[nfsv4] Fwd: I-D Action: draft-ietf-nfsv4-integrity-measurement-05.txt

Chuck Lever <chuck.lever@oracle.com> Thu, 06 June 2019 14:45 UTC

From: Chuck Lever <chuck.lever@oracle.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Message-Id: <CFEBD43C-2C5A-419A-95C6-D60ABE2334D0@oracle.com>
References: <155983186869.11711.4407873622391875112@ietfa.amsl.com>
To: NFSv4 <nfsv4@ietf.org>
Date: Thu, 06 Jun 2019 10:44:53 -0400
Archived-At: <https://mailarchive.ietf.org/arch/msg/nfsv4/Lx7BFl0IcM6XGJDlDyrH1_ZCb0c>
Subject: [nfsv4] Fwd: I-D Action: draft-ietf-nfsv4-integrity-measurement-05.txt
Precedence: list

> Begin forwarded message:
> 
> From: internet-drafts@ietf.org
> Subject: [nfsv4] I-D Action: draft-ietf-nfsv4-integrity-measurement-05.txt
> Date: June 6, 2019 at 10:37:48 AM EDT
> To: <i-d-announce@ietf.org>
> Cc: nfsv4@ietf.org
> Reply-To: nfsv4@ietf.org
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Network File System Version 4 WG of the IETF.
> 
>        Title           : Integrity Measurement for Network File System version 4
>        Author          : Charles Lever
> 	Filename        : draft-ietf-nfsv4-integrity-measurement-05.txt
> 	Pages           : 17
> 	Date            : 2019-06-06
> 
> Abstract:
>   This document specifies an OPTIONAL extension to NFS version 4 minor
>   version 2 that enables Linux Integrity Measurement Architecture
>   metadata (IMA) to be conveyed between NFS version 4.2 servers and
>   clients.  Integrity measurement authenticates the creator of a file's
>   content and helps guarantee the content's integrity end-to-end from
>   creation to use.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-nfsv4-integrity-measurement/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-nfsv4-integrity-measurement-05
> https://datatracker.ietf.org/doc/html/draft-ietf-nfsv4-integrity-measurement-05
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-nfsv4-integrity-measurement-05
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/

This revision attempts to address Dave's review comments on -04. In particular,
the Introduction explains why it is not necessary for the document to describe
in detail the format of IMA metadata, as he suggested in his review.

Section 4 now includes discussion of OPEN(CREATE) and NVERIFY/VERIFY, in addition
to a new status code for reporting integrity check failures.

I've also expanded the discussion of the use of certificates for authentication,
though it's possible to go into more detail if someone has suggestions.

The draft submission window will close for IETF 105 on July 7.


--
Chuck Lever

[nfsv4] Fwd: I-D Action: draft-ietf-nfsv4-integri… Chuck Lever
[nfsv4] I-D Action: draft-ietf-nfsv4-integrity-me… internet-drafts