From owner-aaa-wg@merit.edu Tue Jun 06 07:51:39 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fna5z-0002nA-KU for aaa-archive@lists.ietf.org; Tue, 06 Jun 2006 07:51:39 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fna5y-0006eL-0m for aaa-archive@lists.ietf.org; Tue, 06 Jun 2006 07:51:39 -0400 Received: by trapdoor.merit.edu (Postfix) id 7F9EB9126E; Tue, 6 Jun 2006 07:51:29 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 4D22A91270; Tue, 6 Jun 2006 07:51:29 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 066929126E for ; Tue, 6 Jun 2006 07:51:27 -0400 (EDT) Received: by segue.merit.edu (Postfix) id E272358285; Tue, 6 Jun 2006 07:51:27 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id CE71058280 for ; Tue, 6 Jun 2006 07:51:27 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id D32CF17F6; Tue, 6 Jun 2006 07:51:27 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 04599-07 for ; Tue, 6 Jun 2006 07:51:27 -0400 (EDT) Received: from web55413.mail.re4.yahoo.com (web55413.mail.re4.yahoo.com [206.190.58.207]) by fiji.merit.edu (Postfix) with SMTP id 4503317E5 for ; Tue, 6 Jun 2006 07:51:25 -0400 (EDT) Received: (qmail 67963 invoked by uid 60001); 6 Jun 2006 11:51:24 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=Q3Zcn2I3jSGlbk2CxZpYJ1U/OF6ccAkIVhEtNJrmAmp6gYEpGg1Iyf/SOqHK1UFVfqVhWkeKlAgKbh8uQSIjgJcHFRjd6OMVVyNPjIGCo0ukVP8F8/bZsx3DgGdiwSPRRE7kZs9eGwp/1PfTPMGvRFw7V4yXePMaSMniC2xA8Gs= ; Message-ID: <20060606115124.67961.qmail@web55413.mail.re4.yahoo.com> Received: from [143.53.31.49] by web55413.mail.re4.yahoo.com via HTTP; Tue, 06 Jun 2006 04:51:24 PDT Date: Tue, 6 Jun 2006 04:51:24 -0700 (PDT) From: John Magson Subject: [AAA-WG]: AAA Performance evaluation To: aaa-wg@merit.edu MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-992189771-1149594684=:65783" Content-Transfer-Encoding: 8bit X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 1.9 (+) X-Scan-Signature: 93238566e09e6e262849b4f805833007 --0-992189771-1149594684=:65783 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Hi What are the performance evaluation techniques suitable for AAA Protocols? Mostly AAA is coupled with mobility or key mnageent techniques for any form of performance evaluation. is there any specific techniques/mechanism anyone has performed any performance evalutaion and comparison of AAA protocols. Thank you in advance. John --------------------------------- Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1¢/min. --0-992189771-1149594684=:65783 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 8bit
Hi
 
What are the performance evaluation techniques suitable for AAA Protocols?
 
Mostly AAA is coupled with mobility or key mnageent techniques for any form of performance evaluation. is there any specific techniques/mechanism anyone has performed any performance evalutaion and comparison of AAA protocols.
 
Thank you in advance.
 
