamFAYm9ndXMuY29tPC9hPjsgQmVybmFy ZCBBYm9iYTsNCjxhIGhyZWY9Im1haWx0bzpkYXZpZEBtaXR0b24uY29tIj5kYXZpZEBtaXR0b24u Y29tPC9hPjsgPGEgaHJlZj0ibWFpbHRvOmJjbGFpc2VAY2lzY28uY29tIj4NCmJjbGFpc2VAY2lz Y28uY29tPC9hPjsgPGEgaHJlZj0ibWFpbHRvOm1la2x1bmRAY2lzY28uY29tIj5tZWtsdW5kQGNp c2NvLmNvbTwvYT47IDxhIGhyZWY9Im1haWx0bzptY2hpYmFAY2lzY28uY29tIj4NCm1jaGliYUBj aXNjby5jb208L2E+OyBSRkMgRXJyYXRhIFN5c3RlbTxicj4NCk9iamV0Jm5ic3A7OiBSZTogW3Jh ZGV4dF0gW1RlY2huaWNhbCBFcnJhdGEgUmVwb3J0ZWRdIFJGQzUxNzYgKDQyODApPG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+PGJyPg0KSGVsbG8sPGJyPg0KPGJyPg0KJmd0OyBJcyB0aGVyZSBhZ3Jl ZW1lbnQgb24gdGhlIGNoYW5nZXMgYW5kIGRvIGFkZGl0aW9uYWwgZXJyYXRhIG5lZWQgdG8gYmU8 YnI+DQomZ3Q7IGZpbGVkIGZvciB0aGUgYWRkZWQgdGV4dCBpbiB0aGlzIHRocmVhZD88YnI+DQo8 YnI+DQpUaGVyZSB3YXMgbm8gZGlzYWdyZWVtZW50IG9uIHRoZSBFcnJhdGEgLSBpdCBzZWVtcyB0 byBiZSBjb3JyZWN0Ljxicj4NCjxicj4NCkknbSBub3QgZW5vdWdoIGludG8gcHJvY2VzcyBxdWVz dGlvbnMgdG8gYW5zd2VyIHRoZSBzZWNvbmQgcGFydCwgc286IHRoZSB0ZXh0IHNrZXRjaGVzIG1h a2Ugc2Vuc2UsIGJ1dCBkbyB3ZSBuZWVkIHRvIGZpbGUgYSBzZWNvbmQgZXJyYXRhLCBvciBjYW4g d2UgJnF1b3Q7bWFuZ2xlJnF1b3Q7IHRoZSBvcmlnaW5hbCBlcnJhdGEgdGV4dCB0byBpbmNsdWRl IHRoaXM/IFNlZW1zIGEgYml0IHN0cmFuZ2UgdG8gbWUgdG8gaGF2ZSB0d28gRXJyYXRhIGZvciBv bmUgdW5kZXJseWluZw0KIGlzc3VlOyBJJ2QgcHJlZmVyIHRvIGhhdmUgYWxsIGNoYW5nZXMgaW4g b25lIC4uLjxicj4NCjxicj4NClNpbmNlIG1vc3Qgb2YgeW91IGFyZSBpbiBEZW52ZXIsIG1heWJl IHNob3J0bHkgdG91Y2hpbmcgdGhpcyBxdWVzdGlvbiBpbiB0aGUgbWVldGluZyBtYWtlcyBzZW5z ZT88YnI+DQo8YnI+DQpHcmVldGluZ3MsPGJyPg0KPGJyPg0KU3RlZmFuIFdpbnRlcjxicj4NCjxi cj4NCiZndDs8YnI+DQomZ3Q7IFRoYW5rIHlvdSw8YnI+DQomZ3Q7IEthdGhsZWVuPGJyPg0KJmd0 Ozxicj4NCiZndDsgT24gV2VkLCBGZWIgMjUsIDIwMTUgYXQgOTo0NiBBTSwgQWxhbiBEZUtvayAm bHQ7PGEgaHJlZj0ibWFpbHRvOmFsYW5kQGZyZWVyYWRpdXMub3JnIj5hbGFuZEBmcmVlcmFkaXVz Lm9yZzwvYT48YnI+DQomZ3Q7ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmFsYW5kQGZyZWVy YWRpdXMub3JnIj5hbGFuZEBmcmVlcmFkaXVzLm9yZzwvYT4mZ3Q7Jmd0OyB3cm90ZTo8YnI+DQom Z3Q7PGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0kgYWdyZWUuJm5ic3A7IFRo ZXJlIHNob3VsZCBiZSBhbiBhZGRpdGlvbmFsIHBhcmFncmFwaCBhZnRlciB0aGU8YnI+DQomZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDtwYXJhZ3JhcGggYmVsb3csIHNheWluZzo8YnI+DQomZ3Q7PGJy Pg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Li4uPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyBFcnJvci1DYXVzZSBNQVkgYmUgaW5jbHVkZWQgaW4gYSBDb0EtQUNLIGFuZCBE aXNjb25uZWN0LUFDSyBwYWNrZXQgdG88YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7IGluZGljYXRlIHN1Y2Nlc3NmdWwgYWN0aW9ucy4mbmJzcDsgSWYgaXQgaXMgaW5jbHVkZWQg aW4gdGhvc2UgcGFja2V0cyw8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDt0aGUgVmFsdWUg TVVTVDxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgYmUgd2l0aGluIHRoZSBy YW5nZSAyMDAtMjk5Ljxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOy4uLjxicj4NCiZndDs8 YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7VGhlcmUgaXMgZnVydGhlciBkaXNj dXNzaW9uIG9mIENvQS1BQ0sgaW4gdGhlIHRleHQgZGVzY3JpYmluZyB0aGU8YnI+DQomZ3Q7Jm5i c3A7ICZuYnNwOyAmbmJzcDthbGxvd2VkIFZBTFVFcy4mbmJzcDsgQnV0IHRoZXJlIHNob3VsZCBi ZSBhIHNob3J0IHNlbnRlbmNlIGluIHRoZTxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO0Rl c2NyaXB0aW9uLCB0b28uPGJyPg0KJmd0Ozxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO09u IEZlYiAyNCwgMjAxNSwgYXQgNjowNyBQTSwgQmVybmFyZCBBYm9iYTxicj4NCiZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOyZsdDs8YSBocmVmPSJtYWlsdG86QmVybmFyZC5BYm9iYUBtaWNyb3NvZnQu Y29tIj5CZXJuYXJkLkFib2JhQG1pY3Jvc29mdC5jb208L2E+ICZsdDttYWlsdG86PGEgaHJlZj0i bWFpbHRvOkJlcm5hcmQuQWJvYmFAbWljcm9zb2Z0LmNvbSI+QmVybmFyZC5BYm9iYUBtaWNyb3Nv ZnQuY29tPC9hPiZndDsmZ3Q7PGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7d3JvdGU6PGJy Pg0KJmd0Ozxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgVGhlIERlc2NyaXB0aW9u IHRleHQgc2hvdWxkIGFsc28gYmUgYWRkcmVzc2VkIGluIHRoaXMgRXJyYXRhOjxicj4NCiZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7 Jm5ic3A7ICZuYnNwO0Rlc2NyaXB0aW9uPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0 Ozxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyBJ dCBpcyBwb3NzaWJsZSB0aGF0IGEgRHluYW1pYyBBdXRob3JpemF0aW9uIFNlcnZlciBjYW5ub3Qg aG9ub3I8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsgRGlzY29ubmVjdC1SZXF1ZXN0IG9yIENvQS1SZXF1ZXN0IHBhY2tldHMgZm9yIHNvbWUgcmVh c29uLiZuYnNwOyBUaGU8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7Jm5ic3A7ICZu YnNwOyAmbmJzcDsgRXJyb3ItQ2F1c2UgQXR0cmlidXRlIHByb3ZpZGVzIG1vcmUgZGV0YWlsIG9u IHRoZSBjYXVzZSBvZiB0aGU8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgcHJvYmxlbS4mbmJzcDsgSXQgTUFZIGJlIGluY2x1ZGVkIHdpdGhpbiBD b0EtTkFLIGFuZCBEaXNjb25uZWN0LU5BSzxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwOyBwYWNrZXRzLjxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZu YnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7PGJyPg0KJmd0OyZuYnNw OyAmbmJzcDsgJm5ic3A7Jmd0OyAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxicj4NCiZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgRnJvbTogUkZDIEVycmF0YSBTeXN0ZW0gW21haWx0bzo8 YSBocmVmPSJtYWlsdG86cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZyI+cmZjLWVkaXRvckByZmMt ZWRpdG9yLm9yZzwvYT48YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxh IGhyZWY9Im1haWx0bzpyZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnIj5yZmMtZWRpdG9yQHJmYy1l ZGl0b3Iub3JnPC9hPiZndDtdPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0OyBTZW50 OiBUdWVzZGF5LCBGZWJydWFyeSAyNCwgMjAxNSAxMjo0MiBQTTxicj4NCiZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyZndDsgVG86IDxhIGhyZWY9Im1haWx0bzptY2hpYmFAY2lzY28uY29tIj5tY2hp YmFAY2lzY28uY29tPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzptY2hpYmFAY2lzY28u Y29tIj5tY2hpYmFAY2lzY28uY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86Z2RvbW1ldHlA Y2lzY28uY29tIj5nZG9tbWV0eUBjaXNjby5jb208L2E+PGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86Z2RvbW1ldHlAY2lzY28uY29tIj5nZG9t bWV0eUBjaXNjby5jb208L2E+Jmd0OzsgPGEgaHJlZj0ibWFpbHRvOm1la2x1bmRAY2lzY28uY29t Ij4NCm1la2x1bmRAY2lzY28uY29tPC9hPjxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZs dDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOm1la2x1bmRAY2lzY28uY29tIj5tZWtsdW5kQGNpc2Nv LmNvbTwvYT4mZ3Q7OyA8YSBocmVmPSJtYWlsdG86ZGF2aWRAbWl0dG9uLmNvbSI+DQpkYXZpZEBt aXR0b24uY29tPC9hPjxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEg aHJlZj0ibWFpbHRvOmRhdmlkQG1pdHRvbi5jb20iPmRhdmlkQG1pdHRvbi5jb208L2E+Jmd0Ozsg QmVybmFyZCBBYm9iYTsNCjxhIGhyZWY9Im1haWx0bzpiY2xhaXNlQGNpc2NvLmNvbSI+YmNsYWlz ZUBjaXNjby5jb208L2E+PGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8 YSBocmVmPSJtYWlsdG86YmNsYWlzZUBjaXNjby5jb20iPmJjbGFpc2VAY2lzY28uY29tPC9hPiZn dDs7IDxhIGhyZWY9Im1haWx0bzpqb2VsamFAYm9ndXMuY29tIj4NCmpvZWxqYUBib2d1cy5jb208 L2E+PGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmx0O21haWx0bzo8YSBocmVmPSJtYWls dG86am9lbGphQGJvZ3VzLmNvbSI+am9lbGphQGJvZ3VzLmNvbTwvYT4mZ3Q7OyA8YSBocmVmPSJt YWlsdG86c3RlZmFuLndpbnRlckByZXN0ZW5hLmx1Ij4NCnN0ZWZhbi53aW50ZXJAcmVzdGVuYS5s dTwvYT48YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1h aWx0bzpzdGVmYW4ud2ludGVyQHJlc3RlbmEubHUiPnN0ZWZhbi53aW50ZXJAcmVzdGVuYS5sdTwv YT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOmxpb25lbC5tb3JhbmRAb3JhbmdlLmNvbSI+bGlvbmVs Lm1vcmFuZEBvcmFuZ2UuY29tPC9hPjxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZsdDtt YWlsdG86PGEgaHJlZj0ibWFpbHRvOmxpb25lbC5tb3JhbmRAb3JhbmdlLmNvbSI+bGlvbmVsLm1v cmFuZEBvcmFuZ2UuY29tPC9hPiZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7 IENjOiA8YSBocmVmPSJtYWlsdG86YWxhbmRAZnJlZXJhZGl1cy5vcmciPmFsYW5kQGZyZWVyYWRp dXMub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzphbGFuZEBmcmVlcmFkaXVzLm9y ZyI+YWxhbmRAZnJlZXJhZGl1cy5vcmc8L2E+Jmd0Ozs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDs8YSBocmVmPSJtYWlsdG86cmFkZXh0QGlldGYub3JnIj5yYWRleHRAaWV0Zi5vcmc8L2E+ ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOnJhZGV4dEBpZXRmLm9yZyI+cmFkZXh0QGlldGYu b3JnPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZyI+ cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZzwvYT48YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpyZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnIj5y ZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPC9hPiZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsmZ3Q7IFN1YmplY3Q6IFtUZWNobmljYWwgRXJyYXRhIFJlcG9ydGVkXSBSRkM1MTc2ICg0 MjgwKTxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZu YnNwOyAmbmJzcDsmZ3Q7IFRoZSBmb2xsb3dpbmcgZXJyYXRhIHJlcG9ydCBoYXMgYmVlbiBzdWJt aXR0ZWQgZm9yIFJGQzUxNzYsPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7JnF1b3Q7RHlu YW1pYyBBdXRob3JpemF0aW9uIEV4dGVuc2lvbnMgdG8gUmVtb3RlIEF1dGhlbnRpY2F0aW9uIERp YWwgSW48YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtVc2VyIFNlcnZpY2UgKFJBRElVUykm cXVvdDsuPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0Ozxicj4NCiZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOyZndDsgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08 YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7IFlvdSBtYXkgcmV2aWV3IHRoZSByZXBv cnQgYmVsb3cgYW5kIGF0Ojxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgPGEgaHJl Zj0iaHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9lcnJhdGFfc2VhcmNoLnBocD9yZmM9NTE3NiZh bXA7ZWlkPTQyODAiIHRhcmdldD0iX2JsYW5rIj4NCmh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcv ZXJyYXRhX3NlYXJjaC5waHA/cmZjPTUxNzYmYW1wO2VpZD00MjgwPC9hPjxicj4NCiZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7IC0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KJmd0OyZuYnNwOyAmbmJz cDsgJm5ic3A7Jmd0OyBUeXBlOiBUZWNobmljYWw8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsmZ3Q7IFJlcG9ydGVkIGJ5OiBBbGFuIERlS29rICZsdDs8YSBocmVmPSJtYWlsdG86YWxhbmRA ZnJlZXJhZGl1cy5vcmciPmFsYW5kQGZyZWVyYWRpdXMub3JnPC9hPjxicj4NCiZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOyZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmFsYW5kQGZyZWVyYWRpdXMu b3JnIj5hbGFuZEBmcmVlcmFkaXVzLm9yZzwvYT4mZ3Q7Jmd0Ozxicj4NCiZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7IFNlY3Rpb246 IDMuNjxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZu YnNwOyAmbmJzcDsmZ3Q7IE9yaWdpbmFsIFRleHQ8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsmZ3Q7IC0tLS0tLS0tLS0tLS08YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7Jm5i c3A7ICZuYnNwOzAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7MCZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAwJiM0MzsmbmJzcDsgMTAxJm5ic3A7ICZuYnNwO0Vycm9yLUNhdXNl PGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0Ozxicj4NCiZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7IEluIGJvdGggdGFi bGVzLCBmb3IgQ29BIGFuZCBEaXNjb25uZWN0IG1lc3NhZ2VzLjxicj4NCiZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7IENvcnJlY3Rl ZCBUZXh0PGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0OyAtLS0tLS0tLS0tLS0tLTxi cj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsmbmJzcDsgJm5ic3A7MCZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDswJiM0MzsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg MCYjNDM7Jm5ic3A7IDEwMSZuYnNwOyAmbmJzcDtFcnJvci1DYXVzZTxicj4NCiZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7PGJyPg0K Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0OyBJbiBib3RoIHRhYmxlcywgZm9yIENvQSBhbmQg RGlzY29ubmVjdCBtZXNzYWdlcy48YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7PGJy Pg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0OyBOb3Rlczxicj4NCiZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyZndDsgLS0tLS08YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7IFNl Y3Rpb24gMy41IHNheXMgdGhhdCBFcnJvci1DYXVzZSBtYXkgYmUgc2VudCBpbiBhIENvQS1BQ0sg b3I8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtEaXNjb25uZWN0LUFDSyBwYWNrZXQ6PGJy Pg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0Ozxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZu YnNwOyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAuLi48YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgVmFsdWVzIDIwMC0yOTkgcmVwcmVzZW50IHN1 Y2Nlc3NmdWwgY29tcGxldGlvbiwgc28gdGhhdCB0aGVzZTxicj4NCiZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwOyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyB2YWx1ZXMgbWF5IG9ubHkgYmUgc2VudCB3 aXRoaW4gQ29BLUFDSyBvciBEaXNjb25uZWN0LUFDSyBwYWNrZXRzPGJyPg0KJmd0OyZuYnNwOyAm bmJzcDsgJm5ic3A7Jmd0Ozxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgSW5zdHJ1 Y3Rpb25zOjxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgLS0tLS0tLS0tLS0tLTxi cj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgVGhpcyBlcnJhdHVtIGlzIGN1cnJlbnRs eSBwb3N0ZWQgYXMgJnF1b3Q7UmVwb3J0ZWQmcXVvdDsuIElmIG5lY2Vzc2FyeSw8YnI+DQomZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDtwbGVhc2UgdXNlICZxdW90O1JlcGx5IEFsbCZxdW90OyB0byBk aXNjdXNzIHdoZXRoZXIgaXQgc2hvdWxkIGJlIHZlcmlmaWVkIG9yPGJyPg0KJmd0OyZuYnNwOyAm bmJzcDsgJm5ic3A7cmVqZWN0ZWQuIFdoZW4gYSBkZWNpc2lvbiBpcyByZWFjaGVkLCB0aGUgdmVy aWZ5aW5nIHBhcnR5IChJRVNHKSBjYW48YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtsb2cg aW4gdG8gY2hhbmdlIHRoZSBzdGF0dXMgYW5kIGVkaXQgdGhlIHJlcG9ydCwgaWYgbmVjZXNzYXJ5 Ljxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDs8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDsmZ3Q7IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0K Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmd0OyBSRkM1MTc2IChkcmFmdC1pZXRmLXJhZGV4dC1y ZmMzNTc2YmlzLTEzKTxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsmZ3Q7IFRpdGxlJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOzogRHluYW1pYyBBdXRob3JpemF0aW9uIEV4dGVuc2lvbnMgdG8gUmVtb3RlPGJy Pg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7QXV0aGVudGljYXRpb24gRGlhbCBJbiBVc2VyIFNl cnZpY2UgKFJBRElVUyk8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7IFB1YmxpY2F0 aW9uIERhdGUmbmJzcDsgJm5ic3A7IDogSmFudWFyeSAyMDA4PGJyPg0KJmd0OyZuYnNwOyAmbmJz cDsgJm5ic3A7Jmd0OyBBdXRob3IocykmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOzogTS4gQ2hpYmEsIEcuIERvbW1ldHksIE0uIEVrbHVuZCwgRC4gTWl0dG9uLDxicj4N CiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO0IuIEFib2JhPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7Jmd0OyBDYXRlZ29yeSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7IDogSU5GT1JNQVRJT05BTDxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgU291 cmNlJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDogUkFE SVVTIEVYVGVuc2lvbnM8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7IEFyZWEmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDogT3Bl cmF0aW9ucyBhbmQgTWFuYWdlbWVudDxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsg U3RyZWFtJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDog SUVURjxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyZndDsgVmVyaWZ5aW5nIFBhcnR5Jm5i c3A7ICZuYnNwOyAmbmJzcDs6IElFU0c8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsmZ3Q7 PGJyPg0KJmd0Ozxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgJm5i c3A7cmFkZXh0IG1haWxpbmcgbGlzdDxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOzxhIGhy ZWY9Im1haWx0bzpyYWRleHRAaWV0Zi5vcmciPnJhZGV4dEBpZXRmLm9yZzwvYT4gJmx0O21haWx0 bzo8YSBocmVmPSJtYWlsdG86cmFkZXh0QGlldGYub3JnIj5yYWRleHRAaWV0Zi5vcmc8L2E+Jmd0 Ozxicj4NCiZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vcmFkZXh0IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYWRleHQ8L2E+PGJyPg0KJmd0Ozxicj4NCiZndDs8 YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDsgLS08YnI+DQomZ3Q7PGJyPg0KJmd0OyBCZXN0 IHJlZ2FyZHMsPGJyPg0KJmd0OyBLYXRobGVlbjxicj4NCiZndDs8YnI+DQomZ3Q7PGJyPg0KJmd0 OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCiZn dDsgcmFkZXh0IG1haWxpbmcgbGlzdDxicj4NCiZndDsgPGEgaHJlZj0ibWFpbHRvOnJhZGV4dEBp ZXRmLm9yZyI+cmFkZXh0QGlldGYub3JnPC9hPjxicj4NCiZndDsgPGEgaHJlZj0iaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYWRleHQiIHRhcmdldD0iX2JsYW5rIj5odHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhZGV4dDwvYT48YnI+DQomZ3Q7PGJy Pg0KPGJyPg0KPGJyPg0KLS08YnI+DQpTdGVmYW4gV0lOVEVSPGJyPg0KSW5nZW5pZXVyIGRlIFJl Y2hlcmNoZTxicj4NCkZvbmRhdGlvbiBSRVNURU5BIC0gUsOpc2VhdSBUw6lsw6lpbmZvcm1hdGlx dWUgZGUgbCdFZHVjYXRpb24gTmF0aW9uYWxlIGV0IGRlIGxhIFJlY2hlcmNoZSA2LCBydWUgUmlj aGFyZCBDb3VkZW5ob3ZlLUthbGVyZ2k8YnI+DQpMLTEzNTkgTHV4ZW1ib3VyZzxicj4NCjxicj4N ClRlbDogPGEgaHJlZj0idGVsOiUyQjM1MiUyMDQyNDQwOSUyMDEiPiYjNDM7MzUyIDQyNDQwOSAx PC9hPjxicj4NCkZheDogPGEgaHJlZj0idGVsOiUyQjM1MiUyMDQyMjQ3MyI+JiM0MzszNTIgNDIy NDczPC9hPjxicj4NCjxicj4NClBHUCBrZXkgdXBkYXRlZCB0byA0MDk2IEJpdCBSU0EgLSBJIHdp