Re: [Dhcpv6bis] [dhcpv6bis] #86 (XML 3315): DHCPv6 authentication for Information request

Sheng Jiang <jiangsheng@huawei.com> Mon, 29 June 2015 03:56 UTC

Return-Path: <jiangsheng@huawei.com>
X-Original-To: dhcpv6bis@ietfa.amsl.com
Delivered-To: dhcpv6bis@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E957A1A8ABD for <dhcpv6bis@ietfa.amsl.com>; Sun, 28 Jun 2015 20:56:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.211
X-Spam-Level:
X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d2ULLK8g1tZQ for <dhcpv6bis@ietfa.amsl.com>; Sun, 28 Jun 2015 20:56:22 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7975C1A8ABE for <dhcpv6bis@ietf.org>; Sun, 28 Jun 2015 20:56:21 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BUM16385; Mon, 29 Jun 2015 03:56:20 +0000 (GMT)
Received: from NKGEML410-HUB.china.huawei.com (10.98.56.41) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.3.158.1; Mon, 29 Jun 2015 04:56:18 +0100
Received: from NKGEML512-MBX.china.huawei.com ([169.254.7.155]) by nkgeml410-hub.china.huawei.com ([10.98.56.41]) with mapi id 14.03.0158.001; Mon, 29 Jun 2015 11:56:13 +0800
From: Sheng Jiang <jiangsheng@huawei.com>
To: "Bernie Volz (volz)" <volz@cisco.com>, Tomek Mrugalski <tomasz.mrugalski@gmail.com>, dhcpv6bis issue tracker <trac+dhcpv6bis@tools.ietf.org>, "mcr@sandelman.ca" <mcr@sandelman.ca>
Thread-Topic: [dhcpv6bis] #86 (XML 3315): DHCPv6 authentication for Information request
Thread-Index: AQHQryFcnrK6KTNRk0mO5UCgxi5C3J2+jxuAgAALrwCABEUxcA==
Date: Mon, 29 Jun 2015 03:56:13 +0000
Message-ID: <5D36713D8A4E7348A7E10DF7437A4B927AFDAB28@nkgeml512-mbx.china.huawei.com>
References: <067.db20ab580898514fe55ffdab008c6dc3@tools.ietf.org> <082.76e3d63a95e4420ca0135b135f07f63d@tools.ietf.org> <558D92D3.9010408@gmail.com> <489D13FBFA9B3E41812EA89F188F018E1CB4EA09@xmb-rcd-x04.cisco.com>
In-Reply-To: <489D13FBFA9B3E41812EA89F188F018E1CB4EA09@xmb-rcd-x04.cisco.com>
Accept-Language: en-GB, zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.111.99.197]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <http://mailarchive.ietf.org/arch/msg/dhcpv6bis/lrl75sI9P7bgnena35dkJ9xts-Q>
Cc: "dhcpv6bis@ietf.org" <dhcpv6bis@ietf.org>
Subject: Re: [Dhcpv6bis] [dhcpv6bis] #86 (XML 3315): DHCPv6 authentication for Information request
X-BeenThere: dhcpv6bis@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "DHCPv6 \(RFC3315\) bis discussion list" <dhcpv6bis.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcpv6bis>, <mailto:dhcpv6bis-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcpv6bis/>
List-Post: <mailto:dhcpv6bis@ietf.org>
List-Help: <mailto:dhcpv6bis-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcpv6bis>, <mailto:dhcpv6bis-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jun 2015 03:56:24 -0000

>I'm definitely in favor of making a statement that it is obsolete.

If you cannot do it very soon, it should be added as a new ticket. I may be able to take it next month.

>I'm not sure there is much to deprecate and I don't see that having much
>value? And there's nothing in any IANA registry for the AUTH field values
>anyway.

That's exactly my conclusion after careful examination.

>Ah ...
>
>   This document also references three name spaces in section 21 that
>   are associated with the Authentication Option (section 22.11).  These
>   name spaces are defined by the authentication mechanism for DHCPv4 in
>   RFC 3118 [4].
>
>   The authentication name spaces currently registered by IANA will
>   apply to both DHCPv6 and DHCPv4.  In the future, specifications that
>   define new Protocol, Algorithm and RDM mechanisms will explicitly
>   define whether the new mechanisms are used with DHCPv4, DHCPv6 or
>   both.
>
>See
>http://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-para
>meters.xhtml#authentication-algorithm-id (and the next table for RDM). It
>looks like the protocol field was never enumerated in the IANA tables? Which
>is kind of odd as RFC 3118 asked for it. So, perhaps we should contact IANA to
>add this table? And, add v6 Delay Auth (which is 2).
>
>   Initial values assigned from the Protocol name space are 0 (for the
>   configuration token Protocol in section 4) and 1 (for the delayed
>   authentication Protocol in section 5).  Additional values from the
>   Protocol name space will be assigned through IETF Consensus, as
>   defined in RFC 2434 [8].
>
>So this table would be:
>	0	v4 Configuration Token (RFC 3118, Section 4)
>	1	v4 Delayed Auth (RFC 3118, Section 5)
>	2	v6 Delayed Auth (RFC 3315, Section 21.4 - pending deprecation by
>draft-ietf-dhc-rfc3315bis)
>	3	v6 Reconfigure Key Auth (RFC 3315, Section 21.5)
>
>I'll send an email to IANA asking about this and seeing if they can add it. (They
>may not want to add that part about deprecation just yet.)

If they agreed on this, you just created another new additional work for our 3315bis. :P I may be able to take the follow-up.

Regards,

Sheng

>- Bernie
>
>-----Original Message-----
>From: Tomek Mrugalski [mailto:tomasz.mrugalski@gmail.com]
>Sent: Friday, June 26, 2015 1:59 PM
>To: dhcpv6bis issue tracker; jiangsheng@huawei.com; mcr@sandelman.ca;
>Bernie Volz (volz)
>Cc: dhcpv6bis@ietf.org
>Subject: Re: [dhcpv6bis] #86 (XML 3315): DHCPv6 authentication for
>Information request
>
>On 25.06.2015 10:31, dhcpv6bis issue tracker wrote:
>> #86: DHCPv6 authentication for Information request
>>
>> Changes (by jiangsheng@huawei.com):
>>
>>  * status:  new => closed
>>  * resolution:   => fixed
>>
>> Comment:
>>
>>  Remove the Delayed Auth Protocol and its dependent text
>Do we want to do anything extra here? Two things we may consider are:
>
>1. Put a short text that delayed auth protocol is obsolete. Implementers may
>look at this draft, don't find it and be confused.
>
>2. Do we want to put a note in IANA section to mark any values as deprecated?
>There are no protocol and algorithm registries, so no need to do any update
>on those. Anything else that was removed and is in the IANA registry?
>
>Tomek