John


Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1¢/min. --0-992189771-1149594684=:65783-- From owner-aaa-wg@merit.edu Tue Jun 06 12:02:55 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fne19-000760-4I for aaa-archive@lists.ietf.org; Tue, 06 Jun 2006 12:02:55 -0400 Received: from stsc1260-eth-s1-s1p1-vip.va.neustar.com ([156.154.16.129] helo=chiedprmail1.ietf.org) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fnd4M-0002Lm-M1 for aaa-archive@lists.ietf.org; Tue, 06 Jun 2006 11:02:10 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1Fncrb-0005U2-Af for aaa-archive@lists.ietf.org; Tue, 06 Jun 2006 10:49:03 -0400 Received: by trapdoor.merit.edu (Postfix) id 2D03691230; Tue, 6 Jun 2006 10:48:52 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 9D0B091244; Tue, 6 Jun 2006 10:48:51 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id A4BE891230 for ; Tue, 6 Jun 2006 10:48:49 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 8F18B58286; Tue, 6 Jun 2006 10:48:49 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 4C45158280 for ; Tue, 6 Jun 2006 10:48:49 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 4D06717F6; Tue, 6 Jun 2006 10:48:49 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08970-07 for ; Tue, 6 Jun 2006 10:48:48 -0400 (EDT) X-Greylist: delayed 375 seconds by postgrey-1.21 at fiji.merit.edu; Tue, 06 Jun 2006 10:48:48 EDT Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.231]) by fiji.merit.edu (Postfix) with ESMTP id D6BE817E5 for ; Tue, 6 Jun 2006 10:48:46 -0400 (EDT) Received: by wr-out-0506.google.com with SMTP id i12so150688wra for ; Tue, 06 Jun 2006 07:48:46 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:mime-version:content-type:content-transfer-encoding:content-disposition; b=FDJdn+94AA2XNtZlbAuan3Kyp7pJKMg9fg97RlbaVEOTTD3GFj7276U6vHG/iKOC+7JiBxo96shJo48c92A4mw8tFXz+XxfeehjL3tckq7OtpTC9+ATPBNKMxj9yzLBCWUIT5g/uZI4Uk02KSf+znq8b9jgWGOQ6IfZHV0Np9UY= Received: by 10.54.60.15 with SMTP id i15mr839820wra; Tue, 06 Jun 2006 07:42:27 -0700 (PDT) Received: by 10.54.129.16 with HTTP; Tue, 6 Jun 2006 07:42:27 -0700 (PDT) Message-ID: Date: Tue, 6 Jun 2006 16:42:27 +0200 From: "Jo Hermans" To: aaa-wg@merit.edu Subject: [AAA-WG]: why is Digest-Nextnonce mandatory ? Cc: Miguel.An.Garcia@nokia.com, maria.carmen.belinchon@ericsson.com, miguel-angel.pallares@ericsson.com, carolina.canales@ericsson.com, kalle.tammi@nokia.com, Laurent.Thiebaut@alcatel.fr MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: -2.5 (--) X-Scan-Signature: 4adaf050708fb13be3316a9eee889caa I have a problem with the Digest-Nextnonce parameter in the Sip-Authentication-Info attribute in the MAA, which becomes the AuthenticationInfo header in the 200 OK of SIP. We've recently seen an issue with Nokia terminals that are insisting that this is a mandatory parameter (according to draft-ietf-aaa-diameter-sip-app-12.txt, but originating from RFC2617 section 3.2.3). Our code is more based on draft-ietf-radext-digest-auth-09.txt, where it is optional. I agree that those Nokia terminals are according to the spec, but I have to deal with our HSS that does not want to send back a nextnonce, mostly out of fear of the remark in RFC2617 section 3.2.2 (about problems in pipelining requests). At the same time, those people insist on having mutual authentication between client and server, so we need to Authentication-Info header in the 200 OK. Because the nextnonce is mandatory, we can't send that header at all. I'm stuck between a rock and a hard place at the moment. I now have to make the decision to either remove the entire header (removing mutual authentication), or adding a dummy nextnonce (which will cause a 401 later on). I want to know if there's a reason why the nextnonce is mandatory in the spec. Is it only RFC2617 ? As far as I can see (changes from RFC2069), it looks like a typo to me, and it should be optional. If it was really mandatory, the next paragraph would have been changed too ("if the nextnonce field is present ..."). And you still have the problem with the pipelining (we've already encountered them, for instance in a phone that send 2 INVITE's in parallel, in order to set up a conference). I know it's very late, and Last-Call of draft-ietf-aaa-diameter-sip-app is already past. But INHO, Digest-Nextnonce should be an optional parameter, so that Authentication-Info can be used for mutual authentication, without a Next-Nonce. RFC2617 is probably incorrect, and conflicts with RFC3261 anyway. What's your opinion ? The issue has been mentioned in : - http://www1.ietf.org/mail-archive/web/sipping/current/msg08387.html (no response) - http://danforsberg.info:8080/draft-ietf-aaa-diameter-sip/issue45 (rejected by Miguel, but he answered me that it's possibly wrong) -- Jo Hermans "Eagles may soar, but weasels aren't sucked into jet engines" From owner-aaa-wg@merit.edu Wed Jun 07 03:49:14 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fnsmw-0007SC-CR for aaa-archive@lists.ietf.org; Wed, 07 Jun 2006 03:49:14 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fnsmt-00044U-VZ for aaa-archive@lists.ietf.org; Wed, 07 Jun 2006 03:49:14 -0400 Received: by trapdoor.merit.edu (Postfix) id 2E800912B7; Wed, 7 Jun 2006 03:49:06 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id F006F912BC; Wed, 7 Jun 2006 03:49:05 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id CBEC2912B7 for ; Wed, 7 Jun 2006 03:49:04 -0400 (EDT) Received: by segue.merit.edu (Postfix) id B777958284; Wed, 7 Jun 2006 03:49:04 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 9B91758280 for ; Wed, 7 Jun 2006 03:49:04 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 9E78A17D7; Wed, 7 Jun 2006 03:49:04 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25547-03 for ; Wed, 7 Jun 2006 03:49:04 -0400 (EDT) X-Greylist: delayed 6091 seconds by postgrey-1.21 at fiji.merit.edu; Wed, 07 Jun 2006 03:49:03 EDT Received: from mgw-ext11.nokia.com (mgw-ext11.nokia.com [131.228.20.170]) by fiji.merit.edu (Postfix) with ESMTP id ECD9F17A8 for ; Wed, 7 Jun 2006 03:49:03 -0400 (EDT) Received: from esebh106.NOE.Nokia.com (esebh106.ntc.nokia.com [172.21.138.213]) by mgw-ext11.nokia.com (Switch-3.1.8/Switch-3.1.7) with ESMTP id k5767RTw025688; Wed, 7 Jun 2006 09:07:27 +0300 Received: from esebh002.NOE.Nokia.com ([172.21.138.77]) by esebh106.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 7 Jun 2006 09:07:24 +0300 Received: from [127.0.0.1] ([172.21.39.124]) by esebh002.NOE.Nokia.com with Microsoft SMTPSVC(5.0.2195.6881); Wed, 7 Jun 2006 09:07:23 +0300 Message-ID: <44866D1C.7040404@nokia.com> Date: Wed, 07 Jun 2006 09:07:24 +0300 From: Miguel Garcia User-Agent: Thunderbird 1.5.0.4 (Windows/20060516) MIME-Version: 1.0 To: Jo Hermans Cc: aaa-wg@merit.edu, maria.carmen.belinchon@ericsson.com, miguel-angel.pallares@ericsson.com, carolina.canales@ericsson.com, kalle.tammi@nokia.com, Laurent.Thiebaut@alcatel.fr Subject: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 07 Jun 2006 06:07:23.0498 (UTC) FILETIME=[A4B6DCA0:01C689F8] X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: bdc523f9a54890b8a30dd6fd53d5d024 Hi Jo: Well, first of all, I wouldn't like to start a discussion on brand names, so please, keep the brands out of the IETF discussion. I am also surprised if there are terminals, I mean, endpoints, implementing Diameter, since it is clearly a network protocol. Perhaps you are referring to the fact that endpoints expect the nextnonce in the Authentication-Info header of a 200 OK response in SIP. So, presumably, those implementations follow RFC 2617. If this is the case, no matter whether we change the Diameter SIP application or not we will change the behavior of RFC 2617. But having said that, I see the contradiction in RFC 2617: on one side, the nextnonce is mandatory, on the other, the text suggest that it is optional "If the nextnonce field is present ...". In the Diameter SIP application we just transposed the ABNF in RFC 2617 to Diameter AVPs. So, I would like to gather a better understanding of people who might know better RFC 2617: is there an error in the ABNF definition in the Authentication-Info header? Should the nextnonce be optional? If we determine that this is the case, we can always make the Digest-Nextnonce AVP optional during AUTH48 (providing that our ADs accept the change). In case of doubt, to be on the safe side, we should probably do the change. Please comment. /Miguel Jo Hermans wrote: > I have a problem with the Digest-Nextnonce parameter in the > Sip-Authentication-Info attribute in the MAA, which becomes the > AuthenticationInfo header in the 200 OK of SIP. We've recently seen an > issue with Nokia terminals that are insisting that this is a mandatory > parameter (according to draft-ietf-aaa-diameter-sip-app-12.txt, but > originating from RFC2617 section 3.2.3). Our code is more based on > draft-ietf-radext-digest-auth-09.txt, where it is optional. > > I agree that those Nokia terminals are according to the spec, but I > have to deal with our HSS that does not want to send back a nextnonce, > mostly out of fear of the remark in RFC2617 section 3.2.2 (about > problems in pipelining requests). At the same time, those people > insist on having mutual authentication between client and server, so > we need to Authentication-Info header in the 200 OK. Because the > nextnonce is mandatory, we can't send that header at all. I'm stuck > between a rock and a hard place at the moment. I now have to make the > decision to either remove the entire header (removing mutual > authentication), or adding a dummy nextnonce (which will cause a 401 > later on). > > I want to know if there's a reason why the nextnonce is mandatory in > the spec. Is it only RFC2617 ? As far as I can see (changes from > RFC2069), it looks like a typo to me, and it should be optional. If it > was really mandatory, the next paragraph would have been changed too > ("if the nextnonce field is present ..."). And you still have the > problem with the pipelining (we've already encountered them, for > instance in a phone that send 2 INVITE's in parallel, in order to set > up a conference). > > I know it's very late, and Last-Call of > draft-ietf-aaa-diameter-sip-app is already past. But INHO, > Digest-Nextnonce should be an optional parameter, so that > Authentication-Info can be used for mutual authentication, without a > Next-Nonce. RFC2617 is probably incorrect, and conflicts with RFC3261 > anyway. What's your opinion ? > > The issue has been mentioned in : > - http://www1.ietf.org/mail-archive/web/sipping/current/msg08387.html > (no response) > - http://danforsberg.info:8080/draft-ietf-aaa-diameter-sip/issue45 > (rejected by Miguel, but he answered me that it's possibly wrong) > -- Miguel A. Garcia tel:+358-50-4804586 sip:miguel.an.garcia@openlaboratory.net Nokia Research Center Helsinki, Finland From owner-aaa-wg@merit.edu Wed Jun 07 05:08:34 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fnu1i-0005AE-Uh for aaa-archive@lists.ietf.org; Wed, 07 Jun 2006 05:08:34 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fnu1h-0004kF-K1 for aaa-archive@lists.ietf.org; Wed, 07 Jun 2006 05:08:34 -0400 Received: by trapdoor.merit.edu (Postfix) id 1C77F9124C; Wed, 7 Jun 2006 05:08:25 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id DE20E912BC; Wed, 7 Jun 2006 05:08:24 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id B5CBD9124C for ; Wed, 7 Jun 2006 05:08:23 -0400 (EDT) Received: by segue.merit.edu (Postfix) id A320858282; Wed, 7 Jun 2006 05:08:23 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 8E2B358280 for ; Wed, 7 Jun 2006 05:08:23 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 80E7E17D7; Wed, 7 Jun 2006 05:08:23 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26750-02 for ; Wed, 7 Jun 2006 05:08:23 -0400 (EDT) Received: from mgw-ext12.nokia.com (mgw-ext12.nokia.com [131.228.20.171]) by fiji.merit.edu (Postfix) with ESMTP id CBDC717A8 for ; Wed, 7 Jun 2006 05:08:22 -0400 (EDT) Received: from esebh106.NOE.Nokia.com (esebh106.ntc.nokia.com [172.21.138.213]) by mgw-ext12.nokia.com (Switch-3.1.8/Switch-3.1.7) with ESMTP id k5798Hu6016108; Wed, 7 Jun 2006 12:08:18 +0300 Received: from esebh001.NOE.Nokia.com ([172.21.138.28]) by esebh106.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 7 Jun 2006 12:08:17 +0300 Received: from [127.0.0.1] ([172.21.39.124]) by esebh001.NOE.Nokia.com with Microsoft SMTPSVC(5.0.2195.6881); Wed, 7 Jun 2006 12:08:15 +0300 Message-ID: <44869782.6010007@nokia.com> Date: Wed, 07 Jun 2006 12:08:18 +0300 From: Miguel Garcia User-Agent: Thunderbird 1.5.0.4 (Windows/20060516) MIME-Version: 1.0 To: "Eronen Pasi (Nokia-NRC/Helsinki)" Cc: Jo Hermans , aaa-wg@merit.edu, maria.carmen.belinchon@ericsson.com, miguel-angel.pallares@ericsson.com, carolina.canales@ericsson.com, "Tammi Kalle (Nokia-NET/Tampere)" , Laurent.Thiebaut@alcatel.fr Subject: Re: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 07 Jun 2006 09:08:15.0161 (UTC) FILETIME=[E8CF3A90:01C68A11] X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: c3a18ef96977fc9bcc21a621cbf1174b Pasi: Thanks for the clarification in the 'special' ABNF of RFC 2617. If we take that into account, then we should make the nextnonce an optional AVP. What puzzles me is how other headers are defined in RFC 2617. Take a look at the ABNF of the WWW-Authenticate header in Section 3.2.1: challenge = "Digest" digest-challenge digest-challenge = 1#( realm | [ domain ] | nonce | [ opaque ] |[ stale ] | [ algorithm ] | [ qop-options ] | [auth-param] ) Doest this mean real and nonce shall always be present or not? At least in the Diameter SIP application the Digest-Realm and Digest-Nonce are mandatory AVPs in the grouped SIP-Authenticate AVP. Similar question pops up with the Authorization header, whose ABNF in RFC 2617 is: credentials = "Digest" digest-response digest-response = 1#( username | realm | nonce | digest-uri | response | [ algorithm ] | [cnonce] | [opaque] | [message-qop] | [nonce-count] | [auth-param] ) does it mean username, real, nonce, digest-uri, and response are mandatories? Their corresponding AVPs are mandatory too!!! /Miguel Eronen Pasi (Nokia-NRC/Helsinki) wrote: > Miguel Garcia wrote: > >> But having said that, I see the contradiction in RFC 2617: on one >> side, the nextnonce is mandatory, on the other, the text suggest >> that it is optional "If the nextnonce field is present ...". In the >> Diameter SIP application we just transposed the ABNF in RFC 2617 to >> Diameter AVPs. >> >> So, I would like to gather a better understanding of people who >> might know better RFC 2617: is there an error in the ABNF definition >> in the Authentication-Info header? Should the nextnonce be optional? > > It looks like RFC2617 uses the ABNF notation (defined in RFC2616) in > a way that is not really consistent with the ABNF semantics: > > auth-info = 1#(nextnonce | [ message-qop ] > | [ response-auth ] | [ cnonce ] > | [nonce-count] ) > > clearly suggests to the reader that "nextnonce" has to be present, > while the other parts are not always included. However, this is not > what the ABNF actually means according to RFC2616. In fact, it looks > like the rule is equivalent to both of these: > > auth-info = 1#(nextnonce | message-qop > | response-auth | cnonce > | nonce-count ) > > auth-info = 1#( [ nextnonce ] | [ message-qop ] > | [ response-auth ] | [ cnonce ] > | [ nonce-count ] ) > > In other words: any string containing at least one of the parts > (not necessarily nextnonce) matches this ABNF, and more precise > specification of when the different parts have to be present is > in the descriptive text. > > Since the descriptive text says "If the nextnonce field is present > [..]", it's not actually in conflict with the ABNF. But the ABNF > is clearly misleading (and it looks like some other ABNF rules > in RFC2617 have this same problem). > > Best regards, > Pasi -- Miguel A. Garcia tel:+358-50-4804586 sip:miguel.an.garcia@openlaboratory.net Nokia Research Center Helsinki, Finland From owner-aaa-wg@merit.edu Wed Jun 07 06:11:08 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fnv0G-0001la-PI for aaa-archive@lists.ietf.org; Wed, 07 Jun 2006 06:11:08 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fnv0F-0003Ue-Ca for aaa-archive@lists.ietf.org; Wed, 07 Jun 2006 06:11:08 -0400 Received: by trapdoor.merit.edu (Postfix) id 76E64912BC; Wed, 7 Jun 2006 06:11:00 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 4A5EB912C2; Wed, 7 Jun 2006 06:11:00 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 1A0E0912BC for ; Wed, 7 Jun 2006 06:10:59 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 03B9258282; Wed, 7 Jun 2006 06:10:59 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id B5BE158280 for ; Wed, 7 Jun 2006 06:10:58 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id B6C0517F4; Wed, 7 Jun 2006 06:10:58 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 27822-06 for ; Wed, 7 Jun 2006 06:10:58 -0400 (EDT) X-Greylist: delayed 4735 seconds by postgrey-1.21 at fiji.merit.edu; Wed, 07 Jun 2006 06:10:58 EDT Received: from mgw-ext11.nokia.com (mgw-ext11.nokia.com [131.228.20.170]) by fiji.merit.edu (Postfix) with ESMTP id 1043717A8 for ; Wed, 7 Jun 2006 06:10:57 -0400 (EDT) Received: from esebh107.NOE.Nokia.com (esebh107.ntc.nokia.com [172.21.143.143]) by mgw-ext11.nokia.com (Switch-3.1.8/Switch-3.1.7) with ESMTP id k578ptS0012590; Wed, 7 Jun 2006 11:51:57 +0300 Received: from esebh103.NOE.Nokia.com ([172.21.143.33]) by esebh107.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 7 Jun 2006 11:51:10 +0300 Received: from esebe105.NOE.Nokia.com ([172.21.143.53]) by esebh103.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 7 Jun 2006 11:51:10 +0300 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? Date: Wed, 7 Jun 2006 11:51:12 +0300 Message-ID: In-Reply-To: <44866D1C.7040404@nokia.