Re: [OPSAWG] draft-ietf-opsawg-tacacs-06 Contributions, Status and Plans

"Douglas Gash (dcmgash)" <dcmgash@cisco.com> Sun, 14 May 2017 15:01 UTC

Return-Path: <dcmgash@cisco.com>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C461712949B; Sun, 14 May 2017 08:01:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level:
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mysHKwRWaCuO; Sun, 14 May 2017 08:01:25 -0700 (PDT)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C34C1294E0; Sun, 14 May 2017 07:59:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3400; q=dns/txt; s=iport; t=1494773990; x=1495983590; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Q0GTkB4BJfhwkTuedH3k8Ys/u8G05xcellCZJPObBPk=; b=RxXg+ak2nYmUeCzUOtOgWtaj5l+/cI1I5AZUbNYluwNmZZqXYltbiSEU jK8fGa6V6guzeSqditMNG/5V6UBUf66imjqKclLtRHY/EgyyDRHUZQNDe tuwBYZarPwCPPHGhrzLygTUdEHmZ0gTPipFl7cfSNR24Ma7HPHPgUDAbU U=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DNAADBcBhZ/5hdJa1SChkBAQEBAQEBAQEBAQcBAQEBAYNVgW4Hg2SKGJFdlXWCD4YkAhqEfz8YAQIBAQEBAQEBayiFGQEEATRFEAIBCBwoAgIwJQIEDgWKGwiQEp1YBoIoikEBAQEBAQEBAQEBAQEBAQEBAQEBAQEdgQWKU4Q7KBeCdYJmBYlViCaEdIcbAYpQiEqRa5RCAR84gQpwFYc8dodugQ0BAQE
X-IronPort-AV: E=Sophos;i="5.38,340,1491264000"; d="scan'208";a="426303127"
Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 14 May 2017 14:59:45 +0000
Received: from XCH-RCD-014.cisco.com (xch-rcd-014.cisco.com [173.37.102.24]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id v4EExjnK018007 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 14 May 2017 14:59:45 GMT
Received: from xch-aln-014.cisco.com (173.36.7.24) by XCH-RCD-014.cisco.com (173.37.102.24) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 14 May 2017 09:59:44 -0500
Received: from xch-aln-014.cisco.com ([173.36.7.24]) by XCH-ALN-014.cisco.com ([173.36.7.24]) with mapi id 15.00.1210.000; Sun, 14 May 2017 09:59:44 -0500
From: "Douglas Gash (dcmgash)" <dcmgash@cisco.com>
To: Alan DeKok <aland@deployingradius.com>
CC: "opsawg@ietf.org" <opsawg@ietf.org>, "draft-ietf-opsawg-tacacs@ietf.org" <draft-ietf-opsawg-tacacs@ietf.org>, "opsawg-chairs@ietf.org" <opsawg-chairs@ietf.org>, "ops-ads@ietf.org" <ops-ads@ietf.org>
Thread-Topic: [OPSAWG] draft-ietf-opsawg-tacacs-06 Contributions, Status and Plans
Thread-Index: AQHSy08ttZSP0sW41keg1j/jrc0SIqHxblMAgADBTACAAE4+gIAAh0UAgAEuvwCAAB98gA==
Date: Sun, 14 May 2017 14:59:44 +0000
Message-ID: <D53E28A1.231DDD%dcmgash@cisco.com>
References: <D53BBCC7.22ECC8%dcmgash@cisco.com> <61D9FC7A-6F10-44E6-8400-578C4FEE1988@deployingradius.com> <D53C62F4.22F82E%dcmgash@cisco.com> <E7D62944-46B9-4091-BF16-0AF8CA47626D@deployingradius.com> <D53D15C9.230A48%dcmgash@cisco.com> <139688FE-6C2D-40D0-89BC-AB7065793320@deployingradius.com>
In-Reply-To: <139688FE-6C2D-40D0-89BC-AB7065793320@deployingradius.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.7.0.161029
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.55.1.6]
Content-Type: text/plain; charset="euc-kr"
Content-ID: <859B410087E30A4982771DBE63280429@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/bv8XRtQFqFo2O9Xuzda3WnJwhFU>
Subject: Re: [OPSAWG] draft-ietf-opsawg-tacacs-06 Contributions, Status and Plans
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 14 May 2017 15:01:27 -0000

Just to clarify: because the last batch of comments were on v5, we will
actually take that as the datum for next version.

Although the current upload (v6) can be folded into this process, what we
can actually do now is is respond to all comments in context of v5 and,
with ensuing discussion of those points, can hopefully get us to a
agreeable version of the document for v7.

On 14/05/2017 15:06, "Alan DeKok" <aland@deployingradius.com> wrote:

>
>> On May 13, 2017, at 3:03 PM, Douglas Gash (dcmgash) <dcmgash@cisco.com>
>>wrote:
>> 
>> 
>> So rather than directly updating the doc, we¹re looking for an
>>individual
>> response to each item. That is doable, we¹ll start putting that
>>together.
>
>  The point is to explain *why* the review was accepted or rejected.
>i.e. to have a discussion around the topic.

Agreed. That should come out of this process.

>
>  From your earlier comment:
>
>>> So our response to your reviews has been to incorporate, where
>>>feasible,
>>> and where we can apply then, to the doc.
>
>  Which items were incorporated?
>
>  Which items were *not* incorporated?  Why were they not incorporated?
>
>  There is no need to respond to each item individually.  Grouping things
>together is fine.
Sure, we can group them, we have them in the order you posted them mainly
to try to make sure we don’t miss any,


>
>  But when there are questions, they should be answered.  When comments
>are rejected, there should be an explanation.


So to recap, this process will take v5 and your comments to v5, then
hopefully we should have a transparent process getting to a v7 which we
can agree on. We can leverage v6 where it aligns with this process.

>
>  My larger issue with the review process so far is that the existing
>implementors haven't reviewed the document.  So we have no idea whether
>or not it describes the protocol they've implemented, or the choices
>they've made.

So let’s work through the document and identify what the core should be.
In the end we should have a protocol which clarifies the syntax of
interoperation whilst leaving the flexibility as needed for the varying
deployment implementations. Implementors have made very useful comments
and discussions already in the WG, and hopefully will contribute to the
discussions which will be raised by the response to your comments and the
ensuing move to closure.

Regards,

Doug.

>
>  Alan DeKok.
>