Re: [netmod] identityref with multiple base statements (follow-up question)

Italo Busi <Italo.Busi@huawei.com> Wed, 30 September 2020 10:00 UTC

Return-Path: <Italo.Busi@huawei.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 108953A09E3 for <netmod@ietfa.amsl.com>; Wed, 30 Sep 2020 03:00:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sl9u_g2Elw2g for <netmod@ietfa.amsl.com>; Wed, 30 Sep 2020 03:00:50 -0700 (PDT)
Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D139E3A09D8 for <netmod@ietf.org>; Wed, 30 Sep 2020 03:00:49 -0700 (PDT)
Received: from lhreml751-chm.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 12A6C938D6278D694EB2; Wed, 30 Sep 2020 11:00:48 +0100 (IST)
Received: from fraeml715-chm.china.huawei.com (10.206.15.34) by lhreml751-chm.china.huawei.com (10.201.108.201) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 30 Sep 2020 11:00:47 +0100
Received: from fraeml715-chm.china.huawei.com (10.206.15.34) by fraeml715-chm.china.huawei.com (10.206.15.34) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 30 Sep 2020 12:00:47 +0200
Received: from fraeml715-chm.china.huawei.com ([10.206.15.34]) by fraeml715-chm.china.huawei.com ([10.206.15.34]) with mapi id 15.01.1913.007; Wed, 30 Sep 2020 12:00:47 +0200
From: Italo Busi <Italo.Busi@huawei.com>
To: tom petch <ietfc@btconnect.com>, Ladislav Lhotka <ladislav.lhotka@nic.cz>, "netmod@ietf.org" <netmod@ietf.org>
CC: Joey Boyd <joey.boyd@adtran.com>
Thread-Topic: [netmod] identityref with multiple base statements (follow-up question)
Thread-Index: AdaRhLMHWUL2bx+uSjSp5K9i+qJg9AAIF0UAACbaOgABM952EA==
Date: Wed, 30 Sep 2020 10:00:47 +0000
Message-ID: <114e870a08b04707b39661a96dda9780@huawei.com>
References: <7f4e6d298f16434b9555eaede6f3fe0e@huawei.com>, <878sd04lex.fsf@nic.cz> <AM7PR07MB62487B0B4C3F4245B31ED322A0390@AM7PR07MB6248.eurprd07.prod.outlook.com>
In-Reply-To: <AM7PR07MB62487B0B4C3F4245B31ED322A0390@AM7PR07MB6248.eurprd07.prod.outlook.com>
Accept-Language: it-IT, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.47.90.255]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/LpiyIo9tmfX6G8De7UENFWWJDbw>
Subject: Re: [netmod] identityref with multiple base statements (follow-up question)
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2020 10:00:52 -0000

Lada: thanks a lot for the clarification.

Tom: my understanding is that the 'derived from all' would mean derived from ((aa and bb) or (aa and bb and something else)).

As a non-native English speaker, I would have said 'derived at least from all'.

Anyway, I am satisfied with the mail clarification.

Thanks again

Italo

> -----Original Message-----
> From: tom petch [mailto:ietfc@btconnect.com]
> Sent: giovedì 24 settembre 2020 11:01
> To: Ladislav Lhotka <ladislav.lhotka@nic.cz>; Italo Busi
> <Italo.Busi@huawei.com>; netmod@ietf.org
> Cc: Joey Boyd <joey.boyd@adtran.com>
> Subject: Re: [netmod] identityref with multiple base statements (follow-up
> question)
> 
> From: netmod <netmod-bounces@ietf.org> on behalf of Ladislav Lhotka
> <ladislav.lhotka@nic.cz>
> Sent: 23 September 2020 15:28
> 
> Italo Busi <Italo.Busi@huawei.com> writes:
> 
> > I have a follow-up question about this topic
> >
> > Considering the same identities defined below, what would be the valid
> values the following references?
> >
> > leaf reference-1 {
> >   type identityref {
> >     base base-1;
> >   }
> >   description
> >     "Reference to an identity #1.";
> > }
> >
> > leaf reference-2 {
> >   type identityref {
> >     base base-2;
> >   }
> >   description
> >     "Reference to an identity #2.";
> > }
> >
> > My understanding, is that:
> > - valid values for the reference-1 would be 'a' and 'b'
> > - valid values for the reference-2 would be 'b' and 'c'
> >
> > Is my understanding correct?
> 
> Yes, this should be pretty clear from sec. 9.10.2 of RFC 7950.
> 
> <tp>
> Well, may be.  I saw this come up some time ago and read RFC7950 and was
> unsure.
> 
> It is 'derived from all' that gave me pause.  With aa and bb as base, does that
> mean derived from aa and bb or derived from aa or bb?  Should that be
> 'derived from any'?
> 
> Tom Petch
> 
> Lada
> 
> >
> > Thanks, Italo
> >
> >> -----Original Message-----
> >> From: Ladislav Lhotka [mailto:ladislav.lhotka@nic.cz]
> >> Sent: lunedì 3 agosto 2020 10:45
> >> To: Joey Boyd <joey.boyd@adtran.com>; netmod@ietf.org
> >> Subject: Re: [netmod] identityref with multiple base statements
> >>
> >> Joey Boyd <joey.boyd@adtran.com> writes:
> >>
> >> > Hi,
> >> >
> >> > I am looking for some clarification regarding RFC 7950 section 9.10.2,
> >> specifically this statement.
> >> >
> >> > Valid values for an identityref are any identities derived from all the
> >> identityref's base identities.
> >> >
> >> > Example:
> >> >
> >> > identity base-1 {
> >> >   description
> >> >     "Base identity #1.";
> >> > }
> >> >
> >> > identity base-2 {
> >> >   description
> >> >     "Base identity #2.";
> >> > }
> >> >
> >> > identity a {
> >> >   base base-1;
> >> >   description
> >> >     "Identity A.";
> >> > }
> >> >
> >> > identity b {
> >> >   base base-1;
> >> >   base base-2;
> >> >   description
> >> >     "Identity B.";
> >> > }
> >> >
> >> > identity c {
> >> >   base base-2;
> >> >   description
> >> >     "Identity C.";
> >> > }
> >> >
> >> > leaf reference {
> >> >   type identityref {
> >> >     base base-1;
> >> >     base base-2;
> >> >   }
> >> >   description
> >> >     "Reference to an identity.";
> >> > }
> >> >
> >> > The question is how to determine the value space for this identityref.
> >> >
> >> > Option #1:
> >> > The value space is any identity which is derived from both base identities.
> >> This means the only valid value in the example would be 'b'.
> >> >
> >> > Option #2:
> >> > The value space is any identity which is derived from either base identity.
> >> This means the valid values are 'a', 'b' and 'c'.
> >> >
> >> > The phrasing "...derived from all the identityref's base identities." tends
> to
> >> point to Option #1 but I would like clarification on the intent.
> >>
> >> Yes, #1 is correct.
> >>
> >> Lada
> >>
> >> >
> >> > Best regards,
> >> > Joey
> >> >
> >> > _______________________________________________
> >> > netmod mailing list
> >> > netmod@ietf.org
> >> > https://www.ietf.org/mailman/listinfo/netmod
> >>
> >> --
> >> Ladislav Lhotka
> >> Head, CZ.NIC Labs
> >> PGP Key ID: 0xB8F92B08A9F76C67
> >>
> >
> 
> --
> Ladislav Lhotka
> Head, CZ.NIC Labs
> PGP Key ID: 0xB8F92B08A9F76C67
> 
> _______________________________________________
> netmod mailing list
> netmod@ietf.org
> https://www.ietf.org/mailman/listinfo/netmod