From nobody Fri May 1 12:29:25 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0150E1B2E17; Fri, 1 May 2015 12:29:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -104.612 X-Spam-Level: X-Spam-Status: No, score=-104.612 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MANGLED_NAIL=2.3, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id utvrXBajJrts; Fri, 1 May 2015 12:29:22 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) by ietfa.amsl.com (Postfix) with ESMTP id 974D01B2E1D; Fri, 1 May 2015 12:29:22 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 4BDFF180092; Fri, 1 May 2015 12:28:13 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 6000:ams_util_lib.php From: rfc-editor@rfc-editor.org Message-Id: <20150501192813.4BDFF180092@rfc-editor.org> Date: Fri, 1 May 2015 12:28:13 -0700 (PDT) Archived-At: Cc: radext@ietf.org, rfc-editor@rfc-editor.org Subject: [radext] RFC 7542 on The Network Access Identifier X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 May 2015 19:29:24 -0000 A new Request for Comments is now available in online RFC libraries. RFC 7542 Title: The Network Access Identifier Author: A. DeKok Status: Standards Track Stream: IETF Date: May 2015 Mailbox: aland@freeradius.org Pages: 30 Characters: 66596 Obsoletes: RFC 4282 I-D Tag: draft-ietf-radext-nai-15.txt URL: https://www.rfc-editor.org/info/rfc7542 In order to provide inter-domain authentication services, it is necessary to have a standardized method that domains can use to identify each other's users. This document defines the syntax for the Network Access Identifier (NAI), the user identifier submitted by the client prior to accessing resources. This document is a revised version of RFC 4282. It addresses issues with international character sets and makes a number of other corrections to RFC 4282. This document is a product of the RADIUS EXTensions Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet Standards Track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the Official Internet Protocol Standards (https://www.rfc-editor.org/standards) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/rfc.html Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Wed May 13 06:12:42 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E61B71A9170; Wed, 13 May 2015 06:12:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PMXGII35Ia6x; Wed, 13 May 2015 06:12:39 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 505DF1A924B; Wed, 13 May 2015 06:12:37 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.2.p3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150513131237.30911.71361.idtracker@ietfa.amsl.com> Date: Wed, 13 May 2015 06:12:37 -0700 Archived-At: Cc: radext mailing list , radext chair , RFC Editor Subject: [radext] Document Action: 'NAI-based Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS' to Experimental RFC (draft-ietf-radext-dynamic-discovery-15.txt) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2015 13:12:41 -0000 The IESG has approved the following document: - 'NAI-based Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS' (draft-ietf-radext-dynamic-discovery-15.txt) as Experimental RFC This document is the product of the RADIUS EXTensions Working Group. The IESG contact persons are Benoit Claise, Kathleen Moriarty and Joel Jaeggli. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-radext-dynamic-discovery/ Technical Summary This document specifies a means to find authoritative RADIUS servers for a given (NAI) realm using the DNS infrastructure. It can be used in conjunction with either RADIUS/TLS and RADIUS/DTLS, or even with current RADIUS transport if transport level security is not a concern. The solution similar but more up to date version of Diameter DNS-based peer discovery. Working Group Summary There was working group consensus for this draft and a few implementations. Document Quality There are multiple implementations and the solution is also deployed as part of the global Eduroam consortium RADIUS roaming infrastructure. The document needs S-NAPTR and the Service Name and Transport Protocol Port Number registry expert reviews during IANA allocations. Personnel The Document Shepherd is Jouni Korhonen and the Area Director is Kathleen Moriarty. The IANA Expert(s) for the registry added (S-NAPTR Application Service and Protocol Tags) in this document is Jouni Korhonen (jouni.nospam@gmail.com) IANA Note Expert review is requested for 1) "radiustls" and "radiusdtls" from the Service Name and Transport Protocol Port Number registry The IANA experts pool is Joe Touch; Eliot Lear, Allison Mankin, Markku Kojo, Kumiko Ono, Martin Stiemerling, Lars Eggert, Alexey Melnikov and Wes Eddy 2) a number of Object Identifiers The IANA expert is Russ Housley. From nobody Thu May 28 