Re: [secdir] [radext] Secdir review of draft-ietf-softwire-6rd-radius-attrib-07

[Alan DeKok <[e-mail]>]

Bernard Aboba wrote:
> [BA] There isn't even any information with which to authorize the
> request.  The "Call Check" Service-Type was designed for situations
> where authorization can be determined via the Called-Station-Id or
> Calling-Station-Id attributes, which originally contained telephone
> numbers.

  The issue I have is what else to use.  IIRC, I suggested a new
Service-Type at one point.  But that didn't seem to fly.

> [BA] As I understand it, at least one of the scenarios described in the
> document would involve the retrieval of DHCP information along with a
> user authentication.  In such a scenario, why would either
> Authorize-Only or Call Check be needed?

  It would seem useful to have a Service-Type in the packet.  The
alternative would be to delete it entirely.

  Alan DeKok.