[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: rfc2486bis
> I see that in the new draft the example "fred@foo" becomes now a
> valid NAI because the definition of the realm changed compard to the
> original RFC, but in naibis it is still in the invalid list - but
> that has to be changed I guess?
>
> Could there also be the following problem: "eng!nancy@bigu.edu" was
> valid in the original RFC2486. Now how do I know whether the
> username is "eng!nancy", which is a valid username, or is the
> username "nancy" and homerealm "eng"? I believe it is better to use
> another symbol than "!" such as ":"?
>
I hope/assume that everyone knows/understands that we do not accept
such examples in RFCs. We want them to be of the form:
someone@example.com
foo@bar.example.com
or some such.
See ID-NITs at http://www.ietf.org/ID-nits.html
Which says:
o Addresses used in examples should prefer use of fully qualified
domain names to literal IP addresses, and prefer use of example
fqdn's such as foo.example.com to real-world fqdn's
See RFC 2606 for example domain names that can be used.
There is also a range of IP addresses set aside for this purpose.
These are 192.0.2.0/24 (see RFC 3330). Private addressess that
would be used in the real world should be avoided in examples.
Bert
> regards,
>
> Stefaan
>
>
>
> Jari Arkko wrote:
> >
> > Bernard Aboba wrote:
> > >>1) examples in section 2.8: why is @howard.edu an invalid NAI? And
> > >>why has eng%nancy@bigu.edu been removed from the list of
> valid NAIs
> > >>compared to RFC2486? I believe it is still valid, or should it be
> > >>put in the list of invalid NAIs?
> > >
> > >
> > > Good catch. RFC 2486bis should not be introducing
> non-backward compatible
> > > changes.
> >
> > Yes. Thanks Stefaan for your comments!
> >
> > @howard.edu was actually listed as an illegal example
> > in RFC 2486; the introduction of the privacy feature
> > makes this now legal.
> >
> > eng%nancy@bigu.edu is still legal. I removed it
> > as a part of providing a new set of examples, but
> > since there are questions about it, maybe I should
> > put it back in just to avoid people wondering whether
> > it has been made illegal.
> >
> > > 2) Would it not be better to define the nai in 2.1 as follows:
> > >
> > > nai = [realm "!"] ( <....> )
> > >
> > > with <....> the current nai defintion. This to make the
> explanation
> > > in section 2.7 more formal.
> >
> > Ok.
> >
> > > 3) typo: a quotation mark too much at the end in the nai
> definition
> > > in 2.1.
> >
> > Yes. Kalle Tammela also noticed this issue.
> >
> > I have corrected the above issues in
> >
> > http://www.arkko.com/publications/nai/naibis.txt
> >
> > --Jari
>
> --
> to unsubscribe send a message to radiusext-request@ops.ietf.org with
> the word 'unsubscribe' in a single line as the message text body.
> archive: <http://psg.com/lists/radiusext/>
>
--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>