bGwgZW5jcnlwdCBhbGwgbWFpbHMgaWYgdGhlIHJlY2lwaWVudCdzIGtleSBpcyBrbm93biB0byBt ZTxicj4NCjxicj4NCjxhIGhyZWY9Imh0dHA6Ly9wZ3AubWl0LmVkdToxMTM3MS9wa3MvbG9va3Vw P29wPWdldCZhbXA7c2VhcmNoPTB4QzBERTZBMzU4QTM5REM2NiIgdGFyZ2V0PSJfYmxhbmsiPmh0 dHA6Ly9wZ3AubWl0LmVkdToxMTM3MS9wa3MvbG9va3VwP29wPWdldCZhbXA7c2VhcmNoPTB4QzBE RTZBMzU4QTM5REM2NjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQo8 YnI+DQpDZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRlbmlyIGRl cyBpbmZvcm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBuZSBkb2l2 ZW50IGRvbmM8YnI+DQpwYXMgZXRyZSBkaWZmdXNlcywgZXhwbG9pdGVzIG91IGNvcGllcyBzYW5z IGF1dG9yaXNhdGlvbi4gU2kgdm91cyBhdmV6IHJlY3UgY2UgbWVzc2FnZSBwYXIgZXJyZXVyLCB2 ZXVpbGxleiBsZSBzaWduYWxlcjxicj4NCmEgbCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFp bnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0 YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sPGJyPg0KT3JhbmdlIGRlY2xpbmUgdG91dGUg cmVzcG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFs c2lmaWUuIE1lcmNpLjxicj4NCjxicj4NClRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRz IG1heSBjb250YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uIHRoYXQg bWF5IGJlIHByb3RlY3RlZCBieSBsYXc7PGJyPg0KdGhleSBzaG91bGQgbm90IGJlIGRpc3RyaWJ1 dGVkLCB1c2VkIG9yIGNvcGllZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uPGJyPg0KSWYgeW91IGhh dmUgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVy IGFuZCBkZWxldGUgdGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMuPGJyPg0KQXMgZW1h aWxzIG1heSBiZSBhbHRlcmVkLCBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhh dCBoYXZlIGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLjxicj4NClRoYW5rIHlv dS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJy IGNsZWFyPSJhbGwiPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0t IDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZXN0IHJlZ2Fy ZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5L YXRobGVlbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxQUkU+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBldCBzZXMgcGllY2VzIGpvaW50ZXMgcGV1 dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVudGllbGxlcyBvdSBwcml2aWxl Z2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3Ug Y29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBh ciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEgbCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1 aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBlbGVjdHJvbmlx dWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sCk9yYW5nZSBkZWNsaW5lIHRvdXRl IHJlc3BvbnNhYmlsaXRlIHNpIGNlIG1lc3NhZ2UgYSBldGUgYWx0ZXJlLCBkZWZvcm1lIG91IGZh bHNpZmllLiBNZXJjaS4KClRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzIG1heSBjb250 YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uIHRoYXQgbWF5IGJlIHBy b3RlY3RlZCBieSBsYXc7CnRoZXkgc2hvdWxkIG5vdCBiZSBkaXN0cmlidXRlZCwgdXNlZCBvciBj b3BpZWQgd2l0aG91dCBhdXRob3Jpc2F0aW9uLgpJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVt YWlsIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1l c3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cy4KQXMgZW1haWxzIG1heSBiZSBhbHRlcmVkLCBPcmFu Z2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZlIGJlZW4gbW9kaWZpZWQsIGNo YW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCjwvUFJFPjwvYm9keT4NCjwvaHRtbD4NCg== --_000_6B7134B31289DC4FAF731D844122B36E0103AF2APEXCVZYM13corpo_-- From nobody Tue Apr 21 12:46:19 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49EF51B2AE4 for ; Tue, 21 Apr 2015 12:45:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WNLA-6V0A6dL for ; Tue, 21 Apr 2015 12:44:58 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias243.francetelecom.com [80.12.204.243]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C02311B2AE5 for ; Tue, 21 Apr 2015 12:44:10 -0700 (PDT) Received: from omfeda07.si.francetelecom.fr (unknown [xx.xx.xx.200]) by omfeda10.si.francetelecom.fr (ESMTP service) with ESMTP id 0D024374294; Tue, 21 Apr 2015 21:44:09 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.183]) by omfeda07.si.francetelecom.fr (ESMTP service) with ESMTP id CE20B15808A; Tue, 21 Apr 2015 21:44:08 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH02.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0224.002; Tue, 21 Apr 2015 21:44:08 +0200 From: To: Kathleen Moriarty , RFC Errata System Thread-Topic: [radext] [Technical Errata Reported] RFC5176 (4311) Thread-Index: AQHQfFbm1PREdfQ5MkO3AqW/57byeZ1X2wBg Date: Tue, 21 Apr 2015 19:44:07 +0000 Message-ID: <22950_1429645448_5536A888_22950_6217_1_6B7134B31289DC4FAF731D844122B36E0103B176@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <20150323165024.CFFDA180459@rfc-editor.org> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.6] Content-Type: multipart/alternative; boundary="_000_6B7134B31289DC4FAF731D844122B36E0103B176PEXCVZYM13corpo_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.4.21.145424 Archived-At: X-Mailman-Approved-At: Tue, 21 Apr 2015 12:46:18 -0700 Cc: "gdommety@cisco.com" , "radext@ietf.org" , Alan DeKok , Stefan Winter , joel jaeggli , "bernarda@microsoft.com" , "david@mitton.com" , Benoit Claise , "meklund@cisco.com" , "mchiba@cisco.com" Subject: Re: [radext] [Technical Errata Reported] RFC5176 (4311) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 19:45:01 -0000 --_000_6B7134B31289DC4FAF731D844122B36E0103B176PEXCVZYM13corpo_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSdtIE9LIHdpdGggdGhpcyBlcnJhdHVtIGJ1dCBJIHdvdWxkIHByb3ZpZGUgZnVydGhlciBjbGFy aWZpY2F0aW9ucy4NCkZpcnN0LCBJIHdvdWxkIHJlY29tbWVuZCB0byBjbGFyaWZ5IHdoYXQgIm1h bmRhdG9yeSIgaW4gdGhlIGNvbnRleHQgb2YgUkFESVVTLg0KSSB3b3VsZCBhbHNvIGhpZ2hsaWdo dCB0aGUgc3BlY2lmaWMgY2FzZSBvZiB0aGUgUHJveHktU3RhdGUuDQoNCkkgd291bGQgcHJvcG9z ZSB0aGUgZm9sbG93aW5nIHRleHQ6DQoNCg0KSW4gQ29BLVJlcXVlc3QgYW5kIERpc2Nvbm5lY3Qt UmVxdWVzdCBwYWNrZXRzLCBhbGwgYXR0cmlidXRlcyBNVVNUDQpiZSB0cmVhdGVkIGFzIG1hbmRh dG9yeSB0byB1bmRlcnN0YW5kIGJ5IHRoZSBOQVMsIGV4Y2VwdCBQcm94eS1TdGF0ZQ0KDQphdHRy aWJ1dGVzIHRoYXQgTVVTVCBiZSB0cmVhdGVkIGFzIG9wYXF1ZSBkYXRhLiBTZWUgU2VjdGlvbiAz LjEgZm9yDQoNCmZ1cnRoZXIgZGV0YWlscyBvbiB0aGUgaGFuZGxpbmcgb2YgUHJveHktU3RhdGUg YXR0cmlidXRlcyBieSBOQVMuDQoNCmxldCBtZSBrbm93IGlmIGl0IGlzIE9LIGZvciB5b3UuDQoN CnJlZ2FyZHMsDQoNCkxpb25lbA0KDQpEZSA6IEthdGhsZWVuIE1vcmlhcnR5IFttYWlsdG86a2F0 aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb21dDQpFbnZvecOpIDogbWFyZGkgMjEgYXZyaWwg MjAxNSAxOToxNg0Kw4AgOiBSRkMgRXJyYXRhIFN5c3RlbQ0KQ2MgOiBtY2hpYmFAY2lzY28uY29t OyBnZG9tbWV0eUBjaXNjby5jb207IG1la2x1bmRAY2lzY28uY29tOyBkYXZpZEBtaXR0b24uY29t OyBiZXJuYXJkYUBtaWNyb3NvZnQuY29tOyBCZW5vaXQgQ2xhaXNlOyBqb2VsIGphZWdnbGk7IFN0 ZWZhbiBXaW50ZXI7IE1PUkFORCBMaW9uZWwgSU1UL09MTjsgcmFkZXh0QGlldGYub3JnOyBBbGFu IERlS29rDQpPYmpldCA6IFJlOiBbcmFkZXh0XSBbVGVjaG5pY2FsIEVycmF0YSBSZXBvcnRlZF0g UkZDNTE3NiAoNDMxMSkNCg0KSGVsbG8sDQoNCkkgaGF2ZW4ndCBzZWVuIGFueSBkaXNjdXNzaW9u IG9uIHRoaXMgZnJvbSB0aGUgUmFkZXh0IFdHLiAgVGhlIHJlcG9ydCBsb29rcyByZWFzb25hYmxl IGFuZCBtYWtlIHNlbnNlIHRvIG1lLCBidXQgd291bGQgbGlrZSB0byBoZWFyIGZyb20gdGhlIGNo YWlycyB0byBjb25maXJtLiAgU2luY2UgdGhpcyBpcyBnZXR0aW5nIGFkZHJlc3NlZCBpbiBhIG5l dyBkcmFmdCwgSSB3b3VsZCBiZSBpbmNsdWRlZCB0byBtYXJrIHRoaXMgYXMgIkhvbGQgZm9yIERv Y3VtZW50IFVwZGF0ZSIuICBUaGlzIHB1dHMgdGhlIGVycmF0YSB3aXRoIHRoaXMgZHJhZnQgKGl0 J3Mgbm90IHJlamVjdGVkKSBhbmQgY2FuIGJlIGFkZGVkIHRvIGEgbmV3IHJldmlzaW9uIG9mIHRo aXMgcGFydGljdWxhciBkcmFmdCBpZiBpdCBnZXRzIHVwZGF0ZWQgaW4gdGhlIGZ1dHVyZS4NCg0K UGxlYXNlIGxldCBtZSBrbm93IGlmIHlvdSBhZ3JlZS9kaXNhZ3JlZSBhbmQgSSdsbCBtYXJrIGl0 IGFwcHJvcHJpYXRlbHkuDQoNClRoYW5rcyENCg0KT24gTW9uLCBNYXIgMjMsIDIwMTUgYXQgMTI6 NTAgUE0sIFJGQyBFcnJhdGEgU3lzdGVtIDxyZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPG1haWx0 bzpyZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPj4gd3JvdGU6DQpUaGUgZm9sbG93aW5nIGVycmF0 YSByZXBvcnQgaGFzIGJlZW4gc3VibWl0dGVkIGZvciBSRkM1MTc2LA0KIkR5bmFtaWMgQXV0aG9y aXphdGlvbiBFeHRlbnNpb25zIHRvIFJlbW90ZSBBdXRoZW50aWNhdGlvbiBEaWFsIEluIFVzZXIg U2VydmljZSAoUkFESVVTKSIuDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQpZb3UgbWF5IHJldmlldyB0aGUgcmVwb3J0IGJlbG93IGFuZCBhdDoNCmh0dHA6Ly93d3cu cmZjLWVkaXRvci5vcmcvZXJyYXRhX3NlYXJjaC5waHA/cmZjPTUxNzYmZWlkPTQzMTENCg0KLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NClR5cGU6IFRlY2huaWNhbA0KUmVw b3J0ZWQgYnk6IEFsYW4gRGVLb2sgPGFsYW5kQGZyZWVyYWRpdXMub3JnPG1haWx0bzphbGFuZEBm cmVlcmFkaXVzLm9yZz4+DQoNClNlY3Rpb246IDIuMw0KDQpPcmlnaW5hbCBUZXh0DQotLS0tLS0t LS0tLS0tDQpTZWN0aW9uIDIuMyBzYXlzOg0KDQogICAgICBJbiBDb0EtUmVxdWVzdCBhbmQgRGlz Y29ubmVjdC1SZXF1ZXN0IHBhY2tldHMsIGFsbCBhdHRyaWJ1dGVzIE1VU1QNCiAgICAgIGJlIHRy ZWF0ZWQgYXMgbWFuZGF0b3J5Lg0KDQoNCkNvcnJlY3RlZCBUZXh0DQotLS0tLS0tLS0tLS0tLQ0K SW4gQ29BLVJlcXVlc3QgYW5kIERpc2Nvbm5lY3QtUmVxdWVzdCBwYWNrZXRzLCBhbGwgYXR0cmli dXRlcyBNVVNUDQpiZSB0cmVhdGVkIGFzIG1hbmRhdG9yeSwgZXhjZXB0IFByb3h5LVN0YXRlLiAg U2VlIFNlY3Rpb24gMy4xIGZvciBhDQpkaXNjdXNzaW9uIG9mIGhvdyB0aGUgTkFTIG11c3QgaGFu ZGxlIFByb3h5LVN0YXRlLg0KDQpOb3Rlcw0KLS0tLS0NClRoaXMgd2FzIHNlZW4gd2l0aCB2ZW5k b3IgZXF1aXBtZW50LiAgQ29BIHByb3h5aW5nIHdhcyBkb25lIHRvIHRoZSBOQVMsIGFuZCB0aGUg cHJveHkgd2FzIGFkZGluZyBhbmQgZm9yd2FyZGluZyBQcm94eS1TdGF0ZSBhcyByZXF1aXJlZCBi eSBTZWN0aW9uIDMuMS4gIEhvd2V2ZXIsIHRoZSBOQVMgd2FzIHJldHVybmluZyBhIENvQS1OQUsg d2l0aCBFcnJvci1DYXVzZSA9IFVuc3VwcG9ydGVkLUF0dHJpYnV0ZS4NCg0KVGhlIGlzc3VlIGNv bWVzIGJlY2F1c2UgUHJveHktU3RhdGUgaXMgY2FsbGVkIG91dCBpbiBTZWN0aW9uIDMuMSBmb3Ig c3BlY2lhbCBoYW5kbGluZy4gIEhvd2V2ZXIsIHRoYXQgc3BlY2lhbCBoYW5kbGluZyBpc24ndCBj YWxsZWQgb3V0IGluIFNlY3Rpb24gMi4zLiAgQXMgYSByZXN1bHQsIGltcGxlbWVudG9ycyBjYW4g Z2V0IGNvbmZ1c2VkLg0KDQpUaGUgUkFERVhUIFdHIGlzIHJlY2hhcnRlcmluZyB3aXRoIGEgZG9j dW1lbnQgdG8gYWRkcmVzcyBDb0EgcHJveHlpbmcuICBXZSB3aWxsIGFsc28gYmUgYWRkcmVzc2lu ZyB0aGlzIGlzc3VlIGluIHRoYXQgZG9jdW1lbnQuICBUaGVyZSBhcmUgYWRkaXRpb25hbCBhdHRy aWJ1dGVzIHdoaWNoIGEgTkFTIHNob3VsZCBpZ25vcmUsIE9SIHdoaWNoIHNob3VsZCBiZSBmaWx0 ZXJlZCBvdXQgYnkgdGhlIHByb3h5IGNsb3Nlc3QgdG8gdGhlIE5BUy4NCg0KSW5zdHJ1Y3Rpb25z Og0KLS0tLS0tLS0tLS0tLQ0KVGhpcyBlcnJhdHVtIGlzIGN1cnJlbnRseSBwb3N0ZWQgYXMgIlJl cG9ydGVkIi4gSWYgbmVjZXNzYXJ5LCBwbGVhc2UNCnVzZSAiUmVwbHkgQWxsIiB0byBkaXNjdXNz IHdoZXRoZXIgaXQgc2hvdWxkIGJlIHZlcmlmaWVkIG9yDQpyZWplY3RlZC4gV2hlbiBhIGRlY2lz aW9uIGlzIHJlYWNoZWQsIHRoZSB2ZXJpZnlpbmcgcGFydHkgKElFU0cpDQpjYW4gbG9nIGluIHRv IGNoYW5nZSB0aGUgc3RhdHVzIGFuZCBlZGl0IHRoZSByZXBvcnQsIGlmIG5lY2Vzc2FyeS4NCg0K LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NClJGQzUxNzYgKGRyYWZ0LWll dGYtcmFkZXh0LXJmYzM1NzZiaXMtMTMpDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KVGl0bGUgICAgICAgICAgICAgICA6IER5bmFtaWMgQXV0aG9yaXphdGlvbiBFeHRl bnNpb25zIHRvIFJlbW90ZSBBdXRoZW50aWNhdGlvbiBEaWFsIEluIFVzZXIgU2VydmljZSAoUkFE SVVTKQ0KUHVibGljYXRpb24gRGF0ZSAgICA6IEphbnVhcnkgMjAwOA0KQXV0aG9yKHMpICAgICAg ICAgICA6IE0uIENoaWJhLCBHLiBEb21tZXR5LCBNLiBFa2x1bmQsIEQuIE1pdHRvbiwgQi4gQWJv YmENCkNhdGVnb3J5ICAgICAgICAgICAgOiBJTkZPUk1BVElPTkFMDQpTb3VyY2UgICAgICAgICAg ICAgIDogUkFESVVTIEVYVGVuc2lvbnMNCkFyZWEgICAgICAgICAgICAgICAgOiBPcGVyYXRpb25z IGFuZCBNYW5hZ2VtZW50DQpTdHJlYW0gICAgICAgICAgICAgIDogSUVURg0KVmVyaWZ5aW5nIFBh cnR5ICAgICA6IElFU0cNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCnJhZGV4dCBtYWlsaW5nIGxpc3QNCnJhZGV4dEBpZXRmLm9yZzxtYWlsdG86cmFk ZXh0QGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYWRl eHQNCg0KDQoNCi0tDQoNCkJlc3QgcmVnYXJkcywNCkthdGhsZWVuDQoKX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKQ2UgbWVz c2FnZSBldCBzZXMgcGllY2VzIGpvaW50ZXMgcGV1dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRp b25zIGNvbmZpZGVudGllbGxlcyBvdSBwcml2aWxlZ2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBh cyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3UgY29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBT aSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBhciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25h bGVyCmEgbCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpv aW50ZXMuIExlcyBtZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2Fs dGVyYXRpb24sCk9yYW5nZSBkZWNsaW5lIHRvdXRlIHJlc3BvbnNhYmlsaXRlIHNpIGNlIG1lc3Nh Z2UgYSBldGUgYWx0ZXJlLCBkZWZvcm1lIG91IGZhbHNpZmllLiBNZXJjaS4KClRoaXMgbWVzc2Fn ZSBhbmQgaXRzIGF0dGFjaG1lbnRzIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxl Z2VkIGluZm9ybWF0aW9uIHRoYXQgbWF5IGJlIHByb3RlY3RlZCBieSBsYXc7CnRoZXkgc2hvdWxk IG5vdCBiZSBkaXN0cmlidXRlZCwgdXNlZCBvciBjb3BpZWQgd2l0aG91dCBhdXRob3Jpc2F0aW9u LgpJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVtYWlsIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5 IHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cy4K QXMgZW1haWxzIG1heSBiZSBhbHRlcmVkLCBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2Fn ZXMgdGhhdCBoYXZlIGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5 b3UuCgo= --_000_6B7134B31289DC4FAF731D844122B36E0103B176PEXCVZYM13corpo_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46 MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsN Cgljb2xvcjojMUY0OTdEO30NCnNwYW4uUHJmb3JtYXRIVE1MQ2FyDQoJe21zby1zdHlsZS1uYW1l OiJQcsOpZm9ybWF0w6kgSFRNTCBDYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28t c3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwiOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyI7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlI7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm IjsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7 c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcwLjg1cHQgNzAuODVwdCA3MC44NXB0IDcw Ljg1cHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0 eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRp dCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVk aXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hl YWQ+DQo8Ym9keSBsYW5nPSJGUiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNs YXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JJ20gT0sgd2l0aCB0aGlz IGVycmF0dW0gYnV0IEkgd291bGQgcHJvdmlkZSBmdXJ0aGVyIGNsYXJpZmljYXRpb25zLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Rmlyc3QsIEkgd291bGQgcmVj b21tZW5kIHRvIGNsYXJpZnkgd2hhdCAmcXVvdDttYW5kYXRvcnkmcXVvdDsgaW4gdGhlIGNvbnRl eHQgb2YgUkFESVVTLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ SSB3b3VsZCBhbHNvIGhpZ2hsaWdodCB0aGUgc3BlY2lmaWMgY2FzZSBvZiB0aGUgUHJveHktU3Rh dGUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkkgd291bGQgcHJvcG9zZSB0 aGUgZm9sbG93aW5nIHRleHQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVT Ij5JbiBDb0EtUmVxdWVzdCBhbmQgRGlzY29ubmVjdC1SZXF1ZXN0IHBhY2tldHMsIGFsbCBhdHRy aWJ1dGVzIE1VU1Q8YnI+YmUgdHJlYXRlZCBhcyBtYW5kYXRvcnkgdG8gdW5kZXJzdGFuZCBieSB0 aGUgTkFTLCBleGNlcHQgUHJveHktU3RhdGUgPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJl PjxzcGFuIGxhbmc9IkVOLVVTIj5hdHRyaWJ1dGVzIHRoYXQgTVVTVCBiZSB0cmVhdGVkIGFzIG9w YXF1ZSBkYXRhLiBTZWUgU2VjdGlvbiAzLjEgZm9yIDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHByZT48c3BhbiBsYW5nPSJFTi1VUyI+ZnVydGhlciBkZXRhaWxzIG9uIHRoZSBoYW5kbGluZyBv ZiBQcm94eS1TdGF0ZSBhdHRyaWJ1dGVzIGJ5IE5BUy48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPmxldCBtZSBrbm93IGlmIGl0 IGlzIE9LIGZvciB5b3UuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPnJlZ2Fy ZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkxpb25lbDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsi PkRlJm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBLYXRobGVl biBNb3JpYXJ0eSBbbWFpbHRvOmthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tXQ0KPGJy Pg0KPGI+RW52b3nDqSZuYnNwOzo8L2I+IG1hcmRpIDIxIGF2cmlsIDIwMTUgMTk6MTY8YnI+DQo8 Yj7DgCZuYnNwOzo8L2I+IFJGQyBFcnJhdGEgU3lzdGVtPGJyPg0KPGI+Q2MmbmJzcDs6PC9iPiBt Y2hpYmFAY2lzY28uY29tOyBnZG9tbWV0eUBjaXNjby5jb207IG1la2x1bmRAY2lzY28uY29tOyBk YXZpZEBtaXR0b24uY29tOyBiZXJuYXJkYUBtaWNyb3NvZnQuY29tOyBCZW5vaXQgQ2xhaXNlOyBq b2VsIGphZWdnbGk7IFN0ZWZhbiBXaW50ZXI7IE1PUkFORCBMaW9uZWwgSU1UL09MTjsgcmFkZXh0 QGlldGYub3JnOyBBbGFuIERlS29rPGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBSZTogW3JhZGV4 dF0gW1RlY2huaWNhbCBFcnJhdGEgUmVwb3J0ZWRdIFJGQzUxNzYgKDQzMTEpPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGVsbG8sPG86cD48L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGhhdmVuJ3Qgc2VlbiBhbnkgZGlzY3Vzc2lvbiBvbiB0 aGlzIGZyb20gdGhlIFJhZGV4dCBXRy4mbmJzcDsgVGhlIHJlcG9ydCBsb29rcyByZWFzb25hYmxl IGFuZCBtYWtlIHNlbnNlIHRvIG1lLCBidXQgd291bGQgbGlrZSB0byBoZWFyIGZyb20gdGhlIGNo YWlycyB0byBjb25maXJtLiZuYnNwOyBTaW5jZSB0aGlzIGlzIGdldHRpbmcgYWRkcmVzc2VkIGlu IGEgbmV3IGRyYWZ0LCBJIHdvdWxkIGJlIGluY2x1ZGVkIHRvIG1hcmsNCiB0aGlzIGFzICZxdW90 