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? Thread-Index: AcaKB5brI0euS7gDSI+K8dANM0nQuQABOU7A From: To: , Cc: , , , , , X-OriginalArrivalTime: 07 Jun 2006 08:51:10.0753 (UTC) FILETIME=[8636F910:01C68A0F] X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.2 (/) X-Scan-Signature: 21c69d3cfc2dd19218717dbe1d974352 Miguel Garcia wrote: > But having said that, I see the contradiction in RFC 2617: on one > side, the nextnonce is mandatory, on the other, the text suggest > that it is optional "If the nextnonce field is present ...". In the > Diameter SIP application we just transposed the ABNF in RFC 2617 to > Diameter AVPs. >=20 > So, I would like to gather a better understanding of people who > might know better RFC 2617: is there an error in the ABNF definition > in the Authentication-Info header? Should the nextnonce be optional? It looks like RFC2617 uses the ABNF notation (defined in RFC2616) in a way that is not really consistent with the ABNF semantics: auth-info =3D 1#(nextnonce | [ message-qop ] | [ response-auth ] | [ cnonce ] | [nonce-count] ) clearly suggests to the reader that "nextnonce" has to be present, while the other parts are not always included. However, this is not what the ABNF actually means according to RFC2616. In fact, it looks like the rule is equivalent to both of these: auth-info =3D 1#(nextnonce | message-qop | response-auth | cnonce | nonce-count ) auth-info =3D 1#( [ nextnonce ] | [ message-qop ] | [ response-auth ] | [ cnonce ] | [ nonce-count ] ) In other words: any string containing at least one of the parts=20 (not necessarily nextnonce) matches this ABNF, and more precise specification of when the different parts have to be present is=20 in the descriptive text. Since the descriptive text says "If the nextnonce field is present [..]", it's not actually in conflict with the ABNF. But the ABNF is clearly misleading (and it looks like some other ABNF rules=20 in RFC2617 have this same problem). Best regards, Pasi From owner-aaa-wg@merit.edu Wed Jun 07 06:18:57 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fnv7p-0003i4-Nq for aaa-archive@lists.ietf.org; Wed, 07 Jun 2006 06:18:57 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fnv7o-0003ui-CQ for aaa-archive@lists.ietf.org; Wed, 07 Jun 2006 06:18:57 -0400 Received: by trapdoor.merit.edu (Postfix) id C3A7F912C2; Wed, 7 Jun 2006 06:15:36 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 92D5A912C5; Wed, 7 Jun 2006 06:15:36 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 4E7BB912C2 for ; Wed, 7 Jun 2006 06:15:35 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 35C8E58282; Wed, 7 Jun 2006 06:15:35 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 2087158280 for ; Wed, 7 Jun 2006 06:15:35 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 2295817EC; Wed, 7 Jun 2006 06:15:35 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28070-08 for ; Wed, 7 Jun 2006 06:15:34 -0400 (EDT) Received: from mgw-ext14.nokia.com (mgw-ext14.nokia.com [131.228.20.173]) by fiji.merit.edu (Postfix) with ESMTP id 7736117A8 for ; Wed, 7 Jun 2006 06:15:34 -0400 (EDT) Received: from esebh106.NOE.Nokia.com (esebh106.ntc.nokia.com [172.21.138.213]) by mgw-ext14.nokia.com (Switch-3.1.8/Switch-3.1.7) with ESMTP id k57AFN1g002561; Wed, 7 Jun 2006 13:15:26 +0300 Received: from esebh104.NOE.Nokia.com ([172.21.143.34]) by esebh106.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 7 Jun 2006 13:15:10 +0300 Received: from esebe105.NOE.Nokia.com ([172.21.143.53]) by esebh104.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 7 Jun 2006 13:15:09 +0300 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? Date: Wed, 7 Jun 2006 13:15:10 +0300 Message-ID: In-Reply-To: <44869782.6010007@nokia.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? Thread-Index: AcaKEe0ee+C/6vRoT7awV46WlEOKLAAAFsUw From: To: Cc: , , , , , , X-OriginalArrivalTime: 07 Jun 2006 10:15:09.0314 (UTC) FILETIME=[416E5E20:01C68A1B] X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.2 (/) X-Scan-Signature: 37af5f8fbf6f013c5b771388e24b09e7 Hi Miguel, According to the RFC2616 definition of ABNF syntax and semantics, they're all optional. But I think it's likely that this is=20 not what the authors of RFC2617 actually meant! Perhaps you should try raising this issue on this list to get a more authorative answer than we can produce at AAA WG: http://lists.w3.org/Archives/Public/ietf-http-wg/=20 Best regards, Pasi > -----Original Message----- > From: Miguel Garcia [mailto:Miguel.An.Garcia@nokia.com]=20 > Sent: 07 June, 2006 12:08 > To: Eronen Pasi (Nokia-NRC/Helsinki) > Cc: Jo Hermans; aaa-wg@merit.edu;=20 > maria.carmen.belinchon@ericsson.com;=20 > miguel-angel.pallares@ericsson.com;=20 > carolina.canales@ericsson.com; Tammi Kalle=20 > (Nokia-NET/Tampere); Laurent.Thiebaut@alcatel.fr > Subject: Re: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? >=20 > Pasi: >=20 > Thanks for the clarification in the 'special' ABNF of RFC 2617. If we=20 > take that into account, then we should make the nextnonce an=20 > optional AVP. >=20 > What puzzles me is how other headers are defined in RFC 2617. Take a=20 > look at the ABNF of the WWW-Authenticate header in Section 3.2.1: >=20 > challenge =3D "Digest" digest-challenge >=20 > digest-challenge =3D 1#( realm | [ domain ] | nonce | > [ opaque ] |[ stale ] | [ algorithm ] | > [ qop-options ] | [auth-param] ) >=20 > Doest this mean real and nonce shall always be present or=20 > not? At least=20 > in the Diameter SIP application the Digest-Realm and Digest-Nonce are=20 > mandatory AVPs in the grouped SIP-Authenticate AVP. >=20 > Similar question pops up with the Authorization header, whose ABNF in=20 > RFC 2617 is: >=20 > credentials =3D "Digest" digest-response > digest-response =3D 1#( username | realm | nonce | digest-uri > | response | [ algorithm ] | [cnonce] | > [opaque] | [message-qop] | > [nonce-count] | [auth-param] ) >=20 >=20 > does it mean username, real, nonce, digest-uri, and response are=20 > mandatories? Their corresponding AVPs are mandatory too!!! >=20 > /Miguel >=20 >=20 >=20 > Eronen Pasi (Nokia-NRC/Helsinki) wrote: > > Miguel Garcia wrote: > >=20 > >> But having said that, I see the contradiction in RFC 2617: on one > >> side, the nextnonce is mandatory, on the other, the text suggest > >> that it is optional "If the nextnonce field is present ...". In the > >> Diameter SIP application we just transposed the ABNF in RFC 2617 to > >> Diameter AVPs. > >> > >> So, I would like to gather a better understanding of people who > >> might know better RFC 2617: is there an error in the ABNF=20 > definition > >> in the Authentication-Info header? Should the nextnonce be=20 > optional? > >=20 > > It looks like RFC2617 uses the ABNF notation (defined in RFC2616) in > > a way that is not really consistent with the ABNF semantics: > >=20 > > auth-info =3D 1#(nextnonce | [ message-qop ] > > | [ response-auth ] | [ cnonce ] > > | [nonce-count] ) > >=20 > > clearly suggests to the reader that "nextnonce" has to be present, > > while the other parts are not always included. However, this is not > > what the ABNF actually means according to RFC2616. In=20 > fact, it looks > > like the rule is equivalent to both of these: > >=20 > > auth-info =3D 1#(nextnonce | message-qop > > | response-auth | cnonce > > | nonce-count ) > >=20 > > auth-info =3D 1#( [ nextnonce ] | [ message-qop ] > > | [ response-auth ] | [ cnonce ] > > | [ nonce-count ] ) > >=20 > > In other words: any string containing at least one of the parts=20 > > (not necessarily nextnonce) matches this ABNF, and more precise > > specification of when the different parts have to be present is=20 > > in the descriptive text. > >=20 > > Since the descriptive text says "If the nextnonce field is present > > [..]", it's not actually in conflict with the ABNF. But the ABNF > > is clearly misleading (and it looks like some other ABNF rules=20 > > in RFC2617 have this same problem). > >=20 > > Best regards, > > Pasi >=20 > --=20 > Miguel A. Garcia tel:+358-50-4804586 > sip:miguel.an.garcia@openlaboratory.net > Nokia Research Center Helsinki, Finland >=20 >=20 From owner-aaa-wg@merit.edu Tue Jun 13 09:06:27 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fq8bD-0002kp-VN for aaa-archive@lists.ietf.org; Tue, 13 Jun 2006 09:06:27 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fq8bC-0007JJ-IW for aaa-archive@lists.ietf.org; Tue, 13 Jun 2006 09:06:27 -0400 Received: by trapdoor.merit.edu (Postfix) id 1DABC91205; Tue, 13 Jun 2006 09:06:17 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id DB5F99120E; Tue, 13 Jun 2006 09:06:16 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 906F491205 for ; Tue, 13 Jun 2006 09:06:15 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 7BF7558286; Tue, 13 Jun 2006 09:06:15 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 6640858284 for ; Tue, 13 Jun 2006 09:06:15 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 68A3A185C; Tue, 13 Jun 2006 09:06:15 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00343-10 for ; Tue, 13 Jun 2006 09:06:15 -0400 (EDT) Received: from mgw-ext11.nokia.com (mgw-ext11.nokia.com [131.228.20.170]) by fiji.merit.edu (Postfix) with ESMTP id BA17D184F for ; Tue, 13 Jun 2006 09:06:14 -0400 (EDT) Received: from esebh106.NOE.Nokia.com (esebh106.ntc.nokia.com [172.21.138.213]) by mgw-ext11.nokia.com (Switch-3.1.8/Switch-3.1.7) with ESMTP id k5DD65Gn001311; Tue, 13 Jun 2006 16:06:05 +0300 Received: from esebh001.NOE.Nokia.com ([172.21.138.28]) by esebh106.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 13 Jun 2006 16:05:27 +0300 Received: from [127.0.0.1] ([172.21.36.60]) by esebh001.NOE.Nokia.com with Microsoft SMTPSVC(5.0.2195.6881); Tue, 13 Jun 2006 16:05:26 +0300 Message-ID: <448EB814.4060200@nokia.com> Date: Tue, 13 Jun 2006 16:05:24 +0300 From: Miguel Garcia User-Agent: Thunderbird 1.5.0.4 (Windows/20060516) MIME-Version: 1.0 To: "Eronen Pasi (Nokia-NRC/Helsinki)" Cc: Jo Hermans , aaa-wg@merit.edu, maria.carmen.belinchon@ericsson.com, miguel-angel.pallares@ericsson.com, carolina.canales@ericsson.com, "Tammi Kalle (Nokia-NET/Tampere)" , Laurent.Thiebaut@alcatel.fr Subject: Re: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 13 Jun 2006 13:05:26.0285 (UTC) FILETIME=[09B2EBD0:01C68EEA] X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 7da5a831c477fb6ef97f379a05fb683c So, it's been a few days since I asked advice in the ietf-http-wg list, and I didn't get any. Still I suspect there is a mistake in RFC 2617, at least there is a contradiction between the ABNF and the text, and we should make the Digest-Nextnonce optional. If I don't here anything against, I will note this and request this change during AUTH48. BR, Miguel Eronen Pasi (Nokia-NRC/Helsinki) wrote: > Hi Miguel, > > According to the RFC2616 definition of ABNF syntax and semantics, > they're all optional. But I think it's likely that this is > not what the authors of RFC2617 actually meant! > > Perhaps you should try raising this issue on this list to get > a more authorative answer than we can produce at AAA WG: > http://lists.w3.org/Archives/Public/ietf-http-wg/ > > Best regards, > Pasi > >> -----Original Message----- >> From: Miguel Garcia [mailto:Miguel.An.Garcia@nokia.com] >> Sent: 07 June, 2006 12:08 >> To: Eronen Pasi (Nokia-NRC/Helsinki) >> Cc: Jo Hermans; aaa-wg@merit.edu; >> maria.carmen.belinchon@ericsson.com; >> miguel-angel.pallares@ericsson.com; >> carolina.canales@ericsson.com; Tammi Kalle >> (Nokia-NET/Tampere); Laurent.Thiebaut@alcatel.fr >> Subject: Re: [AAA-WG]: Re: why is Digest-Nextnonce mandatory ? >> >> Pasi: >> >> Thanks for the clarification in the 'special' ABNF of RFC 2617. If we >> take that into account, then we should make the nextnonce an >> optional AVP. >> >> What puzzles me is how other headers are defined in RFC 2617. Take a >> look at the ABNF of the WWW-Authenticate header in Section 3.2.1: >> >> challenge = "Digest" digest-challenge >> >> digest-challenge = 1#( realm | [ domain ] | nonce | >> [ opaque ] |[ stale ] | [ algorithm ] | >> [ qop-options ] | [auth-param] ) >> >> Doest this mean real and nonce shall always be present or >> not? At least >> in the Diameter SIP application the Digest-Realm and Digest-Nonce are >> mandatory AVPs in the grouped SIP-Authenticate AVP. >> >> Similar question pops up with the Authorization header, whose ABNF in >> RFC 2617 is: >> >> credentials = "Digest" digest-response >> digest-response = 1#( username | realm | nonce | digest-uri >> | response | [ algorithm ] | [cnonce] | >> [opaque] | [message-qop] | >> [nonce-count] | [auth-param] ) >> >> >> does it mean username, real, nonce, digest-uri, and response are >> mandatories? Their corresponding AVPs are mandatory too!!! >> >> /Miguel >> >> >> >> Eronen Pasi (Nokia-NRC/Helsinki) wrote: >>> Miguel Garcia wrote: >>> >>>> But having said that, I see the contradiction in RFC 2617: on one >>>> side, the nextnonce is mandatory, on the other, the text suggest >>>> that it is optional "If the nextnonce field is present ...". In the >>>> Diameter SIP application we just transposed the ABNF in RFC 2617 to >>>> Diameter AVPs. >>>> >>>> So, I would like to gather a better understanding of people who >>>> might know better RFC 2617: is there an error in the ABNF >> definition >>>> in the Authentication-Info header? Should the nextnonce be >> optional? >>> It looks like RFC2617 uses the ABNF notation (defined in RFC2616) in >>> a way that is not really consistent with the ABNF semantics: >>> >>> auth-info = 1#(nextnonce | [ message-qop ] >>> | [ response-auth ] | [ cnonce ] >>> | [nonce-count] ) >>> >>> clearly suggests to the reader that "nextnonce" has to be present, >>> while the other parts are not always included. However, this is not >>> what the ABNF actually means according to RFC2616. In >> fact, it looks >>> like the rule is equivalent to both of these: >>> >>> auth-info = 1#(nextnonce | message-qop >>> | response-auth | cnonce >>> | nonce-count ) >>> >>> auth-info = 1#( [ nextnonce ] | [ message-qop ] >>> | [ response-auth ] | [ cnonce ] >>> | [ nonce-count ] ) >>> >>> In other words: any string containing at least one of the parts >>> (not necessarily nextnonce) matches this ABNF, and more precise >>> specification of when the different parts have to be present is >>> in the descriptive text. >>> >>> Since the descriptive text says "If the nextnonce field is present >>> [..]", it's not actually in conflict with the ABNF. But the ABNF >>> is clearly misleading (and it looks like some other ABNF rules >>> in RFC2617 have this same problem). >>> >>> Best regards, >>> Pasi >> -- >> Miguel A. Garcia tel:+358-50-4804586 >> sip:miguel.an.garcia@openlaboratory.net >> Nokia Research Center Helsinki, Finland >> >> > -- Miguel A. Garcia tel:+358-50-4804586 sip:miguel.an.garcia@openlaboratory.net Nokia Research Center Helsinki, Finland From owner-aaa-wg@merit.edu Wed Jun 14 15:29:32 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fqb3U-0001v2-Ar for aaa-archive@lists.ietf.org; Wed, 14 Jun 2006 15:29:32 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fqb3R-0006Zz-Tg for aaa-archive@lists.ietf.org; Wed, 14 Jun 2006 15:29:32 -0400 Received: by trapdoor.merit.edu (Postfix) id 41686912E1; Wed, 14 Jun 2006 15:29:20 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 0E958912E5; Wed, 14 Jun 2006 15:29:19 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 4EB30912E1 for ; Wed, 14 Jun 2006 15:29:18 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 38FBA5828B; Wed, 14 Jun 2006 15:29:18 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 1D06958286 for ; Wed, 14 Jun 2006 15:29:18 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 2042D1842; Wed, 14 Jun 2006 15:29:18 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02842-03 for ; Wed, 14 Jun 2006 15:29:17 -0400 (EDT) Received: from ylpvm43.prodigy.net (ylpvm43-ext.prodigy.net [207.115.57.74]) by fiji.merit.edu (Postfix) with ESMTP id 1794017D6 for ; Wed, 14 Jun 2006 15:29:16 -0400 (EDT) Received: from pimout5-ext.prodigy.net (pimout5-int.prodigy.net [207.115.4.21]) by ylpvm43.prodigy.net (8.12.10 outbound/8.12.10) with ESMTP id k5EJTE4O000718 for ; Wed, 14 Jun 2006 15:29:17 -0400 X-ORBL: [70.232.146.73] Received: from internal.wichorus.com (adsl-70-232-146-73.dsl.pltn13.sbcglobal.net [70.232.146.73]) by pimout5-ext.prodigy.net (8.13.6 out.dk/8.13.6) with ESMTP id k5EJT9RX073346 for ; Wed, 14 Jun 2006 15:29:10 -0400 Received: from W0032 (adsl-70-232-146-73.dsl.pltn13.sbcglobal.net [70.232.146.73]) by internal.wichorus.com (8.13.1/8.13.1) with ESMTP id k5EJT97v009317 for ; Wed, 14 Jun 2006 12:29:10 -0700 Message-Id: <200606141929.k5EJT97v009317@internal.wichorus.com> From: "Dhaval Shah" To: Subject: [AAA-WG]: Question about NAI Realm based routing of RADIUS Date: Wed, 14 Jun 2006 12:29:13 -0700 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0076_01C68FAE.25058CC0" X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 Thread-Index: AcaP6NDVPNhLYW6kSHSrl+eRQZAR6Q== X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.1 (/) X-Scan-Signature: 2bf730a014b318fd3efd65b39b48818c This is a multi-part message in MIME format. ------=_NextPart_000_0076_01C68FAE.25058CC0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi I have a question about NAI Realm based routing of AAA RADIUS messages from say a 802.1x authenticator to the Home AAA server. Consider the following example: (I am using the notations from RFC 4282 (Network Access Identifier), section 2.7) Lets say autheticator received user identity in EAP-Response packet as NAI formed like other2.example.net!home.example.net !user@other1.example.net This NAI will be converted by the RADIUS client of the 802.1x authenticator as home.example.net!user@other2.exampl e.net and forwarded to the IP address of other2.example.net as a RADIUS Access-Request. My question is, RADIUS client usually needs to share a "secret" with AAA server, in the above case where the client needs to send the message through multiple routing realms as coded in the NAI, is it required that the client MUST have a shared "secret" with the first hop AAA server/proxy towards the Home AAA server? In the above case, does 802.1x authenticator of other1.example.net needs to share a "secret" with AAA server of other2.example.net and it MUST use that to prepare the Message Authenticator? And similarly, AAA server of other2.example.net MUST share a "secret" with home.example.net's AAA server? Also, what (if any) extensions must be added to the RADIUS message originating at the authenticator to allow such realm based forwarding of the packet to the Home AAA server? thanks Dhaval ------=_NextPart_000_0076_01C68FAE.25058CC0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hi
     I have a question about NAI Realm = based routing=20 of AAA RADIUS messages from say a 802.1x
authenticator to the=20 Home AAA server.
 
