[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Glen's proposal for Attribute Extension
- To: "Nelson, David" <dnelson@enterasys.com>, <radiusext@ops.ietf.org>
- Subject: RE: Glen's proposal for Attribute Extension
- From: "Glen Zorn \(gwz\)" <gwz@cisco.com>
- Date: Mon, 28 Aug 2006 08:44:58 -0700
- Authentication-results: sj-dkim-1.cisco.com; header.From=gwz@cisco.com; dkim=pass ( sig from cisco.com verified; );
- Dkim-signature: a=rsa-sha1; q=dns; l=1437; t=1156779905; x=1157643905; c=relaxed/simple; s=sjdkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=gwz@cisco.com; z=From:=22Glen=20Zorn=20\(gwz\)=22=20<gwz@cisco.com> |Subject:RE=3A=20Glen's=20proposal=20for=20Attribute=20Extension; X=v=3Dcisco.com=3B=20h=3DIXDrJPE47xLdwGcAR7WHnL65pxI=3D; b=eMU4K/1vVqi/O0H8p7YVjmX6hwpytyYtquwOVjgzH3cpvH/e8KGOef3MMuRSIvMmheJpnJqg ChOjJIJoRAQ4D3hMjsquCYgob7RxYPHRiwW7/31HX14yj7ZgwFLSyAu4;
Nelson, David <> scribbled on Monday, August 28, 2006 8:13 AM:
...
> Perhaps. I'm likely reacting to the "naming thing". Somehow, the
> notion of a Standard Extended Attribute format that is defined as a
> special case of a Vendor Specific Attribute seems wrong to me.
Not sure why: it seems to have worked pretty well for other SDOs, 3GPP2
being the one with which I'm most familiar.
>
> The value you see in using 26 as the "top-level" attribute ID is that
> it re-uses existing code for generating and parsing VSAs?
Actually, the whole proposal reuses well understood techniques & attempt
to isolate the changes to an area of the code that is likely fluid in
any case.
> IMHO, once
> you need to make *any* code changes, you need to release new versions
> of the SW/FW. I very much doubt there are many (if any)
> implementations that can accomplish this with only data dictionary
> changes. Having said that, what is the practical cost of assigning a
> different "top-level" ID for the Extended Attribute?
Not sure; the rationale for making this a VSA is largely that VSA
formats are often non-standard (Cisco's, for example; I believe
Nortel's, as well, probably others) & therefore this (minor) change
would be localized in an area of code that changes fairly often anyway,
rather in the main line which I suspect changes much more rarely.
Hope this helps,
~gwz
--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>