O0hvbGQgZm9yIERvY3VtZW50IFVwZGF0ZSZxdW90Oy4mbmJzcDsgVGhpcyBwdXRzIHRoZSBlcnJh dGEgd2l0aCB0aGlzIGRyYWZ0IChpdCdzIG5vdCByZWplY3RlZCkgYW5kIGNhbiBiZSBhZGRlZCB0 byBhIG5ldyByZXZpc2lvbiBvZiB0aGlzIHBhcnRpY3VsYXIgZHJhZnQgaWYgaXQgZ2V0cyB1cGRh dGVkIGluIHRoZSBmdXR1cmUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlBsZWFzZSBsZXQgbWUga25vdyBpZiB5b3UgYWdyZWUvZGlzYWdyZWUg YW5kIEknbGwgbWFyayBpdCBhcHByb3ByaWF0ZWx5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MhPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE1vbiwgTWFyIDIzLCAyMDE1IGF0 IDEyOjUwIFBNLCBSRkMgRXJyYXRhIFN5c3RlbSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJmYy1lZGl0 b3JAcmZjLWVkaXRvci5vcmciIHRhcmdldD0iX2JsYW5rIj5yZmMtZWRpdG9yQHJmYy1lZGl0b3Iu b3JnPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5U aGUgZm9sbG93aW5nIGVycmF0YSByZXBvcnQgaGFzIGJlZW4gc3VibWl0dGVkIGZvciBSRkM1MTc2 LDxicj4NCiZxdW90O0R5bmFtaWMgQXV0aG9yaXphdGlvbiBFeHRlbnNpb25zIHRvIFJlbW90ZSBB dXRoZW50aWNhdGlvbiBEaWFsIEluIFVzZXIgU2VydmljZSAoUkFESVVTKSZxdW90Oy48YnI+DQo8 YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxicj4NCllvdSBtYXkg cmV2aWV3IHRoZSByZXBvcnQgYmVsb3cgYW5kIGF0Ojxicj4NCjxhIGhyZWY9Imh0dHA6Ly93d3cu cmZjLWVkaXRvci5vcmcvZXJyYXRhX3NlYXJjaC5waHA/cmZjPTUxNzYmYW1wO2VpZD00MzExIiB0 YXJnZXQ9Il9ibGFuayI+aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9lcnJhdGFfc2VhcmNoLnBo cD9yZmM9NTE3NiZhbXA7ZWlkPTQzMTE8L2E+PGJyPg0KPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS08YnI+DQpUeXBlOiBUZWNobmljYWw8YnI+DQpSZXBvcnRlZCBi eTogQWxhbiBEZUtvayAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFsYW5kQGZyZWVyYWRpdXMub3JnIj5h bGFuZEBmcmVlcmFkaXVzLm9yZzwvYT4mZ3Q7PGJyPg0KPGJyPg0KU2VjdGlvbjogMi4zPGJyPg0K PGJyPg0KT3JpZ2luYWwgVGV4dDxicj4NCi0tLS0tLS0tLS0tLS08YnI+DQpTZWN0aW9uIDIuMyBz YXlzOjxicj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7IEluIENvQS1SZXF1ZXN0IGFuZCBE aXNjb25uZWN0LVJlcXVlc3QgcGFja2V0cywgYWxsIGF0dHJpYnV0ZXMgTVVTVDxicj4NCiZuYnNw OyAmbmJzcDsgJm5ic3A7IGJlIHRyZWF0ZWQgYXMgbWFuZGF0b3J5Ljxicj4NCjxicj4NCjxicj4N CkNvcnJlY3RlZCBUZXh0PGJyPg0KLS0tLS0tLS0tLS0tLS08YnI+DQpJbiBDb0EtUmVxdWVzdCBh bmQgRGlzY29ubmVjdC1SZXF1ZXN0IHBhY2tldHMsIGFsbCBhdHRyaWJ1dGVzIE1VU1Q8YnI+DQpi ZSB0cmVhdGVkIGFzIG1hbmRhdG9yeSwgZXhjZXB0IFByb3h5LVN0YXRlLiZuYnNwOyBTZWUgU2Vj dGlvbiAzLjEgZm9yIGE8YnI+DQpkaXNjdXNzaW9uIG9mIGhvdyB0aGUgTkFTIG11c3QgaGFuZGxl IFByb3h5LVN0YXRlLjxicj4NCjxicj4NCk5vdGVzPGJyPg0KLS0tLS08YnI+DQpUaGlzIHdhcyBz ZWVuIHdpdGggdmVuZG9yIGVxdWlwbWVudC4mbmJzcDsgQ29BIHByb3h5aW5nIHdhcyBkb25lIHRv IHRoZSBOQVMsIGFuZCB0aGUgcHJveHkgd2FzIGFkZGluZyBhbmQgZm9yd2FyZGluZyBQcm94eS1T dGF0ZSBhcyByZXF1aXJlZCBieSBTZWN0aW9uIDMuMS4mbmJzcDsgSG93ZXZlciwgdGhlIE5BUyB3 YXMgcmV0dXJuaW5nIGEgQ29BLU5BSyB3aXRoIEVycm9yLUNhdXNlID0gVW5zdXBwb3J0ZWQtQXR0 cmlidXRlLjxicj4NCjxicj4NClRoZSBpc3N1ZSBjb21lcyBiZWNhdXNlIFByb3h5LVN0YXRlIGlz IGNhbGxlZCBvdXQgaW4gU2VjdGlvbiAzLjEgZm9yIHNwZWNpYWwgaGFuZGxpbmcuJm5ic3A7IEhv d2V2ZXIsIHRoYXQgc3BlY2lhbCBoYW5kbGluZyBpc24ndCBjYWxsZWQgb3V0IGluIFNlY3Rpb24g Mi4zLiZuYnNwOyBBcyBhIHJlc3VsdCwgaW1wbGVtZW50b3JzIGNhbiBnZXQgY29uZnVzZWQuPGJy Pg0KPGJyPg0KVGhlIFJBREVYVCBXRyBpcyByZWNoYXJ0ZXJpbmcgd2l0aCBhIGRvY3VtZW50IHRv IGFkZHJlc3MgQ29BIHByb3h5aW5nLiZuYnNwOyBXZSB3aWxsIGFsc28gYmUgYWRkcmVzc2luZyB0 aGlzIGlzc3VlIGluIHRoYXQgZG9jdW1lbnQuJm5ic3A7IFRoZXJlIGFyZSBhZGRpdGlvbmFsIGF0 dHJpYnV0ZXMgd2hpY2ggYSBOQVMgc2hvdWxkIGlnbm9yZSwgT1Igd2hpY2ggc2hvdWxkIGJlIGZp bHRlcmVkIG91dCBieSB0aGUgcHJveHkgY2xvc2VzdCB0byB0aGUgTkFTLjxicj4NCjxicj4NCklu c3RydWN0aW9uczo8YnI+DQotLS0tLS0tLS0tLS0tPGJyPg0KVGhpcyBlcnJhdHVtIGlzIGN1cnJl bnRseSBwb3N0ZWQgYXMgJnF1b3Q7UmVwb3J0ZWQmcXVvdDsuIElmIG5lY2Vzc2FyeSwgcGxlYXNl PGJyPg0KdXNlICZxdW90O1JlcGx5IEFsbCZxdW90OyB0byBkaXNjdXNzIHdoZXRoZXIgaXQgc2hv dWxkIGJlIHZlcmlmaWVkIG9yPGJyPg0KcmVqZWN0ZWQuIFdoZW4gYSBkZWNpc2lvbiBpcyByZWFj aGVkLCB0aGUgdmVyaWZ5aW5nIHBhcnR5IChJRVNHKTxicj4NCmNhbiBsb2cgaW4gdG8gY2hhbmdl IHRoZSBzdGF0dXMgYW5kIGVkaXQgdGhlIHJlcG9ydCwgaWYgbmVjZXNzYXJ5Ljxicj4NCjxicj4N Ci0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KUkZDNTE3NiAoZHJh ZnQtaWV0Zi1yYWRleHQtcmZjMzU3NmJpcy0xMyk8YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLTxicj4NClRpdGxlJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzogRHluYW1pYyBBdXRob3JpemF0aW9uIEV4dGVuc2lv bnMgdG8gUmVtb3RlIEF1dGhlbnRpY2F0aW9uIERpYWwgSW4gVXNlciBTZXJ2aWNlIChSQURJVVMp PGJyPg0KUHVibGljYXRpb24gRGF0ZSZuYnNwOyAmbmJzcDsgOiBKYW51YXJ5IDIwMDg8YnI+DQpB dXRob3IocykmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzogTS4gQ2hp YmEsIEcuIERvbW1ldHksIE0uIEVrbHVuZCwgRC4gTWl0dG9uLCBCLiBBYm9iYTxicj4NCkNhdGVn b3J5Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgOiBJTkZPUk1BVElP TkFMPGJyPg0KU291cmNlJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7IDogUkFESVVTIEVYVGVuc2lvbnM8YnI+DQpBcmVhJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyA6IE9wZXJhdGlvbnMgYW5kIE1hbmFn ZW1lbnQ8YnI+DQpTdHJlYW0mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgOiBJRVRGPGJyPg0KVmVyaWZ5aW5nIFBhcnR5Jm5ic3A7ICZuYnNwOyAmbmJzcDs6 IElFU0c8YnI+DQo8YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxicj4NCnJhZGV4dCBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86cmFk ZXh0QGlldGYub3JnIj5yYWRleHRAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYWRleHQiIHRhcmdldD0iX2JsYW5rIj5odHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhZGV4dDwvYT48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyIGNsZWFyPSJhbGwiPg0K PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0tIDxvOnA+PC9vOnA+PC9w Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5LYXRobGVlbjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxQUkU+X19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwoKQ2UgbWVzc2FnZSBldCBzZXMgcGllY2VzIGpvaW50ZXMgcGV1dmVudCBjb250ZW5pciBk ZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVudGllbGxlcyBvdSBwcml2aWxlZ2llZXMgZXQgbmUgZG9p dmVudCBkb25jCnBhcyBldHJlIGRpZmZ1c2VzLCBleHBsb2l0ZXMgb3UgY29waWVzIHNhbnMgYXV0 b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXogcmVjdSBjZSBtZXNzYWdlIHBhciBlcnJldXIsIHZldWls bGV6IGxlIHNpZ25hbGVyCmEgbCdleHBlZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFpbnNpIHF1ZSBs ZXMgcGllY2VzIGpvaW50ZXMuIExlcyBtZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0YW50IHN1c2Nl cHRpYmxlcyBkJ2FsdGVyYXRpb24sCk9yYW5nZSBkZWNsaW5lIHRvdXRlIHJlc3BvbnNhYmlsaXRl IHNpIGNlIG1lc3NhZ2UgYSBldGUgYWx0ZXJlLCBkZWZvcm1lIG91IGZhbHNpZmllLiBNZXJjaS4K ClRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzIG1heSBjb250YWluIGNvbmZpZGVudGlh bCBvciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uIHRoYXQgbWF5IGJlIHByb3RlY3RlZCBieSBsYXc7 CnRoZXkgc2hvdWxkIG5vdCBiZSBkaXN0cmlidXRlZCwgdXNlZCBvciBjb3BpZWQgd2l0aG91dCBh dXRob3Jpc2F0aW9uLgpJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGVtYWlsIGluIGVycm9yLCBw bGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgYW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2UgYW5kIGl0cyBh dHRhY2htZW50cy4KQXMgZW1haWxzIG1heSBiZSBhbHRlcmVkLCBPcmFuZ2UgaXMgbm90IGxpYWJs ZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZlIGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lm aWVkLgpUaGFuayB5b3UuCjwvUFJFPjwvYm9keT4NCjwvaHRtbD4NCg== --_000_6B7134B31289DC4FAF731D844122B36E0103B176PEXCVZYM13corpo_-- From nobody Wed Apr 22 00:50:41 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 418A11B3331; Wed, 22 Apr 2015 00:50:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZnRwmSNA2htG; Wed, 22 Apr 2015 00:50:37 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E305D1B332D; Wed, 22 Apr 2015 00:50:37 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150422075037.29772.53227.idtracker@ietfa.amsl.com> Date: Wed, 22 Apr 2015 00:50:37 -0700 Archived-At: Cc: radext@ietf.org Subject: [radext] I-D Action: draft-ietf-radext-ip-port-radius-ext-04.txt X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 07:50:39 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the RADIUS EXTensions Working Group of the IETF. Title : RADIUS Extensions for IP Port Configuration and Reporting Authors : Dean Cheng Jouni Korhonen Mohamed Boucadair Senthil Sivakumar Filename : draft-ietf-radext-ip-port-radius-ext-04.txt Pages : 36 Date : 2015-04-22 Abstract: This document defines three new RADIUS attributes. For devices that implementing IP port ranges, these attributes are used to communicate with a RADIUS server in order to configure and report TCP/UDP ports and ICMP identifiers, as well as mapping behavior for specific hosts. This mechanism can be used in various deployment scenarios such as CGN (Carrier Grade NAT), NAT64, Provider WLAN Gateway, etc. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-radext-ip-port-radius-ext/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-radext-ip-port-radius-ext-04 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-radext-ip-port-radius-ext-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Apr 22 01:35:11 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E031C1B2BC9 for ; Tue, 21 Apr 2015 14:40:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RuJuSjFY8td6 for ; Tue, 21 Apr 2015 14:40:55 -0700 (PDT) Received: from mail-lb0-x22f.google.com (mail-lb0-x22f.google.com [IPv6:2a00:1450:4010:c04::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D30F1B2BFA for ; Tue, 21 Apr 2015 14:40:54 -0700 (PDT) Received: by lbbqq2 with SMTP id qq2so165834542lbb.3 for ; Tue, 21 Apr 2015 14:40:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=HsVX8KMK+537rXhJ7JbbR88B0uR87Zt/u0yscvUU+jQ=; b=exAjgG+RlAWwuQbJ0NX5BPOI+kIEQEaT4QffuaUY0K+PKud4OG5qZDz/OZYiY3T8kW 1veVv4lt9c09X4245C4rEjJ953RV3DLQzJbOAZ0j9w2Xt4XjJtLUFk+pf/66P5GDUE+o H9T7H91cFwmCnT4XBq25D61T8Yk3ecJc7agfDFsXUMvm1Nmp2t2BY/fq5M2y76vcxxoQ EG5plWNZjIKiNBROc81VtWGj8YihtgLbYVetm6mTaRMq7MmNy1cSmTZJC+jprlJsNFDr Srueq8zNoWHkrCII5WAKYk+bzS/iTv1qAFhf42cXZdXomXgYs1lTCOOxjzI3xuAfd6IX J6hQ== MIME-Version: 1.0 X-Received: by 10.112.29.36 with SMTP id g4mr22460905lbh.56.1429652452888; Tue, 21 Apr 2015 14:40:52 -0700 (PDT) Received: by 10.112.11.199 with HTTP; Tue, 21 Apr 2015 14:40:52 -0700 (PDT) In-Reply-To: <22950_1429645448_5536A888_22950_6217_1_6B7134B31289DC4FAF731D844122B36E0103B176@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <20150323165024.CFFDA180459@rfc-editor.org> <22950_1429645448_5536A888_22950_6217_1_6B7134B31289DC4FAF731D844122B36E0103B176@PEXCVZYM13.corporate.adroot.infra.ftgroup> Date: Tue, 21 Apr 2015 17:40:52 -0400 Message-ID: From: Kathleen Moriarty To: "" Content-Type: multipart/alternative; boundary=001a1133f9949b5587051442e61e Archived-At: X-Mailman-Approved-At: Wed, 22 Apr 2015 01:35:09 -0700 Cc: "gdommety@cisco.com" , "radext@ietf.org" , Alan DeKok , Stefan Winter , joel jaeggli , "bernarda@microsoft.com" , "david@mitton.com" , Benoit Claise , "meklund@cisco.com" , "mchiba@cisco.com" , RFC Errata System Subject: Re: [radext] [Technical Errata Reported] RFC5176 (4311) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 21:40:59 -0000 --001a1133f9949b5587051442e61e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Thanks, Lionel. One more question in-line. On Tue, Apr 21, 2015 at 3:44 PM, wrote: > I'm OK with this erratum but I would provide further clarifications. > > First, I would recommend to clarify what "mandatory" in the context of > RADIUS. > I can replace the text with what you provided below, but if clarifying what "mandatory" means is needed. Can someone propose text within the paragraph below so I have the full replacement text? If I am just doing "Hold For Document Update", I can add this in a not as well. I'd just like to get the agreed upon text. > I would also highlight the specific case of the Proxy-State. > > > > I would propose the following text: > > > > In CoA-Request and Disconnect-Request packets, all attributes MUST > be treated as mandatory to understand by the NAS, except Proxy-State > > attributes that MUST be treated as opaque data. See Section 3.1 for > > further details on the handling of Proxy-State attributes by NAS. > > > > let me know if it is OK for you. > Thank you, Kathleen > > > regards, > > > > Lionel > > > > *De :* Kathleen Moriarty [mailto:kathleen.moriarty.ietf@gmail.com] > *Envoy=C3=A9 :* mardi 21 avril 2015 19:16 > *=C3=80 :* RFC Errata System > *Cc :* mchiba@cisco.com; gdommety@cisco.com; meklund@cisco.com; > david@mitton.com; bernarda@microsoft.com; Benoit Claise; joel jaeggli; > Stefan Winter; MORAND Lionel IMT/OLN; radext@ietf.org; Alan DeKok > *Objet :* Re: [radext] [Technical Errata Reported] RFC5176 (4311) > > > > Hello, > > > > I haven't seen any discussion on this from the Radext WG. The report > looks reasonable and make sense to me, but would like to hear from the > chairs to confirm. Since this is getting addressed in a new draft, I wou= ld > be included to mark this as "Hold for Document Update". This puts the > errata with this draft (it's not rejected) and can be added to a new > revision of this particular draft if it gets updated in the future. > > > > Please let me know if you agree/disagree and I'll mark it appropriately. > > > > Thanks! > > > > On Mon, Mar 23, 2015 at 12:50 PM, RFC Errata System < > rfc-editor@rfc-editor.org> wrote: > > The following errata report has been submitted for RFC5176, > "Dynamic Authorization Extensions to Remote Authentication Dial In User > Service (RADIUS)". > > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata_search.php?rfc=3D5176&eid=3D4311 > > -------------------------------------- > Type: Technical > Reported by: Alan DeKok > > Section: 2.3 > > Original Text > ------------- > Section 2.3 says: > > In CoA-Request and Disconnect-Request packets, all attributes MUST > be treated as mandatory. > > > Corrected Text > -------------- > In CoA-Request and Disconnect-Request packets, all attributes MUST > be treated as mandatory, except Proxy-State. See Section 3.1 for a > discussion of how the NAS must handle Proxy-State. > > Notes > ----- > This was seen with vendor equipment. CoA proxying was done to the NAS, > and the proxy was adding and forwarding Proxy-State as required by Sectio= n > 3.1. However, the NAS was returning a CoA-NAK with Error-Cause =3D > Unsupported-Attribute. > > The issue comes because Proxy-State is called out in Section 3.1 for > special handling. However, that special handling isn't called out in > Section 2.3. As a result, implementors can get confused. > > The RADEXT WG is rechartering with a document to address CoA proxying. W= e > will also be addressing this issue in that document. There are additiona= l > attributes which a NAS should ignore, OR which should be filtered out by > the proxy closest to the NAS. > > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party (IESG) > can log in to change the status and edit the report, if necessary. > > -------------------------------------- > RFC5176 (draft-ietf-radext-rfc3576bis-13) > -------------------------------------- > Title : Dynamic Authorization Extensions to Remote > Authentication Dial In User Service (RADIUS) > Publication Date : January 2008 > Author(s) : M. Chiba, G. Dommety, M. Eklund, D. Mitton, B. Abob= a > Category : INFORMATIONAL > Source : RADIUS EXTensions > Area : Operations and Management > Stream : IETF > Verifying Party : IESG > > _______________________________________________ > radext mailing list > radext@ietf.org > https://www.ietf.org/mailman/listinfo/radext > > > > > > -- > > > > Best regards, > > Kathleen > > _________________________________________________________________________= ________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations confid= entielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez re= cu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages = electroniques etant susceptibles d'alteration, > Orange decline toute responsabilite si ce message a ete altere, deforme o= u falsifie. Merci. > > This message and its attachments may contain confidential or privileged i= nformation that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and de= lete this message and its attachments. > As emails may be altered, Orange is not liable for messages that have bee= n modified, changed or falsified. > Thank you. > > --=20 Best regards, Kathleen --001a1133f9949b5587051442e61e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Thanks, Lionel.=C2=A0 One more question in-line.

