Re: [dhcwg] [radext] draft-ietf-dhc-dhcpv6-radius-opt-10

Tomek Mrugalski <tomasz.mrugalski@gmail.com> Tue, 09 April 2013 15:08 UTC

Return-Path: <tomasz.mrugalski@gmail.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B104D21F936C; Tue, 9 Apr 2013 08:08:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.865
X-Spam-Level:
X-Spam-Status: No, score=0.865 tagged_above=-999 required=5 tests=[FH_HOST_EQ_D_D_D_D=0.765, RDNS_DYNAMIC=0.1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TK6PWleFuAQY; Tue, 9 Apr 2013 08:08:01 -0700 (PDT)
Received: from mail-ea0-x22e.google.com (mail-ea0-x22e.google.com [IPv6:2a00:1450:4013:c01::22e]) by ietfa.amsl.com (Postfix) with ESMTP id D1BC821F93A6; Tue, 9 Apr 2013 08:07:57 -0700 (PDT)
Received: by mail-ea0-f174.google.com with SMTP id m14so2858685eaj.19 for <multiple recipients>; Tue, 09 Apr 2013 08:07:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:cc :subject:references:in-reply-to:x-tagtoolbar-keys:content-type :content-transfer-encoding; bh=k6O9KQrqqr31/qVj2T06lzy4gLhPYv15vycBG4nSBBY=; b=sypW6d7s4BYFzF2jmtw2WxNxz0H7AXEc74P9DuyvdPoKHWpIJC7H8FyES4eik04W2W GmsNSKKB4c/+ce9jai+C2I/Xp4mDV+RwwbU9TGHcgsogTB9+Efajh+KpGV6b1EBfHFRy uIUMh4hhVYuYebNLqvSPQZMCKjyoi2Dqz0lIFNPAE7CxUOVHmQc+2f7JTETptRrkrpAw 9S8SrzNDRHBTfpn59VVazdNzsZJVq7EY2CKLgOzsT1KTXZe+JYHqUsFx/RMvZRzg66sE rT+htAwrIcTGLYHa8EwyR4ZKW2z+M/051QPOj0VS39kkV9CG24tXKA0n1wvrhNyxEjae Q9+A==
X-Received: by 10.15.83.73 with SMTP id b49mr17533416eez.25.1365520076927; Tue, 09 Apr 2013 08:07:56 -0700 (PDT)
Received: from [10.0.0.100] (host-109-107-11-157.ip.jarsat.pl. [109.107.11.157]) by mx.google.com with ESMTPS id bk42sm20283919eeb.3.2013.04.09.08.07.55 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 09 Apr 2013 08:07:56 -0700 (PDT)
Message-ID: <51642EC7.1010101@gmail.com>
Date: Tue, 09 Apr 2013 17:07:51 +0200
From: Tomek Mrugalski <tomasz.mrugalski@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130308 Thunderbird/17.0.4
MIME-Version: 1.0
To: Ted Lemon <Ted.Lemon@nominum.com>
References: <CAC8SSWtBMyDgShEDofyUjgcBiQ_ttY_DUbDNHnhhnf531+9XXA@mail.gmail.com> <FB413294-CF61-4AD9-AF26-41EC8A30DF37@gmail.com> <5162d5aa.0794420a.2f19.fffff597@mx.google.com> <8D23D4052ABE7A4490E77B1A012B630775138825@mbx-01.win.nominum.com> <489D13FBFA9B3E41812EA89F188F018E184EBA72@xmb-rcd-x04.cisco.com> <AC349589-AC7B-442B-9CE8-D7343BC44BCC@gmail.com> <5164263E.50402@gmail.com> <8D23D4052ABE7A4490E77B1A012B63077513A692@mbx-01.win.nominum.com>
In-Reply-To: <8D23D4052ABE7A4490E77B1A012B63077513A692@mbx-01.win.nominum.com>
X-TagToolbar-Keys: D20130409170751209
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: "<dhcwg@ietf.org>" <dhcwg@ietf.org>, "<radext@ietf.org>" <radext@ietf.org>
Subject: Re: [dhcwg] [radext] draft-ietf-dhc-dhcpv6-radius-opt-10
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Apr 2013 15:08:01 -0000

On 09.04.2013 16:35, Ted Lemon wrote:
> On Apr 9, 2013, at 10:31 AM, Tomek Mrugalski <tomasz.mrugalski@gmail.com>
>  wrote:
>> On 09.04.2013 11:59, Jouni Korhonen wrote:
>>> What I am after is a note stating that a _client_ must be prepared
>>> for a reply from a server that does not provide adequate
>>> response/information for all the RADIUS attributes the client
>>> included in the request. This is solely meant for the future
>>> specifications using the OPTION_RADIUS.
>> When clarifying that, we must remember to be explicit about which client
>> or server (radius or dhcpv6) we are talking about here.
>>
>> Here's DHCPv6 point of view: This DHCPv6 option will never reach DHCPv6
>> client. DHCPv6 client will never send it either. DHCPv6 Server will
>> never send this option back, just receive it from the DHCPv6 relay.
> 
> Oops, right.   So it's the relay that may need to deal with an inappropriate response from the DHCP server?
No. Is is the DHCP server. Relay/radius client get some attributes from
radius server and then sends it along with the relayed message to the
DHCP server. The DHCP server will use that information to select
configuration parameters for the dhcp client. If the relay includes some
Radius attributes the DHCP server does not recognize, the DHCP server
should ignore that particular RADIUS attribute and use those it
understands. Server will send response back to the DHCP client via DHCP
relay, but that response will not include any RADIUS attributes.