Re: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis

<lionel.morand@orange-ftgroup.com> Thu, 05 March 2009 09:49 UTC

Return-Path: <lionel.morand@orange-ftgroup.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 93CA228C33A for <dime@core3.amsl.com>; Thu, 5 Mar 2009 01:49:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.249
X-Spam-Level:
X-Spam-Status: No, score=-4.249 tagged_above=-999 required=5 tests=[AWL=1.000, BAYES_00=-2.599, GB_I_LETTER=-2, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QxVk+sGCOHm6 for <dime@core3.amsl.com>; Thu, 5 Mar 2009 01:49:45 -0800 (PST)
Received: from p-mail2.rd.francetelecom.com (p-mail2.rd.francetelecom.com [195.101.245.16]) by core3.amsl.com (Postfix) with ESMTP id 3446D28C297 for <dime@ietf.org>; Thu, 5 Mar 2009 01:49:45 -0800 (PST)
Received: from FTRDMEL2.rd.francetelecom.fr ([10.193.117.153]) by ftrdsmtp1.rd.francetelecom.fr with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Mar 2009 10:50:12 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 05 Mar 2009 10:50:10 +0100
Message-ID: <7DBAFEC6A76F3E42817DF1EBE64CB0260645703F@ftrdmel2>
In-Reply-To: <68275C95-3411-45C6-B1F8-95A4F1836EFD@gmail.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis
Thread-Index: AcmdduUpH1VzC3GKRGazlHw4ArDpmQAAM/HA
References: <008c01c99d3c$8bb36c00$7b27460a@china.huawei.com> <68275C95-3411-45C6-B1F8-95A4F1836EFD@gmail.com>
From: lionel.morand@orange-ftgroup.com
To: jouni.nospam@gmail.com, fqhuang@huawei.com
X-OriginalArrivalTime: 05 Mar 2009 09:50:12.0371 (UTC) FILETIME=[C7187E30:01C99D77]
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 09:49:46 -0000

Hi Jouni,

It is also my understanding.

Lionel 

> -----Message d'origine-----
> De : jouni korhonen [mailto:jouni.nospam@gmail.com] 
> Envoyé : jeudi 5 mars 2009 10:43
> À : Fortune HUANG
> Cc : 'Victor Fajardo'; MORAND Lionel RD-CORE-ISS; dime@ietf.org
> Objet : Re: [Dime] Problem with Origin- & Destination-Realm 
> AVPs in RFC3588bis
> 
> 
> Hi Fortune,
> 
> 
> On Mar 5, 2009, at 4:46 AM, Fortune HUANG wrote:
> 
> [snip]
> 
> 
> >
> > My conclusion after comparing the grammars of the three RFCs:
> > 1) According to the above RFC4282 grammar, "2.a " is a valid realm.
> 
> Correct.
> 
> >
> > 2) According to the above RFC4566 grammar, "2.a " is not a 
> valid FQDN 
> > since it has only 3 characters (not 4 or more).
> 
> First, RFC4566 ABNF is not in a role for defining FQDN.. it 
> is an ABNF for SDP grammar. So if the SDP grammar ABNF is 
> wrong, it is not the problem of original FQDN ABNF. Besides, 
> using "2.a" as an example is misleading. There is no root 
> zones that are one character long (see ICP-1, RFC1591). The 
> shortest root zone is two characters, which would e.g. be 
> "2.ac" and this is correct according to the ABNF in RFC4566.  
> The RFC1035 BNF would allow one character root zones, 
> however, those just do not exist in Internet DNS.
> 
> >
> > 3) According to the above RFC1035 grammar, "2.a" is not a 
> valid domain 
> > since it doesn't start with a letter (but a digit).
> 
> RFC1101 updates RFC1035 and relaxes the issue with a digit 
> being the first character.
> 
> 
> > If one could prove that the grammar of realm is the same as the 
> > grammar of FQDN,  then, RFC4282, RFC1035 and RFC4566 would 
> be proven 
> > inconsistent according.
> 
> So far, no problems with cases 2) and 3). Regarding the case 
> 1) few notes. RFC3588bis section 1.3. states that "NAI realm 
> names are required to be unique, and are piggybacked on the 
> administration of the DNS namespace." This basically means 
> one loses its rights for "creative" realm names when used 
> with Diameter. In DNS, one character root zones do not exist, 
> thus "2.a" is not legal within Diameter scope.
> 
> > However, I am not sure if I have found the right place where the 
> > strict grammar of FQDN is defined. Please tell me if you know.
> > But RFC4566 and RFC1035 were the materials my comment in 
> the previous 
> > email was based on.
> 
> Although this stuff is spread a bit around and topped with 
> de-facto assumptions, I think there is no issue.
> 
> Cheers,
> 	Jouni
> 
> 
> 
> 
> >
> >
> >
> > Best Regards,
> > Fortune
> >
> > -----Original Message-----
> > From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com]
> > Sent: Thursday, March 05, 2009 6:02 AM
> > To: lionel.morand@orange-ftgroup.com
> > Cc: fqhuang@huawei.com; glenzorn@comcast.net; dime@ietf.org
> > Subject: Re: [Dime] Problem with Origin- & 
> Destination-Realm AVPs in 
> > RFC3588bis
> >
> > Hi Fortune,
> >> I'm not sure to understand but I might have missed something.
> >>> From a syntax point of view, what is the difference 
> between a FQDN 
> >>> and a
> > realm?
> >> What would be the "potential" impacts to say that the 
> >> DiameterIdentity can
> > be a FQDN or a realm?
> >>
> > I have the same question as Lionel. Syntactically, FQDN and 
> realm are 
> > the same from the parsers point of view. The difference is in 
> > semantics which is already specified by the AVP having that type.
> >
> > regards,
> > victor
> >
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
> 
>