On Tue, Apr 21, 2015 at= 3:44 PM, <lionel.morand@orange.com> wrote:

I'm OK= with this erratum but I would provide further clarifications.

First, I w= ould recommend to clarify what "mandatory" in the context of RADI= US.


I can replace th= e text with what you provided below, but if clarifying what "mandatory= " means is needed.=C2=A0 Can someone propose text within the paragraph= below so I have the full replacement text?=C2=A0 If I am just doing "= Hold For Document Update", I can add this in a not as well.=C2=A0 I= 9;d just like to get the agreed upon text.=C2=A0

<= /p>

I would al= so highlight the specific case of the Proxy-State.

=C2= =A0

I would pr= opose the following text:

=C2= =A0

In CoA-Request and Disconnect-Re=
quest packets, all attributes MUST
be treated as mandatory to und=
erstand by the NAS, except Proxy-State 
attributes that MUST be treated as opaque data. S=
ee Section 3.1 for 
further details on the handling of Proxy-State at=
tributes by NAS.

=C2=A0

let me kno= w if it is OK for you.


Thank you,
Kathleen=C2=A0
=

=C2= =A0

regards,

=C2= =A0

Lionel<= /u>

=C2= =A0

De=C2=A0: Kath= leen Moriarty [mailto:kathleen.moriarty.ietf@gmail.com]
Envoy=C3=A9=C2=A0: mardi 21 avril 2015 19:16
=C3=80=C2=A0: RFC Errata System
Cc=C2=A0: mchi= ba@cisco.com; g= dommety@cisco.com; meklund@cisco.com; david@mitton.com; bernarda@microsoft.com; Benoit Claise; joel jaeggli; Stefan= Winter; MORAND Lionel IMT/OLN; radext@ietf.org; Alan DeKok
Objet=C2=A0: Re: [radext] [Technical Errata Reported] RFC5176 (4311)=

=C2=A0

Hello,

=C2=A0

I haven't seen any discussion on this from the R= adext WG.=C2=A0 The report looks reasonable and make sense to me, but would= like to hear from the chairs to confirm.=C2=A0 Since this is getting addre= ssed in a new draft, I would be included to mark this as "Hold for Document Update".=C2=A0 This puts the errata w= ith this draft (it's not rejected) and can be added to a new revision o= f this particular draft if it gets updated in the future.

=C2=A0

Please let me know if you agree/disagree and I'l= l mark it appropriately.

=C2=A0

Thanks!

=C2=A0

On Mon, Mar 23, 2015 at 12:50 PM, RFC Errata System = <rfc-edit= or@rfc-editor.org> wrote:

The following errata report has been submitted for R= FC5176,
"Dynamic Authorization Extensions to Remote Authentication Dial In Use= r Service (RADIUS)".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc= =3D5176&eid=3D4311

--------------------------------------
Type: Technical
Reported by: Alan DeKok <aland@freeradius.org>

Section: 2.3

Original Text
-------------
Section 2.3 says:

=C2=A0 =C2=A0 =C2=A0 In CoA-Request and Disconnect-Request packets, all att= ributes MUST
=C2=A0 =C2=A0 =C2=A0 be treated as mandatory.


Corrected Text
--------------
In CoA-Request and Disconnect-Request packets, all attributes MUST
be treated as mandatory, except Proxy-State.=C2=A0 See Section 3.1 for a discussion of how the NAS must handle Proxy-State.

Notes
-----
This was seen with vendor equipment.=C2=A0 CoA proxying was done to the NAS= , and the proxy was adding and forwarding Proxy-State as required by Sectio= n 3.1.=C2=A0 However, the NAS was returning a CoA-NAK with Error-Cause =3D = Unsupported-Attribute.

The issue comes because Proxy-State is called out in Section 3.1 for specia= l handling.=C2=A0 However, that special handling isn't called out in Se= ction 2.3.=C2=A0 As a result, implementors can get confused.

The RADEXT WG is rechartering with a document to address CoA proxying.=C2= =A0 We will also be addressing this issue in that document.=C2=A0 There are= additional attributes which a NAS should ignore, OR which should be filter= ed out by the proxy closest to the NAS.

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, ple= ase
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary.

--------------------------------------
RFC5176 (draft-ietf-radext-rfc3576bis-13)
--------------------------------------
Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: Dynamic Autho= rization Extensions to Remote Authentication Dial In User Service (RADIUS)<= br> Publication Date=C2=A0 =C2=A0 : January 2008
Author(s)=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: M. Chiba, G. Dommety, M= . Eklund, D. Mitton, B. Aboba
Category=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : INFORMATIONAL
Source=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : RADIUS EXTensions<= br> Area=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : Operations an= d Management
Stream=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 : IETF
Verifying Party=C2=A0 =C2=A0 =C2=A0: IESG

_______________________________________________
radext mailing list
radext@ietf.org = https://www.ietf.org/mailman/listinfo/radext



=C2=A0

--

=C2=A0

Best regards,

Kathleen

______________________________________________________________________=
___________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les message=
s electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.



--

Best regards,
Kath= leen
--001a1133f9949b5587051442e61e-- From nobody Wed Apr 22 01:35:12 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5066A1B2C2D for ; Tue, 21 Apr 2015 14:48:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, WEIRD_PORT=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5NXrhYNnYnSG for ; Tue, 21 Apr 2015 14:48:34 -0700 (PDT) Received: from mail-la0-x22d.google.com (mail-la0-x22d.google.com [IPv6:2a00:1450:4010:c03::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CDAF1B2C2B for ; Tue, 21 Apr 2015 14:48:33 -0700 (PDT) Received: by lagv1 with SMTP id v1so161331331lag.3 for ; Tue, 21 Apr 2015 14:48:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=qyP60AqdZrHhc9oJr+AVvfMIxCdvolbV3w7pGy/YF+Q=; b=MhEX/KzeNPLlC9ycrTFhxzAdX8lGeBQsM1jLaMBJlAUUTufK37AeFKC37ndL+JlpnJ UEkpx6XDQzQk/II0WMSfgi6kdA8zRNhDbMGlDNosGwznP3k2TNiKKNqziIuZHFhN5AV6 Cl5HX0CVEws9LJnWr/8Xoc5JDDwIQLzQS+lP0XM6R8zI5AIG88I4YHA/X+h4WWVUK2jL nzOKv33pxl+NpQUD6FsvT/dIhkInIMJeThlVxTALVJJnrkw3o130tNW7v+/+HR9wPa/p hw611v3zFJ5tvGnv6kJKr+EJO/bSpzRdifqJ6wqa9+nc6JbsX1S5v34GX3nOHL8DWyAN oweA== MIME-Version: 1.0 X-Received: by 10.152.120.70 with SMTP id la6mr22043793lab.65.1429652911974; Tue, 21 Apr 2015 14:48:31 -0700 (PDT) Received: by 10.112.11.199 with HTTP; Tue, 21 Apr 2015 14:48:31 -0700 (PDT) In-Reply-To: <3568_1429644234_5536A3CA_3568_7456_1_6B7134B31289DC4FAF731D844122B36E0103AF2A@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <20150224204147.6CCC6181B3D@rfc-editor.org> <9BE727B3-42D6-4C3C-84E5-398B32D2D538@freeradius.org> <550FD189.9050600@restena.lu> <16769_1427124080_55102F70_16769_5008_1_6B7134B31289DC4FAF731D844122B36EE83D0A@PEXCVZYM13.corporate.adroot.infra.ftgroup> <3568_1429644234_5536A3CA_3568_7456_1_6B7134B31289DC4FAF731D844122B36E0103AF2A@PEXCVZYM13.corporate.adroot.infra.ftgroup> Date: Tue, 21 Apr 2015 17:48:31 -0400 Message-ID: From: Kathleen Moriarty To: "" Content-Type: multipart/alternative; boundary=089e012299d4f86fcb05144301e0 Archived-At: X-Mailman-Approved-At: Wed, 22 Apr 2015 01:35:09 -0700 Cc: "gdommety@cisco.com" , "radext@ietf.org" , "david@mitton.com" , Stefan Winter , "joelja@bogus.com" , Bernard Aboba , Alan DeKok , "bclaise@cisco.com" , "meklund@cisco.com" , "mchiba@cisco.com" , RFC Errata System Subject: Re: [radext] [Technical Errata Reported] RFC5176 (4280) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 21:48:38 -0000 --089e012299d4f86fcb05144301e0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Thank you, Lionel! On Tue, Apr 21, 2015 at 3:23 PM, wrote: > it was agreed to have two distinct errata and I was expecting a new one > from Alan. I will issue a new one tomorrow. > > The step for this current errata report can be set to "verified". > > And it will be the same step for the next to come. > > > > Regards, > > > > Lionel > > > > *De :* Kathleen Moriarty [mailto:kathleen.moriarty.ietf@gmail.com] > *Envoy=C3=A9 :* mardi 21 avril 2015 19:20 > *=C3=80 :* MORAND Lionel IMT/OLN > *Cc :* Stefan Winter; Alan DeKok; gdommety@cisco.com; radext@ietf.org; > joelja@bogus.com; Bernard Aboba; david@mitton.com; bclaise@cisco.com; > meklund@cisco.com; mchiba@cisco.com; RFC Errata System > > *Objet :* Re: [radext] [Technical Errata Reported] RFC5176 (4280) > > > > Hello, > > > > Where do we stand on this, is there a second errata or should I reject > 4280 and wait for a new one that covers everything to be submitted? > > > > Thank you, > > Kathleen > > > > On Mon, Mar 23, 2015 at 11:21 AM, wrote: > > Hi, > > I think also that two separate Errata should be created. > > Regards, > > Lionel > > -----Message d'origine----- > De : Stefan Winter [mailto:stefan.winter@restena.lu] > Envoy=C3=A9 : lundi 23 mars 2015 09:41 > =C3=80 : Kathleen Moriarty; Alan DeKok > Cc : gdommety@cisco.com; radext@ietf.org; MORAND Lionel IMT/OLN; > joelja@bogus.com; Bernard Aboba; david@mitton.com; bclaise@cisco.com; > meklund@cisco.com; mchiba@cisco.com; RFC Errata System > Objet : Re: [radext] [Technical Errata Reported] RFC5176 (4280) > > > Hello, > > > Is there agreement on the changes and do additional errata need to be > > filed for the added text in this thread? > > There was no disagreement on the Errata - it seems to be correct. > > I'm not enough into process questions to answer the second part, so: the > text sketches make sense, but do we need to file a second errata, or can = we > "mangle" the original errata text to include this? Seems a bit strange to > me to have two Errata for one underlying issue; I'd prefer to have all > changes in one ... > > Since most of you are in Denver, maybe shortly touching this question in > the meeting makes sense? > > Greetings, > > Stefan Winter > > > > > Thank you, > > Kathleen > > > > On Wed, Feb 25, 2015 at 9:46 AM, Alan DeKok > > wrote: > > > > I agree. There should be an additional paragraph after the > > paragraph below, saying: > > > > ... > > Error-Cause MAY be included in a CoA-ACK and Disconnect-ACK > packet to > > indicate successful actions. If it is included in those packets= , > > the Value MUST > > be within the range 200-299. > > ... > > > > There is further discussion of CoA-ACK in the text describing the > > allowed VALUEs. But there should be a short sentence in the > > Description, too. > > > > On Feb 24, 2015, at 6:07 PM, Bernard Aboba > > > > > wrote: > > > > > The Description text should also be addressed in this Errata: > > > > > > Description > > > > > > It is possible that a Dynamic Authorization Server cannot > honor > > > Disconnect-Request or CoA-Request packets for some reason. > The > > > Error-Cause Attribute provides more detail on the cause of t= he > > > problem. It MAY be included within CoA-NAK and Disconnect-N= AK > > > packets. > > > > > > > > > -----Original Message----- > > > From: RFC Errata System [mailto:rfc-editor@rfc-editor.org > > ] > > > Sent: Tuesday, February 24, 2015 12:42 PM > > > To: mchiba@cisco.com ; gdommety@cisco.co= m > > ; meklund@cisco.com > > ; david@mitton.com > > ; Bernard Aboba; bclaise@cisco.com > > ; joelja@bogus.com > > ; stefan.winter@restena.lu > > ; lionel.morand@orange.com > > > > > Cc: aland@freeradius.org ; > > radext@ietf.org ; rfc-editor@rfc-editor.org > > > > > Subject: [Technical Errata Reported] RFC5176 (4280) > > > > > > The following errata report has been submitted for RFC5176, > > "Dynamic Authorization Extensions to Remote Authentication Dial In > > User Service (RADIUS)". > > > > > > -------------------------------------- > > > You may review the report below and at: > > > http://www.rfc-editor.org/errata_search.php?rfc=3D5176&eid=3D4280 > > > > > > -------------------------------------- > > > Type: Technical > > > Reported by: Alan DeKok > > > > > > > > Section: 3.6 > > > > > > Original Text > > > ------------- > > > 0 0 0+ 101 Error-Cause > > > > > > > > > In both tables, for CoA and Disconnect messages. > > > > > > Corrected Text > > > -------------- > > > 0 0+ 0+ 101 Error-Cause > > > > > > > > > In both tables, for CoA and Disconnect messages. > > > > > > Notes > > > ----- > > > Section 3.5 says that Error-Cause may be sent in a CoA-ACK or > > Disconnect-ACK packet: > > > > > > ... > > > Values 200-299 represent successful completion, so that thes= e > > > values may only be sent within CoA-ACK or Disconnect-ACK > packets > > > > > > Instructions: > > > ------------- > > > This erratum is currently posted as "Reported". If necessary, > > please use "Reply All" to discuss whether it should be verified or > > rejected. When a decision is reached, the verifying party (IESG) ca= n > > log in to change the status and edit the report, if necessary. > > > > > > -------------------------------------- > > > RFC5176 (draft-ietf-radext-rfc3576bis-13) > > > -------------------------------------- > > > Title : Dynamic Authorization Extensions to Remote > > Authentication Dial In User Service (RADIUS) > > > Publication Date : January 2008 > > > Author(s) : M. Chiba, G. Dommety, M. Eklund, D. Mitton, > > B. Aboba > > > Category : INFORMATIONAL > > > Source : RADIUS EXTensions > > > Area : Operations and Management > > > Stream : IETF > > > Verifying Party : IESG > > > > > > > _______________________________________________ > > radext mailing list > > radext@ietf.org > > https://www.ietf.org/mailman/listinfo/radext > > > > > > > > > > -- > > > > Best regards, > > Kathleen > > > > > > _______________________________________________ > > radext mailing list > > radext@ietf.org > > https://www.ietf.org/mailman/listinfo/radext > > > > > -- > Stefan WINTER > Ingenieur de Recherche > Fondation RESTENA - R=C3=A9seau T=C3=A9l=C3=A9informatique de l'Education= Nationale et de > la Recherche 6, rue Richard Coudenhove-Kalergi > L-1359 Luxembourg > > Tel: +352 424409 1 > Fax: +352 422473 > > PGP key updated to 4096 Bit RSA - I will encrypt all mails if the > recipient's key is known to me > > http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 > > > _________________________________________________________________________= ________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations > confidentielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez > recu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages > electroniques etant susceptibles d'alteration, > Orange decline toute responsabilite si ce message a ete altere, deforme o= u > falsifie. Merci. > > This message and its attachments may contain confidential or privileged > information that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and > delete this message and its attachments. > As emails may be altered, Orange is not liable for messages that have bee= n > modified, changed or falsified. > Thank you. > > > > > > -- > > > > Best regards, > > Kathleen > > _________________________________________________________________________= ________________________________________________ > > Ce message et ses pieces jointes peuvent contenir des informations confid= entielles ou privilegiees et ne doivent donc > pas etre diffuses, exploites ou copies sans autorisation. Si vous avez re= cu ce message par erreur, veuillez le signaler > a l'expediteur et le detruire ainsi que les pieces jointes. Les messages = electroniques etant susceptibles d'alteration, > Orange decline toute responsabilite si ce message a ete altere, deforme o= u falsifie. Merci. > > This message and its attachments may contain confidential or privileged i= nformation that may be protected by law; > they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and de= lete this message and its attachments. > As emails may be altered, Orange is not liable for messages that have bee= n modified, changed or falsified. > Thank you. > > --=20 Best regards, Kathleen --089e012299d4f86fcb05144301e0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Thank you, Lionel!

On Tue, Apr 21, 2015 at 3:23 PM, <lionel.m= orand@orange.com> wrote:

it was agr= eed to have two distinct errata and I was expecting a new one from Alan. I = will issue a new one tomorrow.

The step f= or this current errata report can be set to "verified".=

And it wil= l be the same step for the next to come.

=C2= =A0

Regards,

=C2= =A0

Lionel<= /u>

=C2= =A0

De=C2=A0: Kath= leen Moriarty [mailto:kathleen.moriarty.ietf@gmail.com]
Envoy=C3=A9=C2=A0: mardi 21 avril 2015 19:20
=C3=80=C2=A0: MORAND Lionel IMT/OLN
Cc=C2=A0: Stefan Winter; Alan DeKok; gdommety@cisco.com; radext@ietf.org; joelja@bogus.com; Bernard Aboba; david@mitton.com; bclaise@cisco.com; meklund@cisco.com; mchiba@cisco.com; RFC= Errata System


Objet=C2=A0: Re: [radext] [Technical Errata Reported] RFC5176 (4280)=

=C2=A0

Hello,

=C2=A0

Where do we stand on this, is there a second errata = or should I reject 4280 and wait for a new one that covers everything to be= submitted?

=C2=A0

Thank you,

Kathleen

=C2=A0

On Mon, Mar 23, 2015 at 11:21 AM, <lionel.morand@orange.com> wrote:

Hi,

I think also that two separate Errata should be created.

Regards,

Lionel

-----Message d'origine-----
De=C2=A0: Stefan Winter [mailto:stefan.winter@restena.lu]
Envoy=C3=A9=C2=A0: lundi 23 mars 2015 09:41
=C3=80=C2=A0: Kathleen Moriarty; Alan DeKok
Cc=C2=A0: gdommety@= cisco.com; radext@ietf.org; MORAND Lionel IMT/OLN; joelja@bogus.com; Bernard Aboba; david@mitton.com;= bclaise@cisco.com; meklund@cisco.com; mchiba@cisco.com; RFC Errata System
Objet=C2=A0: Re: [radext] [Technical Errata Reported] RFC5176 (4280)=


Hello,

> Is there agreement on the changes and do additional errata need to be<= br> > filed for the added text in this thread?

