[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: RFC 4590bis Attribute table



In looking through RFC 4590 again, it seems that only one of the Qop attributes is selected by the NAS. I am assuming that only that attribute ends up in the Accounting-Request, so that the entry should actually be 0-1. Is this right?

Bernard Aboba said:
During IETF 68, it was recommended that review of the revised RFC 4590bis Attribute Table take place on the mailing list. After looking this over again, here is where I think we are:

Access- Access- Access- Access-    Acct-
Request Accept  Reject  Challenge  Req   #  Attribute
0-1      0      0      0          0-1   1  User-Name
0-1      0      0      1          0    24  State [4]
1        1      1      1          0-1  80  Message-Authenticator
0-1      0      0      0          0   103  Digest-Response
0-1      0      0      1          0-1 104  Digest-Realm
0-1      0      0      1          0   105  Digest-Nonce
0        0-1    0      0          0   106  Digest-Response-Auth [1][2]
0        0-1    0      0          0   107  Digest-Nextnonce
1        0      0      0          0-1 108  Digest-Method
0-1      0      0      0          0-1 109  Digest-URI
0-1      0      0      0+         0+  110  Digest-Qop
0-1      0      0      0-1        0-1 111  Digest-Algorithm [3]
0-1      0      0      0          0   112  Digest-Entity-Body-Hash
0-1      0      0      0          0   113  Digest-CNonce
0-1      0      0      0          0   114  Digest-Nonce-Count
0-1      0      0      0          0-1 115  Digest-Username
0-1      0      0      0-1        0   116  Digest-Opaque
0+       0+     0      0+         0+  117  Digest-Auth-Param
0-1      0      0      0          0   118  Digest-AKA-Auts
0        0      0      0+         0+  119  Digest-Domain
0        0      0      0-1        0   120  Digest-Stale
0        0-1    0      0          0   121  Digest-HA1 [1][2]
0-1      0      0      0          0   122  SIP-AOR

Note that Digest-Qop and Digest-Auth-Param are now 0+ in Accounting-Requests, since it is possible for the server to return more than one value. There is some question about whether Digest-AKA-Auts can be included in an Accounting-Request; we'll leave this out unless someone thinks that it should be included.



--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>



--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>