Re: [Dhcpv6bis] [dhcpv6bis] #86 (XML 3315): DHCPv6 authentication for Information request

"Bernie Volz (volz)" <volz@cisco.com> Fri, 26 June 2015 18:40 UTC

Return-Path: <volz@cisco.com>
X-Original-To: dhcpv6bis@ietfa.amsl.com
Delivered-To: dhcpv6bis@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 436521A90C8 for <dhcpv6bis@ietfa.amsl.com>; Fri, 26 Jun 2015 11:40:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.511
X-Spam-Level:
X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rdiNRUmkJd3V for <dhcpv6bis@ietfa.amsl.com>; Fri, 26 Jun 2015 11:40:34 -0700 (PDT)
Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 348991A90E2 for <dhcpv6bis@ietf.org>; Fri, 26 Jun 2015 11:40:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4004; q=dns/txt; s=iport; t=1435344034; x=1436553634; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=PFqej3KuUc9/59f85fkDFg+uKCeEwZ/9S5sXF3hYYN0=; b=m+Gc6UypJWjQMLjKtugorMi8GhlgFy9VTjPikAG3pwli6ZwRO66U3Jwe pdjhdYfp6g/I5M4d9v6bi6fmNvl+OXmtSSGR0yOx1YqHQz/MA3qh1ZEvm 0eh1lMdXW3A/GLfYtDR+VxOmxhomWS1ySM95/Vqzy3BHruQRSC2gEQAHm 0=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0C2AwBbnI1V/4sNJK1bgxFUXwaDGLoICYFqhXQCHIEjOBQBAQEBAQEBgQqEIgEBAQQjEUUMBAIBCA4DBAEBAQICBh0DAgICHxEUAQgIAgQBDQUIAYgRAxINuQqQKQ2FdAEBAQEBAQEBAQEBAQEBAQEBAQEBAReBIYopgT2BEIFWEQEgFhsHBoJiL4EUBYFPikOHcgGJcIMbjnxphxgmY4MXbwGBCzqBAgEBAQ
X-IronPort-AV: E=Sophos;i="5.13,686,1427760000"; d="scan'208";a="5005280"
Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-8.cisco.com with ESMTP; 26 Jun 2015 18:40:33 +0000
Received: from xhc-aln-x05.cisco.com (xhc-aln-x05.cisco.com [173.36.12.79]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t5QIeX8i025634 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 26 Jun 2015 18:40:33 GMT
Received: from xmb-rcd-x04.cisco.com ([169.254.8.177]) by xhc-aln-x05.cisco.com ([173.36.12.79]) with mapi id 14.03.0195.001; Fri, 26 Jun 2015 13:40:33 -0500
From: "Bernie Volz (volz)" <volz@cisco.com>
To: Tomek Mrugalski <tomasz.mrugalski@gmail.com>, dhcpv6bis issue tracker <trac+dhcpv6bis@tools.ietf.org>, "jiangsheng@huawei.com" <jiangsheng@huawei.com>, "mcr@sandelman.ca" <mcr@sandelman.ca>
Thread-Topic: [dhcpv6bis] #86 (XML 3315): DHCPv6 authentication for Information request
Thread-Index: AQHQryFOtC6izQu3kUu1lnxC+Ij5152/aQmA//+zBAA=
Date: Fri, 26 Jun 2015 18:40:32 +0000
Message-ID: <489D13FBFA9B3E41812EA89F188F018E1CB4EA09@xmb-rcd-x04.cisco.com>
References: <067.db20ab580898514fe55ffdab008c6dc3@tools.ietf.org> <082.76e3d63a95e4420ca0135b135f07f63d@tools.ietf.org> <558D92D3.9010408@gmail.com>
In-Reply-To: <558D92D3.9010408@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.98.1.201]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/dhcpv6bis/OwE88fNSEzQ2Mbr1AJbvCn6yUJM>
Cc: "dhcpv6bis@ietf.org" <dhcpv6bis@ietf.org>
Subject: Re: [Dhcpv6bis] [dhcpv6bis] #86 (XML 3315): DHCPv6 authentication for Information request
X-BeenThere: dhcpv6bis@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "DHCPv6 \(RFC3315\) bis discussion list" <dhcpv6bis.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcpv6bis>, <mailto:dhcpv6bis-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcpv6bis/>
List-Post: <mailto:dhcpv6bis@ietf.org>
List-Help: <mailto:dhcpv6bis-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcpv6bis>, <mailto:dhcpv6bis-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Jun 2015 18:40:36 -0000

I'm definitely in favor of making a statement that it is obsolete.

I'm not sure there is much to deprecate and I don't see that having much value? And there's nothing in any IANA registry for the AUTH field values anyway. Ah ...

   This document also references three name spaces in section 21 that
   are associated with the Authentication Option (section 22.11).  These
   name spaces are defined by the authentication mechanism for DHCPv4 in
   RFC 3118 [4].

   The authentication name spaces currently registered by IANA will
   apply to both DHCPv6 and DHCPv4.  In the future, specifications that
   define new Protocol, Algorithm and RDM mechanisms will explicitly
   define whether the new mechanisms are used with DHCPv4, DHCPv6 or
   both.

See http://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-parameters.xhtml#authentication-algorithm-id (and the next table for RDM). It looks like the protocol field was never enumerated in the IANA tables? Which is kind of odd as RFC 3118 asked for it. So, perhaps we should contact IANA to add this table? And, add v6 Delay Auth (which is 2).

   Initial values assigned from the Protocol name space are 0 (for the
   configuration token Protocol in section 4) and 1 (for the delayed
   authentication Protocol in section 5).  Additional values from the
   Protocol name space will be assigned through IETF Consensus, as
   defined in RFC 2434 [8].

So this table would be:
	0	v4 Configuration Token (RFC 3118, Section 4)
	1	v4 Delayed Auth (RFC 3118, Section 5)
	2	v6 Delayed Auth (RFC 3315, Section 21.4 - pending deprecation by draft-ietf-dhc-rfc3315bis)
	3	v6 Reconfigure Key Auth (RFC 3315, Section 21.5)

I'll send an email to IANA asking about this and seeing if they can add it. (They may not want to add that part about deprecation just yet.)

- Bernie

-----Original Message-----
From: Tomek Mrugalski [mailto:tomasz.mrugalski@gmail.com] 
Sent: Friday, June 26, 2015 1:59 PM
To: dhcpv6bis issue tracker; jiangsheng@huawei.com; mcr@sandelman.ca; Bernie Volz (volz)
Cc: dhcpv6bis@ietf.org
Subject: Re: [dhcpv6bis] #86 (XML 3315): DHCPv6 authentication for Information request

On 25.06.2015 10:31, dhcpv6bis issue tracker wrote:
> #86: DHCPv6 authentication for Information request
> 
> Changes (by jiangsheng@huawei.com):
> 
>  * status:  new => closed
>  * resolution:   => fixed
> 
> Comment:
> 
>  Remove the Delayed Auth Protocol and its dependent text
Do we want to do anything extra here? Two things we may consider are:

1. Put a short text that delayed auth protocol is obsolete. Implementers may look at this draft, don't find it and be confused.

2. Do we want to put a note in IANA section to mark any values as deprecated? There are no protocol and algorithm registries, so no need to do any update on those. Anything else that was removed and is in the IANA registry?

Tomek