There was no disagreement on the Errata - it seems to be correct.

I'm not enough into process questions to answer the second part, so: th= e text sketches make sense, but do we need to file a second errata, or can = we "mangle" the original errata text to include this? Seems a bit= strange to me to have two Errata for one underlying issue; I'd prefer to have all changes in one ...

Since most of you are in Denver, maybe shortly touching this question in th= e meeting makes sense?

Greetings,

Stefan Winter

>
> Thank you,
> Kathleen
>
> On Wed, Feb 25, 2015 at 9:46 AM, Alan DeKok <aland@freeradius.org
> <mailto:a= land@freeradius.org>> wrote:
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0I agree.=C2=A0 There should be an additional= paragraph after the
>=C2=A0 =C2=A0 =C2=A0paragraph below, saying:
>
>=C2=A0 =C2=A0 =C2=A0...
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 Error-Cause MAY be included in a CoA-ACK an= d Disconnect-ACK packet to
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 indicate successful actions.=C2=A0 If it is= included in those packets,
>=C2=A0 =C2=A0 =C2=A0the Value MUST
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 be within the range 200-299.
>=C2=A0 =C2=A0 =C2=A0...
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0There is further discussion of CoA-ACK in th= e text describing the
>=C2=A0 =C2=A0 =C2=A0allowed VALUEs.=C2=A0 But there should be a short s= entence in the
>=C2=A0 =C2=A0 =C2=A0Description, too.
>
>=C2=A0 =C2=A0 =C2=A0On Feb 24, 2015, at 6:07 PM, Bernard Aboba
>=C2=A0 =C2=A0 =C2=A0<Bernard.Aboba@microsoft.com <mailto:Bernard.Aboba@microsoft.= com>>
>=C2=A0 =C2=A0 =C2=A0wrote:
>
>=C2=A0 =C2=A0 =C2=A0> The Description text should also be addressed = in this Errata:
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0Description
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 It is possible that a Dyna= mic Authorization Server cannot honor
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 Disconnect-Request or CoA-= Request packets for some reason.=C2=A0 The
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 Error-Cause Attribute prov= ides more detail on the cause of the
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 problem.=C2=A0 It MAY be i= ncluded within CoA-NAK and Disconnect-NAK
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 packets.
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> -----Original Message-----
>=C2=A0 =C2=A0 =C2=A0> From: RFC Errata System [mailto:rfc-editor@rfc-editor.org<= /a>
>=C2=A0 =C2=A0 =C2=A0<mailto:rfc-editor@rfc-editor.org>]
>=C2=A0 =C2=A0 =C2=A0> Sent: Tuesday, February 24, 2015 12:42 PM
>=C2=A0 =C2=A0 =C2=A0> To: mchiba@cisco.com <mailto:mchiba@cisco.com>; gdommety@cisco.com<= /a>
>=C2=A0 =C2=A0 =C2=A0<mailto:gdommety@cisco.com>; meklund@cisco.com
>=C2=A0 =C2=A0 =C2=A0<mailto:meklund@cisco.com>; david@mitton.com
>=C2=A0 =C2=A0 =C2=A0<mailto:david@mitton.com>; Bernard Aboba; bclaise@cisco.com
>=C2=A0 =C2=A0 =C2=A0<mailto:bclaise@cisco.com>; joelja@bogus.com
>=C2=A0 =C2=A0 =C2=A0<mailto:joelja@bogus.com>; stefan.winter@restena.lu
>=C2=A0 =C2=A0 =C2=A0<mailto:stefan.winter@restena.lu>; lionel.morand= @orange.com
>=C2=A0 =C2=A0 =C2=A0<mailto:lionel.morand@orange.com>
>=C2=A0 =C2=A0 =C2=A0> Cc: aland@freeradius.org <mailto:aland@freeradius.org>;
>=C2=A0 =C2=A0 =C2=A0radext@ietf.org <mailto:radext@ietf.org>; rfc-editor@r= fc-editor.org
>=C2=A0 =C2=A0 =C2=A0<mailto:rfc-editor@rfc-editor.org>
>=C2=A0 =C2=A0 =C2=A0> Subject: [Technical Errata Reported] RFC5176 (= 4280)
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> The following errata report has been submitted= for RFC5176,
>=C2=A0 =C2=A0 =C2=A0"Dynamic Authorization Extensions to Remote Au= thentication Dial In
>=C2=A0 =C2=A0 =C2=A0User Service (RADIUS)".
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> --------------------------------------
>=C2=A0 =C2=A0 =C2=A0> You may review the report below and at:
>=C2=A0 =C2=A0 =C2=A0> http://www.rfc-editor.org/errata_search.php?rfc=3D5176&eid=3D4280 >=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> --------------------------------------
>=C2=A0 =C2=A0 =C2=A0> Type: Technical
>=C2=A0 =C2=A0 =C2=A0> Reported by: Alan DeKok <aland@freeradius.org
>=C2=A0 =C2=A0 =C2=A0<mailto:aland@freeradius.org>>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Section: 3.6
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Original Text
>=C2=A0 =C2=A0 =C2=A0> -------------
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A00=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A00=C2=A0 =C2=A0 =C2=A0 =C2=A0 0+=C2=A0 101=C2=A0 =C2=A0Error-Cause
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> In both tables, for CoA and Disconnect message= s.
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Corrected Text
>=C2=A0 =C2=A0 =C2=A0> --------------
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A00=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A00+=C2=A0 =C2=A0 =C2=A0 =C2=A0 0+=C2=A0 101=C2=A0 =C2=A0Error-Cause
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> In both tables, for CoA and Disconnect message= s.
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Notes
>=C2=A0 =C2=A0 =C2=A0> -----
>=C2=A0 =C2=A0 =C2=A0> Section 3.5 says that Error-Cause may be sent = in a CoA-ACK or
>=C2=A0 =C2=A0 =C2=A0Disconnect-ACK packet:
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 ...
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 Values 200-299 represent s= uccessful completion, so that these
>=C2=A0 =C2=A0 =C2=A0>=C2=A0 =C2=A0 =C2=A0 values may only be sent wi= thin CoA-ACK or Disconnect-ACK packets
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Instructions:
>=C2=A0 =C2=A0 =C2=A0> -------------
>=C2=A0 =C2=A0 =C2=A0> This erratum is currently posted as "Repo= rted". If necessary,
>=C2=A0 =C2=A0 =C2=A0please use "Reply All" to discuss whether= it should be verified or
>=C2=A0 =C2=A0 =C2=A0rejected. When a decision is reached, the verifying= party (IESG) can
>=C2=A0 =C2=A0 =C2=A0log in to change the status and edit the report, if= necessary.
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> --------------------------------------
>=C2=A0 =C2=A0 =C2=A0> RFC5176 (draft-ietf-radext-rfc3576bis-13)
>=C2=A0 =C2=A0 =C2=A0> --------------------------------------
>=C2=A0 =C2=A0 =C2=A0> Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0: Dynamic Authorization Extensions to Remote
>=C2=A0 =C2=A0 =C2=A0Authentication Dial In User Service (RADIUS)
>=C2=A0 =C2=A0 =C2=A0> Publication Date=C2=A0 =C2=A0 : January 2008 >=C2=A0 =C2=A0 =C2=A0> Author(s)=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0: M. Chiba, G. Dommety, M. Eklund, D. Mitton,
>=C2=A0 =C2=A0 =C2=A0B. Aboba
>=C2=A0 =C2=A0 =C2=A0> Category=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 : INFORMATIONAL
>=C2=A0 =C2=A0 =C2=A0> Source=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 : RADIUS EXTensions
>=C2=A0 =C2=A0 =C2=A0> Area=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 : Operations and Management
>=C2=A0 =C2=A0 =C2=A0> Stream=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 : IETF
>=C2=A0 =C2=A0 =C2=A0> Verifying Party=C2=A0 =C2=A0 =C2=A0: IESG
>=C2=A0 =C2=A0 =C2=A0>
>
>=C2=A0 =C2=A0 =C2=A0_______________________________________________
>=C2=A0 =C2=A0 =C2=A0radext mailing list
>=C2=A0 =C2=A0 =C2=A0radext@ietf.org <mailto:radext@ietf.org>
>=C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mailman/listinfo/radext >
>
>
>
> --
>
> Best regards,
> Kathleen
>
>
> _______________________________________________
> radext mailing list
> radext@ietf.org
> https://www.ietf.org/mailman/listinfo/radext
>


--
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - R=C3=A9seau T=C3=A9l=C3=A9informatique de l'Educati= on Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient= 's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=3Dge= t&search=3D0xC0DE6A358A39DC66

_____________________= ___________________________________________________________________________= _________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les message= s electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci.

This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele= te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified.
Thank you.



=C2=A0

--

=C2=A0

Best regards,

Kathleen

______________________________________________________________________=
___________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les message=
s electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.