Consider the=20 following example: (I am using the notations from RFC 4282 (Network = Access=20 Identifier), section 2.7)
 
Lets = say=20 autheticator received user identity in EAP-Response packet as NAI formed = like
 
 
This = NAI will be=20 converted by the RADIUS client of the 802.1x authenticator=20 as
 
home.example.net= !user@other2.example.net
 
and = forwarded to the=20 IP address of other2.example.net as a RADIUS = Access-Request.
 
My = question is,=20 RADIUS client usually needs to share a "secret" with AAA server, in the=20 above
case = where the=20 client needs to send the message through multiple routing realms as=20 coded
in the = NAI, is it=20 required that the client MUST have a shared "secret" with the first hop=20 AAA
server/proxy towards=20 the Home AAA server? In the above case, does 802.1x=20 authenticator
of=20 other1.example.net needs to share a "secret" with AAA server of=20 other2.example.net and
it = MUST use that to=20 prepare the Message Authenticator? And similarly, AAA server=20 of
other2.example.net=20 MUST share a "secret" with home.example.net's AAA = server?
 
Also, = what (if any)=20 extensions must be added to the RADIUS message originating at the=20 authenticator
to = allow such realm=20 based forwarding of the packet to the Home AAA = server?
 
thanks
Dhaval
 
 
 
