Re: [netmod] identityref with multiple base statements (follow-up question)

Italo Busi <Italo.Busi@huawei.com> Wed, 23 September 2020 08:40 UTC

Return-Path: <Italo.Busi@huawei.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C38403A0E7E for <netmod@ietfa.amsl.com>; Wed, 23 Sep 2020 01:40:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 60HI8jcWwBXZ for <netmod@ietfa.amsl.com>; Wed, 23 Sep 2020 01:40:26 -0700 (PDT)
Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C1383A0E73 for <netmod@ietf.org>; Wed, 23 Sep 2020 01:40:25 -0700 (PDT)
Received: from lhreml720-chm.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id BE4627EF8E8C0061DF1B; Wed, 23 Sep 2020 09:40:21 +0100 (IST)
Received: from fraeml714-chm.china.huawei.com (10.206.15.33) by lhreml720-chm.china.huawei.com (10.201.108.71) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 23 Sep 2020 09:40:21 +0100
Received: from fraeml715-chm.china.huawei.com (10.206.15.34) by fraeml714-chm.china.huawei.com (10.206.15.33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 23 Sep 2020 10:40:21 +0200
Received: from fraeml715-chm.china.huawei.com ([10.206.15.34]) by fraeml715-chm.china.huawei.com ([10.206.15.34]) with mapi id 15.01.1913.007; Wed, 23 Sep 2020 10:40:21 +0200
From: Italo Busi <Italo.Busi@huawei.com>
To: "netmod@ietf.org" <netmod@ietf.org>
CC: Ladislav Lhotka <ladislav.lhotka@nic.cz>, Joey Boyd <joey.boyd@adtran.com>
Thread-Topic: [netmod] identityref with multiple base statements (follow-up question)
Thread-Index: AdaRhLMHWUL2bx+uSjSp5K9i+qJg9A==
Date: Wed, 23 Sep 2020 08:40:21 +0000
Message-ID: <7f4e6d298f16434b9555eaede6f3fe0e@huawei.com>
Accept-Language: it-IT, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.47.94.9]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/4bvddjgCtgRS5Y1O8VZpn9Mxxxg>
Subject: Re: [netmod] identityref with multiple base statements (follow-up question)
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Sep 2020 08:40:28 -0000

I have a follow-up question about this topic

Considering the same identities defined below, what would be the valid values the following references?

leaf reference-1 {
  type identityref {
    base base-1;
  }
  description
    "Reference to an identity #1.";
}

leaf reference-2 {
  type identityref {
    base base-2;
  }
  description
    "Reference to an identity #2.";
}

My understanding, is that:
- valid values for the reference-1 would be 'a' and 'b'
- valid values for the reference-2 would be 'b' and 'c'

Is my understanding correct?

Thanks, Italo

> -----Original Message-----
> From: Ladislav Lhotka [mailto:ladislav.lhotka@nic.cz]
> Sent: lunedì 3 agosto 2020 10:45
> To: Joey Boyd <joey.boyd@adtran.com>; netmod@ietf.org
> Subject: Re: [netmod] identityref with multiple base statements
> 
> Joey Boyd <joey.boyd@adtran.com> writes:
> 
> > Hi,
> >
> > I am looking for some clarification regarding RFC 7950 section 9.10.2,
> specifically this statement.
> >
> > Valid values for an identityref are any identities derived from all the
> identityref's base identities.
> >
> > Example:
> >
> > identity base-1 {
> >   description
> >     "Base identity #1.";
> > }
> >
> > identity base-2 {
> >   description
> >     "Base identity #2.";
> > }
> >
> > identity a {
> >   base base-1;
> >   description
> >     "Identity A.";
> > }
> >
> > identity b {
> >   base base-1;
> >   base base-2;
> >   description
> >     "Identity B.";
> > }
> >
> > identity c {
> >   base base-2;
> >   description
> >     "Identity C.";
> > }
> >
> > leaf reference {
> >   type identityref {
> >     base base-1;
> >     base base-2;
> >   }
> >   description
> >     "Reference to an identity.";
> > }
> >
> > The question is how to determine the value space for this identityref.
> >
> > Option #1:
> > The value space is any identity which is derived from both base identities.
> This means the only valid value in the example would be 'b'.
> >
> > Option #2:
> > The value space is any identity which is derived from either base identity.
> This means the valid values are 'a', 'b' and 'c'.
> >
> > The phrasing "...derived from all the identityref's base identities." tends to
> point to Option #1 but I would like clarification on the intent.
> 
> Yes, #1 is correct.
> 
> Lada
> 
> >
> > Best regards,
> > Joey
> >
> > _______________________________________________
> > netmod mailing list
> > netmod@ietf.org
> > https://www.ietf.org/mailman/listinfo/netmod
> 
> --
> Ladislav Lhotka
> Head, CZ.NIC Labs
> PGP Key ID: 0xB8F92B08A9F76C67
>