--

Best regards,
Kath= leen
--089e012299d4f86fcb05144301e0-- From nobody Wed Apr 22 01:35:13 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00B881B2C2D; Tue, 21 Apr 2015 14:49:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.912 X-Spam-Level: X-Spam-Status: No, score=-106.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kokxdwc9CbNv; Tue, 21 Apr 2015 14:49:27 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) by ietfa.amsl.com (Postfix) with ESMTP id 9E3461B2C2F; Tue, 21 Apr 2015 14:49:27 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 9EEE5180207; Tue, 21 Apr 2015 14:48:30 -0700 (PDT) To: aland@freeradius.org, mchiba@cisco.com, gdommety@cisco.com, meklund@cisco.com, david@mitton.com, bernarda@microsoft.com X-PHP-Originating-Script: 1005:errata_mail_lib.php From: RFC Errata System Message-Id: <20150421214830.9EEE5180207@rfc-editor.org> Date: Tue, 21 Apr 2015 14:48:30 -0700 (PDT) Archived-At: X-Mailman-Approved-At: Wed, 22 Apr 2015 01:35:09 -0700 Cc: radext@ietf.org, Kathleen.Moriarty@emc.com, iesg@ietf.org, rfc-editor@rfc-editor.org Subject: [radext] [Errata Verified] RFC5176 (4280) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 21:49:29 -0000 The following errata report has been verified for RFC5176, "Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=5176&eid=4280 -------------------------------------- Status: Verified Type: Technical Reported by: Alan DeKok Date Reported: 2015-02-24 Verified by: Kathleen Moriarty (IESG) Section: 3.6 Original Text ------------- 0 0 0+ 101 Error-Cause In both tables, for CoA and Disconnect messages. Corrected Text -------------- 0 0+ 0+ 101 Error-Cause In both tables, for CoA and Disconnect messages. Notes ----- Section 3.5 says that Error-Cause may be sent in a CoA-ACK or Disconnect-ACK packet: ... Values 200-299 represent successful completion, so that these values may only be sent within CoA-ACK or Disconnect-ACK packets -------------------------------------- RFC5176 (draft-ietf-radext-rfc3576bis-13) -------------------------------------- Title : Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS) Publication Date : January 2008 Author(s) : M. Chiba, G. Dommety, M. Eklund, D. Mitton, B. Aboba Category : INFORMATIONAL Source : RADIUS EXTensions Area : Operations and Management Stream : IETF Verifying Party : IESG From nobody Wed Apr 22 01:49:25 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D19381B313A for ; Wed, 22 Apr 2015 01:48:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6-XTC5NHtg6w for ; Wed, 22 Apr 2015 01:48:25 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias92.francetelecom.com [193.251.215.92]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54DFC1B317F for ; Wed, 22 Apr 2015 01:48:24 -0700 (PDT) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm14.si.francetelecom.fr (ESMTP service) with ESMTP id 9651122C5C4; Wed, 22 Apr 2015 10:48:22 +0200 (CEST) Received: from Exchangemail-eme1.itn.ftgroup (unknown [10.114.1.186]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id 64E6A2380B3; Wed, 22 Apr 2015 10:48:22 +0200 (CEST) Received: from PEXCVZYM13.corporate.adroot.infra.ftgroup ([fe80::cc7e:e40b:42ef:164e]) by PEXCVZYH01.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0224.002; Wed, 22 Apr 2015 10:48:22 +0200 From: To: Kathleen Moriarty Thread-Topic: [radext] [Technical Errata Reported] RFC5176 (4311) Thread-Index: AQHQfFbm1PREdfQ5MkO3AqW/57byeZ1X2wBggAACeACAANjikA== Date: Wed, 22 Apr 2015 08:48:21 +0000 Message-ID: <13317_1429692502_55376056_13317_7504_1_6B7134B31289DC4FAF731D844122B36E010481BC@PEXCVZYM13.corporate.adroot.infra.ftgroup> References: <20150323165024.CFFDA180459@rfc-editor.org> <22950_1429645448_5536A888_22950_6217_1_6B7134B31289DC4FAF731D844122B36E0103B176@PEXCVZYM13.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.197.38.2] Content-Type: multipart/alternative; boundary="_000_6B7134B31289DC4FAF731D844122B36E010481BCPEXCVZYM13corpo_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.4.22.65722 Archived-At: X-Mailman-Approved-At: Wed, 22 Apr 2015 01:49:24 -0700 Cc: "gdommety@cisco.com" , "radext@ietf.org" , Alan DeKok , Stefan Winter , joel jaeggli , "bernarda@microsoft.com" , "david@mitton.com" , Benoit Claise , "meklund@cisco.com" , "mchiba@cisco.com" , RFC Errata System Subject: Re: [radext] [Technical Errata Reported] RFC5176 (4311) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 08:48:29 -0000 --_000_6B7134B31289DC4FAF731D844122B36E010481BCPEXCVZYM13corpo_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgS2F0aGxlZW4sDQoNClRoZSBjbGFyaWZpY2F0aW9uIG9mICJtYW5kYXRvcnkiIHdhcyBhbHJl YWR5IGluIHRoZSBwcm9wb3NlZCB0ZXh0ISDimLoNClRoZSBpbml0aWFsIHByb3Bvc2VkIHRleHQg d2FzICJhbGwgYXR0cmlidXRlcyBNVVNUIGJlIHRyZWF0ZWQgYXMgbWFuZGF0b3J5IiBhbmQgbXkg cHJvcG9zZWQgdGV4dCBpcyAiYWxsIGF0dHJpYnV0ZXMgTVVTVCBiZSB0cmVhdGVkIGFzIG1hbmRh dG9yeSB0byB1bmRlcnN0YW5kIGJ5IHRoZSBOQVMiLiAgIk1hbmRhdG9yeSIgcmVmZXJzIHRvIHRo ZSBoYW5kbGluZyBvZiB0aGUgYXR0cmlidXRlcyBieSB0aGUgTkFTLCBub3QgdG8gdGhlaXIgcHJl c2VuY2UgaW4gdGhlIHJlcXVlc3RzLiBJdCBpcyB0byBhdm9pZCBtaXN1bmRlcnN0YW5kaW5nLg0K VGhlIGNvbXBsZXRlIHByb3Bvc2VkIHRleHQgaXMgcmVwZWF0ZWQgaGVyZWFmdGVyOg0KDQoNCklu IENvQS1SZXF1ZXN0IGFuZCBEaXNjb25uZWN0LVJlcXVlc3QgcGFja2V0cywgYWxsIGF0dHJpYnV0 ZXMgTVVTVA0KYmUgdHJlYXRlZCBhcyBtYW5kYXRvcnkgdG8gdW5kZXJzdGFuZCBieSB0aGUgTkFT LCBleGNlcHQgUHJveHktU3RhdGUNCg0KYXR0cmlidXRlcyB0aGF0IE1VU1QgYmUgdHJlYXRlZCBh cyBvcGFxdWUgZGF0YS4gU2VlIFNlY3Rpb24gMy4xIGZvcg0KDQpmdXJ0aGVyIGRldGFpbHMgb24g dGhlIGhhbmRsaW5nIG9mIFByb3h5LVN0YXRlIGF0dHJpYnV0ZXMgYnkgTkFTLg0KDQpBdCBsZWFz dCwgaXQgaXMgbXkgcHJvcG9zYWwgZm9yIGNsYXJpZmljYXRpb24uDQoNClJlZ2FyZHMsDQoNCkxp b25lbA0KDQpEZSA6IEthdGhsZWVuIE1vcmlhcnR5IFttYWlsdG86a2F0aGxlZW4ubW9yaWFydHku aWV0ZkBnbWFpbC5jb21dDQpFbnZvecOpIDogbWFyZGkgMjEgYXZyaWwgMjAxNSAyMzo0MQ0Kw4Ag OiBNT1JBTkQgTGlvbmVsIElNVC9PTE4NCkNjIDogUkZDIEVycmF0YSBTeXN0ZW07IG1jaGliYUBj aXNjby5jb207IGdkb21tZXR5QGNpc2NvLmNvbTsgbWVrbHVuZEBjaXNjby5jb207IGRhdmlkQG1p dHRvbi5jb207IGJlcm5hcmRhQG1pY3Jvc29mdC5jb207IEJlbm9pdCBDbGFpc2U7IGpvZWwgamFl Z2dsaTsgU3RlZmFuIFdpbnRlcjsgcmFkZXh0QGlldGYub3JnOyBBbGFuIERlS29rDQpPYmpldCA6 IFJlOiBbcmFkZXh0XSBbVGVjaG5pY2FsIEVycmF0YSBSZXBvcnRlZF0gUkZDNTE3NiAoNDMxMSkN Cg0KVGhhbmtzLCBMaW9uZWwuICBPbmUgbW9yZSBxdWVzdGlvbiBpbi1saW5lLg0KDQpPbiBUdWUs IEFwciAyMSwgMjAxNSBhdCAzOjQ0IFBNLCA8bGlvbmVsLm1vcmFuZEBvcmFuZ2UuY29tPG1haWx0 bzpsaW9uZWwubW9yYW5kQG9yYW5nZS5jb20+PiB3cm90ZToNCkknbSBPSyB3aXRoIHRoaXMgZXJy YXR1bSBidXQgSSB3b3VsZCBwcm92aWRlIGZ1cnRoZXIgY2xhcmlmaWNhdGlvbnMuDQpGaXJzdCwg SSB3b3VsZCByZWNvbW1lbmQgdG8gY2xhcmlmeSB3aGF0ICJtYW5kYXRvcnkiIGluIHRoZSBjb250 ZXh0IG9mIFJBRElVUy4NCg0KSSBjYW4gcmVwbGFjZSB0aGUgdGV4dCB3aXRoIHdoYXQgeW91IHBy b3ZpZGVkIGJlbG93LCBidXQgaWYgY2xhcmlmeWluZyB3aGF0ICJtYW5kYXRvcnkiIG1lYW5zIGlz IG5lZWRlZC4gIENhbiBzb21lb25lIHByb3Bvc2UgdGV4dCB3aXRoaW4gdGhlIHBhcmFncmFwaCBi ZWxvdyBzbyBJIGhhdmUgdGhlIGZ1bGwgcmVwbGFjZW1lbnQgdGV4dD8gIElmIEkgYW0ganVzdCBk b2luZyAiSG9sZCBGb3IgRG9jdW1lbnQgVXBkYXRlIiwgSSBjYW4gYWRkIHRoaXMgaW4gYSBub3Qg YXMgd2VsbC4gIEknZCBqdXN0IGxpa2UgdG8gZ2V0IHRoZSBhZ3JlZWQgdXBvbiB0ZXh0Lg0KSSB3 b3VsZCBhbHNvIGhpZ2hsaWdodCB0aGUgc3BlY2lmaWMgY2FzZSBvZiB0aGUgUHJveHktU3RhdGUu DQoNCkkgd291bGQgcHJvcG9zZSB0aGUgZm9sbG93aW5nIHRleHQ6DQoNCg0KSW4gQ29BLVJlcXVl c3QgYW5kIERpc2Nvbm5lY3QtUmVxdWVzdCBwYWNrZXRzLCBhbGwgYXR0cmlidXRlcyBNVVNUDQpi ZSB0cmVhdGVkIGFzIG1hbmRhdG9yeSB0byB1bmRlcnN0YW5kIGJ5IHRoZSBOQVMsIGV4Y2VwdCBQ cm94eS1TdGF0ZQ0KDQphdHRyaWJ1dGVzIHRoYXQgTVVTVCBiZSB0cmVhdGVkIGFzIG9wYXF1ZSBk YXRhLiBTZWUgU2VjdGlvbiAzLjEgZm9yDQoNCmZ1cnRoZXIgZGV0YWlscyBvbiB0aGUgaGFuZGxp bmcgb2YgUHJveHktU3RhdGUgYXR0cmlidXRlcyBieSBOQVMuDQoNCmxldCBtZSBrbm93IGlmIGl0 IGlzIE9LIGZvciB5b3UuDQoNClRoYW5rIHlvdSwNCkthdGhsZWVuDQoNCnJlZ2FyZHMsDQoNCkxp b25lbA0KDQpEZSA6IEthdGhsZWVuIE1vcmlhcnR5IFttYWlsdG86a2F0aGxlZW4ubW9yaWFydHku aWV0ZkBnbWFpbC5jb208bWFpbHRvOmthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPl0N CkVudm95w6kgOiBtYXJkaSAyMSBhdnJpbCAyMDE1IDE5OjE2DQrDgCA6IFJGQyBFcnJhdGEgU3lz dGVtDQpDYyA6IG1jaGliYUBjaXNjby5jb208bWFpbHRvOm1jaGliYUBjaXNjby5jb20+OyBnZG9t bWV0eUBjaXNjby5jb208bWFpbHRvOmdkb21tZXR5QGNpc2NvLmNvbT47IG1la2x1bmRAY2lzY28u Y29tPG1haWx0bzptZWtsdW5kQGNpc2NvLmNvbT47IGRhdmlkQG1pdHRvbi5jb208bWFpbHRvOmRh dmlkQG1pdHRvbi5jb20+OyBiZXJuYXJkYUBtaWNyb3NvZnQuY29tPG1haWx0bzpiZXJuYXJkYUBt aWNyb3NvZnQuY29tPjsgQmVub2l0IENsYWlzZTsgam9lbCBqYWVnZ2xpOyBTdGVmYW4gV2ludGVy OyBNT1JBTkQgTGlvbmVsIElNVC9PTE47IHJhZGV4dEBpZXRmLm9yZzxtYWlsdG86cmFkZXh0QGll dGYub3JnPjsgQWxhbiBEZUtvaw0KT2JqZXQgOiBSZTogW3JhZGV4dF0gW1RlY2huaWNhbCBFcnJh dGEgUmVwb3J0ZWRdIFJGQzUxNzYgKDQzMTEpDQoNCkhlbGxvLA0KDQpJIGhhdmVuJ3Qgc2VlbiBh bnkgZGlzY3Vzc2lvbiBvbiB0aGlzIGZyb20gdGhlIFJhZGV4dCBXRy4gIFRoZSByZXBvcnQgbG9v a3MgcmVhc29uYWJsZSBhbmQgbWFrZSBzZW5zZSB0byBtZSwgYnV0IHdvdWxkIGxpa2UgdG8gaGVh ciBmcm9tIHRoZSBjaGFpcnMgdG8gY29uZmlybS4gIFNpbmNlIHRoaXMgaXMgZ2V0dGluZyBhZGRy ZXNzZWQgaW4gYSBuZXcgZHJhZnQsIEkgd291bGQgYmUgaW5jbHVkZWQgdG8gbWFyayB0aGlzIGFz ICJIb2xkIGZvciBEb2N1bWVudCBVcGRhdGUiLiAgVGhpcyBwdXRzIHRoZSBlcnJhdGEgd2l0aCB0 aGlzIGRyYWZ0IChpdCdzIG5vdCByZWplY3RlZCkgYW5kIGNhbiBiZSBhZGRlZCB0byBhIG5ldyBy ZXZpc2lvbiBvZiB0aGlzIHBhcnRpY3VsYXIgZHJhZnQgaWYgaXQgZ2V0cyB1cGRhdGVkIGluIHRo ZSBmdXR1cmUuDQoNClBsZWFzZSBsZXQgbWUga25vdyBpZiB5b3UgYWdyZWUvZGlzYWdyZWUgYW5k IEknbGwgbWFyayBpdCBhcHByb3ByaWF0ZWx5Lg0KDQpUaGFua3MhDQoNCk9uIE1vbiwgTWFyIDIz LCAyMDE1IGF0IDEyOjUwIFBNLCBSRkMgRXJyYXRhIFN5c3RlbSA8cmZjLWVkaXRvckByZmMtZWRp dG9yLm9yZzxtYWlsdG86cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZz4+IHdyb3RlOg0KVGhlIGZv bGxvd2luZyBlcnJhdGEgcmVwb3J0IGhhcyBiZWVuIHN1Ym1pdHRlZCBmb3IgUkZDNTE3NiwNCiJE eW5hbWljIEF1dGhvcml6YXRpb24gRXh0ZW5zaW9ucyB0byBSZW1vdGUgQXV0aGVudGljYXRpb24g RGlhbCBJbiBVc2VyIFNlcnZpY2UgKFJBRElVUykiLg0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQ0KWW91IG1heSByZXZpZXcgdGhlIHJlcG9ydCBiZWxvdyBhbmQgYXQ6 DQpodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2VycmF0YV9zZWFyY2gucGhwP3JmYz01MTc2JmVp ZD00MzExDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpUeXBlOiBU ZWNobmljYWwNClJlcG9ydGVkIGJ5OiBBbGFuIERlS29rIDxhbGFuZEBmcmVlcmFkaXVzLm9yZzxt YWlsdG86YWxhbmRAZnJlZXJhZGl1cy5vcmc+Pg0KDQpTZWN0aW9uOiAyLjMNCg0KT3JpZ2luYWwg VGV4dA0KLS0tLS0tLS0tLS0tLQ0KU2VjdGlvbiAyLjMgc2F5czoNCg0KICAgICAgSW4gQ29BLVJl cXVlc3QgYW5kIERpc2Nvbm5lY3QtUmVxdWVzdCBwYWNrZXRzLCBhbGwgYXR0cmlidXRlcyBNVVNU DQogICAgICBiZSB0cmVhdGVkIGFzIG1hbmRhdG9yeS4NCg0KDQpDb3JyZWN0ZWQgVGV4dA0KLS0t LS0tLS0tLS0tLS0NCkluIENvQS1SZXF1ZXN0IGFuZCBEaXNjb25uZWN0LVJlcXVlc3QgcGFja2V0 cywgYWxsIGF0dHJpYnV0ZXMgTVVTVA0KYmUgdHJlYXRlZCBhcyBtYW5kYXRvcnksIGV4Y2VwdCBQ cm94eS1TdGF0ZS4gIFNlZSBTZWN0aW9uIDMuMSBmb3IgYQ0KZGlzY3Vzc2lvbiBvZiBob3cgdGhl IE5BUyBtdXN0IGhhbmRsZSBQcm94eS1TdGF0ZS4NCg0KTm90ZXMNCi0tLS0tDQpUaGlzIHdhcyBz ZWVuIHdpdGggdmVuZG9yIGVxdWlwbWVudC4gIENvQSBwcm94eWluZyB3YXMgZG9uZSB0byB0aGUg TkFTLCBhbmQgdGhlIHByb3h5IHdhcyBhZGRpbmcgYW5kIGZvcndhcmRpbmcgUHJveHktU3RhdGUg YXMgcmVxdWlyZWQgYnkgU2VjdGlvbiAzLjEuICBIb3dldmVyLCB0aGUgTkFTIHdhcyByZXR1cm5p bmcgYSBDb0EtTkFLIHdpdGggRXJyb3ItQ2F1c2UgPSBVbnN1cHBvcnRlZC1BdHRyaWJ1dGUuDQoN ClRoZSBpc3N1ZSBjb21lcyBiZWNhdXNlIFByb3h5LVN0YXRlIGlzIGNhbGxlZCBvdXQgaW4gU2Vj dGlvbiAzLjEgZm9yIHNwZWNpYWwgaGFuZGxpbmcuICBIb3dldmVyLCB0aGF0IHNwZWNpYWwgaGFu ZGxpbmcgaXNuJ3QgY2FsbGVkIG91dCBpbiBTZWN0aW9uIDIuMy4gIEFzIGEgcmVzdWx0LCBpbXBs ZW1lbnRvcnMgY2FuIGdldCBjb25mdXNlZC4NCg0KVGhlIFJBREVYVCBXRyBpcyByZWNoYXJ0ZXJp bmcgd2l0aCBhIGRvY3VtZW50IHRvIGFkZHJlc3MgQ29BIHByb3h5aW5nLiAgV2Ugd2lsbCBhbHNv IGJlIGFkZHJlc3NpbmcgdGhpcyBpc3N1ZSBpbiB0aGF0IGRvY3VtZW50LiAgVGhlcmUgYXJlIGFk ZGl0aW9uYWwgYXR0cmlidXRlcyB3aGljaCBhIE5BUyBzaG91bGQgaWdub3JlLCBPUiB3aGljaCBz aG91bGQgYmUgZmlsdGVyZWQgb3V0IGJ5IHRoZSBwcm94eSBjbG9zZXN0IHRvIHRoZSBOQVMuDQoN Ckluc3RydWN0aW9uczoNCi0tLS0tLS0tLS0tLS0NClRoaXMgZXJyYXR1bSBpcyBjdXJyZW50bHkg cG9zdGVkIGFzICJSZXBvcnRlZCIuIElmIG5lY2Vzc2FyeSwgcGxlYXNlDQp1c2UgIlJlcGx5IEFs bCIgdG8gZGlzY3VzcyB3aGV0aGVyIGl0IHNob3VsZCBiZSB2ZXJpZmllZCBvcg0KcmVqZWN0ZWQu IFdoZW4gYSBkZWNpc2lvbiBpcyByZWFjaGVkLCB0aGUgdmVyaWZ5aW5nIHBhcnR5IChJRVNHKQ0K Y2FuIGxvZyBpbiB0byBjaGFuZ2UgdGhlIHN0YXR1cyBhbmQgZWRpdCB0aGUgcmVwb3J0LCBpZiBu ZWNlc3NhcnkuDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpSRkM1 MTc2IChkcmFmdC1pZXRmLXJhZGV4dC1yZmMzNTc2YmlzLTEzKQ0KLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0NClRpdGxlICAgICAgICAgICAgICAgOiBEeW5hbWljIEF1dGhv cml6YXRpb24gRXh0ZW5zaW9ucyB0byBSZW1vdGUgQXV0aGVudGljYXRpb24gRGlhbCBJbiBVc2Vy IFNlcnZpY2UgKFJBRElVUykNClB1YmxpY2F0aW9uIERhdGUgICAgOiBKYW51YXJ5IDIwMDgNCkF1 dGhvcihzKSAgICAgICAgICAgOiBNLiBDaGliYSwgRy4gRG9tbWV0eSwgTS4gRWtsdW5kLCBELiBN aXR0b24sIEIuIEFib2JhDQpDYXRlZ29yeSAgICAgICAgICAgIDogSU5GT1JNQVRJT05BTA0KU291 cmNlICAgICAgICAgICAgICA6IFJBRElVUyBFWFRlbnNpb25zDQpBcmVhICAgICAgICAgICAgICAg IDogT3BlcmF0aW9ucyBhbmQgTWFuYWdlbWVudA0KU3RyZWFtICAgICAgICAgICAgICA6IElFVEYN ClZlcmlmeWluZyBQYXJ0eSAgICAgOiBJRVNHDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQpyYWRleHQgbWFpbGluZyBsaXN0DQpyYWRleHRAaWV0Zi5v cmc8bWFpbHRvOnJhZGV4dEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vcmFkZXh0DQoNCg0KDQotLQ0KDQpCZXN0IHJlZ2FyZHMsDQpLYXRobGVlbg0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fDQoNCg0KDQpDZSBtZXNzYWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNv bnRlbmlyIGRlcyBpbmZvcm1hdGlvbnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBl dCBuZSBkb2l2ZW50IGRvbmMNCg0KcGFzIGV0cmUgZGlmZnVzZXMsIGV4cGxvaXRlcyBvdSBjb3Bp ZXMgc2FucyBhdXRvcmlzYXRpb24uIFNpIHZvdXMgYXZleiByZWN1IGNlIG1lc3NhZ2UgcGFyIGVy cmV1ciwgdmV1aWxsZXogbGUgc2lnbmFsZXINCg0KYSBsJ2V4cGVkaXRldXIgZXQgbGUgZGV0cnVp cmUgYWluc2kgcXVlIGxlcyBwaWVjZXMgam9pbnRlcy4gTGVzIG1lc3NhZ2VzIGVsZWN0cm9uaXF1 ZXMgZXRhbnQgc3VzY2VwdGlibGVzIGQnYWx0ZXJhdGlvbiwNCg0KT3JhbmdlIGRlY2xpbmUgdG91 dGUgcmVzcG9uc2FiaWxpdGUgc2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3Ug ZmFsc2lmaWUuIE1lcmNpLg0KDQoNCg0KVGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMg bWF5IGNvbnRhaW4gY29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24gdGhhdCBt YXkgYmUgcHJvdGVjdGVkIGJ5IGxhdzsNCg0KdGhleSBzaG91bGQgbm90IGJlIGRpc3RyaWJ1dGVk LCB1c2VkIG9yIGNvcGllZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uDQoNCklmIHlvdSBoYXZlIHJl Y2VpdmVkIHRoaXMgZW1haWwgaW4gZXJyb3IsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBhbmQg ZGVsZXRlIHRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzLg0KDQpBcyBlbWFpbHMgbWF5 IGJlIGFsdGVyZWQsIE9yYW5nZSBpcyBub3QgbGlhYmxlIGZvciBtZXNzYWdlcyB0aGF0IGhhdmUg YmVlbiBtb2RpZmllZCwgY2hhbmdlZCBvciBmYWxzaWZpZWQuDQoNClRoYW5rIHlvdS4NCg0KDQoN Ci0tDQoNCkJlc3QgcmVnYXJkcywNCkthdGhsZWVuDQoKX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBldCBz ZXMgcGllY2VzIGpvaW50ZXMgcGV1dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNvbmZp ZGVudGllbGxlcyBvdSBwcml2aWxlZ2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJlIGRp ZmZ1c2VzLCBleHBsb2l0ZXMgb3UgY29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2 ZXogcmVjdSBjZSBtZXNzYWdlIHBhciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEgbCdl eHBlZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExl cyBtZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24s Ck9yYW5nZSBkZWNsaW5lIHRvdXRlIHJlc3BvbnNhYmlsaXRlIHNpIGNlIG1lc3NhZ2UgYSBldGUg YWx0ZXJlLCBkZWZvcm1lIG91IGZhbHNpZmllLiBNZXJjaS4KClRoaXMgbWVzc2FnZSBhbmQgaXRz IGF0dGFjaG1lbnRzIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGluZm9y bWF0aW9uIHRoYXQgbWF5IGJlIHByb3RlY3RlZCBieSBsYXc7CnRoZXkgc2hvdWxkIG5vdCBiZSBk aXN0cmlidXRlZCwgdXNlZCBvciBjb3BpZWQgd2l0aG91dCBhdXRob3Jpc2F0aW9uLgpJZiB5b3Ug aGF2ZSByZWNlaXZlZCB0aGlzIGVtYWlsIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5k ZXIgYW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cy4KQXMgZW1haWxz IG1heSBiZSBhbHRlcmVkLCBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBo YXZlIGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCgo= --_000_6B7134B31289DC4FAF731D844122B36E010481BCPEXCVZYM13corpo_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIg MiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3Nl LTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25z b2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0 aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJn aW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5 cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dl ZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3Jh dGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5 bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlRleHRlIGRlIGJ1bGxlcyBD YXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4 LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5QcmZvcm1h dEhUTUxDYXINCgl7bXNvLXN0eWxlLW5hbWU6IlByw6lmb3JtYXTDqSBIVE1MIENhciI7DQoJbXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQcsOpZm9ybWF0w6kgSFRNTCI7 DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RlI7fQ0Kc3Bh bi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uVGV4 dGVkZWJ1bGxlc0Nhcg0KCXttc28tc3R5bGUtbmFtZToiVGV4dGUgZGUgYnVsbGVzIENhciI7DQoJ bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJUZXh0ZSBkZSBidWxsZXMi Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjsNCgltc28tZmFyZWFzdC1sYW5n dWFnZTpGUjt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCW1zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLVVTO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsN CgltYXJnaW46NzAuODVwdCA3MC44NXB0IDcwLjg1cHQgNzAuODVwdDt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDld Pjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0K PC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91 dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpz aGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkZSIiBs aW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFG NDk3RCI+SGkgS2F0aGxlZW4sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhlIGNsYXJpZmljYXRp b24gb2YgJnF1b3Q7bWFuZGF0b3J5JnF1b3Q7IHdhcyBhbHJlYWR5IGluIHRoZSBwcm9wb3NlZCB0 ZXh0IQ0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpXaW5nZGluZ3M7Y29sb3I6IzFGNDk3RCI+Sjwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhlIGluaXRpYWwgcHJvcG9zZWQgdGV4dCB3 YXMgJnF1b3Q7YWxsIGF0dHJpYnV0ZXMgTVVTVCBiZSB0cmVhdGVkIGFzIG1hbmRhdG9yeSZxdW90 OyBhbmQgbXkgcHJvcG9zZWQgdGV4dCBpcyAmcXVvdDthbGwgYXR0cmlidXRlcyBNVVNUIGJlIHRy ZWF0ZWQgYXMgbWFuZGF0b3J5DQogdG8gdW5kZXJzdGFuZCBieSB0aGUgTkFTJnF1b3Q7LiAmbmJz cDsmcXVvdDtNYW5kYXRvcnkmcXVvdDsgcmVmZXJzIHRvIHRoZSBoYW5kbGluZyBvZiB0aGUgYXR0 cmlidXRlcyBieSB0aGUgTkFTLCBub3QgdG8gdGhlaXIgcHJlc2VuY2UgaW4gdGhlIHJlcXVlc3Rz LiBJdCBpcyB0byBhdm9pZCBtaXN1bmRlcnN0YW5kaW5nLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhlIGNvbXBsZXRlIHByb3Bvc2VkIHRleHQgaXMgcmVwZWF0 ZWQgaGVyZWFmdGVyOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+SW4g Q29BLVJlcXVlc3QgYW5kIERpc2Nvbm5lY3QtUmVxdWVzdCBwYWNrZXRzLCBhbGwgYXR0cmlidXRl cyBNVVNUPGJyPmJlIHRyZWF0ZWQgYXMgbWFuZGF0b3J5IHRvIHVuZGVyc3RhbmQgYnkgdGhlIE5B UywgZXhjZXB0IFByb3h5LVN0YXRlIDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3Bh biBsYW5nPSJFTi1VUyI+YXR0cmlidXRlcyB0aGF0IE1VU1QgYmUgdHJlYXRlZCBhcyBvcGFxdWUg ZGF0YS4gU2VlIFNlY3Rpb24gMy4xIGZvciA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+ PHNwYW4gbGFuZz0iRU4tVVMiPmZ1cnRoZXIgZGV0YWlscyBvbiB0aGUgaGFuZGxpbmcgb2YgUHJv