Re: [netmod] identityref with multiple base statements (follow-up question)
Italo Busi <Italo.Busi@huawei.com> Wed, 30 September 2020 10:00 UTC
Return-Path: <Italo.Busi@huawei.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 108953A09E3 for <netmod@ietfa.amsl.com>; Wed, 30 Sep 2020 03:00:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sl9u_g2Elw2g for <netmod@ietfa.amsl.com>; Wed, 30 Sep 2020 03:00:50 -0700 (PDT)
Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D139E3A09D8 for <netmod@ietf.org>; Wed, 30 Sep 2020 03:00:49 -0700 (PDT)
Received: from lhreml751-chm.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 12A6C938D6278D694EB2; Wed, 30 Sep 2020 11:00:48 +0100 (IST)
Received: from fraeml715-chm.china.huawei.com (10.206.15.34) by lhreml751-chm.china.huawei.com (10.201.108.201) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 30 Sep 2020 11:00:47 +0100
Received: from fraeml715-chm.china.huawei.com (10.206.15.34) by fraeml715-chm.china.huawei.com (10.206.15.34) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 30 Sep 2020 12:00:47 +0200
Received: from fraeml715-chm.china.huawei.com ([10.206.15.34]) by fraeml715-chm.china.huawei.com ([10.206.15.34]) with mapi id 15.01.1913.007; Wed, 30 Sep 2020 12:00:47 +0200
From: Italo Busi <Italo.Busi@huawei.com>
To: tom petch <ietfc@btconnect.com>, Ladislav Lhotka <ladislav.lhotka@nic.cz>, "netmod@ietf.org" <netmod@ietf.org>
CC: Joey Boyd <joey.boyd@adtran.com>
Thread-Topic: [netmod] identityref with multiple base statements (follow-up question)
Thread-Index: AdaRhLMHWUL2bx+uSjSp5K9i+qJg9AAIF0UAACbaOgABM952EA==
Date: Wed, 30 Sep 2020 10:00:47 +0000
Message-ID: <114e870a08b04707b39661a96dda9780@huawei.com>
References: <7f4e6d298f16434b9555eaede6f3fe0e@huawei.com>, <878sd04lex.fsf@nic.cz> <AM7PR07MB62487B0B4C3F4245B31ED322A0390@AM7PR07MB6248.eurprd07.prod.outlook.com>
In-Reply-To: <AM7PR07MB62487B0B4C3F4245B31ED322A0390@AM7PR07MB6248.eurprd07.prod.outlook.com>
Accept-Language: it-IT, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.47.90.255]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/LpiyIo9tmfX6G8De7UENFWWJDbw>
Subject: Re: [netmod] identityref with multiple base statements (follow-up question)
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2020 10:00:52 -0000
Lada: thanks a lot for the clarification. Tom: my understanding is that the 'derived from all' would mean derived from ((aa and bb) or (aa and bb and something else)). As a non-native English speaker, I would have said 'derived at least from all'. Anyway, I am satisfied with the mail clarification. Thanks again Italo > -----Original Message----- > From: tom petch [mailto:ietfc@btconnect.com] > Sent: giovedì 24 settembre 2020 11:01 > To: Ladislav Lhotka <ladislav.lhotka@nic.cz>; Italo Busi > <Italo.Busi@huawei.com>; netmod@ietf.org > Cc: Joey Boyd <joey.boyd@adtran.com> > Subject: Re: [netmod] identityref with multiple base statements (follow-up > question) > > From: netmod <netmod-bounces@ietf.org> on behalf of Ladislav Lhotka > <ladislav.lhotka@nic.cz> > Sent: 23 September 2020 15:28 > > Italo Busi <Italo.Busi@huawei.com> writes: > > > I have a follow-up question about this topic > > > > Considering the same identities defined below, what would be the valid > values the following references? > > > > leaf reference-1 { > > type identityref { > > base base-1; > > } > > description > > "Reference to an identity #1."; > > } > > > > leaf reference-2 { > > type identityref { > > base base-2; > > } > > description > > "Reference to an identity #2."; > > } > > > > My understanding, is that: > > - valid values for the reference-1 would be 'a' and 'b' > > - valid values for the reference-2 would be 'b' and 'c' > > > > Is my understanding correct? > > Yes, this should be pretty clear from sec. 9.10.2 of RFC 7950. > > <tp> > Well, may be. I saw this come up some time ago and read RFC7950 and was > unsure. > > It is 'derived from all' that gave me pause. With aa and bb as base, does that > mean derived from aa and bb or derived from aa or bb? Should that be > 'derived from any'? > > Tom Petch > > Lada > > > > > Thanks, Italo > > > >> -----Original Message----- > >> From: Ladislav Lhotka [mailto:ladislav.lhotka@nic.cz] > >> Sent: lunedì 3 agosto 2020 10:45 > >> To: Joey Boyd <joey.boyd@adtran.com>; netmod@ietf.org > >> Subject: Re: [netmod] identityref with multiple base statements > >> > >> Joey Boyd <joey.boyd@adtran.com> writes: > >> > >> > Hi, > >> > > >> > I am looking for some clarification regarding RFC 7950 section 9.10.2, > >> specifically this statement. > >> > > >> > Valid values for an identityref are any identities derived from all the > >> identityref's base identities. > >> > > >> > Example: > >> > > >> > identity base-1 { > >> > description > >> > "Base identity #1."; > >> > } > >> > > >> > identity base-2 { > >> > description > >> > "Base identity #2."; > >> > } > >> > > >> > identity a { > >> > base base-1; > >> > description > >> > "Identity A."; > >> > } > >> > > >> > identity b { > >> > base base-1; > >> > base base-2; > >> > description > >> > "Identity B."; > >> > } > >> > > >> > identity c { > >> > base base-2; > >> > description > >> > "Identity C."; > >> > } > >> > > >> > leaf reference { > >> > type identityref { > >> > base base-1; > >> > base base-2; > >> > } > >> > description > >> > "Reference to an identity."; > >> > } > >> > > >> > The question is how to determine the value space for this identityref. > >> > > >> > Option #1: > >> > The value space is any identity which is derived from both base identities. > >> This means the only valid value in the example would be 'b'. > >> > > >> > Option #2: > >> > The value space is any identity which is derived from either base identity. > >> This means the valid values are 'a', 'b' and 'c'. > >> > > >> > The phrasing "...derived from all the identityref's base identities." tends > to > >> point to Option #1 but I would like clarification on the intent. > >> > >> Yes, #1 is correct. > >> > >> Lada > >> > >> > > >> > Best regards, > >> > Joey > >> > > >> > _______________________________________________ > >> > netmod mailing list > >> > netmod@ietf.org > >> > https://www.ietf.org/mailman/listinfo/netmod > >> > >> -- > >> Ladislav Lhotka > >> Head, CZ.NIC Labs > >> PGP Key ID: 0xB8F92B08A9F76C67 > >> > > > > -- > Ladislav Lhotka > Head, CZ.NIC Labs > PGP Key ID: 0xB8F92B08A9F76C67 > > _______________________________________________ > netmod mailing list > netmod@ietf.org > https://www.ietf.org/mailman/listinfo/netmod
- Re: [netmod] identityref with multiple base state… Italo Busi
- Re: [netmod] identityref with multiple base state… Ladislav Lhotka
- Re: [netmod] identityref with multiple base state… tom petch
- Re: [netmod] identityref with multiple base state… Italo Busi