Re: [netmod] identityref with multiple base statements (follow-up question)

Italo Busi <Italo.Busi@huawei.com> writes:

> I have a follow-up question about this topic
>
> Considering the same identities defined below, what would be the valid values the following references?
>
> leaf reference-1 {
>   type identityref {
>     base base-1;
>   }
>   description
>     "Reference to an identity #1.";
> }
>
> leaf reference-2 {
>   type identityref {
>     base base-2;
>   }
>   description
>     "Reference to an identity #2.";
> }
>
> My understanding, is that:
> - valid values for the reference-1 would be 'a' and 'b'
> - valid values for the reference-2 would be 'b' and 'c'
>
> Is my understanding correct?

Yes, this should be pretty clear from sec. 9.10.2 of RFC 7950.

Lada

>
> Thanks, Italo
>
>> -----Original Message-----
>> From: Ladislav Lhotka [mailto:ladislav.lhotka@nic.cz]
>> Sent: lunedì 3 agosto 2020 10:45
>> To: Joey Boyd <joey.boyd@adtran.com>; netmod@ietf.org
>> Subject: Re: [netmod] identityref with multiple base statements
>> 
>> Joey Boyd <joey.boyd@adtran.com> writes:
>> 
>> > Hi,
>> >
>> > I am looking for some clarification regarding RFC 7950 section 9.10.2,
>> specifically this statement.
>> >
>> > Valid values for an identityref are any identities derived from all the
>> identityref's base identities.
>> >
>> > Example:
>> >
>> > identity base-1 {
>> >   description
>> >     "Base identity #1.";
>> > }
>> >
>> > identity base-2 {
>> >   description
>> >     "Base identity #2.";
>> > }
>> >
>> > identity a {
>> >   base base-1;
>> >   description
>> >     "Identity A.";
>> > }
>> >
>> > identity b {
>> >   base base-1;
>> >   base base-2;
>> >   description
>> >     "Identity B.";
>> > }
>> >
>> > identity c {
>> >   base base-2;
>> >   description
>> >     "Identity C.";
>> > }
>> >
>> > leaf reference {
>> >   type identityref {
>> >     base base-1;
>> >     base base-2;
>> >   }
>> >   description
>> >     "Reference to an identity.";
>> > }
>> >
>> > The question is how to determine the value space for this identityref.
>> >
>> > Option #1:
>> > The value space is any identity which is derived from both base identities.
>> This means the only valid value in the example would be 'b'.
>> >
>> > Option #2:
>> > The value space is any identity which is derived from either base identity.
>> This means the valid values are 'a', 'b' and 'c'.
>> >
>> > The phrasing "...derived from all the identityref's base identities." tends to
>> point to Option #1 but I would like clarification on the intent.
>> 
>> Yes, #1 is correct.
>> 
>> Lada
>> 
>> >
>> > Best regards,
>> > Joey
>> >
>> > _______________________________________________
>> > netmod mailing list
>> > netmod@ietf.org
>> > https://www.ietf.org/mailman/listinfo/netmod
>> 
>> --
>> Ladislav Lhotka
>> Head, CZ.NIC Labs
>> PGP Key ID: 0xB8F92B08A9F76C67
>> 
>

-- 
Ladislav Lhotka 
Head, CZ.NIC Labs
PGP Key ID: 0xB8F92B08A9F76C67