------=_NextPart_000_0076_01C68FAE.25058CC0-- From owner-aaa-wg@merit.edu Wed Jun 14 20:01:58 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FqfJ8-0007pY-MV for aaa-archive@lists.ietf.org; Wed, 14 Jun 2006 20:01:58 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FqfJ7-0006qc-Bw for aaa-archive@lists.ietf.org; Wed, 14 Jun 2006 20:01:58 -0400 Received: by trapdoor.merit.edu (Postfix) id 4A50C912ED; Wed, 14 Jun 2006 20:01:49 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 198D6912EE; Wed, 14 Jun 2006 20:01:49 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id D36F2912ED for ; Wed, 14 Jun 2006 20:01:47 -0400 (EDT) Received: by segue.merit.edu (Postfix) id C45D358286; Wed, 14 Jun 2006 20:01:47 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id B10AF58282 for ; Wed, 14 Jun 2006 20:01:47 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id B64AE1846; Wed, 14 Jun 2006 20:01:47 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07172-01 for ; Wed, 14 Jun 2006 20:01:47 -0400 (EDT) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by fiji.merit.edu (Postfix) with ESMTP id 12BA017DE for ; Wed, 14 Jun 2006 20:01:46 -0400 (EDT) Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-5.cisco.com with ESMTP; 14 Jun 2006 17:01:45 -0700 X-IronPort-AV: i="4.06,133,1149490800"; d="scan'208"; a="294922462:sNHT1895646046" Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id k5F01jjE015858; Wed, 14 Jun 2006 17:01:45 -0700 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-2.cisco.com (8.12.10/8.12.6) with ESMTP id k5F01jke008311; Wed, 14 Jun 2006 17:01:45 -0700 (PDT) Received: from xmb-sjc-215.amer.cisco.com ([171.70.151.169]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 14 Jun 2006 17:01:45 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: [AAA-WG]: Contradiction in RFC 4006 Date: Wed, 14 Jun 2006 17:01:44 -0700 Message-ID: <4C0FAAC489C8B74F96BEAD85EAEB2625022AF3DE@xmb-sjc-215.amer.cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Contradiction in RFC 4006 Thread-Index: AcaQDuLSTdT4GsAXTuOoy9vH8jO4yA== From: "Glen Zorn (gwz)" To: Cc: , "Glen Zorn (gwz)" X-OriginalArrivalTime: 15 Jun 2006 00:01:45.0431 (UTC) FILETIME=[E3E97E70:01C6900E] DKIM-Signature: a=rsa-sha1; q=dns; l=986; t=1150329705; x=1151193705; c=relaxed/simple; s=sjdkim1001; h=From:Subject; d=cisco.com; i=gwz@cisco.com; z=From:=22Glen=20Zorn=20\(gwz\)=22=20 |Subject:Contradiction=20in=20RFC=204006; X=v=3Dcisco.com=3B=20h=3DkqSv0/r0YgZAnV5i2FgvF4E9OBI=3D; b=LyFQDp1LLmHXhj+NZJQRjw7HkhtKMki/7AUXOwlaMYWn6xeMamynnUi3bLIVu/46R5TBS2kt JXH6v8xrrQzDtnbKmZsuBUWCJhLbFgwLipK7P8WXaqlfGPbaAkpkPRyz; Authentication-Results: sj-dkim-1.cisco.com; header.From=gwz@cisco.com; dkim=pass ( sig from cisco.com verified; ); X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: ea4ac80f790299f943f0a53be7e1a21a Section 5.6.3 says=20 "A Final-Unit-Indication AVP with the Final-Unit-Action RESTRICT_ACCESS [in the CCA message] indicates to the=20 device supporting this action that the user's access MUST be restricted according to the IP packet filters given in the Restriction-Filter-Rule AVP(s) or according to the IP packet filters identified by the Filter-Id AVP(s)." However, the next sentence says "The credit-control server SHOULD include either the Restriction-Filter- Rule AVP or the Filter-Id AVP in the Credit-Control-Answer message." So, what happens if the referenced AVPs are not included in the CCA? ~gwz Treat the Earth well.=20 It was not given to you by your parents. It was loaned to you by your children. -- Kenyan Proverb Humankind has not woven the web of life. We are but one thread within it. Whatever we do to the web, we do to ourselves. All things are bound together. All things connect. -- Chief Seattle From owner-aaa-wg@merit.edu Wed Jun 14 20:58:56 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FqgCG-0006mb-UK for aaa-archive@lists.ietf.org; Wed, 14 Jun 2006 20:58:56 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FqgCF-0003vM-JW for aaa-archive@lists.ietf.org; Wed, 14 Jun 2006 20:58:56 -0400 Received: by trapdoor.merit.edu (Postfix) id 7E752912F2; Wed, 14 Jun 2006 20:58:45 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 51A83912F4; Wed, 14 Jun 2006 20:58:45 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 0328D912F2 for ; Wed, 14 Jun 2006 20:58:43 -0400 (EDT) Received: by segue.merit.edu (Postfix) id E133458286; Wed, 14 Jun 2006 20:58:43 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id CBD7A58282 for ; Wed, 14 Jun 2006 20:58:43 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id CF6F31847; Wed, 14 Jun 2006 20:58:43 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08023-06 for ; Wed, 14 Jun 2006 20:58:43 -0400 (EDT) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by fiji.merit.edu (Postfix) with ESMTP id 5E79017DE for ; Wed, 14 Jun 2006 20:58:43 -0400 (EDT) Received: from sj-dkim-3.cisco.com ([171.71.179.195]) by sj-iport-6.cisco.com with ESMTP; 14 Jun 2006 17:58:42 -0700 Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-3.cisco.com (8.12.11/8.12.11) with ESMTP id k5F0wgvS013424; Wed, 14 Jun 2006 17:58:42 -0700 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-5.cisco.com (8.12.10/8.12.6) with ESMTP id k5F0wgCU023868; Wed, 14 Jun 2006 17:58:42 -0700 (PDT) Received: from xmb-sjc-215.amer.cisco.com ([171.70.151.169]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 14 Jun 2006 17:58:42 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: [AAA-WG]: Diameter base protocol messages used by DCCA Date: Wed, 14 Jun 2006 17:58:41 -0700 Message-ID: <4C0FAAC489C8B74F96BEAD85EAEB2625022AF416@xmb-sjc-215.amer.cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Diameter base protocol messages used by DCCA Thread-Index: AcaQFtdWbbQIqFPKQrKpALl9+xwUdA== From: "Glen Zorn (gwz)" To: , , , , Cc: "Glen Zorn (gwz)" , , X-OriginalArrivalTime: 15 Jun 2006 00:58:42.0122 (UTC) FILETIME=[D86B2AA0:01C69016] DKIM-Signature: a=rsa-sha1; q=dns; l=971; t=1150333122; x=1151197122; c=relaxed/simple; s=sjdkim3001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=gwz@cisco.com; z=From:=22Glen=20Zorn=20\(gwz\)=22=20 |Subject:Diameter=20base=20protocol=20messages=20used=20by=20DCCA; X=v=3Dcisco.com=3B=20h=3DkKGMDndThaQh9+mGb7YQFduWJNI=3D; b=ebdwiYNbkK6VhkJFQvOz9WrTjQmIMatd4FcuAF9vxC+S6udBE/71d77axicexx5Pt6n1pJyN Ogja0IP2jE0fPVOdtlmjVlobP5iFzo4OqE0/GrY+UmBMCXHb3UUjbSG0; Authentication-Results: sj-dkim-3.cisco.com; header.From=gwz@cisco.com; dkim=pass ( sig from cisco.com verified; ); X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 93238566e09e6e262849b4f805833007 In the process of attempting to construct a MIB for the credit control application, I have been trying to figure out which messages from Diameter base are used by DCCA, so that they can be counted appropriately. Some are obvious: STR/STA & RAR/RAA, for example. One has me rather puzzled, though: the AAR/AAA exchange is explicitly listed in the first state machine in section 7 as being sent/received by the CCA client, but the AVPs allowed in AAR/AAA are not listed in section 10 (though the APS for RAR/RAA ARE). Does the CCA client actually send/receive AAR/AAA (i.e., should the be counted in the DCCA MIB) or not? ~gwz Treat the Earth well.=20 It was not given to you by your parents. It was loaned to you by your children. -- Kenyan Proverb Humankind has not woven the web of life. We are but one thread within it. Whatever we do to the web, we do to ourselves. All things are bound together. All things connect. -- Chief Seattle From owner-aaa-wg@merit.edu Thu Jun 15 03:18:39 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fqm7j-00068F-I3 for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 03:18:39 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fqm1B-0003Ux-O1 for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 03:11:55 -0400 Received: by trapdoor.merit.edu (Postfix) id 38E3C9123E; Thu, 15 Jun 2006 03:11:43 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id E86939124A; Thu, 15 Jun 2006 03:11:42 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 156959123E for ; Thu, 15 Jun 2006 03:11:41 -0400 (EDT) Received: by segue.merit.edu (Postfix) id BD18358282; Thu, 15 Jun 2006 03:11:40 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 8DB4A58280 for ; Thu, 15 Jun 2006 03:11:37 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id C196117EE; Thu, 15 Jun 2006 03:11:37 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13546-03 for ; Thu, 15 Jun 2006 03:11:37 -0400 (EDT) X-Greylist: delayed 326 seconds by postgrey-1.21 at fiji.merit.edu; Thu, 15 Jun 2006 03:11:37 EDT Received: from mailgw3.ericsson.se (mailgw3.ericsson.se [193.180.251.60]) by fiji.merit.edu (Postfix) with ESMTP id 4449317E2 for ; Thu, 15 Jun 2006 03:11:37 -0400 (EDT) Received: from esealmw127.eemea.ericsson.se (unknown [153.88.254.122]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id B8CDB4F0087; Thu, 15 Jun 2006 09:11:12 +0200 (CEST) Received: from esealmw129.eemea.ericsson.se ([153.88.254.173]) by esealmw127.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Thu, 15 Jun 2006 09:11:11 +0200 Received: from esealmw113.eemea.ericsson.se ([153.88.200.4]) by esealmw129.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Thu, 15 Jun 2006 09:11:11 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: [AAA-WG]: RE: [Dime] Contradiction in RFC 4006 Date: Thu, 15 Jun 2006 09:11:10 +0200 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Dime] Contradiction in RFC 4006 Thread-Index: AcaQDuLSTdT4GsAXTuOoy9vH8jO4yAAO1lGw From: "Harri Hakala (TU/LMF)" To: "Glen Zorn (gwz)" , Cc: X-OriginalArrivalTime: 15 Jun 2006 07:11:11.0273 (UTC) FILETIME=[E18CF990:01C6904A] X-Brightmail-Tracker: AAAAAA== X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 82c9bddb247d9ba4471160a9a865a5f3 Hi Glen, I agree, the RFC is not clear in this. But the section 8.35 says=20 that the access device must drop all packets not matching the filters, so I think that if Restriction-Filter-Rule AVP(s) or the Filter-Id = AVP(s)=20 are not included in the CCA, then the access device must drop all = packets. =20 regards........Harri > -----Original Message----- > From: Glen Zorn (gwz) [mailto:gwz@cisco.com]=20 > Sent: 15. kes=E4kuuta 2006 3:02 > To: aaa-wg@merit.edu > Cc: dime@ietf.org; Glen Zorn (gwz) > Subject: [Dime] Contradiction in RFC 4006 >=20 > Section 5.6.3 says=20 >=20 > "A Final-Unit-Indication AVP with the Final-Unit-Action > RESTRICT_ACCESS [in the CCA message] indicates to the=20 > device supporting this action that > the user's access MUST be restricted according to the IP packet > filters given in the Restriction-Filter-Rule AVP(s) or according to > the IP packet filters identified by the Filter-Id AVP(s)." >=20 > However, the next sentence says >=20 > "The credit-control server SHOULD include either the > Restriction-Filter- > Rule AVP or the Filter-Id AVP in the Credit-Control-Answer=20 > message." >=20 > So, what happens if the referenced AVPs are not included in the CCA? >=20 > ~gwz >=20 > Treat the Earth well.=20 > It was not given to you by your parents. > It was loaned to you by your children. > -- Kenyan Proverb >=20 > Humankind has not woven the web of life. > We are but one thread within it. > Whatever we do to the web, we do to ourselves. > All things are bound together. > All things connect. > -- Chief Seattle >=20 > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www1.ietf.org/mailman/listinfo/dime >=20 From owner-aaa-wg@merit.edu Thu Jun 15 03:25:18 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FqmEA-0001IJ-63 for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 03:25:18 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FqmE8-000544-Qg for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 03:25:18 -0400 Received: by trapdoor.merit.edu (Postfix) id 1C7269124A; Thu, 15 Jun 2006 03:25:08 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id C7BE99124B; Thu, 15 Jun 2006 03:25:07 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 607BB9124A for ; Thu, 15 Jun 2006 03:25:06 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 4652358282; Thu, 15 Jun 2006 03:25:06 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id F1D1558280 for ; Thu, 15 Jun 2006 03:25:05 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 0180D17EE; Thu, 15 Jun 2006 03:25:06 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13931-09 for ; Thu, 15 Jun 2006 03:25:05 -0400 (EDT) Received: from mailgw3.ericsson.se (mailgw3.ericsson.se [193.180.251.60]) by fiji.merit.edu (Postfix) with ESMTP id 5035817E2 for ; Thu, 15 Jun 2006 03:25:05 -0400 (EDT) Received: from esealmw128.eemea.ericsson.se (unknown [153.88.254.121]) by mailgw3.ericsson.se (Symantec Mail Security) with ESMTP id AF7EF4F03E2; Thu, 15 Jun 2006 09:06:09 +0200 (CEST) Received: from esealmw128.eemea.ericsson.se ([153.88.254.176]) by esealmw128.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Thu, 15 Jun 2006 09:06:09 +0200 Received: from esealmw113.eemea.ericsson.se ([153.88.200.4]) by esealmw128.eemea.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Thu, 15 Jun 2006 09:06:09 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: [AAA-WG]: RE: Diameter base protocol messages used by DCCA Date: Thu, 15 Jun 2006 09:06:08 +0200 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Diameter base protocol messages used by DCCA Thread-Index: AcaQFtdWbbQIqFPKQrKpALl9+xwUdAAMMRuA From: "Harri Hakala (TU/LMF)" To: "Glen Zorn (gwz)" , "Leena Mattila (TU/LMF)" , , , Cc: , X-OriginalArrivalTime: 15 Jun 2006 07:06:09.0091 (UTC) FILETIME=[2D6FA930:01C6904A] X-Brightmail-Tracker: AAAAAA== X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: f60d0f7806b0c40781eee6b9cd0b2135 Hi Glen, The DCCA document defines two different approaches to perform the first = credit control=20 interrogation to be used in different network architectures. The first = approach=20 uses credit-control messages after the user's authorization and = authentication=20 takes place. The second approach uses service specific authorization = messages=20 (such as AAA/AAR) to perform the first interrogation during the user's=20 authorization/authentication phase, and credit-control messages for the=20 intermediate and final interrogations.=20 AA Request/AA Answer are not necessarily equal to AAR/AAA messages in = NASREQ but=20 they mean in DCCA document a general authorization/authentication = request/answer=20 in any Diameter authorization/authentication application. Bad name = example, as it=20 seems to collide with the message name in NASREQ. If the CCA client supports the second approach and e.g. NASREQ is used = for service authorization, then the CCA client sends/receives AAR/AAA messages. As this "AA Request/AA Answer" is a general message, not explicit NASREQ = message,=20 we did not include it the table in section 10.=20 regards............Harri > -----Original Message----- > From: Glen Zorn (gwz) [mailto:gwz@cisco.com]=20 > Sent: 15. kes=E4kuuta 2006 3:59 > To: Harri Hakala (TU/LMF); Leena Mattila (TU/LMF);=20 > juha-pekka.koskinen@nokia.com; marco.stura@nokia.com;=20 > John.Loughney@nokia.com > Cc: Glen Zorn (gwz); aaa-wg@merit.edu; dime@ietf.org > Subject: Diameter base protocol messages used by DCCA >=20 > In the process of attempting to construct a MIB for the=20 > credit control application, I have been trying to figure out=20 > which messages from Diameter base are used by DCCA, so that=20 > they can be counted appropriately. Some are obvious: STR/STA=20 > & RAR/RAA, for example. One has me rather puzzled, though:=20 > the AAR/AAA exchange is explicitly listed in the first state=20 > machine in section 7 as being sent/received by the CCA=20 > client, but the AVPs allowed in AAR/AAA are not listed in=20 > section 10 (though the APS for RAR/RAA ARE). Does the CCA=20 > client actually send/receive AAR/AAA (i.e., should the be=20 > counted in the DCCA MIB) or not? >=20 > ~gwz >=20 > Treat the Earth well.=20 > It was not given to you by your parents. > It was loaned to you by your children. > -- Kenyan Proverb >=20 > Humankind has not woven the web of life. > We are but one thread within it. > Whatever we do to the web, we do to ourselves. > All things are bound together. > All things connect. > -- Chief Seattle >=20 From owner-aaa-wg@merit.edu Thu Jun 15 13:32:42 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fqvhy-00054f-2X for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 13:32:42 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fqvhw-00073s-O4 for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 13:32:42 -0400 Received: by trapdoor.merit.edu (Postfix) id A5FE49124F; Thu, 15 Jun 2006 13:32:29 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 77992912F1; Thu, 15 Jun 2006 13:32:29 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 1E9CE9124F for ; Thu, 15 Jun 2006 13:32:28 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 08A9058289; Thu, 15 Jun 2006 13:32:28 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id E781858281 for ; Thu, 15 Jun 2006 13:32:27 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id E960517D6; Thu, 15 Jun 2006 13:32:27 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24842-01 for ; Thu, 15 Jun 2006 13:32:27 -0400 (EDT) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by fiji.merit.edu (Postfix) with ESMTP id 5A3BB17A7 for ; Thu, 15 Jun 2006 13:32:25 -0400 (EDT) Received: from sj-dkim-6.cisco.com ([171.68.10.81]) by sj-iport-5.cisco.com with ESMTP; 15 Jun 2006 10:32:24 -0700 X-IronPort-AV: i="4.06,137,1149490800"; d="scan'208"; a="295372137:sNHT80225010" Received: from sj-core-4.cisco.com (sj-core-4.cisco.com [171.68.223.138]) by sj-dkim-6.cisco.com (8.12.11/8.12.11) with ESMTP id k5FHWOxW012584; Thu, 15 Jun 2006 10:32:24 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-4.cisco.com (8.12.10/8.12.6) with ESMTP id k5FHWOcL025220; Thu, 15 Jun 2006 10:32:24 -0700 (PDT) Received: from xmb-sjc-215.amer.cisco.com ([171.70.151.169]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.211); Thu, 15 Jun 2006 10:32:23 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: [AAA-WG]: RE: Diameter base protocol messages used by DCCA Date: Thu, 15 Jun 2006 10:32:22 -0700 Message-ID: <4C0FAAC489C8B74F96BEAD85EAEB2625022AF5F6@xmb-sjc-215.amer.cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Diameter base protocol messages used by DCCA Thread-Index: AcaQFtdWbbQIqFPKQrKpALl9+xwUdAAMMRuAABZKJHA= From: "Glen Zorn (gwz)" To: "Harri Hakala (TU/LMF)" , "Leena Mattila (TU/LMF)" , , , Cc: , , "Glen Zorn (gwz)" X-OriginalArrivalTime: 15 Jun 2006 17:32:23.0900 (UTC) FILETIME=[A9C481C0:01C690A1] DKIM-Signature: a=rsa-sha1; q=dns; l=952; t=1150392744; x=1151256744; c=relaxed/simple; s=sjdkim6001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=gwz@cisco.com; z=From:=22Glen=20Zorn=20\(gwz\)=22=20 |Subject:RE=3A=20Diameter=20base=20protocol=20messages=20used=20by=20DCCA; X=v=3Dcisco.com=3B=20h=3DTivVj/SoKN3WihEDB3EnSdXCEvE=3D; b=hPGAITho3vFbboEwOnlJrifua9NyaZD5OOkKOlZZEeIVavndcRyEBeyVXuzCt7tuBkRWw2wm phJwzjE6KVx37TKK+wc6Ha6GM1eF0yBc39dYKr7vrrwU36WTLj8QuqMY; Authentication-Results: sj-dkim-6.cisco.com; header.From=gwz@cisco.com; dkim=pass ( sig from cisco.com verified; ); X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 9182cfff02fae4f1b6e9349e01d62f32 Harri Hakala (TU/LMF) supposedly = scribbled: ... > AA Request/AA Answer are not necessarily equal to AAR/AAA messages in > NASREQ but they mean in DCCA document a general > authorization/authentication request/answer in any Diameter > authorization/authentication application. Bad name example, as it > seems to collide with the message name in NASREQ. =20 >=20 This would seem to make it quite difficult to monitor/manage DCCA via = SNMP, since presumably one would wish to keep track of all the = interrogations & the generic auth message is actually the first = interrogation. This implies that all & any such messages should be = allocated a counter in the DCCA MIB, but the membership of this set of = messages is not static. Any suggestions?=20 =20 ... ~gwz Why is it that most of the world's problems can't be solved by simply listening to John Coltrane? -- Henry Gabriel From owner-aaa-wg@merit.edu Thu Jun 15 16:13:23 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FqyDT-0008Ql-Oh for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 16:13:23 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FqyDS-0005ZK-Dx for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 16:13:23 -0400 Received: by trapdoor.merit.edu (Postfix) id D0DF2912F9; Thu, 15 Jun 2006 16:13:13 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id A41C2912FA; Thu, 15 Jun 2006 16:13:13 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 5DBBE912F9 for ; Thu, 15 Jun 2006 16:13:12 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 47BA858289; Thu, 15 Jun 2006 16:13:12 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 31CD658281 for ; Thu, 15 Jun 2006 16:13:12 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 34F6417D3; Thu, 15 Jun 2006 16:13:12 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28210-02 for ; Thu, 15 Jun 2006 16:13:11 -0400 (EDT) Received: from rtp-iport-1.cisco.com (rtp-iport-1.cisco.com [64.102.122.148]) by fiji.merit.edu (Postfix) with ESMTP id BB3DA17A3 for ; Thu, 15 Jun 2006 16:13:11 -0400 (EDT) Received: from rtp-core-1.cisco.com ([64.102.124.12]) by rtp-iport-1.cisco.com with ESMTP; 15 Jun 2006 13:13:11 -0700 X-BrightmailFiltered: true X-Brightmail-Tracker: AAAAAA== X-IronPort-AV: i="4.06,138,1149490800"; d="scan'208"; a="29616626:sNHT22294324" Received: from [10.86.242.168] (che-vpn-cluster-2-168.cisco.com [10.86.242.168]) by rtp-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id k5FKDAYL002107; Thu, 15 Jun 2006 16:13:10 -0400 (EDT) Message-ID: <4491BF56.3090609@cisco.com> Date: Thu, 15 Jun 2006 16:13:10 -0400 From: Anders Kristensen User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Glen Zorn (gwz)" Cc: "Harri Hakala (TU/LMF)" , "Leena Mattila (TU/LMF)" , juha-pekka.koskinen@nokia.com, marco.stura@nokia.com, John.Loughney@nokia.com, aaa-wg@merit.edu, dime@ietf.org Subject: [AAA-WG]: Re: [Dime] RE: Diameter base protocol messages used by DCCA References: <4C0FAAC489C8B74F96BEAD85EAEB2625022AF5F6@xmb-sjc-215.amer.cisco.com> In-Reply-To: <4C0FAAC489C8B74F96BEAD85EAEB2625022AF5F6@xmb-sjc-215.amer.cisco.