[radext] #147: Internationalization and draft-ietf-radext-dynamic-discovery

["radext issue tracker" <[e-mail]>]

#147: Internationalization and draft-ietf-radext-dynamic-discovery

 Currently the internationalization advice provided in Section 2.3.1
 appears to differ from that provided in RFC 4282bis, creating potentially
 unpredictable interactions.

    Dynamic server discovery as defined in this document is only
    applicable for AAA transactions where a RADIUS server receives a
    request with a realm for which no home RADIUS server is known.

 [BA] Does this paragraph really apply to RADIUS servers and not proxies?
 Typically a server will only check the realm and see if it represents a
 realm it is serving; if not an error is flagged.  Asking RADIUS servers
 (not proxies) to route for realms for which they are not authoritative
 seems dangerous.

 Also, the meaning of "no home RADIUS server is known" is not clear.

 According to RFC 4282bis, only bit-by-bit comparisons are supported in the
 AAA infrastructure.  As a result, were a client to not provide a
 normalized realm, the resulting failure of the  comparison would trigger
 use of dynamic server discovery.  Is this what is intended??

 Section 2.3.1

    Note well: The attribute User-Name is defined to contain UTF-8 text.
    In practice, the content may or may not be UTF-8.  Even if UTF-8, it
    may or may not map to a domain name in the realm part. Implementors
    MUST take possible conversion error paths into consideration when
    parsing incoming User-Name attributes.

 [BA] This would appear to contradict RFC 4282bis requirements for realm
 normalization and realm correspondence to a legal FQDN. Although Section
 2.2 does mention conversion to punycode, the exact steps to be performed
 are not described:

    It is expected that in most cases, the label used for the records is
    the DNS representation (punycode) of the literal realm name for which
    the server is the RADIUS server.

-- 
-------------------------------------+-------------------------------------
 Reporter:                           |      Owner:  draft-ietf-radext-
  [e-mail]          |  [e-mail]
     Type:  defect                   |     Status:  new
 Priority:  critical                 |  Milestone:  milestone1
Component:  dynamic-discovery        |    Version:  1.0
 Severity:  In WG Last Call          |   Keywords:
-------------------------------------+-------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/radext/trac/ticket/147>
radext <http://tools.ietf.org/radext/>