23:44:16 2015 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 125261B2A59 for ; Thu, 28 May 2015 23:44:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.791 X-Spam-Level: X-Spam-Status: No, score=0.791 tagged_above=-999 required=5 tests=[BAYES_50=0.8, T_RP_MATCHES_RCVD=-0.01, WEIRD_PORT=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K7ZeR4h70tlo for ; Thu, 28 May 2015 23:44:13 -0700 (PDT) Received: from smtprelay.restena.lu (smtprelay.restena.lu [IPv6:2001:a18:1::62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDC191A01A8 for ; Thu, 28 May 2015 23:44:12 -0700 (PDT) Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 549CD43975 for ; Fri, 29 May 2015 08:44:10 +0200 (CEST) Message-ID: <55680ABA.1090704@restena.lu> Date: Fri, 29 May 2015 08:44:10 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: radext@ietf.org References: <5502B836.5000100@restena.lu> <5541DB22.1070406@restena.lu> In-Reply-To: <5541DB22.1070406@restena.lu> OpenPGP: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="FWm3quKs61g93J4oNCLTLiVNPIxs10I0I" Archived-At: Subject: Re: [radext] Proposed new charter text X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 May 2015 06:44:15 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --FWm3quKs61g93J4oNCLTLiVNPIxs10I0I Content-Type: multipart/mixed; boundary="------------040902090907060908080609" This is a multi-part message in MIME format. --------------040902090907060908080609 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hello, after Alan's plea (and noone objecting to it), let me have another go at the CoA proxying text which is hopefully in a shape everybody can agree to - and if not, will at least reach rough consensus. > - CoA proxying. RFC 5176 permits proxying of CoA and Disconnect > messages, but makes no provisions for how that is done in a roaming > environment. This work item will provide descriptions of how to use > the Operator-Name attribute in a roaming environment to proxy CoA > packets in a way that ensures only authorized proxies can send these > packets to the home CoA server. > The document will be Informational, in line with the CoA document > (RFC5176). Please let the list know in the coming two weeks (Friday, 12 June) if you have objections against this text. Greetings, Stefan Winter > we still don't seem to have agreement on the updated charter text. > Luckily, all the discussions revolved around one single work item, CoA > proxying. >=20 > Some folks want the spec to tackle RFC5176's "Authorization Issues" > security consideration, and there are ideas around this floating on the= > mailing list. Others just want to solve the routing issue, and leave th= e > security issues for another document. >=20 > From the discussions on the list so far, I'm not seeing a clear > direction, but I also don't want this to hold up the recharter. >=20 > So, may I suggest a more general text; and that we leave the exact shap= e > of the document to the WG process once the document is in-charter and > the individual draft adopted? >=20 > My suggestion would be: >=20 >> - CoA proxying. RFC 5176 permits proxying of CoA and Disconnect >> messages, but makes no provisions for how that is done in a roaming >> environment. This work item will provide descriptions of how to use t= he >> Operator-Name attribute in a roaming environment to proxy CoA packets.= > Depending on whether the document can tackle the security issues >> around CoA as enumerated in RFC5176, the document will either be >> Informational or Standards-Track. >=20 > Greetings, >=20 > Stefan Winter >=20 >=20 >=20 > _______________________________________________ > radext mailing list > radext@ietf.org > https://www.ietf.org/mailman/listinfo/radext >=20 --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 --------------040902090907060908080609 Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------040902090907060908080609-- --FWm3quKs61g93J4oNCLTLiVNPIxs10I0I Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJVaAq6AAoJEMDeajWKOdxmSogP/A/Mrt8FDO9mP4NrwpqvKJNa rDJRgKnfcB73qNqqI6Ewa4hGyI5/8GZFpWdUVYVvEzlW2JpRxpsBbGjCs0T3Am8c 2RiXNoUxPm0SYeOUDnjW+yjsONrI0svB0r/CZgZgrsM2ymt5vOm7gVERt0qLtwFn Jx2qGgYFnSzz2vGrD6fqVdFeVAZO5epNdv2q5jK6NzhLWu/G30ka3cWmffMYzq2b hB7PS4D3vF4JODazMzc1Po2vCA9swGFGFWCFlb0MG1qCqZ3VpwBDB9zAaM/LXw37 c7j8vfK4w5up1adqzomRR8A+ydsDoMN2STgIFtpoyhW6CskRIkHX14VHy+JvY6Kd WTH75fJFqtHZVg0eSwGLqN+1SxzWMt/RA8Nx4xKhdF+fNFXOin1khxxO61YBokFm u31pujbCTsGyXVGtxlSt/B1RYkWKU0xo+AMKk4csetJnA1AJZNSIOc+hbB2bsLWe y5rObalH535zwn4UjeMAJHtTl7MK7sPlKjkyHToRK7UGG2fuP58659FFqp5WCoiC 5QfuUIzmynMrDPi/tyrAwac05yredYSjJ0285DakpIyILNA3U3Dz7eH/7pCLUd8B KXFvWMC6ceAnzxldeisA5l9u6kpCJehTUGOa8dCEwbQl4ATggLhxHHejDbO++OWA bESVvslFpxfehPUB8rgz =O/Sc -----END PGP SIGNATURE----- --FWm3quKs61g93J4oNCLTLiVNPIxs10I0I--