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 8b30eb7682a596edff707698f4a80f7d Glen Zorn (gwz) wrote: > Harri Hakala (TU/LMF) supposedly scribbled: > > ... > > >>AA Request/AA Answer are not necessarily equal to AAR/AAA messages in >>NASREQ but they mean in DCCA document a general >>authorization/authentication request/answer in any Diameter >>authorization/authentication application. Bad name example, as it >>seems to collide with the message name in NASREQ. >> > > > This would seem to make it quite difficult to monitor/manage DCCA via SNMP, since presumably one would wish to keep track of all the interrogations & the generic auth message is actually the first interrogation. This implies that all & any such messages should be allocated a counter in the DCCA MIB, but the membership of this set of messages is not static. Any suggestions? Have clients include an Auth-Application-Id AVP in the AAR with the DCC app id? It's not clear to me from the specs whether this is the intention or not but IMHO there really ought to be a way for the server to tell whether the AAR is for a NAS or DCC session - not just for management reasons. Anders > > ... > > ~gwz > > Why is it that most of the world's problems can't be solved by simply > listening to John Coltrane? -- Henry Gabriel > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www1.ietf.org/mailman/listinfo/dime > From owner-aaa-wg@merit.edu Thu Jun 15 16:39:41 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fqycv-0000Y3-3s for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 16:39:41 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fqyct-00078i-OF for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 16:39:41 -0400 Received: by trapdoor.merit.edu (Postfix) id AC9ED91311; Thu, 15 Jun 2006 16:38:20 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 4B70C91308; Thu, 15 Jun 2006 16:38:20 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 0DE01912FE for ; Thu, 15 Jun 2006 16:38:13 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 9A4D058289; Thu, 15 Jun 2006 16:38:12 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 5719D58281 for ; Thu, 15 Jun 2006 16:38:12 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 5A78417D9; Thu, 15 Jun 2006 16:38:12 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28906-01 for ; Thu, 15 Jun 2006 16:38:11 -0400 (EDT) Received: from rtp-iport-1.cisco.com (rtp-iport-1.cisco.com [64.102.122.148]) by fiji.merit.edu (Postfix) with ESMTP id 9191C17D5 for ; Thu, 15 Jun 2006 16:38:09 -0400 (EDT) Received: from rtp-core-2.cisco.com ([64.102.124.13]) by rtp-iport-1.cisco.com with ESMTP; 15 Jun 2006 13:37:44 -0700 X-BrightmailFiltered: true X-Brightmail-Tracker: AAAAAA== X-IronPort-AV: i="4.06,138,1149490800"; d="scan'208"; a="29619387:sNHT66376865754" Received: from [10.86.242.168] (che-vpn-cluster-2-168.cisco.com [10.86.242.168]) by rtp-core-2.cisco.com (8.12.10/8.12.6) with ESMTP id k5FKbhno003826; Thu, 15 Jun 2006 16:37:44 -0400 (EDT) Message-ID: <4491C516.4060808@cisco.com> Date: Thu, 15 Jun 2006 16:37:42 -0400 From: Anders Kristensen User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Tolga Asveren Cc: aaa-wg@merit.edu, dime@ietf.org Subject: [AAA-WG]: Re: [Dime] RE: Diameter base protocol messages used by DCCA References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 10d3e4e3c32e363f129e380e644649be OK, so at least there's a way to tell which app the AAR really is for. In my view it's a poor solution, though, since the code maintaining peg counts could very well belong to a generic Diameter stack which doesn't necessarily know about the particulars of DCCA. It's sort of reasonable to expect the stack to do something on the basis of Auth-Application-Id but not really for DCCA specific AVPs. It makes it unnecessarily difficult to layer the server code. Thanks, Anders Tolga Asveren wrote: > RFC4006 5.2.2 states that Credit-Control AVP MUST be added to AAR to > indicate credit-control capabilities. > > >>-----Original Message----- >>From: Anders Kristensen [mailto:andersk@cisco.com] >>Sent: Thursday, June 15, 2006 4:13 PM >>To: Glen Zorn (gwz) >>Cc: John.Loughney@nokia.com; aaa-wg@merit.edu; >>juha-pekka.koskinen@nokia.com; dime@ietf.org; marco.stura@nokia.com >>Subject: Re: [Dime] RE: Diameter base protocol messages used by DCCA >> >> >> >> >>Glen Zorn (gwz) wrote: >> >>>Harri Hakala (TU/LMF) >> >>supposedly scribbled: >> >>>... >>> >>> >>> >>>>AA Request/AA Answer are not necessarily equal to AAR/AAA messages in >>>>NASREQ but they mean in DCCA document a general >>>>authorization/authentication request/answer in any Diameter >>>>authorization/authentication application. Bad name example, as it >>>>seems to collide with the message name in NASREQ. >>>> >>> >>> >>>This would seem to make it quite difficult to monitor/manage >> >>DCCA via SNMP, since presumably one would wish to keep track of >>all the interrogations & the generic auth message is actually the >>first interrogation. This implies that all & any such messages >>should be allocated a counter in the DCCA MIB, but the membership >>of this set of messages is not static. Any suggestions? >> >>Have clients include an Auth-Application-Id AVP in the AAR with the DCC >>app id? It's not clear to me from the specs whether this is the >>intention or not but IMHO there really ought to be a way for the server >>to tell whether the AAR is for a NAS or DCC session - not just for >>management reasons. >> >>Anders >> >> >>>... >>> >>>~gwz >>> >>>Why is it that most of the world's problems can't be solved by simply >>> listening to John Coltrane? -- Henry Gabriel >>> >>>_______________________________________________ >>>DiME mailing list >>>DiME@ietf.org >>>https://www1.ietf.org/mailman/listinfo/dime >>> >> >>_______________________________________________ >>DiME mailing list >>DiME@ietf.org >>https://www1.ietf.org/mailman/listinfo/dime > > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www1.ietf.org/mailman/listinfo/dime > From owner-aaa-wg@merit.edu Thu Jun 15 16:39:59 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FqydD-0000bm-Rc for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 16:39:59 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FqydB-00079K-Fv for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 16:39:59 -0400 Received: by trapdoor.merit.edu (Postfix) id 0A09391316; Thu, 15 Jun 2006 16:38:43 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id BCF0891319; Thu, 15 Jun 2006 16:38:42 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id CD58091316 for ; Thu, 15 Jun 2006 16:38:36 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 71E0B5828D; Thu, 15 Jun 2006 16:38:36 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 5DC1358281 for ; Thu, 15 Jun 2006 16:38:36 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 5D6CD17A7; Thu, 15 Jun 2006 16:38:36 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28908-07 for ; Thu, 15 Jun 2006 16:38:36 -0400 (EDT) X-Greylist: delayed 1146 seconds by postgrey-1.21 at fiji.merit.edu; Thu, 15 Jun 2006 16:38:35 EDT Received: from bw.ulticom.com (bw.ulticom.com [208.255.120.38]) by fiji.merit.edu (Postfix) with ESMTP id AEFBF17D9 for ; Thu, 15 Jun 2006 16:38:35 -0400 (EDT) Received: from colby.ulticom.com (colby.ulticom.com [192.73.206.10]) by bw.ulticom.com (BorderWare MXtreme Mail Firewall) with ESMTP id 70BD9D8554; Thu, 15 Jun 2006 16:19:26 -0400 (EDT) Received: from pcasveren (pc-asveren.ulticom.com [172.25.33.55]) by colby.ulticom.com (8.13.4/8.12.10) with SMTP id k5FKJPAW000505; Thu, 15 Jun 2006 16:19:25 -0400 (EDT) From: "Tolga Asveren" To: , Subject: [AAA-WG]: RE: [Dime] RE: Diameter base protocol messages used by DCCA Date: Thu, 15 Jun 2006 15:56:47 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 In-reply-to: <4491BF56.3090609@cisco.com> Importance: Normal Received-SPF: pass X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: e8a67952aa972b528dd04570d58ad8fe RFC4006 5.2.2 states that Credit-Control AVP MUST be added to AAR to indicate credit-control capabilities. > -----Original Message----- > From: Anders Kristensen [mailto:andersk@cisco.com] > Sent: Thursday, June 15, 2006 4:13 PM > To: Glen Zorn (gwz) > Cc: John.Loughney@nokia.com; aaa-wg@merit.edu; > juha-pekka.koskinen@nokia.com; dime@ietf.org; marco.stura@nokia.com > Subject: Re: [Dime] RE: Diameter base protocol messages used by DCCA > > > > > Glen Zorn (gwz) wrote: > > Harri Hakala (TU/LMF) > supposedly scribbled: > > > > ... > > > > > >>AA Request/AA Answer are not necessarily equal to AAR/AAA messages in > >>NASREQ but they mean in DCCA document a general > >>authorization/authentication request/answer in any Diameter > >>authorization/authentication application. Bad name example, as it > >>seems to collide with the message name in NASREQ. > >> > > > > > > This would seem to make it quite difficult to monitor/manage > DCCA via SNMP, since presumably one would wish to keep track of > all the interrogations & the generic auth message is actually the > first interrogation. This implies that all & any such messages > should be allocated a counter in the DCCA MIB, but the membership > of this set of messages is not static. Any suggestions? > > Have clients include an Auth-Application-Id AVP in the AAR with the DCC > app id? It's not clear to me from the specs whether this is the > intention or not but IMHO there really ought to be a way for the server > to tell whether the AAR is for a NAS or DCC session - not just for > management reasons. > > Anders > > > > > ... > > > > ~gwz > > > > Why is it that most of the world's problems can't be solved by simply > > listening to John Coltrane? -- Henry Gabriel > > > > _______________________________________________ > > DiME mailing list > > DiME@ietf.org > > https://www1.ietf.org/mailman/listinfo/dime > > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www1.ietf.org/mailman/listinfo/dime From owner-aaa-wg@merit.edu Thu Jun 15 16:44:19 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FqyhP-0005GE-8j for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 16:44:19 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FqyhN-0008Fc-GD for aaa-archive@lists.ietf.org; Thu, 15 Jun 2006 16:44:18 -0400 Received: by trapdoor.merit.edu (Postfix) id 59814912FD; Thu, 15 Jun 2006 16:44:06 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 26A78912FF; Thu, 15 Jun 2006 16:44:06 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 6F6A9912FD for ; Thu, 15 Jun 2006 16:44:03 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 54D455828B; Thu, 15 Jun 2006 16:44:03 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 135A058289 for ; Thu, 15 Jun 2006 16:44:03 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 0EA2517D5; Thu, 15 Jun 2006 16:44:03 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 29457-03 for ; Thu, 15 Jun 2006 16:44:02 -0400 (EDT) Received: from bw.ulticom.com (bw.ulticom.com [208.255.120.38]) by fiji.merit.edu (Postfix) with ESMTP id 644B917A7 for ; Thu, 15 Jun 2006 16:44:02 -0400 (EDT) Received: from colby.ulticom.com (colby.ulticom.com [192.73.206.10]) by bw.ulticom.com (BorderWare MXtreme Mail Firewall) with ESMTP id 237496B66D; Thu, 15 Jun 2006 16:44:01 -0400 (EDT) Received: from pcasveren (pc-asveren.ulticom.com [172.25.33.55]) by colby.ulticom.com (8.13.4/8.12.10) with SMTP id k5FKi0nl002646; Thu, 15 Jun 2006 16:44:01 -0400 (EDT) From: "Tolga Asveren" To: "Anders Kristensen" Cc: , Subject: [AAA-WG]: RE: [Dime] RE: Diameter base protocol messages used by DCCA Date: Thu, 15 Jun 2006 16:21:22 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 In-reply-to: <4491C516.4060808@cisco.com> Importance: Normal X-STA-Metric: 0 (engine=021) X-STA-NotSpam: from:addr:ulticom.co url:mailman wrote: url:listinfo anders X-STA-Spam: zorn generic url:www1 interrogation collide X-BTI-AntiSpam: sta:false/0/021,dcc:off,rbl:off,spf:pass,wlbl:trust/4,trusted:yes,pwl:no Received-SPF: pass X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 1a1bf7677bfe77d8af1ebe0e91045c5b Actualy, shouldn't ApplicationId in the message header be 4 (ApplicationId for DCCA) , for such an AAR? Tolga > -----Original Message----- > From: Anders Kristensen [mailto:andersk@cisco.com] > Sent: Thursday, June 15, 2006 4:38 PM > To: Tolga Asveren > Cc: aaa-wg@merit.edu; dime@ietf.org > Subject: Re: [Dime] RE: Diameter base protocol messages used by DCCA > > > OK, so at least there's a way to tell which app the AAR really is for. > In my view it's a poor solution, though, since the code maintaining peg > counts could very well belong to a generic Diameter stack which doesn't > necessarily know about the particulars of DCCA. It's sort of reasonable > to expect the stack to do something on the basis of Auth-Application-Id > but not really for DCCA specific AVPs. It makes it unnecessarily > difficult to layer the server code. > > Thanks, > Anders > > Tolga Asveren wrote: > > > RFC4006 5.2.2 states that Credit-Control AVP MUST be added to AAR to > > indicate credit-control capabilities. > > > > > >>-----Original Message----- > >>From: Anders Kristensen [mailto:andersk@cisco.com] > >>Sent: Thursday, June 15, 2006 4:13 PM > >>To: Glen Zorn (gwz) > >>Cc: John.Loughney@nokia.com; aaa-wg@merit.edu; > >>juha-pekka.koskinen@nokia.com; dime@ietf.org; marco.stura@nokia.com > >>Subject: Re: [Dime] RE: Diameter base protocol messages used by DCCA > >> > >> > >> > >> > >>Glen Zorn (gwz) wrote: > >> > >>>Harri Hakala (TU/LMF) > >> > >>supposedly scribbled: > >> > >>>... > >>> > >>> > >>> > >>>>AA Request/AA Answer are not necessarily equal to AAR/AAA messages in > >>>>NASREQ but they mean in DCCA document a general > >>>>authorization/authentication request/answer in any Diameter > >>>>authorization/authentication application. Bad name example, as it > >>>>seems to collide with the message name in NASREQ. > >>>> > >>> > >>> > >>>This would seem to make it quite difficult to monitor/manage > >> > >>DCCA via SNMP, since presumably one would wish to keep track of > >>all the interrogations & the generic auth message is actually the > >>first interrogation. This implies that all & any such messages > >>should be allocated a counter in the DCCA MIB, but the membership > >>of this set of messages is not static. Any suggestions? > >> > >>Have clients include an Auth-Application-Id AVP in the AAR with the DCC > >>app id? It's not clear to me from the specs whether this is the > >>intention or not but IMHO there really ought to be a way for the server > >>to tell whether the AAR is for a NAS or DCC session - not just for > >>management reasons. > >> > >>Anders > >> > >> > >>>... > >>> > >>>~gwz > >>> > >>>Why is it that most of the world's problems can't be solved by simply > >>> listening to John Coltrane? -- Henry Gabriel > >>> > >>>_______________________________________________ > >>>DiME mailing list > >>>DiME@ietf.org > >>>https://www1.ietf.org/mailman/listinfo/dime > >>> > >> > >>_______________________________________________ > >>DiME mailing list > >>DiME@ietf.org > >>https://www1.ietf.org/mailman/listinfo/dime > > > > > > > > _______________________________________________ > > DiME mailing list > > DiME@ietf.org > > https://www1.ietf.org/mailman/listinfo/dime > > From owner-aaa-wg@merit.edu Fri Jun 16 14:23:07 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FrIyJ-0003nU-5x for aaa-archive@lists.ietf.org; Fri, 16 Jun 2006 14:23:07 -0400 Received: from stsc1260-eth-s1-s1p1-vip.va.neustar.com ([156.154.16.129] helo=chiedprmail1.ietf.org) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FrHSs-0001JF-Go for aaa-archive@lists.ietf.org; Fri, 16 Jun 2006 12:46:34 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1FrHQA-0005ng-Cb for aaa-archive@lists.ietf.org; Fri, 16 Jun 2006 12:43:47 -0400 Received: by trapdoor.merit.edu (Postfix) id 0698891238; Fri, 16 Jun 2006 12:43:37 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id CA62C9123B; Fri, 16 Jun 2006 12:43:36 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 7B69691238 for ; Fri, 16 Jun 2006 12:43:35 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 607195828D; Fri, 16 Jun 2006 12:43:35 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 48C1C58281 for ; Fri, 16 Jun 2006 12:43:35 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 4BE1C17F1; Fri, 16 Jun 2006 12:43:35 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16045-04 for ; Fri, 16 Jun 2006 12:43:34 -0400 (EDT) Received: from sj-iport-4.cisco.com (sj-iport-4.cisco.com [171.68.10.86]) by fiji.merit.edu (Postfix) with ESMTP id C63D8179C for ; Fri, 16 Jun 2006 12:43:34 -0400 (EDT) Received: from sj-dkim-5.cisco.com ([171.68.10.79]) by sj-iport-4.cisco.com with ESMTP; 16 Jun 2006 09:43:34 -0700 X-IronPort-AV: i="4.06,143,1149490800"; d="scan'208"; a="1826997190:sNHT86900080" Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-5.cisco.com (8.12.11/8.12.11) with ESMTP id k5GGhXLZ021762; Fri, 16 Jun 2006 09:43:33 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-2.cisco.com (8.12.10/8.12.6) with ESMTP id k5GGhWke013532; Fri, 16 Jun 2006 09:43:32 -0700 (PDT) Received: from xmb-sjc-215.amer.cisco.com ([171.70.151.169]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.211); Fri, 16 Jun 2006 09:43:32 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: [AAA-WG]: RE: [Dime] RE: Diameter base protocol messages used by DCCA Date: Fri, 16 Jun 2006 09:43:30 -0700 Message-ID: <4C0FAAC489C8B74F96BEAD85EAEB2625022AFA18@xmb-sjc-215.amer.cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Dime] RE: Diameter base protocol messages used by DCCA Thread-Index: AcaQvHRLCzEvKzDHRWSkW/O26V/ALwAWLJYwABK/jSA= From: "Glen Zorn (gwz)" To: "STURA, Marco, VF-IT" , "Tolga Asveren" , "Anders Kristensen" Cc: , , "Glen Zorn (gwz)" X-OriginalArrivalTime: 16 Jun 2006 16:43:32.0551 (UTC) FILETIME=[00F5E570:01C69164] DKIM-Signature: a=rsa-sha1; q=dns; l=4087; t=1150476213; x=1151340213; c=relaxed/simple; s=sjdkim5001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=gwz@cisco.com; z=From:=22Glen=20Zorn=20\(gwz\)=22=20 |Subject:RE=3A=20[Dime]=20RE=3A=20Diameter=20base=20protocol=20messages=20used=20 by=20DCCA; X=v=3Dcisco.com=3B=20h=3DHwsi7c48XQRfyiH8lUrRpE1X9Jg=3D; b=DNVpCU2kVyAGeP2sli62SyfPeDuzZaiLJx13NgzrAaErhjoBfgLnxxoy/yBagecRyePw3FKx /oD4/HQJ4XqiWQwnjdc/Qu2oyIiOZ40Y8j9KsNE2TVSOfd/GRwhMWmNI; Authentication-Results: sj-dkim-5.cisco.com; header.From=gwz@cisco.com; dkim=pass ( sig from cisco.com verified; ); X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: -2.6 (--) X-Scan-Signature: 31247fb3be228bb596db9127becad0bc STURA, Marco, VF-IT supposedly = scribbled: >> Actualy, shouldn't ApplicationId in the message header be 4 >> (ApplicationId for DCCA) , for such an AAR? >=20 > No, that is not what RFC4006 specifies. See below from section 5.2.2 >=20 > The Diameter credit-control client in the service element MUST > actively co-operate with the authorization/authentication client in > the construction of the AA request by adding appropriate credit- > control AVPs. The credit-control client MUST add the > Credit-Control AVP to indicate credit-control capabilities and MAY > add other relevant credit-control specific AVPs to the proper > authorization/authentication command to perform the first > interrogation toward the home Diameter AAA server. The Auth- > Application-Id is set to the appropriate value, as defined in the > relevant service specific authorization/authentication application > document (e.g., [NASREQ], [DIAMMIP]). The home Diameter AAA server > authenticates/authorizes the subscriber and determines whether > credit-control is required. >=20 > The reason we introduced use of service specific AA request for the > first interrogation is for protocol efficiency reasons in case in > certain environments there is a need to perform credit check at the > same time service specific authentication/authorization is executed > (e.g. access authentication/authorization). Essentially this is to > avoid several round trips before granting access to a user (i.e. one > for service specific AA and one for credit control). Messages may > need to traverse a number of "domains" to reach the home domain in > roaming circumstances, hence significant delay may occur. So, the AA > message is used for both service specific and credit control > processes but there is no means to indicate this to the server other > than AVP based.=20 So, in other words, in order to implement a e.g., [NASREQ], [DIAMMIP] = peer intended for general distribution, one must include CCA client = functionality. > However, after the first interrogation there will be > an independent credit control stream if so required. =20 >=20 > Would it then make sense to monitor AA messages and CC messages > independently also for the first interrogation performed during > service specific AA? If the model above is used there will be e.g. > NASREQ MIB + DCCA MIB in the same node. =20 >=20 > E.g. A successful AAR/AAA (NASREQ Application-Id) may or may not lead > to an independent credit control stream. If it does there will be > zero or more CCR updates (DCCA Application-Id) and a CCR termination > (DCCA Application-id) when the AA session is closed. Therefore, in a > NASREQ + DCCA example, if credit control is used for a subscriber > successful AAR/AAA will result at least in the CCR termination > counter incremented and that would mean that AAR/AAA was used to > perform first interrogation. =20 Or, that there were no intermediate interrogations; also, what about the = case of a one-time event (balance check, etc.)? Although this kind of = activity doesn't seem to be included in any of the examples in RFC 4006, = neither does it appear to be prohibited. If a balance check or other = type of one-time event was included in the AAR it seems that there would = be no client-side counter incremented. =20 >=20 > In other cases, where the model described in section 5.2.2 is not > used, a CCR initial counter would be incremented.=20 >=20 > BTW, do you plan to have different counters for different CCR types > (initial, update, termination)?=20 I hadn't planned to, no. However, if it is necessary to use this data = to infer the existence of an initial interrogation from its absence = (does anybody else see something odd about this?), I suppose I will have = to do so. ... Hope this helps, ~gwz Why is it that most of the world's problems can't be solved by simply listening to John Coltrane? -- Henry Gabriel From owner-aaa-wg@merit.edu Sat Jun 17 02:41:50 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FrUVC-0001Bs-42 for aaa-archive@lists.ietf.org; Sat, 17 Jun 2006 02:41:50 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FrUVA-0002qm-Qg for aaa-archive@lists.ietf.org; Sat, 17 Jun 2006 02:41:50 -0400 Received: by trapdoor.merit.edu (Postfix) id 102199125E; Sat, 17 Jun 2006 02:41:40 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id CDB3891318; Sat, 17 Jun 2006 02:41:39 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 523AE9125E for ; Sat, 17 Jun 2006 02:41:38 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 34CE75828D; Sat, 17 Jun 2006 02:41:38 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 1EBD758281 for ; Sat, 17 Jun 2006 02:41:38 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 21712179D; Sat, 17 Jun 2006 02:41:38 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 29434-07 for ; Sat, 17 Jun 2006 02:41:37 -0400 (EDT) Received: from elitecore.com (mailhost.elitecore.com [203.88.135.194]) by fiji.merit.edu (Postfix) with ESMTP id D8BD3170B for ; Sat, 17 Jun 2006 02:41:35 -0400 (EDT) Received: (qmail 1067 invoked from network); 17 Jun 2006 06:21:51 -0000 Received: from unknown (HELO elitecore58) ([192.168.15.108]) (envelope-sender ) by elitecore.com (qmail-ldap-1.03) with SMTP for ; 17 Jun 2006 06:21:51 -0000 X-Anti-Virus: Cyberoam Anti-Virus for SMTP; Kaspersky 5.5.3/RELEASE, bases: 17062006 #189060; status: clean Message-ID: <001c01c691d8$f27623f0$6c0fa8c0@elitecore58> From: "darshak" To: Subject: [AAA-WG]: Dimeter installation Date: Sat, 17 Jun 2006 12:10:39 +0530 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0019_01C69207.0C1DBE20" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2869 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 X-SpamTest-Info: Profile: Formal (400/060616) X-SpamTest-Info: Profile: Detect Hard (4/030526) X-SpamTest-Info: Profile: SysLog X-SpamTest-Status: Not detected X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 0a7aa2e6e558383d84476dc338324fab This is a multi-part message in MIME format. ------=_NextPart_000_0019_01C69207.0C1DBE20 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi I m new to Diameter.I have installed opendiameter-1.0.7-h But I dont know how to start/stop it.How to integrate it with other = RADIUS/DIAMTER applications. when i try to start aaad i got this error aaad: error while loading shared libraries: libACE_SSL.so.5 But this file is there in DIAMETER_HOME folder and /usr/lib. Can any1 tell me the problem=20 Thnxs in advance ------=_NextPart_000_0019_01C69207.0C1DBE20 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
Hi
I m new to Diameter.I have installed=20 opendiameter-1.0.7-h
But I dont know how to start/stop = it.How to=20 integrate it with other RADIUS/DIAMTER applications.
 
