From nobody Wed Dec 11 14:23:40 2019 Return-Path: X-Original-To: radext@ietfa.amsl.com Delivered-To: radext@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F36A01200B1; Wed, 11 Dec 2019 14:23:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bv9c2o176gKF; Wed, 11 Dec 2019 14:23:31 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30AEB120005; Wed, 11 Dec 2019 14:23:31 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 5F2DEF4071A; Wed, 11 Dec 2019 14:23:20 -0800 (PST) To: aland@freeradius.org, aland@freeradius.org X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: kaduk@mit.edu, iesg@ietf.org, radext@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20191211222320.5F2DEF4071A@rfc-editor.org> Date: Wed, 11 Dec 2019 14:23:20 -0800 (PST) Archived-At: Subject: [radext] [Errata Verified] RFC7542 (5462) X-BeenThere: radext@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: RADIUS EXTensions working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Dec 2019 22:23:33 -0000 The following errata report has been verified for RFC7542, "The Network Access Identifier". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid5462 -------------------------------------- Status: Verified Type: Technical Reported by: Alan DeKok Date Reported: 2018-08-14 Verified by: Benjamin Kaduk (IESG) Section: 3 Original Text ------------- The "utf8-realm" SHOULD be supplied by the "next hop" or "home" system that also supplies the routing information necessary for packets to reach the next hop. Corrected Text -------------- The "utf8-realm" SHOULD be supplied by the "next hop" or "home" system that also supplies the routing information necessary for packets to reach the next hop. The final home system SHOULD validate the NAI in the received packet against the list of Realms hosted by the home system. If no match is found, the request SHOULD be rejected. Notes ----- It doesn't explicitly say that home systems only authenticate users for their own realms. It may help to have this stated explicitly. Some text will also be added to draft-ietf-radext-coa-proxy in order to make this clearer. -------------------------------------- RFC7542 (draft-ietf-radext-nai-15) -------------------------------------- Title : The Network Access Identifier Publication Date : May 2015 Author(s) : A. DeKok Category : PROPOSED STANDARD Source : RADIUS EXTensions Area : Operations and Management Stream : IETF Verifying Party : IESG