eHktU3RhdGUgYXR0cmlidXRlcyBieSBOQVMuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+QXQgbGVhc3QsIGl0IGlzIG15IHByb3Bvc2FsIGZvciBjbGFyaWZpY2F0aW9uLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5SZWdhcmRzLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj5MaW9uZWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5EZSZuYnNwOzo8L3NwYW4+ PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gS2F0aGxlZW4gTW9yaWFydHkgW21haWx0 bzprYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbV0NCjxicj4NCjxiPkVudm95w6kmbmJz cDs6PC9iPiBtYXJkaSAyMSBhdnJpbCAyMDE1IDIzOjQxPGJyPg0KPGI+w4AmbmJzcDs6PC9iPiBN T1JBTkQgTGlvbmVsIElNVC9PTE48YnI+DQo8Yj5DYyZuYnNwOzo8L2I+IFJGQyBFcnJhdGEgU3lz dGVtOyBtY2hpYmFAY2lzY28uY29tOyBnZG9tbWV0eUBjaXNjby5jb207IG1la2x1bmRAY2lzY28u Y29tOyBkYXZpZEBtaXR0b24uY29tOyBiZXJuYXJkYUBtaWNyb3NvZnQuY29tOyBCZW5vaXQgQ2xh aXNlOyBqb2VsIGphZWdnbGk7IFN0ZWZhbiBXaW50ZXI7IHJhZGV4dEBpZXRmLm9yZzsgQWxhbiBE ZUtvazxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gUmU6IFtyYWRleHRdIFtUZWNobmljYWwgRXJy YXRhIFJlcG9ydGVkXSBSRkM1MTc2ICg0MzExKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPlRoYW5rcywgTGlvbmVsLiZuYnNwOyBPbmUgbW9yZSBxdWVzdGlvbiBpbi1saW5l LjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFR1ZSwgQXByIDIxLCAy MDE1IGF0IDM6NDQgUE0sICZsdDs8YSBocmVmPSJtYWlsdG86bGlvbmVsLm1vcmFuZEBvcmFuZ2Uu Y29tIiB0YXJnZXQ9Il9ibGFuayI+bGlvbmVsLm1vcmFuZEBvcmFuZ2UuY29tPC9hPiZndDsgd3Jv dGU6PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5J J20gT0sgd2l0aCB0aGlzIGVycmF0dW0gYnV0IEkgd291bGQgcHJvdmlkZSBmdXJ0aGVyIGNsYXJp ZmljYXRpb25zLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5G aXJzdCwgSSB3b3VsZCByZWNvbW1lbmQgdG8gY2xhcmlmeSB3aGF0ICZxdW90O21hbmRhdG9yeSZx dW90OyBpbiB0aGUgY29udGV4dCBvZiBSQURJVVMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgY2FuIHJlcGxhY2Ug dGhlIHRleHQgd2l0aCB3aGF0IHlvdSBwcm92aWRlZCBiZWxvdywgYnV0IGlmIGNsYXJpZnlpbmcg d2hhdCAmcXVvdDttYW5kYXRvcnkmcXVvdDsgbWVhbnMgaXMgbmVlZGVkLiZuYnNwOyBDYW4gc29t ZW9uZSBwcm9wb3NlIHRleHQgd2l0aGluIHRoZSBwYXJhZ3JhcGggYmVsb3cgc28gSSBoYXZlIHRo ZSBmdWxsIHJlcGxhY2VtZW50IHRleHQ/Jm5ic3A7IElmIEkgYW0ganVzdCBkb2luZyAmcXVvdDtI b2xkIEZvciBEb2N1bWVudCBVcGRhdGUmcXVvdDssDQogSSBjYW4gYWRkIHRoaXMgaW4gYSBub3Qg YXMgd2VsbC4mbmJzcDsgSSdkIGp1c3QgbGlrZSB0byBnZXQgdGhlIGFncmVlZCB1cG9uIHRleHQu Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20g Ni4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JIHdvdWxkIGFsc28gaGlnaGxpZ2h0IHRoZSBzcGVjaWZp YyBjYXNlIG9mIHRoZSBQcm94eS1TdGF0ZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPkkgd291bGQgcHJvcG9zZSB0aGUgZm9sbG93aW5nIHRleHQ6PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPkluIENvQS1SZXF1ZXN0IGFuZCBEaXNjb25u ZWN0LVJlcXVlc3QgcGFja2V0cywgYWxsIGF0dHJpYnV0ZXMgTVVTVDxicj5iZSB0cmVhdGVkIGFz IG1hbmRhdG9yeSB0byB1bmRlcnN0YW5kIGJ5IHRoZSBOQVMsIGV4Y2VwdCBQcm94eS1TdGF0ZSA8 L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPmF0dHJpYnV0 ZXMgdGhhdCBNVVNUIGJlIHRyZWF0ZWQgYXMgb3BhcXVlIGRhdGEuIFNlZSBTZWN0aW9uIDMuMSBm b3IgPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5mdXJ0 aGVyIGRldGFpbHMgb24gdGhlIGhhbmRsaW5nIG9mIFByb3h5LVN0YXRlIGF0dHJpYnV0ZXMgYnkg TkFTLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPmxldCBtZSBrbm93IGlmIGl0IGlzIE9LIGZvciB5b3UuPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPlRoYW5rIHlvdSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkthdGhsZWVuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0ND IDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2lu LXJpZ2h0OjBjbSI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+cmVnYXJkcyw8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkxpb25lbDwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 Ij5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gS2F0aGxl ZW4gTW9yaWFydHkgW21haWx0bzo8YSBocmVmPSJtYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0 ZkBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5rYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWls LmNvbTwvYT5dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gbWFyZGkgMjEgYXZyaWwgMjAx NSAxOToxNjxicj4NCjxiPsOAJm5ic3A7OjwvYj4gUkZDIEVycmF0YSBTeXN0ZW08YnI+DQo8Yj5D YyZuYnNwOzo8L2I+IDxhIGhyZWY9Im1haWx0bzptY2hpYmFAY2lzY28uY29tIiB0YXJnZXQ9Il9i bGFuayI+bWNoaWJhQGNpc2NvLmNvbTwvYT47DQo8YSBocmVmPSJtYWlsdG86Z2RvbW1ldHlAY2lz Y28uY29tIiB0YXJnZXQ9Il9ibGFuayI+Z2RvbW1ldHlAY2lzY28uY29tPC9hPjsgPGEgaHJlZj0i bWFpbHRvOm1la2x1bmRAY2lzY28uY29tIiB0YXJnZXQ9Il9ibGFuayI+DQptZWtsdW5kQGNpc2Nv LmNvbTwvYT47IDxhIGhyZWY9Im1haWx0bzpkYXZpZEBtaXR0b24uY29tIiB0YXJnZXQ9Il9ibGFu ayI+ZGF2aWRAbWl0dG9uLmNvbTwvYT47DQo8YSBocmVmPSJtYWlsdG86YmVybmFyZGFAbWljcm9z b2Z0LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmJlcm5hcmRhQG1pY3Jvc29mdC5jb208L2E+OyBCZW5v aXQgQ2xhaXNlOyBqb2VsIGphZWdnbGk7IFN0ZWZhbiBXaW50ZXI7IE1PUkFORCBMaW9uZWwgSU1U L09MTjsNCjxhIGhyZWY9Im1haWx0bzpyYWRleHRAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5y YWRleHRAaWV0Zi5vcmc8L2E+OyBBbGFuIERlS29rPGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBS ZTogW3JhZGV4dF0gW1RlY2huaWNhbCBFcnJhdGEgUmVwb3J0ZWRdIFJGQzUxNzYgKDQzMTEpPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SGVs bG8sPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBo YXZlbid0IHNlZW4gYW55IGRpc2N1c3Npb24gb24gdGhpcyBmcm9tIHRoZSBSYWRleHQgV0cuJm5i c3A7IFRoZSByZXBvcnQgbG9va3MgcmVhc29uYWJsZSBhbmQgbWFrZSBzZW5zZSB0byBtZSwgYnV0 IHdvdWxkIGxpa2UgdG8gaGVhciBmcm9tIHRoZSBjaGFpcnMgdG8gY29uZmlybS4mbmJzcDsgU2lu Y2UgdGhpcyBpcyBnZXR0aW5nDQogYWRkcmVzc2VkIGluIGEgbmV3IGRyYWZ0LCBJIHdvdWxkIGJl IGluY2x1ZGVkIHRvIG1hcmsgdGhpcyBhcyAmcXVvdDtIb2xkIGZvciBEb2N1bWVudCBVcGRhdGUm cXVvdDsuJm5ic3A7IFRoaXMgcHV0cyB0aGUgZXJyYXRhIHdpdGggdGhpcyBkcmFmdCAoaXQncyBu b3QgcmVqZWN0ZWQpIGFuZCBjYW4gYmUgYWRkZWQgdG8gYSBuZXcgcmV2aXNpb24gb2YgdGhpcyBw YXJ0aWN1bGFyIGRyYWZ0IGlmIGl0IGdldHMgdXBkYXRlZCBpbiB0aGUgZnV0dXJlLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+UGxlYXNl IGxldCBtZSBrbm93IGlmIHlvdSBhZ3JlZS9kaXNhZ3JlZSBhbmQgSSdsbCBtYXJrIGl0IGFwcHJv cHJpYXRlbHkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj5UaGFua3MhPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj5PbiBNb24sIE1hciAyMywgMjAxNSBhdCAxMjo1MCBQTSwgUkZD IEVycmF0YSBTeXN0ZW0gJmx0OzxhIGhyZWY9Im1haWx0bzpyZmMtZWRpdG9yQHJmYy1lZGl0b3Iu b3JnIiB0YXJnZXQ9Il9ibGFuayI+cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZzwvYT4mZ3Q7IHdy b3RlOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5UaGUgZm9sbG93aW5n IGVycmF0YSByZXBvcnQgaGFzIGJlZW4gc3VibWl0dGVkIGZvciBSRkM1MTc2LDxicj4NCiZxdW90 O0R5bmFtaWMgQXV0aG9yaXphdGlvbiBFeHRlbnNpb25zIHRvIFJlbW90ZSBBdXRoZW50aWNhdGlv biBEaWFsIEluIFVzZXIgU2VydmljZSAoUkFESVVTKSZxdW90Oy48YnI+DQo8YnI+DQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxicj4NCllvdSBtYXkgcmV2aWV3IHRoZSBy ZXBvcnQgYmVsb3cgYW5kIGF0Ojxicj4NCjxhIGhyZWY9Imh0dHA6Ly93d3cucmZjLWVkaXRvci5v cmcvZXJyYXRhX3NlYXJjaC5waHA/cmZjPTUxNzYmYW1wO2VpZD00MzExIiB0YXJnZXQ9Il9ibGFu ayI+aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9lcnJhdGFfc2VhcmNoLnBocD9yZmM9NTE3NiZh bXA7ZWlkPTQzMTE8L2E+PGJyPg0KPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS08YnI+DQpUeXBlOiBUZWNobmljYWw8YnI+DQpSZXBvcnRlZCBieTogQWxhbiBEZUtv ayAmbHQ7PGEgaHJlZj0ibWFpbHRvOmFsYW5kQGZyZWVyYWRpdXMub3JnIiB0YXJnZXQ9Il9ibGFu ayI+YWxhbmRAZnJlZXJhZGl1cy5vcmc8L2E+Jmd0Ozxicj4NCjxicj4NClNlY3Rpb246IDIuMzxi cj4NCjxicj4NCk9yaWdpbmFsIFRleHQ8YnI+DQotLS0tLS0tLS0tLS0tPGJyPg0KU2VjdGlvbiAy LjMgc2F5czo8YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyBJbiBDb0EtUmVxdWVzdCBh bmQgRGlzY29ubmVjdC1SZXF1ZXN0IHBhY2tldHMsIGFsbCBhdHRyaWJ1dGVzIE1VU1Q8YnI+DQom bmJzcDsgJm5ic3A7ICZuYnNwOyBiZSB0cmVhdGVkIGFzIG1hbmRhdG9yeS48YnI+DQo8YnI+DQo8 YnI+DQpDb3JyZWN0ZWQgVGV4dDxicj4NCi0tLS0tLS0tLS0tLS0tPGJyPg0KSW4gQ29BLVJlcXVl c3QgYW5kIERpc2Nvbm5lY3QtUmVxdWVzdCBwYWNrZXRzLCBhbGwgYXR0cmlidXRlcyBNVVNUPGJy Pg0KYmUgdHJlYXRlZCBhcyBtYW5kYXRvcnksIGV4Y2VwdCBQcm94eS1TdGF0ZS4mbmJzcDsgU2Vl IFNlY3Rpb24gMy4xIGZvciBhPGJyPg0KZGlzY3Vzc2lvbiBvZiBob3cgdGhlIE5BUyBtdXN0IGhh bmRsZSBQcm94eS1TdGF0ZS48YnI+DQo8YnI+DQpOb3Rlczxicj4NCi0tLS0tPGJyPg0KVGhpcyB3 YXMgc2VlbiB3aXRoIHZlbmRvciBlcXVpcG1lbnQuJm5ic3A7IENvQSBwcm94eWluZyB3YXMgZG9u ZSB0byB0aGUgTkFTLCBhbmQgdGhlIHByb3h5IHdhcyBhZGRpbmcgYW5kIGZvcndhcmRpbmcgUHJv eHktU3RhdGUgYXMgcmVxdWlyZWQgYnkgU2VjdGlvbiAzLjEuJm5ic3A7IEhvd2V2ZXIsIHRoZSBO QVMgd2FzIHJldHVybmluZyBhIENvQS1OQUsgd2l0aCBFcnJvci1DYXVzZSA9IFVuc3VwcG9ydGVk LUF0dHJpYnV0ZS48YnI+DQo8YnI+DQpUaGUgaXNzdWUgY29tZXMgYmVjYXVzZSBQcm94eS1TdGF0 ZSBpcyBjYWxsZWQgb3V0IGluIFNlY3Rpb24gMy4xIGZvciBzcGVjaWFsIGhhbmRsaW5nLiZuYnNw OyBIb3dldmVyLCB0aGF0IHNwZWNpYWwgaGFuZGxpbmcgaXNuJ3QgY2FsbGVkIG91dCBpbiBTZWN0 aW9uIDIuMy4mbmJzcDsgQXMgYSByZXN1bHQsIGltcGxlbWVudG9ycyBjYW4gZ2V0IGNvbmZ1c2Vk Ljxicj4NCjxicj4NClRoZSBSQURFWFQgV0cgaXMgcmVjaGFydGVyaW5nIHdpdGggYSBkb2N1bWVu dCB0byBhZGRyZXNzIENvQSBwcm94eWluZy4mbmJzcDsgV2Ugd2lsbCBhbHNvIGJlIGFkZHJlc3Np bmcgdGhpcyBpc3N1ZSBpbiB0aGF0IGRvY3VtZW50LiZuYnNwOyBUaGVyZSBhcmUgYWRkaXRpb25h bCBhdHRyaWJ1dGVzIHdoaWNoIGEgTkFTIHNob3VsZCBpZ25vcmUsIE9SIHdoaWNoIHNob3VsZCBi ZSBmaWx0ZXJlZCBvdXQgYnkgdGhlIHByb3h5IGNsb3Nlc3QgdG8gdGhlIE5BUy48YnI+DQo8YnI+ DQpJbnN0cnVjdGlvbnM6PGJyPg0KLS0tLS0tLS0tLS0tLTxicj4NClRoaXMgZXJyYXR1bSBpcyBj dXJyZW50bHkgcG9zdGVkIGFzICZxdW90O1JlcG9ydGVkJnF1b3Q7LiBJZiBuZWNlc3NhcnksIHBs ZWFzZTxicj4NCnVzZSAmcXVvdDtSZXBseSBBbGwmcXVvdDsgdG8gZGlzY3VzcyB3aGV0aGVyIGl0 IHNob3VsZCBiZSB2ZXJpZmllZCBvcjxicj4NCnJlamVjdGVkLiBXaGVuIGEgZGVjaXNpb24gaXMg cmVhY2hlZCwgdGhlIHZlcmlmeWluZyBwYXJ0eSAoSUVTRyk8YnI+DQpjYW4gbG9nIGluIHRvIGNo YW5nZSB0aGUgc3RhdHVzIGFuZCBlZGl0IHRoZSByZXBvcnQsIGlmIG5lY2Vzc2FyeS48YnI+DQo8 YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxicj4NClJGQzUxNzYg KGRyYWZ0LWlldGYtcmFkZXh0LXJmYzM1NzZiaXMtMTMpPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS08YnI+DQpUaXRsZSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs6IER5bmFtaWMgQXV0aG9yaXphdGlvbiBFeHRl bnNpb25zIHRvIFJlbW90ZSBBdXRoZW50aWNhdGlvbiBEaWFsIEluIFVzZXIgU2VydmljZSAoUkFE SVVTKTxicj4NClB1YmxpY2F0aW9uIERhdGUmbmJzcDsgJm5ic3A7IDogSmFudWFyeSAyMDA4PGJy Pg0KQXV0aG9yKHMpJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs6IE0u IENoaWJhLCBHLiBEb21tZXR5LCBNLiBFa2x1bmQsIEQuIE1pdHRvbiwgQi4gQWJvYmE8YnI+DQpD YXRlZ29yeSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDogSU5GT1JN QVRJT05BTDxicj4NClNvdXJjZSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyA6IFJBRElVUyBFWFRlbnNpb25zPGJyPg0KQXJlYSZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgOiBPcGVyYXRpb25zIGFuZCBN YW5hZ2VtZW50PGJyPg0KU3RyZWFtJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7IDogSUVURjxicj4NClZlcmlmeWluZyBQYXJ0eSZuYnNwOyAmbmJzcDsgJm5i c3A7OiBJRVNHPGJyPg0KPGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX188YnI+DQpyYWRleHQgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRv OnJhZGV4dEBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnJhZGV4dEBpZXRmLm9yZzwvYT48YnI+ DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhZGV4dCIg dGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmFk ZXh0PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxi cj4NCjxiciBjbGVhcj0iYWxsIj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+LS0NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+QmVzdCByZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj5LYXRobGVlbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cHJlPl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpw PjwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPHByZT5DZSBtZXNz YWdlIGV0IHNlcyBwaWVjZXMgam9pbnRlcyBwZXV2ZW50IGNvbnRlbmlyIGRlcyBpbmZvcm1hdGlv bnMgY29uZmlkZW50aWVsbGVzIG91IHByaXZpbGVnaWVlcyBldCBuZSBkb2l2ZW50IGRvbmM8bzpw PjwvbzpwPjwvcHJlPg0KPHByZT5wYXMgZXRyZSBkaWZmdXNlcywgZXhwbG9pdGVzIG91IGNvcGll cyBzYW5zIGF1dG9yaXNhdGlvbi4gU2kgdm91cyBhdmV6IHJlY3UgY2UgbWVzc2FnZSBwYXIgZXJy ZXVyLCB2ZXVpbGxleiBsZSBzaWduYWxlcjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPmEgbCdleHBl ZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBt ZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sPG86 cD48L286cD48L3ByZT4NCjxwcmU+T3JhbmdlIGRlY2xpbmUgdG91dGUgcmVzcG9uc2FiaWxpdGUg c2kgY2UgbWVzc2FnZSBhIGV0ZSBhbHRlcmUsIGRlZm9ybWUgb3UgZmFsc2lmaWUuIE1lcmNpLjxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8cHJlPlRoaXMg bWVzc2FnZSBhbmQgaXRzIGF0dGFjaG1lbnRzIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBvciBw cml2aWxlZ2VkIGluZm9ybWF0aW9uIHRoYXQgbWF5IGJlIHByb3RlY3RlZCBieSBsYXc7PG86cD48 L286cD48L3ByZT4NCjxwcmU+dGhleSBzaG91bGQgbm90IGJlIGRpc3RyaWJ1dGVkLCB1c2VkIG9y IGNvcGllZCB3aXRob3V0IGF1dGhvcmlzYXRpb24uPG86cD48L286cD48L3ByZT4NCjxwcmU+SWYg eW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUg c2VuZGVyIGFuZCBkZWxldGUgdGhpcyBtZXNzYWdlIGFuZCBpdHMgYXR0YWNobWVudHMuPG86cD48 L286cD48L3ByZT4NCjxwcmU+QXMgZW1haWxzIG1heSBiZSBhbHRlcmVkLCBPcmFuZ2UgaXMgbm90 IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZlIGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQgb3Ig ZmFsc2lmaWVkLjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPlRoYW5rIHlvdS48bzpwPjwvbzpwPjwv cHJlPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pjxicj4NCjxiciBjbGVhcj0iYWxsIj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4tLSA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ QmVzdCByZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+S2F0aGxlZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxQUkU+X19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKQ2UgbWVzc2FnZSBldCBzZXMg cGllY2VzIGpvaW50ZXMgcGV1dmVudCBjb250ZW5pciBkZXMgaW5mb3JtYXRpb25zIGNvbmZpZGVu dGllbGxlcyBvdSBwcml2aWxlZ2llZXMgZXQgbmUgZG9pdmVudCBkb25jCnBhcyBldHJlIGRpZmZ1 c2VzLCBleHBsb2l0ZXMgb3UgY29waWVzIHNhbnMgYXV0b3Jpc2F0aW9uLiBTaSB2b3VzIGF2ZXog cmVjdSBjZSBtZXNzYWdlIHBhciBlcnJldXIsIHZldWlsbGV6IGxlIHNpZ25hbGVyCmEgbCdleHBl ZGl0ZXVyIGV0IGxlIGRldHJ1aXJlIGFpbnNpIHF1ZSBsZXMgcGllY2VzIGpvaW50ZXMuIExlcyBt ZXNzYWdlcyBlbGVjdHJvbmlxdWVzIGV0YW50IHN1c2NlcHRpYmxlcyBkJ2FsdGVyYXRpb24sCk9y YW5nZSBkZWNsaW5lIHRvdXRlIHJlc3BvbnNhYmlsaXRlIHNpIGNlIG1lc3NhZ2UgYSBldGUgYWx0 ZXJlLCBkZWZvcm1lIG91IGZhbHNpZmllLiBNZXJjaS4KClRoaXMgbWVzc2FnZSBhbmQgaXRzIGF0 dGFjaG1lbnRzIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGluZm9ybWF0 aW9uIHRoYXQgbWF5IGJlIHByb3RlY3RlZCBieSBsYXc7CnRoZXkgc2hvdWxkIG5vdCBiZSBkaXN0 cmlidXRlZCwgdXNlZCBvciBjb3BpZWQgd2l0aG91dCBhdXRob3Jpc2F0aW9uLgpJZiB5b3UgaGF2 ZSByZWNlaXZlZCB0aGlzIGVtYWlsIGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIg YW5kIGRlbGV0ZSB0aGlzIG1lc3NhZ2UgYW5kIGl0cyBhdHRhY2htZW50cy4KQXMgZW1haWxzIG1h eSBiZSBhbHRlcmVkLCBPcmFuZ2UgaXMgbm90IGxpYWJsZSBmb3IgbWVzc2FnZXMgdGhhdCBoYXZl IGJlZW4gbW9kaWZpZWQsIGNoYW5nZWQgb3IgZmFsc2lmaWVkLgpUaGFuayB5b3UuCjwvUFJFPjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_6B7134B31289DC4FAF731D844122B36E010481BCPEXCVZYM13corpo_-- From nobody Wed Apr 22 03:21:14 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB1481A8880 for ; Wed, 22 Apr 2015 03:21:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x9sNx5SYxpYc for ; Wed, 22 Apr 2015 03:21:10 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC4C51A885C for ; Wed, 22 Apr 2015 03:21:09 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BRR65112; Wed, 22 Apr 2015 10:21:08 +0000 (GMT) Received: from SJCEML702-CHM.china.huawei.com (10.212.94.48) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.158.1; Wed, 22 Apr 2015 11:21:07 +0100 Received: from SJCEML701-CHM.china.huawei.com ([169.254.3.13]) by SJCEML702-CHM.china.huawei.com ([169.254.4.237]) with mapi id 14.03.0158.001; Wed, 22 Apr 2015 03:21:02 -0700 From: Dean cheng To: Alan DeKok , "lionel.morand@orange.com" Thread-Topic: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-03 Thread-Index: AQHQa9io3cIZrfp3bEKyjtwpIkzi1J1Y8fbw Date: Wed, 22 Apr 2015 10:21:02 +0000 Message-ID: References: <10094_1427820685_551AD08D_10094_7330_1_6B7134B31289DC4FAF731D844122B36EEF695D@PEXCVZYM13.corporate.adroot.infra.ftgroup> <7BD5C839-E2F6-410D-A8A4-F16ADD5B1C02@deployingradius.com> In-Reply-To: <7BD5C839-E2F6-410D-A8A4-F16ADD5B1C02@deployingradius.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.130.129] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "radext@ietf.org" , "radext-chairs@tools.ietf.org" Subject: Re: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-03 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 10:21:13 -0000 Hello, We've just posted the 04 text that addressed comments posted by Alan. It is: http://tools.ietf.org/html/draft-ietf-radext-ip-port-radius-ext-04 Cheers Dean > -----Original Message----- > From: radext [mailto:radext-bounces@ietf.org] On Behalf Of Alan DeKok > Sent: Tuesday, March 31, 2015 10:32 AM > To: lionel.morand@orange.com > Cc: radext@ietf.org; radext-chairs@tools.ietf.org > Subject: Re: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-= ext- > 03 >=20 > I'm not sure what Section 3.1.1 is for. It shouldn't be needed. The > document does NOT define a new extended type. It defines a new RADIUS > attribute. That attribute is allocated from the extended type space. >=20 > My $0.02 is to remove Section 3.1.1, and all references to it. Instead= , > just say: >=20 > 3.1.2. IP-Port-Limit Attribute >=20 > This attribute is of Extended-Type, and contains a set of embedded TLV= s ... >=20 > Also, IANA should assign values. There's no need to call them out: >=20 > Type: >=20 > TBA1 - Extended-Type-1 (241), Extended-Type-2 (242), Extended- > Type-3 (243), or Extended-Type-4 (244) per [RFC6929]. >=20 >=20 > Just replace that with: >=20 > Type: >=20 > TBA1 >=20 >=20 > It could be clearer that the same set of TLVs can be contained within t= he > encapsulating attribute. This means (e.g.) that IANA must allocate *mult= iple* > attributes, e.g. >=20 > 241.33.1 IP-Port-Type TLV inside of IP-Port-Limit > 241.34.1 P-Port-Type TLV inside of IP-Port-Forwarding-Map Attribute >=20 > etc. The IANA section isn't clear to me, either. e.g. >=20 > o TBA1 (refer to Section 3.1.1): This value is for the Radius Type > field and should be allocated from the number space of Extended- > Type-1 (241), Extended-Type-2 (242), Extended-Type-3 (243), or > Extended-Type-4 (244) per [RFC6929]. >=20 > o TBA2 (refer to Section 3.1.1): This value is for the Extended-Type > field and should be allocated from the Short Extended Space per > [RFC6929]. >=20 >=20 > That's unnecessary, and should be deleted. >=20 > o TBA3 (refer to Section 3.2.1): This value is for the Type field of > IP-Port-Type TLV. It should be allocated as TLV data type. It is > within the TBA2 container and it extends the attribute tree as > TBA1.TBA2.TBA3.[...]. Also, this value uniquely refers to IPFIX > Element ID transportType (TBAx1). >=20 > Just say something like "TBA3: IP-Port-Type allocated from within the s= hort > extended space". >=20 > The reference to IPFix should specify an IANA action: >=20 > Add a note for that attribute, saying that this attribute contains data > from IPFix Element ID transportType TBAx1" >=20 > If all of the TLVs can be used in all of the attributes, then the alloc= ation > of the TLVs should be done for the *first* attribute. i.e. IP-Port-Type = is a > sub-TLV of IP-Port-Limit, and should be assigned the number "TBA3.1". It= 's OK > to manually allocate numbers where they're TLVs, and not been allocated b= efore. >=20 > The document should *also* tell IANA to prohibit allocation of TLVs und= er > the IP-Port-Forwarding-Map, etc. attributes. And note that those attrib= utes > are all of type TLV, with TLVs defined by the IP-Port-Limit attribute. >=20 > That's it for now... >=20 > Also, the document contains many data types which are explicitly forbid= den > by RFC 6929. 