when i try to start aaad i got this=20 error
aaad: error while loading shared = libraries:=20 libACE_SSL.so.5
 
But this file is there in DIAMETER_HOME = folder and=20 /usr/lib.
 
Can any1 tell me the problem =
 
Thnxs in = advance
------=_NextPart_000_0019_01C69207.0C1DBE20-- From owner-aaa-wg@merit.edu Sat Jun 17 13:00:50 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FreAE-0003Lv-8c for aaa-archive@lists.ietf.org; Sat, 17 Jun 2006 13:00:50 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FreAC-0003wU-TX for aaa-archive@lists.ietf.org; Sat, 17 Jun 2006 13:00:50 -0400 Received: by trapdoor.merit.edu (Postfix) id 3A2E291230; Sat, 17 Jun 2006 13:00:39 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id E5A4891233; Sat, 17 Jun 2006 13:00:38 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id CDF5E91230 for ; Sat, 17 Jun 2006 13:00:36 -0400 (EDT) Received: by segue.merit.edu (Postfix) id B25935828B; Sat, 17 Jun 2006 13:00:36 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 9E67458281 for ; Sat, 17 Jun 2006 13:00:36 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id A19DD16DD; Sat, 17 Jun 2006 13:00:36 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07883-06 for ; Sat, 17 Jun 2006 13:00:36 -0400 (EDT) Received: from mgw-ext11.nokia.com (mgw-ext11.nokia.com [131.228.20.170]) by fiji.merit.edu (Postfix) with ESMTP id DF45ACF6 for ; Sat, 17 Jun 2006 13:00:35 -0400 (EDT) Received: from esebh106.NOE.Nokia.com (esebh106.ntc.nokia.com [172.21.138.213]) by mgw-ext11.nokia.com (Switch-3.1.8/Switch-3.1.7) with ESMTP id k5HH0TWi024529; Sat, 17 Jun 2006 20:00:29 +0300 Received: from esebh102.NOE.Nokia.com ([172.21.138.183]) by esebh106.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Sat, 17 Jun 2006 20:00:29 +0300 Received: from esebe199.NOE.Nokia.com ([172.21.138.143]) by esebh102.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Sat, 17 Jun 2006 20:00:28 +0300 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C6922F.88AA8C3F" Subject: RE: [AAA-WG]: Dimeter installation Date: Sat, 17 Jun 2006 20:00:28 +0300 Message-ID: In-Reply-To: <001c01c691d8$f27623f0$6c0fa8c0@elitecore58> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [AAA-WG]: Dimeter installation Thread-Index: AcaR2X3CgDQIOmTiTmG6qqYs0fmu7wAVe3DA From: To: , X-OriginalArrivalTime: 17 Jun 2006 17:00:28.0462 (UTC) FILETIME=[88E75CE0:01C6922F] X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.2 (/) X-Scan-Signature: a87a9cdae4ac5d3fbeee75cd0026d632 This is a multi-part message in MIME format. ------_=_NextPart_001_01C6922F.88AA8C3F Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable You might want to try the Open Diameter wiki: http://www.opendiameter.org/ and if you can't find your answers there, you can join the open diameter mailing list: =20 http://lists.sourceforge.net/lists/listinfo/diameter-developers. John ________________________________ From: owner-aaa-wg@merit.edu [mailto:owner-aaa-wg@merit.edu] On Behalf Of ext darshak Sent: 17 June, 2006 09:41 To: aaa-wg@merit.edu Subject: [AAA-WG]: Dimeter installation =09 =09 Hi I m new to Diameter.I have installed opendiameter-1.0.7-h But I dont know how to start/stop it.How to integrate it with other RADIUS/DIAMTER applications. =20 when i try to start aaad i got this error aaad: error while loading shared libraries: libACE_SSL.so.5 =20 But this file is there in DIAMETER_HOME folder and /usr/lib. =20 Can any1 tell me the problem=20 =20 Thnxs in advance ------_=_NextPart_001_01C6922F.88AA8C3F Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
You might want to try the Open Diameter wiki: = http://www.opendiameter.org/&nb= sp;and if=20 you can't find your answers there, you can join the open diameter = mailing=20 list: 
= http://lists.sourceforge.net/lists/listinfo/diameter-developers.
<= /DIV>
John


From: owner-aaa-wg@merit.edu=20 [mailto:owner-aaa-wg@merit.edu] On Behalf Of ext=20 darshak
Sent: 17 June, 2006 09:41
To:=20 aaa-wg@merit.edu
Subject: [AAA-WG]: Dimeter=20 installation

Hi
I m new to Diameter.I have installed=20 opendiameter-1.0.7-h
But I dont know how to start/stop = it.How to=20 integrate it with other RADIUS/DIAMTER applications.
 
when i try to start aaad i got this=20 error
aaad: error while loading shared = libraries:=20 libACE_SSL.so.5
 
But this file is there in = DIAMETER_HOME folder=20 and /usr/lib.
 
