Re: [nfsv4] Fwd: New Version Notification for draft-dnoveck-nfsv4-security-03.txt

[Rick Macklem <[e-mail]>]

On page 122, I'm guessing that one of these statements
is meant to be for "client peer"?

   *  XPCH_SVRAUTH restricts connections allowed to those that provide,
      at connection time authentication of the server peer.

   *  XPCH_CLAUTH restricts connections allowed to those that provide,
      at connection time authentication of the server peer.

rick, who is slowly working through the draft...

________________________________________
From: nfsv4 <[e-mail]> on behalf of David Noveck <[e-mail]>
Sent: Tuesday, November 23, 2021 8:55 AM
To: NFSv4; nfsv4-chairs; [e-mail]
Subject: [nfsv4] Fwd: New Version Notification for draft-dnoveck-nfsv4-security-03.txt

CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to [e-mail]


This is considerably different from -02 (1400 lines).  Still, a diff between -02 and -03 is useful to see where the changes/additions are, if you read -02.

---------- Forwarded message ---------
From: <[e-mail]<mailto:[e-mail]>>
Date: Tue, Nov 23, 2021 at 8:45 AM
Subject: New Version Notification for draft-dnoveck-nfsv4-security-03.txt
To: David Noveck <[e-mail]<mailto:[e-mail]>>



A new version of I-D, draft-dnoveck-nfsv4-security-03.txt
has been successfully submitted by David Noveck and posted to the
IETF repository.

Name:           draft-dnoveck-nfsv4-security
Revision:       03
Title:          Security for the NFSv4 Protocols
Document date:  2021-11-23
Group:          Individual Submission
Pages:          139
URL:            https://www.ietf.org/archive/id/draft-dnoveck-nfsv4-security-03.txt
Status:         https://datatracker.ietf.org/doc/draft-dnoveck-nfsv4-security/
Html:           https://www.ietf.org/archive/id/draft-dnoveck-nfsv4-security-03.html
Htmlized:       https://datatracker.ietf.org/doc/html/draft-dnoveck-nfsv4-security
Diff:           https://www.ietf.org/rfcdiff?url2=draft-dnoveck-nfsv4-security-03

Abstract:
   This document describes the core security features of the NFSv4
   family of protocols, applying to all minor versions.  The discussion
   includes the use of security features provided by RPC on a per-
   connection basis.

   This preliminary version of the document, is intended, in large part,
   to result in working group discussion regarding existing NFSv4
   security issues and to provide a framework for addressing these
   issues and obtaining working group consensus regarding necessary
   changes.

   When a successor document is eventually published as an RFC, it will
   supersede the description of security appearing in existing minor
   version specification documents such as RFC 7530 and RFC 8881.




The IETF Secretariat