8-bit, 16-bit, etc. While I know that these are in IPFIX, = I > wouldn't recommend using them here. They should all be moved to "integer= " > data types, with a note that the bits unused by IPFIX *must* be zero. >=20 >=20 > On Mar 31, 2015, at 12:51 PM, > wrote: >=20 > > During the RADEXT session at IETF92, the authors of draft-ietf-radext-i= p- > port-radius-ext-03 have asked for a Working Group Last Call. > > > > This email officially starts a Working Group Last Call for the > > following document > > > > http://tools.ietf.org/html/draft-ietf-radext-ip-port-radius-ext-03 > > > > Please respond to this email to support the document and/or send commen= ts by > 2015-04-13. > > > > In addition, following the strategy for promoting compliance with the I= PR > disclosure rules (RFC6702), the chairs would like to check whether there= are > claims of Intellectual Property Rights (IPR) on the document that need to= be > disclosed. Therefore, the following questions are addressed to the WG and > Especially Authors and Contributors of the draft: > > > > Are you personally aware of any IPR that applies to > > draft-ietf-radext-ip-port-radius-ext-03? If so, has this IPR been > > disclosed in compliance with IETF IPR rules? (See RFCs 3979, 4879, > > 3669, and 5378 for more details.) > > > > If you are a document author or listed contributor on this document, pl= ease > reply to this email message regardless of whether or not you are personal= ly > aware of any relevant IPR. We might not be able to advance this document= to > the next stage until we have received a reply from each author and listed > contributor. > > > > If you are on the RADEXT WG email list but are not an author or listed > contributor for this document, you are reminded of your opportunity for a > voluntary IPR disclosure under BCP 79. Please do not reply unless you w= ant > to make such a voluntary disclosure. > > > > Online tools for filing IPR disclosures can be found at > . > > > > Regards, > > > > Lionel & Stefan > > > > ______________________________________________________________________ > > ___________________________________________________ > > > > Ce message et ses pieces jointes peuvent contenir des informations > > confidentielles ou privilegiees et ne doivent donc pas etre diffuses, > > exploites ou copies sans autorisation. Si vous avez recu ce message > > par erreur, veuillez le signaler a l'expediteur et le detruire ainsi qu= e les > pieces jointes. Les messages electroniques etant susceptibles d'alteratio= n, > Orange decline toute responsabilite si ce message a ete altere, deforme o= u > falsifie. Merci. > > > > This message and its attachments may contain confidential or > > privileged information that may be protected by law; they should not be > distributed, used or copied without authorisation. > > If you have received this email in error, please notify the sender and > delete this message and its attachments. > > As emails may be altered, Orange is not liable for messages that have b= een > modified, changed or falsified. > > Thank you. > > > > _______________________________________________ > > radext mailing list > > radext@ietf.org > > https://www.ietf.org/mailman/listinfo/radext >=20 > _______________________________________________ > radext mailing list > radext@ietf.org > https://www.ietf.org/mailman/listinfo/radext From nobody Wed Apr 22 12:29:59 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48CAA1B398A for ; Wed, 22 Apr 2015 12:29:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9k2v77L4VDI9 for ; Wed, 22 Apr 2015 12:29:55 -0700 (PDT) Received: from power.freeradius.org (power.freeradius.org [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id 53B1A1B3988 for ; Wed, 22 Apr 2015 12:29:55 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id A59AD2244FD4; Wed, 22 Apr 2015 21:29:53 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AQXtmnbl7fO6; Wed, 22 Apr 2015 21:29:53 +0200 (CEST) Received: from [192.168.20.59] (69-196-165-104.dsl.teksavvy.com [69.196.165.104]) by power.freeradius.org (Postfix) with ESMTPSA id E1B9D224348A; Wed, 22 Apr 2015 21:29:51 +0200 (CEST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Alan DeKok In-Reply-To: Date: Wed, 22 Apr 2015 15:29:50 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <10094_1427820685_551AD08D_10094_7330_1_6B7134B31289DC4FAF731D844122B36EEF695D@PEXCVZYM13.corporate.adroot.infra.ftgroup> <7BD5C839-E2F6-410D-A8A4-F16ADD5B1C02@deployingradius.com> To: Dean cheng X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: "radext@ietf.org" , "radext-chairs@tools.ietf.org" , "lionel.morand@orange.com" Subject: Re: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-03 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 19:29:57 -0000 On Apr 22, 2015, at 6:21 AM, Dean cheng wrote: > We've just posted the 04 text that addressed comments > posted by Alan. It is: >=20 > http://tools.ietf.org/html/draft-ietf-radext-ip-port-radius-ext-04 On a quick scan, it looks good. The only minor nit is the ASCII art. = You have a field ending at the end of a line, and then continuing on the = next line: ... | Field-Name | | Field-Name | ... It should just be: ... | Field-Name=20 Field-Name | ... i.e. without the last | on the first line, and the first | on the next = line. From nobody Thu Apr 23 01:13:01 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23D121B2F9B; Thu, 23 Apr 2015 01:12:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E71XvZ_497z4; Thu, 23 Apr 2015 01:12:57 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D892B1B2F7E; Thu, 23 Apr 2015 01:12:37 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150423081237.17890.78595.idtracker@ietfa.amsl.com> Date: Thu, 23 Apr 2015 01:12:37 -0700 Archived-At: Cc: radext@ietf.org Subject: [radext] I-D Action: draft-ietf-radext-ip-port-radius-ext-05.txt X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 08:12:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the RADIUS EXTensions Working Group of the IETF. Title : RADIUS Extensions for IP Port Configuration and Reporting Authors : Dean Cheng Jouni Korhonen Mohamed Boucadair Senthil Sivakumar Filename : draft-ietf-radext-ip-port-radius-ext-05.txt Pages : 36 Date : 2015-04-23 Abstract: This document defines three new RADIUS attributes. For devices that implementing IP port ranges, these attributes are used to communicate with a RADIUS server in order to configure and report TCP/UDP ports and ICMP identifiers, as well as mapping behavior for specific hosts. This mechanism can be used in various deployment scenarios such as CGN (Carrier Grade NAT), NAT64, Provider WLAN Gateway, etc. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-radext-ip-port-radius-ext/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-radext-ip-port-radius-ext-05 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-radext-ip-port-radius-ext-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Apr 23 01:17:44 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F9501B2F9A for ; Thu, 23 Apr 2015 01:17:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aLBGfSQMQcwy for ; Thu, 23 Apr 2015 01:17:41 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02CE21B2FA8 for ; Thu, 23 Apr 2015 01:17:28 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BRS57800; Thu, 23 Apr 2015 08:17:27 +0000 (GMT) Received: from SJCEML703-CHM.china.huawei.com (10.212.94.49) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.158.1; Thu, 23 Apr 2015 09:17:26 +0100 Received: from SJCEML701-CHM.china.huawei.com ([169.254.3.13]) by SJCEML703-CHM.china.huawei.com ([169.254.5.137]) with mapi id 14.03.0158.001; Thu, 23 Apr 2015 01:17:21 -0700 From: Dean cheng To: Alan DeKok Thread-Topic: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-03 Thread-Index: AQHQa9io3cIZrfp3bEKyjtwpIkzi1J1Y8fbwgAERFwCAAF/vEA== Date: Thu, 23 Apr 2015 08:17:20 +0000 Message-ID: References: <10094_1427820685_551AD08D_10094_7330_1_6B7134B31289DC4FAF731D844122B36EEF695D@PEXCVZYM13.corporate.adroot.infra.ftgroup> <7BD5C839-E2F6-410D-A8A4-F16ADD5B1C02@deployingradius.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.133.88] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "radext@ietf.org" , "radext-chairs@tools.ietf.org" , "lionel.morand@orange.com" Subject: Re: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-ext-03 X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 08:17:43 -0000 Alan - thanks for the review and catch. It is now fixed in the 05 text: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-radext-ip-port-radius-ext-05 Cheers Dean > -----Original Message----- > From: radext [mailto:radext-bounces@ietf.org] On Behalf Of Alan DeKok > Sent: Wednesday, April 22, 2015 12:30 PM > To: Dean cheng > Cc: radext@ietf.org; radext-chairs@tools.ietf.org; lionel.morand@orange.c= om > Subject: Re: [radext] Start of WGLC for draft-ietf-radext-ip-port-radius-= ext- > 03 >=20 > On Apr 22, 2015, at 6:21 AM, Dean cheng wrote: > > We've just posted the 04 text that addressed comments posted by Alan. > > It is: > > > > http://tools.ietf.org/html/draft-ietf-radext-ip-port-radius-ext-04 >=20 > On a quick scan, it looks good. The only minor nit is the ASCII art. = You > have a field ending at the end of a line, and then continuing on the next= line: >=20 > ... | Field-Name | > | Field-Name | ... >=20 > It should just be: >=20 > ... | Field-Name > Field-Name | ... >=20 > i.e. without the last | on the first line, and the first | on the next = line. >=20 >=20 > _______________________________________________ > radext mailing list > radext@ietf.org > https://www.ietf.org/mailman/listinfo/radext From nobody Wed Apr 29 23:43:06 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C5601ACDA3; Wed, 29 Apr 2015 23:43:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gy6SKF3OjstT; Wed, 29 Apr 2015 23:43:03 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CEC71ACD25; Wed, 29 Apr 2015 23:43:03 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.0.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150430064303.30901.78716.idtracker@ietfa.amsl.com> Date: Wed, 29 Apr 2015 23:43:03 -0700 Archived-At: Cc: radext@ietf.org Subject: [radext] I-D Action: draft-ietf-radext-dynamic-discovery-15.txt X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 06:43:04 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the RADIUS EXTensions Working Group of the IETF. Title : NAI-based Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS Authors : Stefan Winter Mike McCauley Filename : draft-ietf-radext-dynamic-discovery-15.txt Pages : 32 Date : 2015-04-29 Abstract: This document specifies a means to find authoritative RADIUS servers for a given realm. It is used in conjunction with either RADIUS/TLS and RADIUS/DTLS. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-radext-dynamic-discovery/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-radext-dynamic-discovery-15 A diff from the previous version is available at: https:https://www.ietf.org/rfcdiff?url2=draft-ietf-radext-dynamic-discovery-15 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Apr 30 00:35:02 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4EE151ACEB2 for ; Thu, 30 Apr 2015 00:35:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id syEqWbHA85rP for ; Thu, 30 Apr 2015 00:35:00 -0700 (PDT) Received: from smtprelay.restena.lu (smtprelay.restena.lu [IPv6:2001:a18:1::62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECE7E1ACEB1 for ; Thu, 30 Apr 2015 00:34:59 -0700 (PDT) Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 31D99412DD for ; Thu, 30 Apr 2015 09:34:58 +0200 (CEST) Message-ID: <5541DB22.1070406@restena.lu> Date: Thu, 30 Apr 2015 09:34:58 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: radext@ietf.org References: <5502B836.5000100@restena.lu> In-Reply-To: <5502B836.5000100@restena.lu> OpenPGP: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="lwfm6lm73Dg3PwaiXIw6aXa6iiW6LeM0C" Archived-At: Subject: Re: [radext] Proposed new charter text X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 07:35:01 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --lwfm6lm73Dg3PwaiXIw6aXa6iiW6LeM0C Content-Type: multipart/mixed; boundary="------------050709010904090606070306" This is a multi-part message in MIME format. --------------050709010904090606070306 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hello, we still don't seem to have agreement on the updated charter text. Luckily, all the discussions revolved around one single work item, CoA proxying. Some folks want the spec to tackle RFC5176's "Authorization Issues" security consideration, and there are ideas around this floating on the mailing list. Others just want to solve the routing issue, and leave the security issues for another document. =46rom the discussions on the list so far, I'm not seeing a clear direction, but I also don't want this to hold up the recharter. So, may I suggest a more general text; and that we leave the exact shape of the document to the WG process once the document is in-charter and the individual draft adopted? My suggestion would be: > - CoA proxying. RFC 5176 permits proxying of CoA and Disconnect > messages, but makes no provisions for how that is done in a roaming > environment. This work item will provide descriptions of how to use th= e > Operator-Name attribute in a roaming environment to proxy CoA packets. = > Depending on whether the document can tackle the security issues > around CoA as enumerated in RFC5176, the document will either be > Informational or Standards-Track. Greetings, Stefan Winter --------------050709010904090606070306 Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------050709010904090606070306-- --lwfm6lm73Dg3PwaiXIw6aXa6iiW6LeM0C Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJVQdsiAAoJEMDeajWKOdxm9z0P/2V+FZFtJuDXsfziDw/Xp+tA gt97a8vMYSHhRotmqCFNCxWQ1M30jLu8uMXtAlELpupWW3/QHXk7mZPByOd77FJ4 FoQl2tRE6hVJ0ZBrRtKO9BssjNTPiA7QXGc5nNTNcAifi87rToqNTk85/1RnSNhs mMOHRSDMQ/2T70SXjRjnp9ju8Usm04etNtePIl7jAGCX/31Kd2Qq5I3aSzGXjPH4 bLypWs1NbpVm/9R1OG1LIqJWhUECFtMcdf9ZY5FoNk4x0Gbo3yJS0753xqOWbRwj lSPa+vhf8VMVZCCQ8bGBMi4g83GDL1u3y/Vrnh5ThkWv7DQfSo6rX8tuRbauBj1Q N4U9PVUYHgX9m03fXm9CQcqD35p7OIyC2/d/0SQrYARWszHzQwmp98g1bFD+QroW XSRLUkAKS6y1tkpXfCNJK2eZqwhXHJ3X1jUmujTbf1BPhCVBUPYaK88rESE3IZWY qYO7pp8eKOqbE1uHdMRhj+tAGxGAbLQQXk11bP02GMFVYmnEuFk7L4QrpU+9BpnB BTFRtPdy/zSggenMp/imeD+ti3C+RRVxWzLAozfOaCdPzrBeF7DTSiqGft7PqOL6 kPS0OLjjcq8gaWEmBMOQb1GZDeEzLgaA6njIFMDWpf4DKK/NFJoYuiHSVcUMt4Gg 7Rttryw50RrmJXAzb1PH =wZ+8 -----END PGP SIGNATURE----- --lwfm6lm73Dg3PwaiXIw6aXa6iiW6LeM0C-- From nobody Thu Apr 30 04:40:28 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BEAA1AD241 for ; Thu, 30 Apr 2015 04:40:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rx0djMy79s-A for ; Thu, 30 Apr 2015 04:40:24 -0700 (PDT) Received: from power.freeradius.org (power.freeradius.org [195.154.231.44]) by ietfa.amsl.com (Postfix) with ESMTP id E21F71A1B2B for ; Thu, 30 Apr 2015 04:40:23 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id B78F322406EB; Thu, 30 Apr 2015 13:40:22 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rv5cfOCAecII; Thu, 30 Apr 2015 13:40:22 +0200 (CEST) Received: from [192.168.20.71] (198-84-181-115.cpe.teksavvy.com [198.84.181.115]) by power.freeradius.org (Postfix) with ESMTPSA id 923EF22403F5; Thu, 30 Apr 2015 13:40:21 +0200 (CEST) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Alan DeKok In-Reply-To: <5541DB22.1070406@restena.lu> Date: Thu, 30 Apr 2015 07:40:19 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <253A6A19-40D5-40DB-876F-1B6B8B81BBE8@deployingradius.com> References: <5502B836.5000100@restena.lu> <5541DB22.1070406@restena.lu> To: Winter Stefan X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: radext@ietf.org Subject: Re: [radext] Proposed new charter text X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2015 11:40:26 -0000 On Apr 30, 2015, at 3:34 AM, Stefan Winter = wrote: > Some folks want the spec to tackle RFC5176's "Authorization Issues" > security consideration, and there are ideas around this floating on = the > mailing list. Others just want to solve the routing issue, and leave = the > security issues for another document. The "Authorization Issues" section of 5176 is missing authorization = issues for proxies. The CoA proxying document has to have text = addressing this issue. The consensus on the list was that there were two ways of addressing = this issue: a) the "reverse path forwarding" check from 5176 and/or b) requiring that Operator-NAS-Identifier be cryptographically secure, = and impossible to forge. The only counter-point that I recall was that these solutions would be = insufficient, for unspecified reasons. > =46rom the discussions on the list so far, I'm not seeing a clear > direction, but I also don't want this to hold up the recharter. We had multiple people agreeing that the above approach was sufficient = for the CoA proxy document. We need this document to be done soon. There is WG consensus on it, = and all we need is an updated draft which can be submitted for = publication.=20 > So, may I suggest a more general text; and that we leave the exact = shape > of the document to the WG process once the document is in-charter and > the individual draft adopted? I would be opposed to this. There is a clear problem statement: CoA = proxying is unspecified. There is a clear solution: Operator-Realm and = Operator-NAS-Identifier. There is consensus that the approach works, = and is secure. There is an implementation of CoA proxying with = Operator-Name. This solution is deployed in running environments. The = solution has been discussed for years in RADEXT. There is a draft = (which needs updates to reflect the latest WG discussion). The counter-point is to extend the document to solve an unspecified = problem, with no solution, no draft, no implementation, etc. Well, = that's what new documents are for. We have WG consensus on a path for the CoA proxy document. I welcome = additional documents to solve other, unrelated, problems. Problems = which *everyone agrees* are unrelated to the CoA proxying issue. We can update 5176 with multiple documents. But I find it disturbing = that progress on one document can be shut down because of *additional*, = unspecified work. Adding random things to specification documents is a = process best left for politics. Last-minute "riders" are well-known = there, and are discouraged in the IETF. We do not need WG unanimity. We have broad consensus for the = existing document, I believe we should go with that. Alan DeKok.