Re: [dhcwg] [radext] draft-ietf-dhc-dhcpv6-radius-opt-10

Jouni Korhonen <jouni.nospam@gmail.com> Tue, 09 April 2013 15:26 UTC

Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A463521F9497; Tue, 9 Apr 2013 08:26:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.001
X-Spam-Level:
X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Il5LR9JaCKP8; Tue, 9 Apr 2013 08:26:11 -0700 (PDT)
Received: from mail-ea0-x230.google.com (mail-ea0-x230.google.com [IPv6:2a00:1450:4013:c01::230]) by ietfa.amsl.com (Postfix) with ESMTP id 52FD421F9733; Tue, 9 Apr 2013 08:26:10 -0700 (PDT)
Received: by mail-ea0-f176.google.com with SMTP id h10so2962365eaj.35 for <multiple recipients>; Tue, 09 Apr 2013 08:26:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=XlF+8zH0lY8pU4ObFfs4dBp316HCZHVbtdln9/G7MA8=; b=MZI2C92KCYQcC8CUBbCicnSqeKaXSYpV43RX9rYon0QVk2onOK3tXftoXKLounVJYK /BUZaIp/sQSnicekuVbGkba9VR+E1/93JJReumOoHEcq/ZcO6fG4knQPGVY6c/7QR5vb P6TG0OUw4NfG/0Vcc9+k9Ia76YHXmwv9iLojg1ERxYvixi+cYsgei9+lijUnfuG93FR0 Zvz+qyzIiaOIXApE2Bf/F5fnvVReNpcyhUhmGZ4/fKC+dJuqiCYS9AQwSbZ9oF/MUr+1 6bHSVbRiLTVFvXj99O8m8Nt4ir6YXG8BUla97I/Y7yDC2TVZ+XzuC42KQU+k1mkG5kA7 JyhQ==
X-Received: by 10.15.99.201 with SMTP id bl49mr47250811eeb.43.1365521164284; Tue, 09 Apr 2013 08:26:04 -0700 (PDT)
Received: from ?IPv6:2001:1bc8:101:f101:52b:794d:ebdc:df24? ([2001:1bc8:101:f101:52b:794d:ebdc:df24]) by mx.google.com with ESMTPS id a41sm4397012eei.4.2013.04.09.08.26.02 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 09 Apr 2013 08:26:03 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\))
From: Jouni Korhonen <jouni.nospam@gmail.com>
In-Reply-To: <5164263E.50402@gmail.com>
Date: Tue, 09 Apr 2013 18:26:01 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <450791A9-F1A5-41F5-8EE7-8A69C823CE7A@gmail.com>
References: <CAC8SSWtBMyDgShEDofyUjgcBiQ_ttY_DUbDNHnhhnf531+9XXA@mail.gmail.com> <FB413294-CF61-4AD9-AF26-41EC8A30DF37@gmail.com> <5162d5aa.0794420a.2f19.fffff597@mx.google.com> <8D23D4052ABE7A4490E77B1A012B630775138825@mbx-01.win.nominum.com> <489D13FBFA9B3E41812EA89F188F018E184EBA72@xmb-rcd-x04.cisco.com> <AC349589-AC7B-442B-9CE8-D7343BC44BCC@gmail.com> <5164263E.50402@gmail.com>
To: Tomek Mrugalski <tomasz.mrugalski@gmail.com>
X-Mailer: Apple Mail (2.1503)
Cc: dhcwg@ietf.org, "<radext@ietf.org>" <radext@ietf.org>
Subject: Re: [dhcwg] [radext] draft-ietf-dhc-dhcpv6-radius-opt-10
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Apr 2013 15:26:11 -0000

On Apr 9, 2013, at 5:31 PM, Tomek Mrugalski <tomasz.mrugalski@gmail.com> wrote:

> On 09.04.2013 11:59, Jouni Korhonen wrote:
>> What I am after is a note stating that a _client_ must be prepared
>> for a reply from a server that does not provide adequate
>> response/information for all the RADIUS attributes the client
>> included in the request. This is solely meant for the future
>> specifications using the OPTION_RADIUS.
> When clarifying that, we must remember to be explicit about which client
> or server (radius or dhcpv6) we are talking about here.

Ops. Good catch. Meant actually relay, not client, but wrote something else :-) 

> Here's DHCPv6 point of view: This DHCPv6 option will never reach DHCPv6
> client. DHCPv6 client will never send it either. DHCPv6 Server will
> never send this option back, just receive it from the DHCPv6 relay.

I never said server sending the OPTION_RADIUS back. Still confirming what I
meant & asked to be clarified for future use of OPTION_RADIUS (and whether
my concern is valid to begin with):

0) Magic happens..
1) DHCP Relay sends a relay-forward to DHCP Server with OPTION_RADIUS
   including attributes X,Y,Z.
2) DHCP Server does not understand Z and thus responses to the Relay
   with DHCP options/values based on X & Y only.
3) DHCP Relay receives the response but for it to send a meaningful
   reply to DHCP Client it would need some DHCP option/value in
   the reply that reflects the content of the RADIUS attribute Z
   (that was included into the request sent to Server).
4) what does DHCP Relay do now?


- Jouni


> _______________________________________________
> dhcwg mailing list
> dhcwg@ietf.org
> https://www.ietf.org/mailman/listinfo/dhcwg