Re: [secdir] review of draft-ietf-netconf-nmda-restconf-04

[Juergen Schoenwaelder <[e-mail]>]

On Mon, Jul 09, 2018 at 05:48:53PM -0700, Mahesh Jethanandani wrote:
> There have been a few comments that have been made to the version of the draft that has been submitted to IESG. While we wait for other comments to be provided, and direction of when an update should be provided, who amongst the authors is updating GitHub with these changes? 
> 
> I am concerned we might lose track of the changes that need to be made.
> 
> Here are the changes that I am aware of for nmda-restconf. I can compile a similar list for nmda-netconf if needed.

Having a list of outstanding edits for nmda-netconf would be nice as well
so we can make the edits on github.
 
> Kent’s comment on nmda-restconf operations (thread <https://www.ietf.org/mail-archive/web/netconf/current/msg14998.html> from today).

Given that lock and unlock require session semantics, I think the
resolution should be to add.

   A RESTCONF server supporting NMDA datastores MAY implement the
   "ietf-netconf-nmda" [I-D. ietf-netconf-nmda-netconf] module to
   enable the NETCONF operations defined in this draft to appear
   under the {+restconf}/operations resource.

But then, what is the value of this? You do not need get-data and
edit-data with RESTCONF since you can send GET/POST/PATCH straight to
the datastore resources. I guess I am still unclear which problem we
are trying to solve by adding this (or a similar) statement.

> Dan’s comment on this thread (also from today, but is not on netconf mailing list)

Not sure which one you mean.

> Russ’s Genart review (thread <https://www.ietf.org/mail-archive/web/netconf/current/msg14834.html> from June 28)

Not sure what the resolution is, removing the example text or trying
to better explain that this is example text.

> Rohit’s change-2 comments provided for nmda-netconf, that are applicable for nmda-restconf (thread <https://www.ietf.org/mail-archive/web/netconf/current/msg14607.html> from June 1)

The inclusion of an example showing the usage of
negated-origin-filter? This was an nmda netconf command. We do not
seem to have an origin filter in nmda restconf, this is an nmda
netconf only feature?

> Anything else that I missing?

Not that I recall.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: [phone]         Campus Ring 1 | 28759 Bremen | Germany
Fax:   [phone]         <https://www.jacobs-university.de/>