Re: WGLC for draft-ietf-radext-radius-extensions-01

[Alan DeKok <aland@deployingradius.com>]

Leaf yeh wrote:
> Alan DeKok - Your question assumes that the input packet is edited to remove the attribute. This is not true. When the text says "discard the attribute", it means "ignore it".
> 
> Yes. 'Ignore' sounds better, but the question in technique seems still there. I guess the implementation might have some different treatment here:

  No.  The document describes the correct behavior.  There are no
implementation choices.

> 1. ignore the whole packet; then request the 2nd time; or
> 2. ignore the attributes followed this invalid attribute; or 
> 3. ignore only this invalid attribute, and delimit the next attribute per the 'length' field of this invalid attribute; 
> 
> Does the 3rd one means 'silently discard' in your text?

  Possibly.  I still don't understand why the text is unclear.  You're
focused on parsing the RADIUS packet.  The text about "invalid
attribute" is talking about the *attribute*, not the *packet*.

> Alan DeKok - The "invalid attribute" is correctly formed, so that the entire packet can be correctly decoded. The text says this explicitly.
> 
> Could you show me the explicit text in your draft mentioned above?

  The text which defines the "invalid attribute" term at the top of the
document.  It says that the Length field is valid, but the *Value* field
is wrong.  Since the Length field is valid, the packet can be parsed
correctly.  So the entire packet is correctly formed.

  Again, the term "invalid attribute" refers to the *Value* field of an
attribute.  It has nothing to do with parsing the packet.

  I really don't know how to make this any clearer.

  Alan DeKok.

--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>