Re: Questions on modified Extended Attribute format?

Barney Wolff <barney@databus.com> Fri, 11 January 2008 02:28 UTC

Return-path: <owner-radiusext@ops.ietf.org>
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1JD9d4-0004go-RU for radext-archive-IeZ9sae2@lists.ietf.org; Thu, 10 Jan 2008 21:28:18 -0500
Received: from psg.com ([147.28.0.62]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1JD9d4-0003fu-B5 for radext-archive-IeZ9sae2@lists.ietf.org; Thu, 10 Jan 2008 21:28:18 -0500
Received: from majordom by psg.com with local (Exim 4.68 (FreeBSD)) (envelope-from <owner-radiusext@ops.ietf.org>) id 1JD9Z6-000CaL-Gw for radiusext-data@psg.com; Fri, 11 Jan 2008 02:24:12 +0000
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on psg.com
X-Spam-Level:
X-Spam-Status: No, score=-2.5 required=5.0 tests=AWL,BAYES_00,RDNS_NONE autolearn=no version=3.2.3
Received: from [66.114.74.12] (helo=mail1.acecape.com) by psg.com with esmtp (Exim 4.68 (FreeBSD)) (envelope-from <barney@databus.com>) id 1JD9Z3-000Ca5-Up for radiusext@ops.ietf.org; Fri, 11 Jan 2008 02:24:11 +0000
Received: from pit.databus.com ([71.167.169.182]) (authenticated bits=0) by mail1.acecape.com (8.13.8/8.13.8) with ESMTP id m0B2Njuc024760 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 10 Jan 2008 21:23:45 -0500
Received: from pit.databus.com (localhost [127.0.0.1]) by pit.databus.com (8.14.2/8.14.2) with ESMTP id m0B2Nin9017614; Thu, 10 Jan 2008 21:23:44 -0500 (EST) (envelope-from barney@pit.databus.com)
Received: (from barney@localhost) by pit.databus.com (8.14.2/8.14.2/Submit) id m0B2NeqR017613; Thu, 10 Jan 2008 21:23:40 -0500 (EST) (envelope-from barney)
Date: Thu, 10 Jan 2008 21:23:40 -0500
From: Barney Wolff <barney@databus.com>
To: Glen Zorn <glenzorn@comcast.net>
Cc: 'Alan DeKok' <aland@nitros9.org>, radiusext@ops.ietf.org
Subject: Re: Questions on modified Extended Attribute format?
Message-ID: <20080111022340.GA96430@pit.databus.com>
References: <4772A741.40303@nitros9.org> <007e01c847fa$cbae1a00$630a4e00$@net> <47732E9D.4030803@nitros9.org> <00b401c848e0$2f0e9c60$8d2bd520$@net> <4774B67D.7040603@nitros9.org> <005601c8496f$9e430910$dac91b30$@net> <477C60D6.3020008@nitros9.org> <003e01c851c1$fad525f0$f07f71d0$@net> <478334FB.6080208@nitros9.org> <000901c853db$8007d7c0$a367640a@arubanetworks.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <000901c853db$8007d7c0$a367640a@arubanetworks.com>
User-Agent: Mutt/1.5.17 (2007-11-01)
Sender: owner-radiusext@ops.ietf.org
Precedence: bulk
X-Spam-Score: -4.0 (----)
X-Scan-Signature: cab78e1e39c4b328567edb48482b6a69

On Thu, Jan 10, 2008 at 02:52:16PM -0800, Glen Zorn wrote:
> 
> > 
> >   For a total of 10 bytes of header for one attribute.
> > 
> >   The "Diameter AVP in RADIUS" involves:
> > 
> >    new attribute header: 2 bytes
> >    Diamater header: 8 bytes (4 byte type + 4 byte length)
> 
> Pardon me: 4 byte type, 1 byte of flags (BTW, are those 8 bits of flags
> actually useful in RADIUS?) and a 3 byte length.  
> 
> > 
> >   For a total of 10 bytes.  Plus, conversion to Diameter in Diameter
> > to RADIUS gateways is easy.  We can get arbitrary grouping via the
> > Diameter method.  We can have attributes as long as we want.  
> 
> Really?  The "new attribute header" that you conveniently gloss over
> above contains a 1 octet total length for the attribute, giving the same
> length limit as old-style RADIUS; of course, you could always either a)
> just concatenate "Diameter AVPs" of the same AVP type together (but then
> you can only have one AVP of a given type in a message) or b) add an
> "awkward" continuation BIT to the Flags field of the AVP...

Well, no.  The proposal was that all the EA TLVs would be concatenated
before being decoded, so the Diameter length fields would delimit the
attributes.  No continuation bits, bytes or logic.  And of course, the
totality of EAs could/should be packed into as many full RADIUS TLVs as
necessary, with much less TL overhead.

Allow me to express some wry amusement that the pretext for rejecting
the Diameter-format proposal was that only attribute typespace exhaustion
was of interest, not attribute length or grouping.  Then, magically,
length and grouping came back.  Being retired, at least I won't have
to code whatever y'all eventually agree on.

-- 
Barney Wolff         I never met a computer I didn't like.


--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>