RE: [dhcwg] Questions about Invalid Option : I'd like clarification

"Bernie Volz \(volz\)" <volz@cisco.com> Mon, 05 March 2007 14:47 UTC

Return-path: <dhcwg-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HOESv-0001MY-H8; Mon, 05 Mar 2007 09:47:05 -0500
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HOESu-0001MT-Uc for dhcwg@ietf.org; Mon, 05 Mar 2007 09:47:04 -0500
Received: from sj-iport-2-in.cisco.com ([171.71.176.71] helo=sj-iport-2.cisco.com) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HOESf-0002qv-E4 for dhcwg@ietf.org; Mon, 05 Mar 2007 09:47:04 -0500
Received: from sj-dkim-5.cisco.com ([171.68.10.79]) by sj-iport-2.cisco.com with ESMTP; 05 Mar 2007 06:46:48 -0800
X-IronPort-AV: i="4.14,251,1170662400"; d="scan'208"; a="363984487:sNHT480437696"
Received: from sj-core-4.cisco.com (sj-core-4.cisco.com [171.68.223.138]) by sj-dkim-5.cisco.com (8.12.11/8.12.11) with ESMTP id l25EkmsD002399; Mon, 5 Mar 2007 06:46:48 -0800
Received: from xbh-rtp-201.amer.cisco.com (xbh-rtp-201.cisco.com [64.102.31.12]) by sj-core-4.cisco.com (8.12.10/8.12.6) with ESMTP id l25EkkxZ011944; Mon, 5 Mar 2007 14:46:48 GMT
Received: from xmb-rtp-20a.amer.cisco.com ([64.102.31.15]) by xbh-rtp-201.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 5 Mar 2007 09:46:45 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [dhcwg] Questions about Invalid Option : I'd like clarification
Date: Mon, 05 Mar 2007 09:46:43 -0500
Message-ID: <8E296595B6471A4689555D5D725EBB2103642E2F@xmb-rtp-20a.amer.cisco.com>
In-Reply-To: <0260031F55435342859BFB2CCA6773D81B8989B8@EXCHANGE03.jp.ykgw.net>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [dhcwg] Questions about Invalid Option : I'd like clarification
Thread-Index: AcdfAM1/5FQEeBUsQyOeBb4FR7ZeyAAMh2+w
From: "Bernie Volz (volz)" <volz@cisco.com>
To: Hideshi.Enokihara@jp.yokogawa.com, dhcwg@ietf.org
X-OriginalArrivalTime: 05 Mar 2007 14:46:45.0121 (UTC) FILETIME=[186F6F10:01C75F35]
DKIM-Signature: v=0.5; a=rsa-sha256; q=dns/txt; l=5084; t=1173106008; x=1173970008; c=relaxed/simple; s=sjdkim5002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=volz@cisco.com; z=From:=20=22Bernie=20Volz=20\(volz\)=22=20<volz@cisco.com> |Subject:=20RE=3A=20[dhcwg]=20Questions=20about=20Invalid=20Option=20=3A= 20I'd=20like=20clarification=20 |Sender:=20; bh=fBkP8QZNlOYXtkZuatadVQpzbNnMNgQw6UGPb5cpMyA=; b=Rsw2AF4O7Osu5LnQ4IVvkZkUlGu5F3J+cKVHJ3ynfmYVyzJ11itmk9aCS/bzCKmhDzhqa3ol oMYMz/LNF5DU3GRU3aDKxyu0SOQhSudOQdI4d3tsDEVRGau9wQpDLu8m;
Authentication-Results: sj-dkim-5; header.From=volz@cisco.com; dkim=pass (si g from cisco.com/sjdkim5002 verified; );
X-Spam-Score: 0.0 (/)
X-Scan-Signature: f49c97ce49302a02285a2d36a99eef8c
Cc:
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: dhcwg.ietf.org
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
Errors-To: dhcwg-bounces@ietf.org

The text in RFC 3646 (and likely other options RFCs) does not indicate
what an entity should do if these options appear in messages that they
shouldn't. I view this text as guidance for implementers of these
options not to send them in these messages.