Can any1 tell me the problem =
 
Thnxs in=20 advance
------_=_NextPart_001_01C6922F.88AA8C3F-- From owner-aaa-wg@merit.edu Wed Jun 21 11:23:54 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Ft4Yc-0001IO-Ev for aaa-archive@lists.ietf.org; Wed, 21 Jun 2006 11:23:54 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Ft4Yb-0008JH-2J for aaa-archive@lists.ietf.org; Wed, 21 Jun 2006 11:23:54 -0400 Received: by trapdoor.merit.edu (Postfix) id 823FC9123A; Wed, 21 Jun 2006 11:23:44 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 51F679123F; Wed, 21 Jun 2006 11:23:44 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 132AA9123A for ; Wed, 21 Jun 2006 11:23:43 -0400 (EDT) Received: by segue.merit.edu (Postfix) id ED3F558287; Wed, 21 Jun 2006 11:23:42 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id ABFF258280 for ; Wed, 21 Jun 2006 11:23:42 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id AD802C46; Wed, 21 Jun 2006 11:23:42 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24352-04 for ; Wed, 21 Jun 2006 11:23:42 -0400 (EDT) X-Greylist: delayed 3550 seconds by postgrey-1.21 at fiji.merit.edu; Wed, 21 Jun 2006 11:23:42 EDT Received: from outbound.mailhop.org (outbound.mailhop.org [63.208.196.171]) by fiji.merit.edu (Postfix) with ESMTP id 48CCB698 for ; Wed, 21 Jun 2006 11:23:42 -0400 (EDT) Received: from c-24-16-73-85.hsd1.wa.comcast.net ([24.16.73.85] helo=internaut.com) by outbound.mailhop.org with esmtpa (Exim 4.51) id 1Ft3d3-000Elj-KL; Wed, 21 Jun 2006 10:24:25 -0400 Received: by internaut.com (Postfix, from userid 1000) id 8080D56941; Wed, 21 Jun 2006 07:24:24 -0700 (PDT) X-Mail-Handler: MailHop Outbound by DynDNS X-Originating-IP: 24.16.73.85 X-Report-Abuse-To: abuse@dyndns.com (see http://www.mailhop.org/outbound/abuse.html for abuse reporting information) X-MHO-User: aboba Date: Wed, 21 Jun 2006 07:24:24 -0700 (PDT) From: Bernard Aboba To: "Pat Calhoun (pacalhou)" Cc: MORAND Lionel RD-CORE-ISS , aaa-wg@merit.edu Subject: [AAA-WG]: RE: Conclusions on the draft "Resource Management Extensions" In-Reply-To: <4FF84B0BC277FF45AA27FE969DD956A202108C57@xmb-sjc-235.amer.cisco.com> Message-ID: References: <4FF84B0BC277FF45AA27FE969DD956A202108C57@xmb-sjc-235.amer.cisco.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.1 (/) X-Scan-Signature: 5a9a1bd6c2d06a21d748b7d0070ddcb8 As Pat said, the major priority of the AAA WG was completing work on the Diameter Base protocol and applications. I actually don't recall whether the WG made a judgement on the Resource Management draft; it just wasn't one of the top priorities. I will say that the Diameter architecture provides a much more sound base for resource management than RADIUS does. Most of the resource management implementations I have seen on RADIUS need to incorporate other information sources for validation, in order to deal with potential losses of RADIUS Accounting packets. Since Diameter runs over reliable transport, it should not have to do this. On Wed, 21 Jun 2006, Pat Calhoun (pacalhou) wrote: > I'll let Bernard speak for the WG, but at the time the WG had many other > priorities, and resource management was not one of them. However, I > haven't had the opportunity to participate in the AAA WG for some time, > so I'm not sure if this could be an opportune time to re-introduce it. > > > Pat Calhoun > CTO, Wireless Networking Business Unit > Cisco Systems > > > > > ________________________________ > > From: MORAND Lionel RD-CORE-ISS > [mailto:lionel.morand@orange-ft.com] > Sent: Wednesday, June 21, 2006 7:07 AM > To: Bernard Aboba; Pat Calhoun (pacalhou) > Subject: Conclusions on the draft "Resource Management > Extensions" > > > > Hi, > I would like to know what were the conclusions on the following > draft initiated by Pat: draft-calhoun-diameter-res-mgmt-08.txt. > (http://quimby.gnus.org/internet-drafts/draft-calhoun-diameter-res-mgmt- > 08.txt > 08.txt> ) > > Some folks from TISPAN are initiating a document based on this > draft to perform resource management after failover, proposing to > enhance the Diameter base protocol with dedicated commands. I'm pretty > sure that the previous comments/concerns about such enhancements are > still valid. > > BR, > Lionel > > > From owner-aaa-wg@merit.edu Wed Jun 21 12:11:34 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Ft5Ik-00088q-8v for aaa-archive@lists.ietf.org; Wed, 21 Jun 2006 12:11:34 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Ft5Ii-0004IT-SC for aaa-archive@lists.ietf.org; Wed, 21 Jun 2006 12:11:34 -0400 Received: by trapdoor.merit.edu (Postfix) id F226B91285; Wed, 21 Jun 2006 12:11:26 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id C172A912A5; Wed, 21 Jun 2006 12:11:25 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 3C05B91285 for ; Wed, 21 Jun 2006 12:11:24 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 2A15758287; Wed, 21 Jun 2006 12:11:24 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id DA33B58280 for ; Wed, 21 Jun 2006 12:11:23 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id DE808C46; Wed, 21 Jun 2006 12:11:23 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25558-05 for ; Wed, 21 Jun 2006 12:11:23 -0400 (EDT) X-Greylist: delayed 1985 seconds by postgrey-1.21 at fiji.merit.edu; Wed, 21 Jun 2006 12:11:23 EDT Received: from lizzard.sbs.de (lizzard.sbs.de [194.138.37.39]) by fiji.merit.edu (Postfix) with ESMTP id 18423B02 for ; Wed, 21 Jun 2006 12:11:22 -0400 (EDT) Received: from mail1.sbs.de (localhost [127.0.0.1]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id k5LFbuPP003720; Wed, 21 Jun 2006 17:37:56 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id k5LFbtge010528; Wed, 21 Jun 2006 17:37:55 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.1830); Wed, 21 Jun 2006 17:37:55 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: AW: [AAA-WG]: RE: Conclusions on the draft "Resource Management Extensions" Date: Wed, 21 Jun 2006 17:32:59 +0200 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [AAA-WG]: RE: Conclusions on the draft "Resource Management Extensions" Thread-Index: AcaVRs1ljFlPl29LSB+fntasVgkaCAAAIs9g From: "Tschofenig, Hannes" To: "Bernard Aboba" , "Pat Calhoun (pacalhou)" Cc: "MORAND Lionel RD-CORE-ISS" , , X-OriginalArrivalTime: 21 Jun 2006 15:37:55.0371 (UTC) FILETIME=[AA48A7B0:01C69548] X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: b5d20af10c334b36874c0264b10f59f1 Hi all,=20 may I raise your attention to the following draft submitted for this = meeting. Requirement for the addition of Auditing Functionality to Diameter http://psg.com/~avri/dime/draft-bodin-dime-auditing-reqs-00.txt Unfortunately, it did not yet show up.=20 Ciao Hannes > -----Urspr=FCngliche Nachricht----- > Von: owner-aaa-wg@merit.edu [mailto:owner-aaa-wg@merit.edu]=20 > Im Auftrag von Bernard Aboba > Gesendet: Mittwoch, 21. Juni 2006 16:24 > An: Pat Calhoun (pacalhou) > Cc: MORAND Lionel RD-CORE-ISS; aaa-wg@merit.edu > Betreff: [AAA-WG]: RE: Conclusions on the draft "Resource=20 > Management Extensions" >=20 > As Pat said, the major priority of the AAA WG was completing=20 > work on the=20 > Diameter Base protocol and applications. I actually don't=20 > recall whether=20 > the WG made a judgement on the Resource Management draft; it=20 > just wasn't=20 > one of the top priorities.=20 >=20 > I will say that the Diameter architecture provides a much more sound=20 > base for resource management than RADIUS does. Most of the resource=20 > management implementations I have seen on RADIUS need to=20 > incorporate other=20 > information sources for validation, in order to deal with=20 > potential losses=20 > of RADIUS Accounting packets. Since Diameter runs over reliable=20 > transport, it should not have to do this.=20 >=20 > On Wed, 21 Jun 2006, Pat Calhoun (pacalhou) wrote: >=20 > > I'll let Bernard speak for the WG, but at the time the WG=20 > had many other > > priorities, and resource management was not one of them. However, I > > haven't had the opportunity to participate in the AAA WG=20 > for some time, > > so I'm not sure if this could be an opportune time to=20 > re-introduce it. > > =20 > >=20 > > Pat Calhoun > > CTO, Wireless Networking Business Unit > > Cisco Systems > >=20 > > =20 > >=20 > >=20 > > ________________________________ > >=20 > > From: MORAND Lionel RD-CORE-ISS > > [mailto:lionel.morand@orange-ft.com]=20 > > Sent: Wednesday, June 21, 2006 7:07 AM > > To: Bernard Aboba; Pat Calhoun (pacalhou) > > Subject: Conclusions on the draft "Resource Management > > Extensions" > > =09 > > =09 > >=20 > > Hi,=20 > > I would like to know what were the conclusions on the following > > draft initiated by Pat: draft-calhoun-diameter-res-mgmt-08.txt. > >=20 > (http://quimby.gnus.org/internet-drafts/draft-calhoun-diameter > -res-mgmt- > > 08.txt > >=20 > -res-mgmt- > > 08.txt> ) > >=20 > > Some folks from TISPAN are initiating a document based on this > > draft to perform resource management after failover, proposing to > > enhance the Diameter base protocol with dedicated commands.=20 > I'm pretty > > sure that the previous comments/concerns about such enhancements are > > still valid. > >=20 > > BR,=20 > > Lionel=20 > >=20 > >=20 > >=20 >=20 From owner-aaa-wg@merit.edu Wed Jun 21 12:51:01 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Ft5uv-0000bt-62 for aaa-archive@lists.ietf.org; Wed, 21 Jun 2006 12:51:01 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Ft5h9-0006fS-Qm for aaa-archive@lists.ietf.org; Wed, 21 Jun 2006 12:36:49 -0400 Received: by trapdoor.merit.edu (Postfix) id B351F912A5; Wed, 21 Jun 2006 12:36:39 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 7A84C912A6; Wed, 21 Jun 2006 12:36:39 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id ED444912A5 for ; Wed, 21 Jun 2006 12:36:37 -0400 (EDT) Received: by segue.merit.edu (Postfix) id DE03058287; Wed, 21 Jun 2006 12:36:37 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 9BEE858280 for ; Wed, 21 Jun 2006 12:36:37 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 7FB50C1B; Wed, 21 Jun 2006 12:36:37 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26150-08 for ; Wed, 21 Jun 2006 12:36:37 -0400 (EDT) Received: from bw.ulticom.com (bw.ulticom.com [208.255.120.38]) by fiji.merit.edu (Postfix) with ESMTP id EAE57599 for ; Wed, 21 Jun 2006 12:36:36 -0400 (EDT) Received: from colby.ulticom.com (colby.ulticom.com [192.73.206.10]) by bw.ulticom.com (BorderWare MXtreme Mail Firewall) with ESMTP id 99E34D2F3A; Wed, 21 Jun 2006 12:36:35 -0400 (EDT) Received: from pcasveren (pc-asveren.ulticom.com [172.25.33.55]) by colby.ulticom.com (8.13.4/8.12.10) with SMTP id k5LGaYeL016433; Wed, 21 Jun 2006 12:36:34 -0400 (EDT) From: "Tolga Asveren" To: , Subject: RE: [Dime] AW: [AAA-WG]: RE: Conclusions on the draft "ResourceManagement Extensions" Date: Wed, 21 Jun 2006 12:13:15 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 In-reply-to: Importance: Normal Received-SPF: pass X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 52f7a77164458f8c7b36b66787c853da A few quick questions/comments about this interesting draft: 1) 2.1 If there is no synchronization on client side, wouldn't using Origin-State-Id AVP (RFC3588 8.16)solve the problem described in this section? After failure/restart/takeover client can populate Origin-state-Id AVP with a value bigger than the one used before the failure and server should clean up previous sessions. 2) 2.1.1 SCTP multi-homing does not provide host redundancy -unless one has a distributed SCTP implementation, which probably is not realistic or something I would recomend to anybody- 3) 2.1.1 Is mentioning about IP address takeover really necessary? IMO, Diameter entities are addressed by Diameter Identities, hence what is important is that a backup assuming the identity of a failed active instance -which doesn't require IP takeover-. 4) As a generic comment, I always thought this type of functionality is to be addressed by specific applications themselves, e.g. DCCA, if there is such a need. Let's consider DCCA: When there is an open session, client will send from time to time CCR(Update) or CCR(Terminate), which would be replied with "DIAMETER UNKNOWN SESSION ID", if server failed/restarted etc... and corresponding state did not survive. Upon receipt of such an error answer, client can clean up its own state for this session. Similarly server can send RAR to client, if CCR(Update) is not received in a timely manner. If state did not survive on client side after a failure, client would reply with "DIAMETER UNKNOWN SESSION ID" and server can clean up session state (Alternatively server may choose not to send RAR and may abort the session) AFAICS, for the above example, all cases are covered. The question is, whose responsibility is that type of fucntionality, base protocol or applications. Thanks, Tolga > -----Original Message----- > From: Tschofenig, Hannes [mailto:hannes.tschofenig@siemens.com] > Sent: Wednesday, June 21, 2006 11:33 AM > To: Bernard Aboba; Pat Calhoun (pacalhou) > Cc: aaa-wg@merit.edu; dime@ietf.org > Subject: [Dime] AW: [AAA-WG]: RE: Conclusions on the draft > "ResourceManagement Extensions" > > > Hi all, > > may I raise your attention to the following draft submitted for > this meeting. > > Requirement for the addition of Auditing Functionality to Diameter > http://psg.com/~avri/dime/draft-bodin-dime-auditing-reqs-00.txt > > Unfortunately, it did not yet show up. > > Ciao > Hannes From owner-aaa-wg@merit.edu Wed Jun 21 23:12:03 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FtFbv-0000X7-Oy for aaa-archive@lists.ietf.org; Wed, 21 Jun 2006 23:12:03 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FtFbu-0006NM-Do for aaa-archive@lists.ietf.org; Wed, 21 Jun 2006 23:12:03 -0400 Received: by trapdoor.merit.edu (Postfix) id B4D9B912C3; Wed, 21 Jun 2006 23:11:53 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 84074912C4; Wed, 21 Jun 2006 23:11:53 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id C01E7912C3 for ; Wed, 21 Jun 2006 23:11:51 -0400 (EDT) Received: by segue.merit.edu (Postfix) id ADBA558289; Wed, 21 Jun 2006 23:11:51 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 6DB6F58287 for ; Wed, 21 Jun 2006 23:11:51 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 510A9599; Wed, 21 Jun 2006 23:11:51 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07967-06 for ; Wed, 21 Jun 2006 23:11:51 -0400 (EDT) Received: from mgw-ext13.nokia.com (mgw-ext13.nokia.com [131.228.20.172]) by fiji.merit.edu (Postfix) with ESMTP id 9BA0B55F for ; Wed, 21 Jun 2006 23:11:50 -0400 (EDT) Received: from esebh105.NOE.Nokia.com (esebh105.ntc.nokia.com [172.21.138.211]) by mgw-ext13.nokia.com (Switch-3.1.8/Switch-3.1.7) with ESMTP id k5M3Bfn5022452; Thu, 22 Jun 2006 06:11:41 +0300 Received: from esebh104.NOE.Nokia.com ([172.21.143.34]) by esebh105.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 22 Jun 2006 06:11:40 +0300 Received: from esebe199.NOE.Nokia.com ([172.21.138.143]) by esebh104.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 22 Jun 2006 06:11:40 +0300 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [AAA-WG]: RE: Conclusions on the draft "Resource Management Extensions" Date: Thu, 22 Jun 2006 06:11:40 +0300 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [AAA-WG]: RE: Conclusions on the draft "Resource Management Extensions" Thread-Index: AcaVR7cqZap4AUoPTLWUB+OuD//ieQAYbjyg From: To: , Cc: , , X-OriginalArrivalTime: 22 Jun 2006 03:11:40.0571 (UTC) FILETIME=[94D61EB0:01C695A9] X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.2 (/) X-Scan-Signature: b7b9551d71acde901886cc48bfc088a6 Hi all, I think that if there is interest, why not recycle the draft, and we can discuss it on the DiME mailing list. If you are able to rev it before Monday, it can be discussed in Montreal. John =20 >-----Original Message----- >From: owner-aaa-wg@merit.edu [mailto:owner-aaa-wg@merit.edu]=20 >On Behalf Of ext Bernard Aboba >Sent: 21 June, 2006 17:24 >To: Pat Calhoun (pacalhou) >Cc: MORAND Lionel RD-CORE-ISS; aaa-wg@merit.edu >Subject: [AAA-WG]: RE: Conclusions on the draft "Resource=20 >Management Extensions" > >As Pat said, the major priority of the AAA WG was completing=20 >work on the Diameter Base protocol and applications. I=20 >actually don't recall whether the WG made a judgement on the=20 >Resource Management draft; it just wasn't one of the top priorities.=20 > >I will say that the Diameter architecture provides a much more=20 >sound base for resource management than RADIUS does. Most of=20 >the resource management implementations I have seen on RADIUS=20 >need to incorporate other information sources for validation,=20 >in order to deal with potential losses of RADIUS Accounting=20 >packets. Since Diameter runs over reliable transport, it=20 >should not have to do this.=20 > >On Wed, 21 Jun 2006, Pat Calhoun (pacalhou) wrote: > >> I'll let Bernard speak for the WG, but at the time the WG had many=20 >> other priorities, and resource management was not one of them.=20 >> However, I haven't had the opportunity to participate in the AAA WG=20 >> for some time, so I'm not sure if this could be an opportune=20 >time to re-introduce it. >> =20 >>=20 >> Pat Calhoun >> CTO, Wireless Networking Business Unit Cisco Systems >>=20 >> =20 >>=20 >>=20 >> ________________________________ >>=20 >> From: MORAND Lionel RD-CORE-ISS >> [mailto:lionel.morand@orange-ft.com]=20 >> Sent: Wednesday, June 21, 2006 7:07 AM >> To: Bernard Aboba; Pat Calhoun (pacalhou) >> Subject: Conclusions on the draft "Resource Management=20 >Extensions" >> =09 >> =09 >>=20 >> Hi,=20 >> I would like to know what were the conclusions on the=20 >following draft=20 >> initiated by Pat: draft-calhoun-diameter-res-mgmt-08.txt. >>=20 >(http://quimby.gnus.org/internet-drafts/draft-calhoun-diameter-res-mgm >> t- >> 08.txt >>=20 >> t- >> 08.txt> ) >>=20 >> Some folks from TISPAN are initiating a document based=20 >on this draft=20 >> to perform resource management after failover, proposing to enhance=20 >> the Diameter base protocol with dedicated commands. I'm pretty sure=20 >> that the previous comments/concerns about such enhancements=20 >are still=20 >> valid. >>=20 >> BR,=20 >> Lionel >>=20 >>=20 >>=20 > From owner-aaa-wg@merit.edu Fri Jun 23 23:25:56 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FtymS-0005p0-5v for aaa-archive@lists.ietf.org; Fri, 23 Jun 2006 23:25:56 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FtymP-0004t1-PL for aaa-archive@lists.ietf.org; Fri, 23 Jun 2006 23:25:56 -0400 Received: by trapdoor.merit.edu (Postfix) id 44DA691211; Fri, 23 Jun 2006 23:25:45 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 10727912E0; Fri, 23 Jun 2006 23:25:44 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id A352491211 for ; Fri, 23 Jun 2006 23:25:43 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 8788F5828B; Fri, 23 Jun 2006 23:25:43 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 737D358283 for ; Fri, 23 Jun 2006 23:25:43 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 56D9012DC; Fri, 23 Jun 2006 23:25:43 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19585-07 for ; Fri, 23 Jun 2006 23:25:42 -0400 (EDT) X-Greylist: delayed 606 seconds by postgrey-1.21 at fiji.merit.edu; Fri, 23 Jun 2006 23:25:38 EDT Received: from szxga03-in.huawei.com (szxga03-in.huawei.com [61.144.161.55]) by fiji.merit.edu (Postfix) with ESMTP id 4EE31AEB for ; Fri, 23 Jun 2006 23:25:38 -0400 (EDT) Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0J1C006C9HH2HF@szxga03-in.huawei.com> for aaa-wg@merit.edu; Sat, 24 Jun 2006 11:24:38 +0800 (CST) Received: from huawei.com ([172.24.1.18]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0J1C002YBHH2HJ@szxga03-in.huawei.com> for aaa-wg@merit.edu; Sat, 24 Jun 2006 11:24:38 +0800 (CST) Received: from z26452a ([10.70.145.55]) by szxml03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTPA id <0J1C00HFYH4DN9@szxml03-in.huawei.com> for aaa-wg@merit.edu; Sat, 24 Jun 2006 11:17:02 +0800 (CST) Date: Sat, 24 Jun 2006 11:15:19 +0800 From: Tony Zhang Subject: Re: [Dime] AW: [AAA-WG]: RE: Conclusions on the draft"ResourceManagement Extensions" To: Tolga Asveren , dime@ietf.org, aaa-wg@merit.edu Message-id: <000b01c6973c$6c912000$3791460a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Mailer: Microsoft Outlook Express 6.00.2800.1106 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-Priority: 3 X-MSMail-priority: Normal References: X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 32b73d73e8047ed17386f9799119ce43 HI All: some querys: 1)if Failover,both nodes share same Host name or not.if use different Host name,how to route the message. if share both Host name,maybe establish connects connect two node is ok. 2)after audit,should restore the session state or not,In the case of failover without replication if want restore the sesssion,how long will be permit. a few minustes or hours. 3)should server or client,save some transparent data on each other. 4)session state synchronization maybe is mandatory,but only check the session active or not maybe is simply,if want restore session state then it will complex. Thanks Tony some comments see inline: ----- Original Message ----- From: "Tolga Asveren" To: ; Sent: Thursday, June 22, 2006 12:13 AM Subject: RE: [Dime] AW: [AAA-WG]: RE: Conclusions on the draft"ResourceManagement Extensions" > A few quick questions/comments about this interesting draft: > > 1) 2.1 > If there is no synchronization on client side, wouldn't using > Origin-State-Id AVP (RFC3588 8.16)solve the problem described in this > section? After failure/restart/takeover client can populate Origin-state-Id > AVP with a value bigger than the one used before the failure and server > should clean up previous sessions. [Tony]Origina-State-Id AVP maybe only use for check the session state synchronization or not. cannot use for state recovery > > 2) 2.1.1 > SCTP multi-homing does not provide host redundancy -unless one has a > distributed SCTP implementation, which probably is not realistic or > something I would recomend to anybody- > > 3) 2.1.1 > Is mentioning about IP address takeover really necessary? IMO, Diameter > entities are addressed by Diameter Identities, hence what is important is > that a backup assuming the identity of a failed active instance -which > doesn't require IP takeover-. > > 4) As a generic comment, I always thought this type of functionality is to > be addressed by specific applications themselves, e.g. DCCA, if there is > such a need. > Let's consider DCCA: > When there is an open session, client will send from time to time > CCR(Update) or CCR(Terminate), which would be replied with "DIAMETER UNKNOWN > SESSION ID", if server failed/restarted etc... and corresponding state did > not survive. Upon receipt of such an error answer, client can clean up its > own state for this session. > Similarly server can send RAR to client, if CCR(Update) is not received in a > timely manner. If state did not survive on client side after a failure, > client would reply with "DIAMETER UNKNOWN SESSION ID" and server can clean > up session state (Alternatively server may choose not to send RAR and may > abort the session) > > AFAICS, for the above example, all cases are covered. > > The question is, whose responsibility is that type of fucntionality, base > protocol or applications. > > Thanks, > Tolga > > > -----Original Message----- > > From: Tschofenig, Hannes [mailto:hannes.tschofenig@siemens.com] > > Sent: Wednesday, June 21, 2006 11:33 AM > > To: Bernard Aboba; Pat Calhoun (pacalhou) > > Cc: aaa-wg@merit.edu; dime@ietf.org > > Subject: [Dime] AW: [AAA-WG]: RE: Conclusions on the draft > > "ResourceManagement Extensions" > > > > > > Hi all, > > > > may I raise your attention to the following draft submitted for > > this meeting. > > > > Requirement for the addition of Auditing Functionality to Diameter > > http://psg.com/~avri/dime/draft-bodin-dime-auditing-reqs-00.txt > > > > Unfortunately, it did not yet show up. > > > > Ciao > > Hannes > > > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www1.ietf.org/mailman/listinfo/dime > From owner-aaa-wg@merit.edu Sun Jun 25 21:36:41 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fug1p-000778-NT for aaa-archive@lists.ietf.org; Sun, 25 Jun 2006 21:36:41 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Fug1o-0001Gk-D3 for aaa-archive@lists.ietf.org; Sun, 25 Jun 2006 21:36:41 -0400 Received: by trapdoor.merit.edu (Postfix) id B51409124A; Sun, 25 Jun 2006 21:35:21 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 8497091257; Sun, 25 Jun 2006 21:35:21 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id 59E759124A for ; Sun, 25 Jun 2006 21:35:17 -0400 (EDT) Received: by segue.merit.edu (Postfix) id 3DC7F58293; Sun, 25 Jun 2006 21:35:17 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id 2A2B158282 for ; Sun, 25 Jun 2006 21:35:17 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id 0BDCD17E0; Sun, 25 Jun 2006 21:35:17 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19405-02 for ; Sun, 25 Jun 2006 21:35:16 -0400 (EDT) Received: from sj-iport-4.cisco.com (sj-iport-4.cisco.com [171.68.10.86]) by fiji.merit.edu (Postfix) with ESMTP id 89C8317D8 for ; Sun, 25 Jun 2006 21:35:16 -0400 (EDT) Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-4.cisco.com with ESMTP; 25 Jun 2006 18:35:16 -0700 X-IronPort-AV: i="4.06,173,1149490800"; d="scan'208"; a="1832360476:sNHT36108862" Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id k5Q1ZFuX001141; Sun, 25 Jun 2006 18:35:15 -0700 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-5.cisco.com (8.12.10/8.12.6) with ESMTP id k5Q1ZFCU011372; Sun, 25 Jun 2006 18:35:15 -0700 (PDT) Received: from xmb-sjc-215.amer.cisco.com ([171.70.151.169]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.211); Sun, 25 Jun 2006 18:35:15 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: [AAA-WG]: RE: [Dime] RE: Diameter base protocol messages used by DCCA Date: Sun, 25 Jun 2006 18:35:13 -0700 Message-ID: <4C0FAAC489C8B74F96BEAD85EAEB262502376D69@xmb-sjc-215.amer.cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Dime] RE: Diameter base protocol messages used by DCCA Thread-Index: AcaQvHRLCzEvKzDHRWSkW/O26V/ALwAWLJYwABK/jSAA6/upUADsDA4g From: "Glen Zorn (gwz)" To: "STURA, Marco, VF-IT" , "Tolga Asveren" , "Anders Kristensen" Cc: , X-OriginalArrivalTime: 26 Jun 2006 01:35:15.0266 (UTC) FILETIME=[C62DA220:01C698C0] DKIM-Signature: a=rsa-sha1; q=dns; l=747; t=1151285715; x=1152149715; c=relaxed/simple; s=sjdkim2001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=gwz@cisco.com; z=From:=22Glen=20Zorn=20\(gwz\)=22=20 |Subject:RE=3A=20[Dime]=20RE=3A=20Diameter=20base=20protocol=20messages=20used=20 by=20DCCA; X=v=3Dcisco.com=3B=20h=3DHwsi7c48XQRfyiH8lUrRpE1X9Jg=3D; b=MzJZZkn2pwt0gmIkOPH5DCEuB/Q08EakB4Y2SIw28H32OA1NWhAbjjw1+Dbe7OfS99r2m7S8 MkWjgiMDScJew+E/j/PYKuupMS1WkglyUhz/uCgpdGX7zc4LQwdbXUXQ; Authentication-Results: sj-dkim-2.cisco.com; header.From=gwz@cisco.com; dkim=pass ( sig from cisco.com verified; ); X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 0.0 (/) X-Scan-Signature: 7655788c23eb79e336f5f8ba8bce7906 STURA, Marco, VF-IT supposedly = scribbled: ... >> So, in other words, in order to implement a e.g., [NASREQ], [DIAMMIP] > peer >intended for general distribution, one must include CCA client >> functionality. >=20 > Not necessarily. One could provide communication means to enable a > CCA functionality module to add relevant AVPs to the initial AA > request and process relevant AVPs from AA answer. =20 Maybe it's just me but that distinction seems to be, at best, = razor-thin. What you are saying is that every peer must make = concessions to CCA. =20 ... ~gwz Why is it that most of the world's problems can't be solved by simply listening to John Coltrane? -- Henry Gabriel From owner-aaa-wg@merit.edu Mon Jun 26 02:28:03 2006 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FukZl-0000M0-PD for aaa-archive@lists.ietf.org; Mon, 26 Jun 2006 02:28:01 -0400 Received: from trapdoor.merit.edu ([198.108.1.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FukRS-00012D-2Y for aaa-archive@lists.ietf.org; Mon, 26 Jun 2006 02:19:27 -0400 Received: by trapdoor.merit.edu (Postfix) id 9CFEE9122C; Mon, 26 Jun 2006 02:19:19 -0400 (EDT) Delivered-To: aaa-wg-outgoing@trapdoor.merit.edu Received: by trapdoor.merit.edu (Postfix, from userid 56) id 6697291231; Mon, 26 Jun 2006 02:19:19 -0400 (EDT) Delivered-To: aaa-wg@trapdoor.merit.edu Received: from segue.merit.edu (segue.merit.edu [198.108.1.41]) by trapdoor.merit.edu (Postfix) with ESMTP id EB35C9122C for ; Mon, 26 Jun 2006 02:19:17 -0400 (EDT) Received: by segue.merit.edu (Postfix) id D464158288; Mon, 26 Jun 2006 02:19:17 -0400 (EDT) Delivered-To: aaa-wg@segue.merit.edu Received: from fiji.merit.edu (fiji.merit.edu [198.108.1.12]) by segue.merit.edu (Postfix) with ESMTP id BDD5958282 for ; Mon, 26 Jun 2006 02:19:17 -0400 (EDT) Received: by fiji.merit.edu (Postfix) id A371217D9; Mon, 26 Jun 2006 02:19:17 -0400 (EDT) Delivered-To: aaa-wg@merit.edu Received: from fiji.merit.edu ([127.0.0.1]) by localhost (fiji.merit.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 23206-01 for ; Mon, 26 Jun 2006 02:19:17 -0400 (EDT) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.174]) by fiji.merit.edu (Postfix) with ESMTP id EBEE517D3 for ; Mon, 26 Jun 2006 02:19:16 -0400 (EDT) Received: by ug-out-1314.google.com with SMTP id a2so1909764ugf for ; Sun, 25 Jun 2006 23:19:15 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=rWEp6heIvN72YU96MnoHuzqo4flVKC+RjSI76fpGVqWUEim5lmRHWcsR1Iok7WYDF02pIuYkhlLdwwawrNBPO4pcNcHDL8LccXOLl0RWbYA0SeR55CqfkCysHjsVqv6tt94PzJN00lMGd9IPfeZENRxC7s/q1D7KEJ7g/YWAwCI= Received: by 10.67.29.12 with SMTP id g12mr4635954ugj; Sun, 25 Jun 2006 23:19:15 -0700 (PDT) Received: by 10.66.218.14 with HTTP; Sun, 25 Jun 2006 23:19:15 -0700 (PDT) Message-ID: <5be720c40606252319q1bbcff17k182abb9273a16f50@mail.gmail.com> Date: Mon, 26 Jun 2006 11:49:15 +0530 From: "Monal Sengar" To: aaa-wg@merit.edu Subject: [AAA-WG]: Session state machine in DBP MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_2864_17389792.1151302755418" X-Virus-Scanned: amavisd-new at merit.edu Sender: owner-aaa-wg@merit.edu Precedence: bulk X-Spam-Score: 1.0 (+) X-Scan-Signature: de4f315c9369b71d7dd5909b42224370 ------=_Part_2864_17389792.1151302755418 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline I would like to know where should i implement my Session state machine - in Diameter base protocol or in application? ------=_Part_2864_17389792.1151302755418 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline
I would like to know where should i implement my Session state machine - in Diameter base protocol or in application?
 
------=_Part_2864_17389792.1151302755418--