It is my opinion that an entity should *IGNORE* options that don't make
any sense in a particular message *EXCEPT* if the appearance (or lack of
appearance) is a clear violation of the DHCPv6 protocol. These are the
conditions outlined in RFC 3315, Section 15.1 through 15.14. 

One major reason for ignoring "unexpected" options is that
implementations need to be able to handle new options that they may not
yet implement. And, therefore it is impossible to expect existing
implementations to act in certain ways for things that they have not yet
implemented. And, being too strict will cause interoperability issues
for no real benefit.

The old Internet policy that implementations should be flexible in what
they receive but conservative in what they send applies.

Thus, section 15.1 - 15.14 in RFC 3315 are all that should be used in
any Conformance check.

If you add checks to make sure that not allowed options are ignored, you
MUST support two possible outcomes as some implementations MAY act on
the text in Section 15 and discard these messages whereas others will
just ignore the options but otherwise respond.

- Bernie

-----Original Message-----
From: Hideshi.Enokihara@jp.yokogawa.com
[mailto:Hideshi.Enokihara@jp.yokogawa.com] 
Sent: Monday, March 05, 2007 3:32 AM
To: dhcwg@ietf.org
Subject: [dhcwg] Questions about Invalid Option : I'd like clarification


Hello all,

I have some questions about Invalid Options that are not allowed to
appear in the message.
I'd like to clarify following things, because I have to finish writing
the Conformance test specification for IPv6 Ready Logo Program for
DHCPv6.
Could you give me your thoughts, please?


RFC3315 section 15 says,
------------
   Clients and servers SHOULD discard any messages that contain options
   that are not allowed to appear in the received message.  For example,
   an IA option is not allowed to appear in an Information-request
   message. 
------------

And "A. Appearance of Options in Message Types" shows table that 
indicates with a "*" the options are allowed in each DHCP message type.

This mean that without a "*" the options are not allowed in each message
type, right?

I believe that this table information is too old( not correct ). 
I think that we need to clarify which option(message with invalid
option) should be discarded or should be ignored.

Following things are my thoughts. Are these things correct?
------------------
For Server
	Receiving Solict message:
		A Server must discard the Solicit message including
Server Identifier option.
		A Server must ignore all options that are not allowed to
appear in the message except for Server Identifier option. 

	Receiving Confirm message:
		A Server must discard the Confirm message including
Server Identifier option.
		A Server must ignore all options that are not allowed to
appear in the message except for Server Identifier option. 
		
	Receiving Rebind message:
		A Server must discard the Confirm message including
Server Identifier option.
		A Server must ignore all options that are not allowed to
appear in the message except for Server Identifier option. 

	Receiving Information-request message:
		A Server must discard the Confirm message including
Server Identifier option and/or IA_NA option.
		A Server must ignore all options that are not allowed to
appear in the message except for Server Identifier option and IA_NA
option. 

	Other messages(Request/Renew/Release/Decline/Relay-forward):
		A Server must ignore all options that are not allowed to
appear in the message.

	*I'd like to confirm following things.
	RFC3646 section5 says,
	--------------------------
	   The DNS Recursive Name Server option MUST NOT appear in any
other
	   than the following messages: Solicit, Advertise, Request,
Renew,
	   Rebind, Information-Request, and Reply.

	   The Domain Search List option MUST NOT appear in any other
than the
	   following messages: Solicit, Advertise, Request, Renew,
Rebind,
	   Information-Request, and Reply.
	--------------------------
	This means that servers should discard  the
Confirm/Release/Decline/Relay-forward message 
	that including  DNS Recursive Name Server option and/or Domain
Search List option, right?
	Or just ignore the option?
	
For Client
	All messages(Advertise/Reply/Reconfigure).
		A Client must ignore all options that are not allowe to
appear in the message.

For Relay Agent
	All messages
		A Relay Agent just relay the message.
		
---------------------

What do you think?

Best regards,
...Hideshi Enokihara
	

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg