From nobody Mon Oct 3 08:19:01 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BAC1C12B341; Mon, 3 Oct 2016 08:18:59 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.34.2 Auto-Submitted: auto-generated Precedence: bulk Sender: Message-ID: <147550793972.29716.3932375461185110064.idtracker@ietfa.amsl.com> Date: Mon, 03 Oct 2016 08:18:59 -0700 Archived-At: Cc: draft-ietf-netconf-yang-patch@ietf.org, netconf-chairs@ietf.org, netconf@ietf.org Subject: [Netconf] Last Call: (YANG Patch Media Type) to Proposed Standard X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Reply-To: ietf@ietf.org List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Oct 2016 15:19:00 -0000 The IESG has received a request from the Network Configuration WG (netconf) to consider the following document: - 'YANG Patch Media Type' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2016-10-17. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document describes a method for applying patches to configuration datastores using data defined with the YANG data modeling language. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-netconf-yang-patch/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-netconf-yang-patch/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Tue Oct 4 01:03:39 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AF47129608 for ; Tue, 4 Oct 2016 01:03:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.097 X-Spam-Level: X-Spam-Status: No, score=-3.097 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mg-soft.si Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4391xNlNP5_i for ; Tue, 4 Oct 2016 01:03:35 -0700 (PDT) Received: from galileo.mg-soft.si (gate.mg-soft.si [212.30.73.66]) by ietfa.amsl.com (Postfix) with ESMTP id 77B5C129603 for ; Tue, 4 Oct 2016 01:03:34 -0700 (PDT) Received: from jernejthpPC (tp-x61t.mg-soft.si [10.0.0.222]) by galileo.mg-soft.si (Postfix) with ESMTP id 9F05FC417623 for ; Tue, 4 Oct 2016 10:03:33 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.10.3 galileo.mg-soft.si 9F05FC417623 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mg-soft.si; s=default; t=1475568213; bh=ymRw6g9bmxtZ+E0dsOwFfDdVmBY6m2UMYvyMdbTchgs=; h=From:To:References:In-Reply-To:Subject:Date:From; b=F8EH2gmKEKIK2wihAfJDSuBEP7HQ5S3kTYa4saCTE6ZmYSnr3ZCOe2lo0saJz2ZSM GVLPCkWViyItRPRULklwetaaLQ0YG6kAW12qvjZcclA6jGZGbZOXdqYFIxWNIG88ZD I8rnmQCuG4JlnqLrijZhULu4gx9Eb8EnKfLKsMQWGq0MEUvcqZqejyU7D+uiuQt80w Lx6FPpzJoVKbVHGnGNRwUelcOtiydZokHbrQSJHw8x2pdv2hDZFbDfIN4B4tq5KlhG n0/WmU9hR+Gi6PJ4gnMk8Jm8+QUQ6x/jxqSmBMZ9eUXhjl04FjAwFZsSIUrjyc52NF WzvzcjcSdy2HA== From: "Jernej Tuljak" To: References: <07d201d2197d$351f0f00$9f5d2d00$@mg-soft.si> In-Reply-To: <07d201d2197d$351f0f00$9f5d2d00$@mg-soft.si> Date: Tue, 4 Oct 2016 10:03:33 +0200 Message-ID: <014c01d21e15$cd22c480$67684d80$@mg-soft.si> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_014D_01D21E26.90ACCD00" X-Mailer: Microsoft Outlook 15.0 Content-Language: sl Thread-Index: AQHVwBVechITwLiimMqgAVYfXEeNq6CQqzmA Archived-At: Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2016 08:03:38 -0000 This is a multipart message in MIME format. ------=_NextPart_000_014D_01D21E26.90ACCD00 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Anyone? =20 Jernej =20 From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of Jernej = Tuljak Sent: Wednesday, September 28, 2016 1:41 PM To: netconf@ietf.org Subject: [Netconf] Mixing and "rpcResponses" in NETCONF = replies =20 Hi, =20 is a RFC6241 compliant NETCONF server allowed to return a response like = this for standard operations (get, get-config)? =20 application operation-failed error Unknown error occured. =20 That is, mixing a Positive Response and Negative Response? For the sake = of argument, consider the above as one of the standard ones = from Appendix A [1] (and may not actually be empty).=20 =20 It is clear from Appendix B [2] that and "rpcResponse" = ( above) may appear as siblings in sequence. But is mixing = supported by RFC text below? =20 7.1 [3] =20 Positive Response: If the device can satisfy the request, the server sends an element containing a element with the results of the query. =20 Negative Response: An element is included in the if the request cannot be completed for any reason. =20 7.7 [4] =20 Positive Response: If the device was able to satisfy the request, an is sent. The section contains the appropriate subset. =20 Negative Response: An element is included in the if the request cannot be completed for any reason. =20 Also, is there a reason for different wording of Positive Response text = for these two operations? =20 Another related question is, if a client receives a warning severity = to a query that normally returns an , should it = consider the query a success or failure? In other words, why are = and mutually exclusive =E2=80=93 can an operation not = succeed with warnings? It would appear that only operations that return = something other than may express such behavior. =20 [1] - https://tools.ietf.org/html/rfc6241#appendix-A [2] - https://tools.ietf.org/html/rfc6241#appendix-B [3] - https://tools.ietf.org/html/rfc6241#section-7.1 [4] - https://tools.ietf.org/html/rfc6241#section-7.7 =20 Jernej ------=_NextPart_000_014D_01D21E26.90ACCD00 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Anyone?

 

Jernej

 

From: Netconf = [mailto:netconf-bounces@ietf.org] On Behalf Of Jernej = Tuljak
Sent: Wednesday, September 28, 2016 1:41 = PM
To: netconf@ietf.org
Subject: [Netconf] Mixing = <rpc-error> and "rpcResponses" in NETCONF = replies

 

Hi,

 

is a RFC6241 = compliant NETCONF server allowed to return a response like this for = standard operations (get, get-config)?

 

<?xml version=3D"1.0" = encoding=3D"utf-8"?>

<rpc-reply = xmlns=3D"urn:ietf:params:xml:ns:netconf:base:1.0" = message-id=3D"2">

  = <data/>

  <rpc-error>

    = <error-type>application</error-type>

    = <error-tag>operation-failed</error-tag>

=

    = <error-severity>error</error-severity>

<= p class=3DMsoPlainText>    = <error-message>Unknown error = occured.</error-message>

  = </rpc-error>

</rpc-reply>

 

That is, mixing a Positive Response and Negative = Response? For the sake of argument, consider the <rpc-error> above = as one of the standard ones from Appendix A [1] (and <data/> may = not actually be empty).

 

It is clear = from Appendix B [2] that <rpc-error> and "rpcResponse" = (<data/> above) may appear as siblings in sequence. But is mixing = supported by RFC text below?

 

7.1 = <get-config> [3]

 

   Positive =
Response:  If the device can satisfy the request, the =
server
      sends an =
<rpc-reply> element containing a <data> element with =
the
      results of the =
query.
 
   =
Negative Response:  An <rpc-error> element is included in =
the
      =
<rpc-reply> if the request cannot be completed for any =
reason.

 

7.7 <get> [4]

 

   Positive =
Response:  If the device was able to satisfy the request, =
an
      <rpc-reply> =
is sent.  The <data> section contains the =
appropriate
      =
subset.
 
   =
Negative Response:  An <rpc-error> element is included in =
the
      =
<rpc-reply> if the request cannot be completed for any =
reason.

 

Also, is there a reason for different wording of = Positive Response text for these two operations?

 

Another = related question is, if a client receives a warning severity = <rpc-error> to a query that normally returns an <ok/>, = should it consider the query a success or failure? In other words, why = are <ok/> and <rpc-error> mutually exclusive =E2=80=93 can = an operation not succeed with warnings? It would appear that only = operations that return something other than <ok/> may express such = behavior.

 

[1] - https://tools.iet= f.org/html/rfc6241#appendix-A

[2] = - https://tools.iet= f.org/html/rfc6241#appendix-B

[3] = - https://tools.ie= tf.org/html/rfc6241#section-7.1

[4] - https://tools.ie= tf.org/html/rfc6241#section-7.7

 

Jernej

------=_NextPart_000_014D_01D21E26.90ACCD00-- From nobody Tue Oct 4 01:27:29 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76416129655 for ; Tue, 4 Oct 2016 01:27:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.897 X-Spam-Level: X-Spam-Status: No, score=-4.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J26w1YwWLs3b for ; Tue, 4 Oct 2016 01:27:26 -0700 (PDT) Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id 5472B129658 for ; Tue, 4 Oct 2016 01:27:25 -0700 (PDT) Received: from localhost (unknown [173.38.220.42]) by mail.tail-f.com (Postfix) with ESMTPSA id AC1BC1AE0336; Tue, 4 Oct 2016 10:27:23 +0200 (CEST) Date: Tue, 04 Oct 2016 10:26:21 +0200 (CEST) Message-Id: <20161004.102621.193969733809277494.mbj@tail-f.com> To: jernej.tuljak@mg-soft.si From: Martin Bjorklund In-Reply-To: <014c01d21e15$cd22c480$67684d80$@mg-soft.si> References: <07d201d2197d$351f0f00$9f5d2d00$@mg-soft.si> <014c01d21e15$cd22c480$67684d80$@mg-soft.si> X-Mailer: Mew version 6.7 on Emacs 24.5 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=utf-8 Content-Transfer-Encoding: base64 Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2016 08:27:27 -0000 SGksDQoNCkkgdGhpbmsgdGhhdCBib3RoIFJGQyA2MjQxIGFuZCBSRkMgNjAyMCBhcmUgbm90IGNs ZWFyIG9uIHRoaXMsIGFuZA0KbWF5YmUgZXZlbiB3cm9uZyAoYXMgeW91IG5vdGUpLiAgSSB0aGlu ayB0aGF0IHRoYXQgYSByZXF1ZXN0IHNob3VsZDoNCg0KICBmYWlsIHdpdGggb25lIG9yIG1vcmUg cnBjLWVycm9ycyBvZiB0eXBlICJlcnJvciINCg0KICBPUg0KDQogIHN1Y2NlZWQgd2l0aCA8b2sv PiBvciBzb21lIG90aGVyIHBvc2l0aXZlIHJlc3BvbnNlLCBhbmQgb3B0aW9uYWxseQ0KICByZXR1 cm4gb25lIG9yIG1vcmUgcnBjLWVycm9ycyBvZiB0eXBlICJ3YXJuaW5nIg0KDQpBZGRpdGlvbmFs bHksIGl0IHNob3VsZCBiZSBvayB0byByZXR1cm4gPG9rLz4gKyBhZGRpdGlvbmFsIHBvc2l0aXZl DQpub2RlcywgZm9yIGV4YW1wbGUgaXRzIHNob3VsZCBiZSBmaW5lIHRvIHJldHVybiB0aGlzIGFz IGEgcmVzdWx0IHRvDQo8ZWRpdC1jb25maWc+Og0KDQogICA8cnBjLXJlcGx5Pg0KICAgICA8b2sv Pg0KICAgICA8bXktZGF0YXN0b3JlLWV0YWcgeG1sbj0iLi4uIj5iMzgzMGYyM2E0YzwvbXktZGF0 YXN0b3JlLWV0YWc+DQogICA8L3JwYy1yZXBseT4NCg0KSSBrbm93IHRoYXQgc2VydmVycyBhbHJl YWR5IHJldHVybiB0aGVzZSBraW5kIG9mIHJlc3VsdHMuLi4NCg0KDQovbWFydGluDQoNCg0KDQoN CiJKZXJuZWogVHVsamFrIiA8amVybmVqLnR1bGpha0BtZy1zb2Z0LnNpPiB3cm90ZToNCj4gQW55 b25lPw0KPiANCj4gIA0KPiANCj4gSmVybmVqDQo+IA0KPiAgDQo+IA0KPiBGcm9tOiBOZXRjb25m IFttYWlsdG86bmV0Y29uZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSmVybmVqDQo+ IFR1bGphaw0KPiBTZW50OiBXZWRuZXNkYXksIFNlcHRlbWJlciAyOCwgMjAxNiAxOjQxIFBNDQo+ IFRvOiBuZXRjb25mQGlldGYub3JnDQo+IFN1YmplY3Q6IFtOZXRjb25mXSBNaXhpbmcgPHJwYy1l cnJvcj4gYW5kICJycGNSZXNwb25zZXMiIGluIE5FVENPTkYNCj4gcmVwbGllcw0KPiANCj4gIA0K PiANCj4gSGksDQo+IA0KPiAgDQo+IA0KPiBpcyBhIFJGQzYyNDEgY29tcGxpYW50IE5FVENPTkYg c2VydmVyIGFsbG93ZWQgdG8gcmV0dXJuIGEgcmVzcG9uc2UNCj4gbGlrZSB0aGlzIGZvciBzdGFu ZGFyZCBvcGVyYXRpb25zIChnZXQsIGdldC1jb25maWcpPw0KPiANCj4gIA0KPiANCj4gPD94bWwg dmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4NCj4gDQo+IDxycGMtcmVwbHkgeG1sbnM9 InVybjppZXRmOnBhcmFtczp4bWw6bnM6bmV0Y29uZjpiYXNlOjEuMCINCj4gbWVzc2FnZS1pZD0i MiI+DQo+IA0KPiAgIDxkYXRhLz4NCj4gDQo+ICAgPHJwYy1lcnJvcj4NCj4gDQo+ICAgICA8ZXJy b3ItdHlwZT5hcHBsaWNhdGlvbjwvZXJyb3ItdHlwZT4NCj4gDQo+ICAgICA8ZXJyb3ItdGFnPm9w ZXJhdGlvbi1mYWlsZWQ8L2Vycm9yLXRhZz4NCj4gDQo+ICAgICA8ZXJyb3Itc2V2ZXJpdHk+ZXJy b3I8L2Vycm9yLXNldmVyaXR5Pg0KPiANCj4gICAgIDxlcnJvci1tZXNzYWdlPlVua25vd24gZXJy b3Igb2NjdXJlZC48L2Vycm9yLW1lc3NhZ2U+DQo+IA0KPiAgIDwvcnBjLWVycm9yPg0KPiANCj4g PC9ycGMtcmVwbHk+DQo+IA0KPiAgDQo+IA0KPiBUaGF0IGlzLCBtaXhpbmcgYSBQb3NpdGl2ZSBS ZXNwb25zZSBhbmQgTmVnYXRpdmUgUmVzcG9uc2U/IEZvciB0aGUNCj4gc2FrZSBvZiBhcmd1bWVu dCwgY29uc2lkZXIgdGhlIDxycGMtZXJyb3I+IGFib3ZlIGFzIG9uZSBvZiB0aGUNCj4gc3RhbmRh cmQgb25lcyBmcm9tIEFwcGVuZGl4IEEgWzFdIChhbmQgPGRhdGEvPiBtYXkgbm90IGFjdHVhbGx5 IGJlDQo+IGVtcHR5KS4NCj4gDQo+ICANCj4gDQo+IEl0IGlzIGNsZWFyIGZyb20gQXBwZW5kaXgg QiBbMl0gdGhhdCA8cnBjLWVycm9yPiBhbmQgInJwY1Jlc3BvbnNlIg0KPiAoPGRhdGEvPiBhYm92 ZSkgbWF5IGFwcGVhciBhcyBzaWJsaW5ncyBpbiBzZXF1ZW5jZS4gQnV0IGlzIG1peGluZw0KPiBz dXBwb3J0ZWQgYnkgUkZDIHRleHQgYmVsb3c/DQo+IA0KPiAgDQo+IA0KPiA3LjEgPGdldC1jb25m aWc+IFszXQ0KPiANCj4gIA0KPiANCj4gICAgUG9zaXRpdmUgUmVzcG9uc2U6ICBJZiB0aGUgZGV2 aWNlIGNhbiBzYXRpc2Z5IHRoZSByZXF1ZXN0LCB0aGUgc2VydmVyDQo+ICAgICAgIHNlbmRzIGFu IDxycGMtcmVwbHk+IGVsZW1lbnQgY29udGFpbmluZyBhIDxkYXRhPiBlbGVtZW50IHdpdGggdGhl DQo+ICAgICAgIHJlc3VsdHMgb2YgdGhlIHF1ZXJ5Lg0KPiAgDQo+ICAgIE5lZ2F0aXZlIFJlc3Bv bnNlOiAgQW4gPHJwYy1lcnJvcj4gZWxlbWVudCBpcyBpbmNsdWRlZCBpbiB0aGUNCj4gICAgICAg PHJwYy1yZXBseT4gaWYgdGhlIHJlcXVlc3QgY2Fubm90IGJlIGNvbXBsZXRlZCBmb3IgYW55IHJl YXNvbi4NCj4gDQo+ICANCj4gDQo+IDcuNyA8Z2V0PiBbNF0NCj4gDQo+ICANCj4gDQo+ICAgIFBv c2l0aXZlIFJlc3BvbnNlOiAgSWYgdGhlIGRldmljZSB3YXMgYWJsZSB0byBzYXRpc2Z5IHRoZSBy ZXF1ZXN0LCBhbg0KPiAgICAgICA8cnBjLXJlcGx5PiBpcyBzZW50LiAgVGhlIDxkYXRhPiBzZWN0 aW9uIGNvbnRhaW5zIHRoZSBhcHByb3ByaWF0ZQ0KPiAgICAgICBzdWJzZXQuDQo+ICANCj4gICAg TmVnYXRpdmUgUmVzcG9uc2U6ICBBbiA8cnBjLWVycm9yPiBlbGVtZW50IGlzIGluY2x1ZGVkIGlu IHRoZQ0KPiAgICAgICA8cnBjLXJlcGx5PiBpZiB0aGUgcmVxdWVzdCBjYW5ub3QgYmUgY29tcGxl dGVkIGZvciBhbnkgcmVhc29uLg0KPiANCj4gIA0KPiANCj4gQWxzbywgaXMgdGhlcmUgYSByZWFz b24gZm9yIGRpZmZlcmVudCB3b3JkaW5nIG9mIFBvc2l0aXZlIFJlc3BvbnNlDQo+IHRleHQgZm9y IHRoZXNlIHR3byBvcGVyYXRpb25zPw0KPiANCj4gIA0KPiANCj4gQW5vdGhlciByZWxhdGVkIHF1 ZXN0aW9uIGlzLCBpZiBhIGNsaWVudCByZWNlaXZlcyBhIHdhcm5pbmcgc2V2ZXJpdHkNCj4gPHJw Yy1lcnJvcj4gdG8gYSBxdWVyeSB0aGF0IG5vcm1hbGx5IHJldHVybnMgYW4gPG9rLz4sIHNob3Vs ZCBpdA0KPiBjb25zaWRlciB0aGUgcXVlcnkgYSBzdWNjZXNzIG9yIGZhaWx1cmU/IEluIG90aGVy IHdvcmRzLCB3aHkgYXJlIDxvay8+DQo+IGFuZCA8cnBjLWVycm9yPiBtdXR1YWxseSBleGNsdXNp dmUg4oCTIGNhbiBhbiBvcGVyYXRpb24gbm90IHN1Y2NlZWQgd2l0aA0KPiB3YXJuaW5ncz8gSXQg d291bGQgYXBwZWFyIHRoYXQgb25seSBvcGVyYXRpb25zIHRoYXQgcmV0dXJuIHNvbWV0aGluZw0K PiBvdGhlciB0aGFuIDxvay8+IG1heSBleHByZXNzIHN1Y2ggYmVoYXZpb3IuDQo+IA0KPiAgDQo+ IA0KPiBbMV0gLSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjI0MSNhcHBlbmRpeC1B DQo+IA0KPiBbMl0gLSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjI0MSNhcHBlbmRp eC1CDQo+IA0KPiBbM10gLSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjI0MSNzZWN0 aW9uLTcuMQ0KPiANCj4gWzRdIC0gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzYyNDEj c2VjdGlvbi03LjcNCj4gDQo+ICANCj4gDQo+IEplcm5lag0KPiANCg== From nobody Tue Oct 4 01:46:20 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2B8612969C for ; Tue, 4 Oct 2016 01:46:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xAryO4vSlc65 for ; Tue, 4 Oct 2016 01:46:15 -0700 (PDT) Received: from mail-wm0-x22b.google.com (mail-wm0-x22b.google.com [IPv6:2a00:1450:400c:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35B7712968C for ; Tue, 4 Oct 2016 01:46:15 -0700 (PDT) Received: by mail-wm0-x22b.google.com with SMTP id 197so32481422wmk.1 for ; Tue, 04 Oct 2016 01:46:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=uA/LTPnaTr5scU5E7sja1j6XDjicGWpQU2bEpC3Zpxw=; b=tySdaUKWZB/nxXDL1ME6ScB6mznp5PKexQuX+x7zwrspl9ddpCGLwFjHEgG1Co98Wa CuH4vhbdhK72O2Ha9BPYocU1TXbg5vcnxtfFdq0nCcJt0WlbSiAYLU7ccfmwPnSzVzqb 2xC6eq+vB/dlx62vPumrZc8BnRUjtsX3GEkPGcYK85mJzDVZPCQICOhfdy3Yvnxn1oIW F75bpuZirkZcoc5L/eDgq0q7wUqZox1+6xSyk+Kc0ZDp30jePoMHqOmfFQwTraeS8nEJ Ex/AmbsLjjTjP7PvHl19Qw+IbZaULUQfKrnWBK2B314P+St3Ne1keiCQt6EiFi5cbLkK FJCg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=uA/LTPnaTr5scU5E7sja1j6XDjicGWpQU2bEpC3Zpxw=; b=crAuZp1uFzn/ZqsFxPOjPPt/r6SwnWiHuC2nziPUdjlpFglhGZ9dObCAvxpeE2lKU8 VqqKMQviMnpGkSv83JWHPjIgIGavg3wBrKBe7t/JQcuITVIE6ro+Tton+Gek/DIfOHyN kzDLXv5yRVqR8xthsUT8KaE+OYbtX/jOeJtY+m0t/l0XZRIwfc8cp4XkjeuYao3C9XUk UFsFHa12Y0zZnZF2ZFiRCpTUZtB+jXvuHg178GTVxp0/QnqsDjqKISGwMj8SdEt18i0Y dH6Z0ST9pkqyjH3H00diHqxgFFrBjbv8PS5xj1jt7OnZD1gQAeT3enuwwbIM7yFL6gAX EqBQ== X-Gm-Message-State: AA6/9RlH73dbQWmSGbJUzu+a5NwOLR5arFpcmKqV2O8a50mH4q/kMUBRPFlzf++A+fyOCGCU2/MmLSSCNcaHoA== X-Received: by 10.28.175.147 with SMTP id y141mr2525777wme.9.1475570773700; Tue, 04 Oct 2016 01:46:13 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.141.78 with HTTP; Tue, 4 Oct 2016 01:46:13 -0700 (PDT) In-Reply-To: <20161004.102621.193969733809277494.mbj@tail-f.com> References: <07d201d2197d$351f0f00$9f5d2d00$@mg-soft.si> <014c01d21e15$cd22c480$67684d80$@mg-soft.si> <20161004.102621.193969733809277494.mbj@tail-f.com> From: Andy Bierman Date: Tue, 4 Oct 2016 01:46:13 -0700 Message-ID: To: Martin Bjorklund Content-Type: multipart/alternative; boundary=001a11443f0aceccd2053e061760 Archived-At: Cc: Netconf Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2016 08:46:18 -0000 --001a11443f0aceccd2053e061760 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Tue, Oct 4, 2016 at 1:26 AM, Martin Bjorklund wrote: > Hi, > > I think that both RFC 6241 and RFC 6020 are not clear on this, and > maybe even wrong (as you note). I think that that a request should: > > fail with one or more rpc-errors of type "error" > > OR > > succeed with or some other positive response, and optionally > return one or more rpc-errors of type "warning" > Except not one single error-tag value is allowed to be used with severity=3Dwarning so this would not be a valid response > > Additionally, it should be ok to return + additional positive > nodes, for example its should be fine to return this as a result to > : > > > > b3830f23a4c > > > I know that servers already return these kind of results... > > > /martin > > > Andy > > > "Jernej Tuljak" wrote: > > Anyone? > > > > > > > > Jernej > > > > > > > > From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of Jernej > > Tuljak > > Sent: Wednesday, September 28, 2016 1:41 PM > > To: netconf@ietf.org > > Subject: [Netconf] Mixing and "rpcResponses" in NETCONF > > replies > > > > > > > > Hi, > > > > > > > > is a RFC6241 compliant NETCONF server allowed to return a response > > like this for standard operations (get, get-config)? > > > > > > > > > > > > > message-id=3D"2"> > > > > > > > > > > > > application > > > > operation-failed > > > > error > > > > Unknown error occured. > > > > > > > > > > > > > > > > That is, mixing a Positive Response and Negative Response? For the > > sake of argument, consider the above as one of the > > standard ones from Appendix A [1] (and may not actually be > > empty). > > > > > > > > It is clear from Appendix B [2] that and "rpcResponse" > > ( above) may appear as siblings in sequence. But is mixing > > supported by RFC text below? > > > > > > > > 7.1 [3] > > > > > > > > Positive Response: If the device can satisfy the request, the serve= r > > sends an element containing a element with the > > results of the query. > > > > Negative Response: An element is included in the > > if the request cannot be completed for any reason. > > > > > > > > 7.7 [4] > > > > > > > > Positive Response: If the device was able to satisfy the request, a= n > > is sent. The section contains the appropriate > > subset. > > > > Negative Response: An element is included in the > > if the request cannot be completed for any reason. > > > > > > > > Also, is there a reason for different wording of Positive Response > > text for these two operations? > > > > > > > > Another related question is, if a client receives a warning severity > > to a query that normally returns an , should it > > consider the query a success or failure? In other words, why are > > and mutually exclusive =E2=80=93 can an operation not succe= ed with > > warnings? It would appear that only operations that return something > > other than may express such behavior. > > > > > > > > [1] - https://tools.ietf.org/html/rfc6241#appendix-A > > > > [2] - https://tools.ietf.org/html/rfc6241#appendix-B > > > > [3] - https://tools.ietf.org/html/rfc6241#section-7.1 > > > > [4] - https://tools.ietf.org/html/rfc6241#section-7.7 > > > > > > > > Jernej > > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > --001a11443f0aceccd2053e061760 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Tue, Oct 4, 2016 at 1:26 AM, Martin Bjorklund <= mbj@tail-f.com><= /span> wrote:
Hi,

I think that both RFC 6241 and RFC 6020 are not clear on this, and
maybe even wrong (as you note).=C2=A0 I think that that a request should:
=C2=A0 fail with one or more rpc-errors of type "error"

=C2=A0 OR

=C2=A0 succeed with <ok/> or some other positive response, and option= ally
=C2=A0 return one or more rpc-errors of type "warning"


Except not one single error-tag va= lue is allowed to be used with severity=3Dwarning
so this would n= ot be a valid response


=C2=A0
=

Additionally, it should be ok to return <ok/> + additional positive nodes, for example its should be fine to return this as a result to
<edit-config>:

=C2=A0 =C2=A0<rpc-reply>
=C2=A0 =C2=A0 =C2=A0<ok/>
=C2=A0 =C2=A0 =C2=A0<my-datastore-etag xmln=3D"...">b3830f2= 3a4c</my-datastore-etag>
=C2=A0 =C2=A0</rpc-reply>

I know that servers already return these kind of results...


/martin




Andy
=C2=A0


"Jernej Tuljak" <j= ernej.tuljak@mg-soft.si> wrote:
> Anyone?
>
>
>
> Jernej
>
>
>
> From: Netconf [mailto:netc= onf-bounces@ietf.org] On Behalf Of Jernej
> Tuljak
> Sent: Wednesday, September 28, 2016 1:41 PM
> To: netconf@ietf.org
> Subject: [Netconf] Mixing <rpc-error> and "rpcResponses&quo= t; in NETCONF
> replies
>
>
>
> Hi,
>
>
>
> is a RFC6241 compliant NETCONF server allowed to return a response
> like this for standard operations (get, get-config)?
>
>
>
> <?xml version=3D"1.0" encoding=3D"utf-8"?> >
> <rpc-reply xmlns=3D"urn:ietf:params:xml:ns:netconf:base:1= .0"
> message-id=3D"2">
>
>=C2=A0 =C2=A0<data/>
>
>=C2=A0 =C2=A0<rpc-error>
>
>=C2=A0 =C2=A0 =C2=A0<error-type>application</error-type&g= t;
>
>=C2=A0 =C2=A0 =C2=A0<error-tag>operation-failed</error-ta= g>
>
>=C2=A0 =C2=A0 =C2=A0<error-severity>error</error-severity= >
>
>=C2=A0 =C2=A0 =C2=A0<error-message>Unknown error occured.</err= or-message>
>
>=C2=A0 =C2=A0</rpc-error>
>
> </rpc-reply>
>
>
>
> That is, mixing a Positive Response and Negative Response? For the
> sake of argument, consider the <rpc-error> above as one of the > standard ones from Appendix A [1] (and <data/> may not actually = be
> empty).
>
>
>
> It is clear from Appendix B [2] that <rpc-error> and "rpcRe= sponse"
> (<data/> above) may appear as siblings in sequence. But is mixin= g
> supported by RFC text below?
>
>
>
> 7.1 <get-config> [3]
>
>
>
>=C2=A0 =C2=A0 Positive Response:=C2=A0 If the device can satisfy the re= quest, the server
>=C2=A0 =C2=A0 =C2=A0 =C2=A0sends an <rpc-reply> element containin= g a <data> element with the
>=C2=A0 =C2=A0 =C2=A0 =C2=A0results of the query.
>
>=C2=A0 =C2=A0 Negative Response:=C2=A0 An <rpc-error> element is = included in the
>=C2=A0 =C2=A0 =C2=A0 =C2=A0<rpc-reply> if the request cannot be c= ompleted for any reason.
>
>
>
> 7.7 <get> [4]
>
>
>
>=C2=A0 =C2=A0 Positive Response:=C2=A0 If the device was able to satisf= y the request, an
>=C2=A0 =C2=A0 =C2=A0 =C2=A0<rpc-reply> is sent.=C2=A0 The <dat= a> section contains the appropriate
>=C2=A0 =C2=A0 =C2=A0 =C2=A0subset.
>
>=C2=A0 =C2=A0 Negative Response:=C2=A0 An <rpc-error> element is = included in the
>=C2=A0 =C2=A0 =C2=A0 =C2=A0<rpc-reply> if the request cannot be c= ompleted for any reason.
>
>
>
> Also, is there a reason for different wording of Positive Response
> text for these two operations?
>
>
>
> Another related question is, if a client receives a warning severity > <rpc-error> to a query that normally returns an <ok/>, sho= uld it
> consider the query a success or failure? In other words, why are <o= k/>
> and <rpc-error> mutually exclusive =E2=80=93 can an operation no= t succeed with
> warnings? It would appear that only operations that return something > other than <ok/> may express such behavior.
>
>
>
> [1] - https://tools.ietf.org/html/rfc6241#= appendix-A
>
> [2] - https://tools.ietf.org/html/rfc6241#= appendix-B
>
> [3] - https://tools.ietf.org/html/rfc6241#= section-7.1
>
> [4] - https://tools.ietf.org/html/rfc6241#= section-7.7
>
>
>
> Jernej
>
_______________________________________________
Netconf mailing list
Netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf<= br>

--001a11443f0aceccd2053e061760-- From nobody Tue Oct 4 01:50:30 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60EDF1296B7 for ; Tue, 4 Oct 2016 01:50:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.897 X-Spam-Level: X-Spam-Status: No, score=-4.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kq4mOv0rYQib for ; Tue, 4 Oct 2016 01:50:26 -0700 (PDT) Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id F15E91296BC for ; Tue, 4 Oct 2016 01:50:24 -0700 (PDT) Received: from localhost (unknown [173.38.220.42]) by mail.tail-f.com (Postfix) with ESMTPSA id 134721AE0336; Tue, 4 Oct 2016 10:50:24 +0200 (CEST) Date: Tue, 04 Oct 2016 10:49:21 +0200 (CEST) Message-Id: <20161004.104921.1089105201267079785.mbj@tail-f.com> To: andy@yumaworks.com From: Martin Bjorklund In-Reply-To: References: <014c01d21e15$cd22c480$67684d80$@mg-soft.si> <20161004.102621.193969733809277494.mbj@tail-f.com> X-Mailer: Mew version 6.7 on Emacs 24.5 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=utf-8 Content-Transfer-Encoding: base64 Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2016 08:50:28 -0000 QW5keSBCaWVybWFuIDxhbmR5QHl1bWF3b3Jrcy5jb20+IHdyb3RlOg0KPiBPbiBUdWUsIE9jdCA0 LCAyMDE2IGF0IDE6MjYgQU0sIE1hcnRpbiBCam9ya2x1bmQgPG1iakB0YWlsLWYuY29tPiB3cm90 ZToNCj4gDQo+ID4gSGksDQo+ID4NCj4gPiBJIHRoaW5rIHRoYXQgYm90aCBSRkMgNjI0MSBhbmQg UkZDIDYwMjAgYXJlIG5vdCBjbGVhciBvbiB0aGlzLCBhbmQNCj4gPiBtYXliZSBldmVuIHdyb25n IChhcyB5b3Ugbm90ZSkuICBJIHRoaW5rIHRoYXQgdGhhdCBhIHJlcXVlc3Qgc2hvdWxkOg0KPiA+ DQo+ID4gICBmYWlsIHdpdGggb25lIG9yIG1vcmUgcnBjLWVycm9ycyBvZiB0eXBlICJlcnJvciIN Cj4gPg0KPiA+ICAgT1INCj4gPg0KPiA+ICAgc3VjY2VlZCB3aXRoIDxvay8+IG9yIHNvbWUgb3Ro ZXIgcG9zaXRpdmUgcmVzcG9uc2UsIGFuZCBvcHRpb25hbGx5DQo+ID4gICByZXR1cm4gb25lIG9y IG1vcmUgcnBjLWVycm9ycyBvZiB0eXBlICJ3YXJuaW5nIg0KPiA+DQo+IA0KPiANCj4gRXhjZXB0 IG5vdCBvbmUgc2luZ2xlIGVycm9yLXRhZyB2YWx1ZSBpcyBhbGxvd2VkIHRvIGJlIHVzZWQgd2l0 aA0KPiBzZXZlcml0eT13YXJuaW5nDQo+IHNvIHRoaXMgd291bGQgbm90IGJlIGEgdmFsaWQgcmVz cG9uc2UNCg0KUmlnaHQ7IGJ1dCBJTU8gdGhlcmUgc2hvdWxkIGJlIHNvbWUgZXJyb3ItdGFnIGZv ciB3YXJuaW5ncy4NCg0KDQovbWFydGluDQoNCg0KPiANCj4gDQo+IA0KPiANCj4gPg0KPiA+IEFk ZGl0aW9uYWxseSwgaXQgc2hvdWxkIGJlIG9rIHRvIHJldHVybiA8b2svPiArIGFkZGl0aW9uYWwg cG9zaXRpdmUNCj4gPiBub2RlcywgZm9yIGV4YW1wbGUgaXRzIHNob3VsZCBiZSBmaW5lIHRvIHJl dHVybiB0aGlzIGFzIGEgcmVzdWx0IHRvDQo+ID4gPGVkaXQtY29uZmlnPjoNCj4gPg0KPiA+ICAg IDxycGMtcmVwbHk+DQo+ID4gICAgICA8b2svPg0KPiA+ICAgICAgPG15LWRhdGFzdG9yZS1ldGFn IHhtbG49Ii4uLiI+YjM4MzBmMjNhNGM8L215LWRhdGFzdG9yZS1ldGFnPg0KPiA+ICAgIDwvcnBj LXJlcGx5Pg0KPiA+DQo+ID4gSSBrbm93IHRoYXQgc2VydmVycyBhbHJlYWR5IHJldHVybiB0aGVz ZSBraW5kIG9mIHJlc3VsdHMuLi4NCj4gPg0KPiA+DQo+ID4gL21hcnRpbg0KPiA+DQo+ID4NCj4g Pg0KPiANCj4gQW5keQ0KPiANCj4gDQo+ID4NCj4gPg0KPiA+ICJKZXJuZWogVHVsamFrIiA8amVy bmVqLnR1bGpha0BtZy1zb2Z0LnNpPiB3cm90ZToNCj4gPiA+IEFueW9uZT8NCj4gPiA+DQo+ID4g Pg0KPiA+ID4NCj4gPiA+IEplcm5lag0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gRnJvbTog TmV0Y29uZiBbbWFpbHRvOm5ldGNvbmYtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEpl cm5lag0KPiA+ID4gVHVsamFrDQo+ID4gPiBTZW50OiBXZWRuZXNkYXksIFNlcHRlbWJlciAyOCwg MjAxNiAxOjQxIFBNDQo+ID4gPiBUbzogbmV0Y29uZkBpZXRmLm9yZw0KPiA+ID4gU3ViamVjdDog W05ldGNvbmZdIE1peGluZyA8cnBjLWVycm9yPiBhbmQgInJwY1Jlc3BvbnNlcyIgaW4gTkVUQ09O Rg0KPiA+ID4gcmVwbGllcw0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gSGksDQo+ID4gPg0K PiA+ID4NCj4gPiA+DQo+ID4gPiBpcyBhIFJGQzYyNDEgY29tcGxpYW50IE5FVENPTkYgc2VydmVy IGFsbG93ZWQgdG8gcmV0dXJuIGEgcmVzcG9uc2UNCj4gPiA+IGxpa2UgdGhpcyBmb3Igc3RhbmRh cmQgb3BlcmF0aW9ucyAoZ2V0LCBnZXQtY29uZmlnKT8NCj4gPiA+DQo+ID4gPg0KPiA+ID4NCj4g PiA+IDw/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9InV0Zi04Ij8+DQo+ID4gPg0KPiA+ID4g PHJwYy1yZXBseSB4bWxucz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczpuZXRjb25mOmJhc2U6MS4w Ig0KPiA+ID4gbWVzc2FnZS1pZD0iMiI+DQo+ID4gPg0KPiA+ID4gICA8ZGF0YS8+DQo+ID4gPg0K PiA+ID4gICA8cnBjLWVycm9yPg0KPiA+ID4NCj4gPiA+ICAgICA8ZXJyb3ItdHlwZT5hcHBsaWNh dGlvbjwvZXJyb3ItdHlwZT4NCj4gPiA+DQo+ID4gPiAgICAgPGVycm9yLXRhZz5vcGVyYXRpb24t ZmFpbGVkPC9lcnJvci10YWc+DQo+ID4gPg0KPiA+ID4gICAgIDxlcnJvci1zZXZlcml0eT5lcnJv cjwvZXJyb3Itc2V2ZXJpdHk+DQo+ID4gPg0KPiA+ID4gICAgIDxlcnJvci1tZXNzYWdlPlVua25v d24gZXJyb3Igb2NjdXJlZC48L2Vycm9yLW1lc3NhZ2U+DQo+ID4gPg0KPiA+ID4gICA8L3JwYy1l cnJvcj4NCj4gPiA+DQo+ID4gPiA8L3JwYy1yZXBseT4NCj4gPiA+DQo+ID4gPg0KPiA+ID4NCj4g PiA+IFRoYXQgaXMsIG1peGluZyBhIFBvc2l0aXZlIFJlc3BvbnNlIGFuZCBOZWdhdGl2ZSBSZXNw b25zZT8gRm9yIHRoZQ0KPiA+ID4gc2FrZSBvZiBhcmd1bWVudCwgY29uc2lkZXIgdGhlIDxycGMt ZXJyb3I+IGFib3ZlIGFzIG9uZSBvZiB0aGUNCj4gPiA+IHN0YW5kYXJkIG9uZXMgZnJvbSBBcHBl bmRpeCBBIFsxXSAoYW5kIDxkYXRhLz4gbWF5IG5vdCBhY3R1YWxseSBiZQ0KPiA+ID4gZW1wdHkp Lg0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gSXQgaXMgY2xlYXIgZnJvbSBBcHBlbmRpeCBC IFsyXSB0aGF0IDxycGMtZXJyb3I+IGFuZCAicnBjUmVzcG9uc2UiDQo+ID4gPiAoPGRhdGEvPiBh Ym92ZSkgbWF5IGFwcGVhciBhcyBzaWJsaW5ncyBpbiBzZXF1ZW5jZS4gQnV0IGlzIG1peGluZw0K PiA+ID4gc3VwcG9ydGVkIGJ5IFJGQyB0ZXh0IGJlbG93Pw0KPiA+ID4NCj4gPiA+DQo+ID4gPg0K PiA+ID4gNy4xIDxnZXQtY29uZmlnPiBbM10NCj4gPiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+ICAg IFBvc2l0aXZlIFJlc3BvbnNlOiAgSWYgdGhlIGRldmljZSBjYW4gc2F0aXNmeSB0aGUgcmVxdWVz dCwgdGhlIHNlcnZlcg0KPiA+ID4gICAgICAgc2VuZHMgYW4gPHJwYy1yZXBseT4gZWxlbWVudCBj b250YWluaW5nIGEgPGRhdGE+IGVsZW1lbnQgd2l0aCB0aGUNCj4gPiA+ICAgICAgIHJlc3VsdHMg b2YgdGhlIHF1ZXJ5Lg0KPiA+ID4NCj4gPiA+ICAgIE5lZ2F0aXZlIFJlc3BvbnNlOiAgQW4gPHJw Yy1lcnJvcj4gZWxlbWVudCBpcyBpbmNsdWRlZCBpbiB0aGUNCj4gPiA+ICAgICAgIDxycGMtcmVw bHk+IGlmIHRoZSByZXF1ZXN0IGNhbm5vdCBiZSBjb21wbGV0ZWQgZm9yIGFueSByZWFzb24uDQo+ ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiA3LjcgPGdldD4gWzRdDQo+ID4gPg0KPiA+ID4NCj4g PiA+DQo+ID4gPiAgICBQb3NpdGl2ZSBSZXNwb25zZTogIElmIHRoZSBkZXZpY2Ugd2FzIGFibGUg dG8gc2F0aXNmeSB0aGUgcmVxdWVzdCwgYW4NCj4gPiA+ICAgICAgIDxycGMtcmVwbHk+IGlzIHNl bnQuICBUaGUgPGRhdGE+IHNlY3Rpb24gY29udGFpbnMgdGhlIGFwcHJvcHJpYXRlDQo+ID4gPiAg ICAgICBzdWJzZXQuDQo+ID4gPg0KPiA+ID4gICAgTmVnYXRpdmUgUmVzcG9uc2U6ICBBbiA8cnBj LWVycm9yPiBlbGVtZW50IGlzIGluY2x1ZGVkIGluIHRoZQ0KPiA+ID4gICAgICAgPHJwYy1yZXBs eT4gaWYgdGhlIHJlcXVlc3QgY2Fubm90IGJlIGNvbXBsZXRlZCBmb3IgYW55IHJlYXNvbi4NCj4g PiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+IEFsc28sIGlzIHRoZXJlIGEgcmVhc29uIGZvciBkaWZm ZXJlbnQgd29yZGluZyBvZiBQb3NpdGl2ZSBSZXNwb25zZQ0KPiA+ID4gdGV4dCBmb3IgdGhlc2Ug dHdvIG9wZXJhdGlvbnM/DQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiBBbm90aGVyIHJlbGF0 ZWQgcXVlc3Rpb24gaXMsIGlmIGEgY2xpZW50IHJlY2VpdmVzIGEgd2FybmluZyBzZXZlcml0eQ0K PiA+ID4gPHJwYy1lcnJvcj4gdG8gYSBxdWVyeSB0aGF0IG5vcm1hbGx5IHJldHVybnMgYW4gPG9r Lz4sIHNob3VsZCBpdA0KPiA+ID4gY29uc2lkZXIgdGhlIHF1ZXJ5IGEgc3VjY2VzcyBvciBmYWls dXJlPyBJbiBvdGhlciB3b3Jkcywgd2h5IGFyZSA8b2svPg0KPiA+ID4gYW5kIDxycGMtZXJyb3I+ IG11dHVhbGx5IGV4Y2x1c2l2ZSDigJMgY2FuIGFuIG9wZXJhdGlvbiBub3Qgc3VjY2VlZCB3aXRo DQo+ID4gPiB3YXJuaW5ncz8gSXQgd291bGQgYXBwZWFyIHRoYXQgb25seSBvcGVyYXRpb25zIHRo YXQgcmV0dXJuIHNvbWV0aGluZw0KPiA+ID4gb3RoZXIgdGhhbiA8b2svPiBtYXkgZXhwcmVzcyBz dWNoIGJlaGF2aW9yLg0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gWzFdIC0gaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL3JmYzYyNDEjYXBwZW5kaXgtQQ0KPiA+ID4NCj4gPiA+IFsyXSAt IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2MjQxI2FwcGVuZGl4LUINCj4gPiA+DQo+ ID4gPiBbM10gLSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjI0MSNzZWN0aW9uLTcu MQ0KPiA+ID4NCj4gPiA+IFs0XSAtIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2MjQx I3NlY3Rpb24tNy43DQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiBKZXJuZWoNCj4gPiA+DQo+ ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiBO ZXRjb25mIG1haWxpbmcgbGlzdA0KPiA+IE5ldGNvbmZAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNvbmYNCj4gPg0K From nobody Tue Oct 4 12:06:01 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FD2C126D74 for ; Tue, 4 Oct 2016 12:06:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l-URcPCKQudK for ; Tue, 4 Oct 2016 12:05:59 -0700 (PDT) Received: from mail-pf0-x22a.google.com (mail-pf0-x22a.google.com [IPv6:2607:f8b0:400e:c00::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50C6F124281 for ; Tue, 4 Oct 2016 12:05:59 -0700 (PDT) Received: by mail-pf0-x22a.google.com with SMTP id e6so22854684pfk.1 for ; Tue, 04 Oct 2016 12:05:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=A11Yr7cHEm6z6vrU0OKiKTY4n734f+ZU08Ik7rsdmFA=; b=KJN3Wxcw5INeBLCgRwCATfE7gzK0rQboVGY5mfD77rn1W3BNFQf/wFUreT95AD1odT pzAHMh3ywdTHPGYmPn/CP1Or8CARCccxbNZXNqurSquy9cgVT9ykALiAqoJtyIhKEh7o GCdAx/T0CrTi/qLtumyQee0NTqnC9EysR90kBNe6jp3Uxr3zDXeMox9XxpWfiHVhxCIE UMVXDdz/bx4bPl/CFKdVbr1ASUqtf9fPP0RRlZvy5m+tOF4aQLn/2s+b5uYSI6xZkoHm QZ6jLf2bYYFCbSQH8hynnjG+kEotOLXmEhP0IZnWvLsZVYeiwFD0vSXn3wf46PBRHMc9 9LIQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=A11Yr7cHEm6z6vrU0OKiKTY4n734f+ZU08Ik7rsdmFA=; b=C98T2EvIgoHGXmi/KbWBSQb3jZphhTUdLuVgGLoIWA+imi8a2jXFej8mtByMUAV1BR C2TCp3VAU+OYCNAT2cZoas35EDVm8R9eTBhbeo8DSDPK4fSFK0tkwsBD6KxjCa0oBv7V unD2HWMwCgJwOuOmy2foQWN8Gym4wsykxZpBu9HezGIagyuIIsMWhaFkp9tgaejxtIux I7WIDVrxp8+g2GKbzm9o42ZT10Uho/2EyhycqRXeMOJFbFrjB8yYsjjSi9rvak1a7hlo Aue3jP44i+CSwarRaP3gijJ8QD/A5EZ3pvhLB9RMpGA+/hi67T6wtXLzww4pnUbJ5Myy hVpA== X-Gm-Message-State: AA6/9RnWRz9HZiaSXXFKMdYNuhJI3asR4iWptqtwskO7ZZAgk5Gj55VpQaBCCBZ3GDBExA== X-Received: by 10.98.208.195 with SMTP id p186mr967705pfg.90.1475607958936; Tue, 04 Oct 2016 12:05:58 -0700 (PDT) Received: from [10.11.72.232] (mobile-166-171-250-189.mycingular.net. [166.171.250.189]) by smtp.gmail.com with ESMTPSA id p5sm41349003pfp.7.2016.10.04.12.05.57 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 04 Oct 2016 12:05:57 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Mahesh Jethanandani X-Mailer: iPhone Mail (13G36) In-Reply-To: <20161004.104921.1089105201267079785.mbj@tail-f.com> Date: Tue, 4 Oct 2016 12:05:56 -0700 Content-Transfer-Encoding: 7bit Message-Id: References: <014c01d21e15$cd22c480$67684d80$@mg-soft.si> <20161004.102621.193969733809277494.mbj@tail-f.com> <20161004.104921.1089105201267079785.mbj@tail-f.com> To: Martin Bjorklund Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2016 19:06:00 -0000 So, is this an errata for 6241 or 6020 (or 7950)? Mahesh Jethanandani mjethanandani@gmail.com On Oct 4, 2016, at 1:49 AM, Martin Bjorklund wrote: >>> succeed with or some other positive response, and optionally >>> return one or more rpc-errors of type "warning" >> >> >> Except not one single error-tag value is allowed to be used with >> severity=warning >> so this would not be a valid response > > Right; but IMO there should be some From nobody Tue Oct 4 13:58:13 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 687451294E1 for ; Tue, 4 Oct 2016 13:58:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id leFVShzn7oiS for ; Tue, 4 Oct 2016 13:58:11 -0700 (PDT) Received: from mail-wm0-x236.google.com (mail-wm0-x236.google.com [IPv6:2a00:1450:400c:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4B1B1294E4 for ; Tue, 4 Oct 2016 13:58:10 -0700 (PDT) Received: by mail-wm0-x236.google.com with SMTP id p138so235338979wmb.1 for ; Tue, 04 Oct 2016 13:58:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=ikwDdNyLm1rSsUsUyN10Gt5MRfAXbweuEL5l2KwRdlY=; b=Nfjw78mqSjxNEmGBsqVJkPcUCctToGXRLEbSoVx9KhAoI5OSD/+iyBB9gKGVUTAEqe /o02RToTEzDUP+8KrVeGQFKX3c6ocTLDMe70yIei11AfzFobOweyjgR8iIqckC5e/YJn ekiFYf99BxY4naBljqKZzgbLKSINHys6eb6UaD+aocWAwQff8RAOpGhmlT4kRr79R5FN xcfaDNoBrWEoG8LVaIZ9An2p59vjAS09+xZhBcNfnAO39v3innb0GmXIZ0rI1V0oscvf o9FENsQGmtWGlGg0y9Yod8khgTKPMRGVxj1fPmHYu0/7pVy+b8gGSOUCnccHYOytGGVr MQ2Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=ikwDdNyLm1rSsUsUyN10Gt5MRfAXbweuEL5l2KwRdlY=; b=SYGGN/NDla6WjD+NfHX+YFFLROqgdb8VAhXoqRKGWNwQe3OEllan54h2yHieEYLe95 /eghcXz7QgC6SvIQfCX0LXiTgcPHZbOHBRtR8UpdtlavlJtDj9htoAUItctcAGt0G9nw lW5CJSUNruSoT5nvQj+SmT56g388ZL5uxW5SimboR1UcVUDB2GIMwDWJBALX3V8VH0BM pA5YujHPLEn4Hg+b35if22MD4sSMwHhWuID1MQEP5vjz9zpOZTRWIDPmkyI9sqBGsAnX X39FWtZE5vEoBARBM1dsjzK5rPyd6oVqFyB26tU9jDPgYq6FJMG91ErDxFWiOpQ2R2gO N+iQ== X-Gm-Message-State: AA6/9RnxZZkklHaFV8jVOYMJ8XVhDlvcdDZ/nshQZGTEYO8H+MDhs/UjQuu/eWVqenEai+gQDRREyAZKbU44Dw== X-Received: by 10.194.75.165 with SMTP id d5mr4685414wjw.224.1475614689397; Tue, 04 Oct 2016 13:58:09 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.141.78 with HTTP; Tue, 4 Oct 2016 13:58:08 -0700 (PDT) In-Reply-To: References: <014c01d21e15$cd22c480$67684d80$@mg-soft.si> <20161004.102621.193969733809277494.mbj@tail-f.com> <20161004.104921.1089105201267079785.mbj@tail-f.com> From: Andy Bierman Date: Tue, 4 Oct 2016 13:58:08 -0700 Message-ID: To: Mahesh Jethanandani Content-Type: multipart/alternative; boundary=047d7bb04bc2633b48053e1051c9 Archived-At: Cc: Netconf Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2016 20:58:12 -0000 --047d7bb04bc2633b48053e1051c9 Content-Type: text/plain; charset=UTF-8 No, This is how it is designed. It will require a new protocol version to add warnings and/or change the XSD the defines an element. Andy On Tue, Oct 4, 2016 at 12:05 PM, Mahesh Jethanandani < mjethanandani@gmail.com> wrote: > So, is this an errata for 6241 or 6020 (or 7950)? > > Mahesh Jethanandani > mjethanandani@gmail.com > > On Oct 4, 2016, at 1:49 AM, Martin Bjorklund wrote: > > >>> succeed with or some other positive response, and optionally > >>> return one or more rpc-errors of type "warning" > >> > >> > >> Except not one single error-tag value is allowed to be used with > >> severity=warning > >> so this would not be a valid response > > > > Right; but IMO there should be some > --047d7bb04bc2633b48053e1051c9 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
No,

This is how it is designed.
It will require a new protocol version to add warnings and/or change the= XSD
the defines an <rpc-reply> element.


Andy



On Tue, Oct 4, 2016 at 1= 2:05 PM, Mahesh Jethanandani <mjethanandani@gmail.com>= wrote:
So, is this an errata for 6241 or= 6020 (or 7950)?

Mahesh Jethanandani
mjethanandani@gmail.com

On Oct 4, 2016, at 1:49 AM, Martin Bjorklund <mbj@tail-f.com> wrote:

>>> succeed with <ok/> or some other positive response, and = optionally
>>>=C2=A0 return one or more rpc-errors of type "warning"= ;
>>
>>
>> Except not one single error-tag value is allowed to be used with >> severity=3Dwarning
>> so this would not be a valid response
>
> Right; but IMO there should be some

--047d7bb04bc2633b48053e1051c9-- From nobody Wed Oct 5 01:16:31 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39452129449 for ; Wed, 5 Oct 2016 01:16:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.997 X-Spam-Level: X-Spam-Status: No, score=-4.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mg-soft.si Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yNeFSIYGW5J4 for ; Wed, 5 Oct 2016 01:16:27 -0700 (PDT) Received: from galileo.mg-soft.si (gate.mg-soft.si [212.30.73.66]) by ietfa.amsl.com (Postfix) with ESMTP id 96B26127A91 for ; Wed, 5 Oct 2016 01:16:27 -0700 (PDT) Received: from jernejthpPC (tp-x61t.mg-soft.si [10.0.0.222]) by galileo.mg-soft.si (Postfix) with ESMTP id AECFCC417630; Wed, 5 Oct 2016 10:16:23 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.10.3 galileo.mg-soft.si AECFCC417630 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mg-soft.si; s=default; t=1475655383; bh=aoPOlAu7UGLsOr+uT3lT36wjqSJECjLxwztccdAmq/w=; h=From:To:Cc:References:In-Reply-To:Subject:Date:From; b=RI2139gqLgFK12hbUvXXm9uZC7oVBTsgyR2o1lqUbSmW8ohm8iiw5H9DhfPOH9Ocr HoDSNybRXlSXVpRutG4RxXMDn/m0mDIyWULUaHoQbbVNbKuYFM4Ot3AqG4aXWiQmlX OkFprRVdPXxRy9R7qW6F0/VcY8YsMu38O293Tj8cA1HanzWr+um7O6ErxJBAoGb3LP EB32Y76IGBYTscXJlBKqAlMK/db+Wr5thwQfhnBLOtmH2FDKyzX6W06nFl8P6yhktU vHZ3QPmyWLoWwog4Ipu04HVwONj+RLdYTmi0MUpUJCSrliVSgEE1aHFSYJcthXpC8f OGg64lGa6V27g== From: "Jernej Tuljak" To: "'Martin Bjorklund'" References: <07d201d2197d$351f0f00$9f5d2d00$@mg-soft.si> <014c01d21e15$cd22c480$67684d80$@mg-soft.si> <20161004.102621.193969733809277494.mbj@tail-f.com> In-Reply-To: <20161004.102621.193969733809277494.mbj@tail-f.com> Date: Wed, 5 Oct 2016 10:16:22 +0200 Message-ID: <026601d21ee0$c2117fc0$46347f40$@mg-soft.si> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Content-Language: sl Thread-Index: AQHVwBVechITwLiimMqgAVYfXEeNqwGuNvtNAX1v61KgeNO4gA== Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Oct 2016 08:16:30 -0000 > -----Original Message----- > From: Martin Bjorklund [mailto:mbj@tail-f.com] > Sent: Tuesday, October 4, 2016 10:26 AM > To: jernej.tuljak@mg-soft.si > Cc: netconf@ietf.org > Subject: Re: [Netconf] Mixing and "rpcResponses" in = NETCONF > replies >=20 > Hi, >=20 > I think that both RFC 6241 and RFC 6020 are not clear on this, and > maybe even wrong (as you note). I think that that a request should: >=20 > fail with one or more rpc-errors of type "error" >=20 > OR >=20 > succeed with or some other positive response, and optionally > return one or more rpc-errors of type "warning" While I agree that this is how things should be, there is one particular = case that has been pointed out to us, which the above cannot cover. That = is, not knowing an error will occur beforehand while avoiding buffering = whole replies.=20 Imagine a constrained device that wishes to avoid keeping entire replies = buffered in memory and immediately starts flushing chunks of what later = becomes a single (whole) reply on the client side. An error occurs = during processing, but some chunks have already been sent. The device = makes sure the reply ends up being well formed and includes an = , which means "some positive response" + with = "error" severity. This would probably means that the client needs to = discard the positive part of the reply and give priority to . It seems like a viable use case to me, but I am interested in opinions = of others. Has there been prior discussion on this topic (it seems = likely)? =20 Jernej >=20 > Additionally, it should be ok to return + additional positive > nodes, for example its should be fine to return this as a result to > : >=20 > > > b3830f23a4c > >=20 > I know that servers already return these kind of results... >=20 >=20 > /martin >=20 >=20 >=20 >=20 > "Jernej Tuljak" wrote: > > Anyone? > > > > > > > > Jernej > > > > > > > > From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of Jernej > > Tuljak > > Sent: Wednesday, September 28, 2016 1:41 PM > > To: netconf@ietf.org > > Subject: [Netconf] Mixing and "rpcResponses" in NETCONF > > replies > > > > > > > > Hi, > > > > > > > > is a RFC6241 compliant NETCONF server allowed to return a response > > like this for standard operations (get, get-config)? > > > > > > > > > > > > > message-id=3D"2"> > > > > > > > > > > > > application > > > > operation-failed > > > > error > > > > Unknown error occured. > > > > > > > > > > > > > > > > That is, mixing a Positive Response and Negative Response? For the > > sake of argument, consider the above as one of the > > standard ones from Appendix A [1] (and may not actually be > > empty). > > > > > > > > It is clear from Appendix B [2] that and "rpcResponse" > > ( above) may appear as siblings in sequence. But is mixing > > supported by RFC text below? > > > > > > > > 7.1 [3] > > > > > > > > Positive Response: If the device can satisfy the request, the = server > > sends an element containing a element with = the > > results of the query. > > > > Negative Response: An element is included in the > > if the request cannot be completed for any reason. > > > > > > > > 7.7 [4] > > > > > > > > Positive Response: If the device was able to satisfy the = request, an > > is sent. The section contains the = appropriate > > subset. > > > > Negative Response: An element is included in the > > if the request cannot be completed for any reason. > > > > > > > > Also, is there a reason for different wording of Positive Response > > text for these two operations? > > > > > > > > Another related question is, if a client receives a warning severity > > to a query that normally returns an , should it > > consider the query a success or failure? In other words, why are = > > and mutually exclusive =E2=80=93 can an operation not = succeed with > > warnings? It would appear that only operations that return something > > other than may express such behavior. > > > > > > > > [1] - https://tools.ietf.org/html/rfc6241#appendix-A > > > > [2] - https://tools.ietf.org/html/rfc6241#appendix-B > > > > [3] - https://tools.ietf.org/html/rfc6241#section-7.1 > > > > [4] - https://tools.ietf.org/html/rfc6241#section-7.7 > > > > > > > > Jernej > > From nobody Wed Oct 5 01:26:27 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCC551293EE for ; Wed, 5 Oct 2016 01:26:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.897 X-Spam-Level: X-Spam-Status: No, score=-4.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gGS9QUpKJrAb for ; Wed, 5 Oct 2016 01:26:24 -0700 (PDT) Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id C7AF7127A91 for ; Wed, 5 Oct 2016 01:26:23 -0700 (PDT) Received: from localhost (h-85-226.a165.priv.bahnhof.se [94.254.85.226]) by mail.tail-f.com (Postfix) with ESMTPSA id A57021AE0339; Wed, 5 Oct 2016 10:26:22 +0200 (CEST) Date: Wed, 05 Oct 2016 10:26:22 +0200 (CEST) Message-Id: <20161005.102622.2242753011592425304.mbj@tail-f.com> To: jernej.tuljak@mg-soft.si From: Martin Bjorklund In-Reply-To: <026601d21ee0$c2117fc0$46347f40$@mg-soft.si> References: <014c01d21e15$cd22c480$67684d80$@mg-soft.si> <20161004.102621.193969733809277494.mbj@tail-f.com> <026601d21ee0$c2117fc0$46347f40$@mg-soft.si> X-Mailer: Mew version 6.5 on Emacs 24.3 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=utf-8 Content-Transfer-Encoding: base64 Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Oct 2016 08:26:26 -0000 Ikplcm5laiBUdWxqYWsiIDxqZXJuZWoudHVsamFrQG1nLXNvZnQuc2k+IHdyb3RlOg0KPiA+IC0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogTWFydGluIEJqb3JrbHVuZCBbbWFp bHRvOm1iakB0YWlsLWYuY29tXQ0KPiA+IFNlbnQ6IFR1ZXNkYXksIE9jdG9iZXIgNCwgMjAxNiAx MDoyNiBBTQ0KPiA+IFRvOiBqZXJuZWoudHVsamFrQG1nLXNvZnQuc2kNCj4gPiBDYzogbmV0Y29u ZkBpZXRmLm9yZw0KPiA+IFN1YmplY3Q6IFJlOiBbTmV0Y29uZl0gTWl4aW5nIDxycGMtZXJyb3I+ IGFuZCAicnBjUmVzcG9uc2VzIiBpbg0KPiA+IE5FVENPTkYNCj4gPiByZXBsaWVzDQo+ID4gDQo+ ID4gSGksDQo+ID4gDQo+ID4gSSB0aGluayB0aGF0IGJvdGggUkZDIDYyNDEgYW5kIFJGQyA2MDIw IGFyZSBub3QgY2xlYXIgb24gdGhpcywgYW5kDQo+ID4gbWF5YmUgZXZlbiB3cm9uZyAoYXMgeW91 IG5vdGUpLiAgSSB0aGluayB0aGF0IHRoYXQgYSByZXF1ZXN0IHNob3VsZDoNCj4gPiANCj4gPiAg IGZhaWwgd2l0aCBvbmUgb3IgbW9yZSBycGMtZXJyb3JzIG9mIHR5cGUgImVycm9yIg0KPiA+IA0K PiA+ICAgT1INCj4gPiANCj4gPiAgIHN1Y2NlZWQgd2l0aCA8b2svPiBvciBzb21lIG90aGVyIHBv c2l0aXZlIHJlc3BvbnNlLCBhbmQgb3B0aW9uYWxseQ0KPiA+ICAgcmV0dXJuIG9uZSBvciBtb3Jl IHJwYy1lcnJvcnMgb2YgdHlwZSAid2FybmluZyINCj4gDQo+IFdoaWxlIEkgYWdyZWUgdGhhdCB0 aGlzIGlzIGhvdyB0aGluZ3Mgc2hvdWxkIGJlLCB0aGVyZSBpcyBvbmUNCj4gcGFydGljdWxhciBj YXNlIHRoYXQgaGFzIGJlZW4gcG9pbnRlZCBvdXQgdG8gdXMsIHdoaWNoIHRoZSBhYm92ZQ0KPiBj YW5ub3QgY292ZXIuIFRoYXQgaXMsIG5vdCBrbm93aW5nIGFuIGVycm9yIHdpbGwgb2NjdXIgYmVm b3JlaGFuZA0KPiB3aGlsZSBhdm9pZGluZyBidWZmZXJpbmcgd2hvbGUgcmVwbGllcy4NCj4gDQo+ IEltYWdpbmUgYSBjb25zdHJhaW5lZCBkZXZpY2UgdGhhdCB3aXNoZXMgdG8gYXZvaWQga2VlcGlu ZyBlbnRpcmUNCj4gcmVwbGllcyBidWZmZXJlZCBpbiBtZW1vcnkgYW5kIGltbWVkaWF0ZWx5IHN0 YXJ0cyBmbHVzaGluZyBjaHVua3Mgb2YNCj4gd2hhdCBsYXRlciBiZWNvbWVzIGEgc2luZ2xlICh3 aG9sZSkgcmVwbHkgb24gdGhlIGNsaWVudCBzaWRlLiBBbiBlcnJvcg0KPiBvY2N1cnMgZHVyaW5n IHByb2Nlc3NpbmcsIGJ1dCBzb21lIGNodW5rcyBoYXZlIGFscmVhZHkgYmVlbiBzZW50LiBUaGUN Cj4gZGV2aWNlIG1ha2VzIHN1cmUgdGhlIHJlcGx5IGVuZHMgdXAgYmVpbmcgd2VsbCBmb3JtZWQg YW5kIGluY2x1ZGVzIGFuDQo+IDxycGMtZXJyb3I+LCB3aGljaCBtZWFucyAic29tZSBwb3NpdGl2 ZSByZXNwb25zZSIgKyA8cnBjLWVycm9yPiB3aXRoDQo+ICJlcnJvciIgc2V2ZXJpdHkuIFRoaXMg d291bGQgcHJvYmFibHkgbWVhbnMgdGhhdCB0aGUgY2xpZW50IG5lZWRzIHRvDQo+IGRpc2NhcmQg dGhlIHBvc2l0aXZlIHBhcnQgb2YgdGhlIHJlcGx5IGFuZCBnaXZlIHByaW9yaXR5IHRvDQo+IDxy cGMtZXJyb3I+Lg0KPiANCj4gSXQgc2VlbXMgbGlrZSBhIHZpYWJsZSB1c2UgY2FzZSB0byBtZSwg YnV0IEkgYW0gaW50ZXJlc3RlZCBpbiBvcGluaW9ucw0KPiBvZiBvdGhlcnMuIEhhcyB0aGVyZSBi ZWVuIHByaW9yIGRpc2N1c3Npb24gb24gdGhpcyB0b3BpYyAoaXQgc2VlbXMNCj4gbGlrZWx5KT8N Cg0KWWVzLiAgQSB0eXBpY2FsIGV4YW1wbGUgaXMgaWYgeW91IGRvIGEgPGdldC8+IGFuZCBuZWVk IHRvIHNlbmQgYmFjaw0KbG90cyBvZiBvcGVyYXRpb25hbCBzdGF0ZSwgYW5kIGFuIGVycm9yIG9j Y3VycyB3aGVuIHlvdSB0cnkgdG8NCnJldHJlaXZlIHNvbWUgc3RhdGUgZnJvbSBzb21lIGh3LiAg VGhlIHNpbXBsZXN0IHNvbHV0aW9uIGlzIGp1c3QgdG8NCm5vdCBzZW5kIGFueXRoaW5nIGZvciBz dWNoIGEgbm9kZSwgYnV0IHRoYXQgaXMgY2xlYXJseSBub3QgZ29vZDsgYQ0KY2xpZW50IG1pZ2h0 IGludGVycHJldCB0aGlzIGluIHNvbWUgdW5pbnRlbnRpb25hbCB3YXkuICBTb21lIGRldmljZXMN CnNlbmQgaW5saW5lIGVycm9ycyBpbiB0aGlzIGNhc2U7IGkuZS4sIGluIHRoZSBtaWRkbGUgb2Yg dGhlIDxkYXRhPg0KeW91J2xsIGdldCBhbiA8cnBjLWVycm9yPiBzdHJ1Y3R1cmUuICBBIChiYWQp IGFsdGVybmF0aXZlIGlmIHlvdSBzdGlsbA0Kd2FudCB0byBiZSBjb21wbGlhbnQgdG8gdGhlIHNw ZWMgaXMgdG8gZHJvcCB0aGUgc2Vzc2lvbiBmcm9tIHRoZQ0Kc2VydmVyIHdoZW4gdGhpcyBoYXBw ZW5zLg0KDQoNCi9tYXJ0aW4NCg0KDQoNCj4gDQo+IEplcm5lag0KPiANCj4gPiANCj4gPiBBZGRp dGlvbmFsbHksIGl0IHNob3VsZCBiZSBvayB0byByZXR1cm4gPG9rLz4gKyBhZGRpdGlvbmFsIHBv c2l0aXZlDQo+ID4gbm9kZXMsIGZvciBleGFtcGxlIGl0cyBzaG91bGQgYmUgZmluZSB0byByZXR1 cm4gdGhpcyBhcyBhIHJlc3VsdCB0bw0KPiA+IDxlZGl0LWNvbmZpZz46DQo+ID4gDQo+ID4gICAg PHJwYy1yZXBseT4NCj4gPiAgICAgIDxvay8+DQo+ID4gICAgICA8bXktZGF0YXN0b3JlLWV0YWcg eG1sbj0iLi4uIj5iMzgzMGYyM2E0YzwvbXktZGF0YXN0b3JlLWV0YWc+DQo+ID4gICAgPC9ycGMt cmVwbHk+DQo+ID4gDQo+ID4gSSBrbm93IHRoYXQgc2VydmVycyBhbHJlYWR5IHJldHVybiB0aGVz ZSBraW5kIG9mIHJlc3VsdHMuLi4NCj4gPiANCj4gPiANCj4gPiAvbWFydGluDQo+ID4gDQo+ID4g DQo+ID4gDQo+ID4gDQo+ID4gIkplcm5laiBUdWxqYWsiIDxqZXJuZWoudHVsamFrQG1nLXNvZnQu c2k+IHdyb3RlOg0KPiA+ID4gQW55b25lPw0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gSmVy bmVqDQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiBGcm9tOiBOZXRjb25mIFttYWlsdG86bmV0 Y29uZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSmVybmVqDQo+ID4gPiBUdWxqYWsN Cj4gPiA+IFNlbnQ6IFdlZG5lc2RheSwgU2VwdGVtYmVyIDI4LCAyMDE2IDE6NDEgUE0NCj4gPiA+ IFRvOiBuZXRjb25mQGlldGYub3JnDQo+ID4gPiBTdWJqZWN0OiBbTmV0Y29uZl0gTWl4aW5nIDxy cGMtZXJyb3I+IGFuZCAicnBjUmVzcG9uc2VzIiBpbiBORVRDT05GDQo+ID4gPiByZXBsaWVzDQo+ ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiBIaSwNCj4gPiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+ IGlzIGEgUkZDNjI0MSBjb21wbGlhbnQgTkVUQ09ORiBzZXJ2ZXIgYWxsb3dlZCB0byByZXR1cm4g YSByZXNwb25zZQ0KPiA+ID4gbGlrZSB0aGlzIGZvciBzdGFuZGFyZCBvcGVyYXRpb25zIChnZXQs IGdldC1jb25maWcpPw0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gPD94bWwgdmVyc2lvbj0i MS4wIiBlbmNvZGluZz0idXRmLTgiPz4NCj4gPiA+DQo+ID4gPiA8cnBjLXJlcGx5IHhtbG5zPSJ1 cm46aWV0ZjpwYXJhbXM6eG1sOm5zOm5ldGNvbmY6YmFzZToxLjAiDQo+ID4gPiBtZXNzYWdlLWlk PSIyIj4NCj4gPiA+DQo+ID4gPiAgIDxkYXRhLz4NCj4gPiA+DQo+ID4gPiAgIDxycGMtZXJyb3I+ DQo+ID4gPg0KPiA+ID4gICAgIDxlcnJvci10eXBlPmFwcGxpY2F0aW9uPC9lcnJvci10eXBlPg0K PiA+ID4NCj4gPiA+ICAgICA8ZXJyb3ItdGFnPm9wZXJhdGlvbi1mYWlsZWQ8L2Vycm9yLXRhZz4N Cj4gPiA+DQo+ID4gPiAgICAgPGVycm9yLXNldmVyaXR5PmVycm9yPC9lcnJvci1zZXZlcml0eT4N Cj4gPiA+DQo+ID4gPiAgICAgPGVycm9yLW1lc3NhZ2U+VW5rbm93biBlcnJvciBvY2N1cmVkLjwv ZXJyb3ItbWVzc2FnZT4NCj4gPiA+DQo+ID4gPiAgIDwvcnBjLWVycm9yPg0KPiA+ID4NCj4gPiA+ IDwvcnBjLXJlcGx5Pg0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gVGhhdCBpcywgbWl4aW5n IGEgUG9zaXRpdmUgUmVzcG9uc2UgYW5kIE5lZ2F0aXZlIFJlc3BvbnNlPyBGb3IgdGhlDQo+ID4g PiBzYWtlIG9mIGFyZ3VtZW50LCBjb25zaWRlciB0aGUgPHJwYy1lcnJvcj4gYWJvdmUgYXMgb25l IG9mIHRoZQ0KPiA+ID4gc3RhbmRhcmQgb25lcyBmcm9tIEFwcGVuZGl4IEEgWzFdIChhbmQgPGRh dGEvPiBtYXkgbm90IGFjdHVhbGx5IGJlDQo+ID4gPiBlbXB0eSkuDQo+ID4gPg0KPiA+ID4NCj4g PiA+DQo+ID4gPiBJdCBpcyBjbGVhciBmcm9tIEFwcGVuZGl4IEIgWzJdIHRoYXQgPHJwYy1lcnJv cj4gYW5kICJycGNSZXNwb25zZSINCj4gPiA+ICg8ZGF0YS8+IGFib3ZlKSBtYXkgYXBwZWFyIGFz IHNpYmxpbmdzIGluIHNlcXVlbmNlLiBCdXQgaXMgbWl4aW5nDQo+ID4gPiBzdXBwb3J0ZWQgYnkg UkZDIHRleHQgYmVsb3c/DQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiA3LjEgPGdldC1jb25m aWc+IFszXQ0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gICAgUG9zaXRpdmUgUmVzcG9uc2U6 ICBJZiB0aGUgZGV2aWNlIGNhbiBzYXRpc2Z5IHRoZSByZXF1ZXN0LCB0aGUgc2VydmVyDQo+ID4g PiAgICAgICBzZW5kcyBhbiA8cnBjLXJlcGx5PiBlbGVtZW50IGNvbnRhaW5pbmcgYSA8ZGF0YT4g ZWxlbWVudCB3aXRoIHRoZQ0KPiA+ID4gICAgICAgcmVzdWx0cyBvZiB0aGUgcXVlcnkuDQo+ID4g Pg0KPiA+ID4gICAgTmVnYXRpdmUgUmVzcG9uc2U6ICBBbiA8cnBjLWVycm9yPiBlbGVtZW50IGlz IGluY2x1ZGVkIGluIHRoZQ0KPiA+ID4gICAgICAgPHJwYy1yZXBseT4gaWYgdGhlIHJlcXVlc3Qg Y2Fubm90IGJlIGNvbXBsZXRlZCBmb3IgYW55IHJlYXNvbi4NCj4gPiA+DQo+ID4gPg0KPiA+ID4N Cj4gPiA+IDcuNyA8Z2V0PiBbNF0NCj4gPiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+ICAgIFBvc2l0 aXZlIFJlc3BvbnNlOiAgSWYgdGhlIGRldmljZSB3YXMgYWJsZSB0byBzYXRpc2Z5IHRoZSByZXF1 ZXN0LCBhbg0KPiA+ID4gICAgICAgPHJwYy1yZXBseT4gaXMgc2VudC4gIFRoZSA8ZGF0YT4gc2Vj dGlvbiBjb250YWlucyB0aGUgYXBwcm9wcmlhdGUNCj4gPiA+ICAgICAgIHN1YnNldC4NCj4gPiA+ DQo+ID4gPiAgICBOZWdhdGl2ZSBSZXNwb25zZTogIEFuIDxycGMtZXJyb3I+IGVsZW1lbnQgaXMg aW5jbHVkZWQgaW4gdGhlDQo+ID4gPiAgICAgICA8cnBjLXJlcGx5PiBpZiB0aGUgcmVxdWVzdCBj YW5ub3QgYmUgY29tcGxldGVkIGZvciBhbnkgcmVhc29uLg0KPiA+ID4NCj4gPiA+DQo+ID4gPg0K PiA+ID4gQWxzbywgaXMgdGhlcmUgYSByZWFzb24gZm9yIGRpZmZlcmVudCB3b3JkaW5nIG9mIFBv c2l0aXZlIFJlc3BvbnNlDQo+ID4gPiB0ZXh0IGZvciB0aGVzZSB0d28gb3BlcmF0aW9ucz8NCj4g PiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+IEFub3RoZXIgcmVsYXRlZCBxdWVzdGlvbiBpcywgaWYg YSBjbGllbnQgcmVjZWl2ZXMgYSB3YXJuaW5nIHNldmVyaXR5DQo+ID4gPiA8cnBjLWVycm9yPiB0 byBhIHF1ZXJ5IHRoYXQgbm9ybWFsbHkgcmV0dXJucyBhbiA8b2svPiwgc2hvdWxkIGl0DQo+ID4g PiBjb25zaWRlciB0aGUgcXVlcnkgYSBzdWNjZXNzIG9yIGZhaWx1cmU/IEluIG90aGVyIHdvcmRz LCB3aHkgYXJlIDxvay8+DQo+ID4gPiBhbmQgPHJwYy1lcnJvcj4gbXV0dWFsbHkgZXhjbHVzaXZl IOKAkyBjYW4gYW4gb3BlcmF0aW9uIG5vdCBzdWNjZWVkIHdpdGgNCj4gPiA+IHdhcm5pbmdzPyBJ dCB3b3VsZCBhcHBlYXIgdGhhdCBvbmx5IG9wZXJhdGlvbnMgdGhhdCByZXR1cm4gc29tZXRoaW5n DQo+ID4gPiBvdGhlciB0aGFuIDxvay8+IG1heSBleHByZXNzIHN1Y2ggYmVoYXZpb3IuDQo+ID4g Pg0KPiA+ID4NCj4gPiA+DQo+ID4gPiBbMV0gLSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv cmZjNjI0MSNhcHBlbmRpeC1BDQo+ID4gPg0KPiA+ID4gWzJdIC0gaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL3JmYzYyNDEjYXBwZW5kaXgtQg0KPiA+ID4NCj4gPiA+IFszXSAtIGh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2MjQxI3NlY3Rpb24tNy4xDQo+ID4gPg0KPiA+ID4gWzRd IC0gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzYyNDEjc2VjdGlvbi03LjcNCj4gPiA+ DQo+ID4gPg0KPiA+ID4NCj4gPiA+IEplcm5lag0KPiA+ID4NCj4gDQo= From nobody Wed Oct 5 09:42:29 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBDBC129787 for ; Wed, 5 Oct 2016 09:42:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.516 X-Spam-Level: X-Spam-Status: No, score=-17.516 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uCNf3dhU-tkv for ; Wed, 5 Oct 2016 09:42:25 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B052012967B for ; Wed, 5 Oct 2016 09:42:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11772; q=dns/txt; s=iport; t=1475685745; x=1476895345; h=from:to:subject:date:message-id:mime-version; bh=kIwA9cSX1tCwMXj3f58IoqAZsm2fD2PIwwqJh/UVpS0=; b=d1tubB1d/a6dCWaNwVjsS1CTn0fj6cTvUtNGL9cZZgu+2s0RbXkrjZ4m jaRPEAJYpp/ayREQu1re6bfBNQ1gN3wDp1rny8YZogLasXgUyQQOmfPHB gYXQZ9ild9hkh/hHtprchKBhcYLwL4WP5Zb/UYZaYFaUf5gDjZZnF/Tmw M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0A0AgBbLPVX/4MNJK1DGhwBAQQBAQoBA?= =?us-ascii?q?YMHNgEBAQEBHld8B4QkiQemFoMDgg+CCSiHbDgUAQIBAQEBAQEBXhwLhGgtOiQ?= =?us-ascii?q?BLQsMPCYBBBuIRg4tnH6VAYdUAQEBAQEBBAEBAQEBAQEBGwWGPIlqgX6DEgWIO?= =?us-ascii?q?5E/AYYmiUmBdY4FhwyFZ4N9AR42S4JrHIFScgEEhgIpgQaBAAEBAQ?= X-IronPort-AV: E=Sophos;i="5.31,449,1473120000"; d="scan'208,217";a="156713827" Received: from alln-core-1.cisco.com ([173.36.13.131]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 05 Oct 2016 16:42:24 +0000 Received: from XCH-RTP-015.cisco.com (xch-rtp-015.cisco.com [64.101.220.155]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id u95GgNm6015988 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 5 Oct 2016 16:42:24 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-015.cisco.com (64.101.220.155) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 5 Oct 2016 12:42:23 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1210.000; Wed, 5 Oct 2016 12:42:23 -0400 From: "Eric Voit (evoit)" To: "netconf@ietf.org" Thread-Topic: Minutes 5-Oct: NETCONF/RESTCONF/HTTP2 Subscription & Event drafts Thread-Index: AdIfJ0DjRwRpeYM4TtePVVoWX1BUZAAACAZQ Date: Wed, 5 Oct 2016 16:42:22 +0000 Message-ID: <11e9702ab48644d7895ec8753efd8c9c@XCH-RTP-013.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.41.60.38] Content-Type: multipart/alternative; boundary="_000_11e9702ab48644d7895ec8753efd8c9cXCHRTP013ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [Netconf] Minutes 5-Oct: NETCONF/RESTCONF/HTTP2 Subscription & Event drafts X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Oct 2016 16:42:28 -0000 --_000_11e9702ab48644d7895ec8753efd8c9cXCHRTP013ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Contents below posted at: https://github.com/netconf-wg/yang-push/wiki/Minutes-2016-10-05 Meeting 8-9AM PT October 5th 2016 Meeting Materials Attending WebEx Recording password: TwhNuRi4 Andy Bierman, Alexander Clemm, Alberto Gonzalez Pri= eto, Eric Voit, Susan Hares, Tim Jenkins, Balazs Lengyel, Kent Watsen, Mich= ael Scharf Highlights * Anydata instead of string for yang push updates. o We will use Anydata instead of string for supporting encoded push d= ata. Not just JSON or XML. (Protobuf / CBOR is easily carried too with Anyd= ata.) * Annotation proposal o Open question is whether we have a new (tbd) statement to allow non= -notifiable and other assertions to be made against leafs. This generalized= assertion capability is not really yang-push specific. o Balazs to go the Netmod and Netconf alias to socialize proposal to = see if a general statement flies. If WGs don't like a generalized capabilit= y, we could have something just for the not-notifiable capability for yang-= psuh. o Augmentations must be allowed outside of base yang file to improve = version control. * Resetting on-change subscription state o Ability to send a push-update (rather than a push-change-update) to= reset an existing on-change subscription to a clean state. (This may or ma= y not be synchronized with a suspend/resume.) o Was a request to have an RPC for dynamic subscriptions to allow the= client to request a resynch. * Anchor time o We reaffirmed we we need anchor-time in addition to start-time from= 5277bis. * Adding "Notifications-not-sent" flag to push-update notifications. o Indicates that objects were not included based on an inability of t= he publisher to fulfill the contract. o It is possible to send such an update with object contents. o Is relevant for on-change and periodic update. o Will not use independent notification to allow easy synchronization= with contents and periods of specific push updates * Simplifying Modify subscription parameters o Removed the following from yang-push modify-subscription: subscript= ion-priority, subscription-dependency, dscp. Need to also removing synch-on= -start and excluded change. o We should also remove stream and encoding for 5277bis. * Etag o At this point we will not pursue for yang-push. Difficulties includ= e etag on identifies on the wire contents, doesn't send etags for each of t= he pushed objects. * Unencrypted HTTP2 transport o As HTTP2 doesn't require encryption, this should not be an issue. Next Meeting * Review new update to yang-push draft and model. If time permits, wo= rk on stream definitions. * Get ready for IETF S Korea o Do we want an informal session on transport of GBP/CBOR yang encodi= ngs? --_000_11e9702ab48644d7895ec8753efd8c9cXCHRTP013ciscocom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Contents below posted at:
 
Meeting 8-9AM PT October 5th 2016
Meeting Materials Attending
WebEx Recording
password: TwhNuRi4
Andy Bierman, Alexander Clemm, Alberto Gonzalez Prieto, Eric Voit, Susan H= ares, Tim Jenkins, Balazs Lengyel, Kent Watsen, Michael Scharf
Highlights<= /b>
  • Anydata instead of string f= or yang push updates.
    •
  • We will use Anydata instead= of string for supporting encoded push data. Not just JSON or XML. (Protobu= f / CBOR is easily carried too with Anydata.)
    •
  • Annotation proposal
    • <= /span>
  • Open question is whether we= have a new (tbd) statement to allow non-notifiable and other assertions to= be made against leafs. This generalized assertion capability is not really= yang-push specific.
  • Ba= lazs to go the Netmod and Netconf alias to socialize proposal to see if a g= eneral statement flies. If WGs don't like a generalized capability, we coul= d have something just for the not-notifiable capability for yang-psuh.
  • Augmentation= s must be allowed outside of base yang file to improve version control.
  • Resetting on-change subsc= ription state
    •
  • Ability to send a push-upda= te (rather than a push-change-update) to reset an existing on-change subscr= iption to a clean state. (This may or may not be synchronized with a suspen= d/resume.)
  • Was a reques= t to have an RPC for dynamic subscriptions to allow the client to request a= resynch.
    •
  • Anchor time
    •
  • We reaffirmed we we need an= chor-time in addition to start-time from 5277bis.
    •
  • Adding “Notificatio= ns-not-sent” flag to push-update notifications.
    •
  • Indicates that objects were= not included based on an inability of the publisher to fulfill the contrac= t.
  • It is possible to se= nd such an update with object contents.
  • Is relevant for on-change and periodic update.
  • Will not use independent notificat= ion to allow easy synchronization with contents and periods of specific pus= h updates
    •
  • Simplifying Modify subscr= iption parameters
    •
  • Removed the following from = yang-push modify-subscription: subscription-priority, subscription-dependen= cy, dscp. Need to also removing synch-on-start and excluded change.
    • We should also remove stream a= nd encoding for 5277bis.
  • Etag
    •
  • At this point we will not p= ursue for yang-push. Difficulties include etag on identifies on the wire co= ntents, doesn't send etags for each of the pushed objects.
    •
  • Unencrypted HTTP2 transpo= rt
    •
  • As HTTP2 doesn't require en= cryption, this should not be an issue.
    •
Next Meeting
  • Review new update to yang-p= ush draft and model. If time permits, work on stream definitions.
  • Get ready for IETF S Korea
    • <= /font>
  • Do we want an informal sess= ion on transport of GBP/CBOR yang encodings?
    •
 
 
 --_000_11e9702ab48644d7895ec8753efd8c9cXCHRTP013ciscocom_-- From andre-d-brizido@alticelabs.com Thu Oct 6 11:00:24 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA75C12970F for ; Thu, 6 Oct 2016 11:00:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.62 X-Spam-Level: X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jVAOJgNJW1RH for ; Thu, 6 Oct 2016 11:00:20 -0700 (PDT) Received: from smtp2.telecom.pt (smtp2.telecom.pt [83.240.175.146]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94A5612972C for ; Thu, 6 Oct 2016 11:00:18 -0700 (PDT) From: =?iso-8859-1?Q?Andr=E9_Domingos_Br=EDzido?= To: "mbj@tail-f.com" Date: Thu, 6 Oct 2016 19:00:16 +0100 Thread-Topic: Mixing and "rpcResponses" in NETCONF replies Thread-Index: AdIf+34pyE94yb1GQ7qaeFO47obTpw== Message-ID: <3BAB6CADBB6CA243A443E7C6674F2AB40828F4908F@PTPTVDEX02.PTPortugal.corpPT.com> Accept-Language: pt-PT Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: pt-PT Content-Type: multipart/alternative; boundary="_000_3BAB6CADBB6CA243A443E7C6674F2AB40828F4908FPTPTVDEX02PTP_" MIME-Version: 1.0 Archived-At: Cc: "netconf@ietf.org" Subject: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Oct 2016 18:01:56 -0000 --_000_3BAB6CADBB6CA243A443E7C6674F2AB40828F4908FPTPTVDEX02PTP_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Regarding the email thread below, I would like to check with you that my un= derstanding is correct. Any of these alternatives are acceptable in order for a server to be compli= ant to the NETCONF specification: 1. Buffer the entire reply until the result of the operation is known= , if the reply does not fit the buffer then send the "too big" error [1] 2. Silently discard errors and omit tags 3. Send in the middle of (When you say in the mi= ddle of you mean as a direct child, correct?) 4. Drop the session (the least preferable) Best regards Andre [1] https://tools.ietf.org/html/rfc6241#appendix-A > "Jernej Tuljak" wrote: > > > -----Original Message----- > > > From: Martin Bjorklund [mailto:mbj at tail-f.com] > > > Sent: Tuesday, October 4, 2016 10:26 AM > > > To: jernej.tuljak at mg-soft.si > > > Cc: netconf at ietf.org > > > Subject: Re: [Netconf] Mixing and "rpcResponses" in > > > NETCONF > > > replies > > > > > > Hi, > > > > > > I think that both RFC 6241 and RFC 6020 are not clear on this, and > > > maybe even wrong (as you note). I think that that a request should: > > > > > > fail with one or more rpc-errors of type "error" > > > > > > OR > > > > > > succeed with or some other positive response, and optionally > > > return one or more rpc-errors of type "warning" > > > > While I agree that this is how things should be, there is one > > particular case that has been pointed out to us, which the above > > cannot cover. That is, not knowing an error will occur beforehand > > while avoiding buffering whole replies. > > > > Imagine a constrained device that wishes to avoid keeping entire > > replies buffered in memory and immediately starts flushing chunks of > > what later becomes a single (whole) reply on the client side. An error > > occurs during processing, but some chunks have already been sent. The > > device makes sure the reply ends up being well formed and includes an > > , which means "some positive response" + with > > "error" severity. This would probably means that the client needs to > > discard the positive part of the reply and give priority to > > . > > > > It seems like a viable use case to me, but I am interested in opinions > > of others. Has there been prior discussion on this topic (it seems > > likely)? > > Yes. A typical example is if you do a and need to send back > lots of operational state, and an error occurs when you try to > retreive some state from some hw. The simplest solution is just to > not send anything for such a node, but that is clearly not good; a > client might interpret this in some unintentional way. Some devices > send inline errors in this case; i.e., in the middle of the > you'll get an structure. A (bad) alternative if you still > want to be compliant to the spec is to drop the session from the > server when this happens. > > > /martin --_000_3BAB6CADBB6CA243A443E7C6674F2AB40828F4908FPTPTVDEX02PTP_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi

 = ;

Regarding the ema= il thread below, I would like to check with you that my understanding is co= rrect.

Any of= these alternatives are acceptable in order for a server to be compliant to= the NETCONF specification:

1.       Buffer the entire reply until the resu= lt of the operation is known, if the reply does not fit the buffer then =A0= send the “too big” error [1]

2.       = Silently discard errors a= nd omit tags

3.       Send <rpc-errors> in the middle of <data>= (When you say =A0in the middle of <data> you mean as a direct child,= correct?)

4.       Drop the session (the least preferable)

 

<= p class=3DMsoNormal>Best regards

Andre

 

[1] https://tools.ietf.org/html/rfc62= 41#appendix-A

 

 

<= span lang=3DEN-US style=3D'font-size:10.0pt;font-family:"Courier New";color= :black'>> "Jernej Tuljak" <jernej.tuljak at mg-soft.si> = wrote:

> > > = -----Original Message-----

> > > From: Martin Bjorklund [mailto:mbj at tail-f.com]

> > > Sent: Tuesday, O= ctober 4, 2016 10:26 AM

= > > > To: jernej.tuljak at mg-soft.si

> > > Cc: netconf at ietf.org

> > > Subject: Re: [Netconf]= Mixing <rpc-error> and "rpcResponses" in=

> > > NETCONF<= /p>

> > > replies

> > >

> > > Hi,

> > >

> > > I think that both RFC 6241 and RFC 6020 are not c= lear on this, and

> &= gt; > maybe even wrong (as you note).=A0 I think that that a request sho= uld:

> > >

> > >=A0=A0 fail w= ith one or more rpc-errors of type "error"

<= p class=3DMsoNormal>> > >

> > >=A0=A0 OR

> > >

> > >=A0=A0 succeed with <ok/> or some other p= ositive response, and optionally

= > > >=A0=A0 return one or more rpc-errors of type "w= arning"

> > <= o:p>

> > While I agree = that this is how things should be, there is one

> > particular case that has been pointed out= to us, which the above

= > > cannot cover. That is, not knowing an error will occur beforehand=

> > while avoidin= g buffering whole replies.

> >

> > = Imagine a constrained device that wishes to avoid keeping entire=

> > replies buffered in memo= ry and immediately starts flushing chunks of

> > what later becomes a single (whole) reply o= n the client side. An error

> > occurs during processing, but some chunks have already been s= ent. The

> > devic= e makes sure the reply ends up being well formed and includes an=

> > <rpc-error>, which= means "some positive response" + <rpc-error> with

> > "error" seve= rity. This would probably means that the client needs to<= /p>

> > discard the positive part of the= reply and give priority to

> > <rpc-error>.

= > >

>= > It seems like a viable use case to me, but I am interested in opinion= s

> > of others. H= as there been prior discussion on this topic (it seems

> > likely)?

>

<= span lang=3DEN-US style=3D'font-size:10.0pt;font-family:"Courier New";color= :black'>> Yes.=A0 A typical example is if you do a <get/> and need= to send back

> lots = of operational state, and an error occurs when you try to=

> retreive some state from some hw.=A0= The simplest solution is just to

> not send anything for such a node, but that is clearly not g= ood; a

> client mig= ht interpret this in some unintentional way.=A0 Some devices

> send inline errors in this case; = i.e., in the middle of the <data>

> you'll get an <rpc-error> structure.=A0 A (bad) = alternative if you still

> want to be compliant to the spec is to drop the session from the=

> server when this happen= s.

>

>

> /martin

= --_000_3BAB6CADBB6CA243A443E7C6674F2AB40828F4908FPTPTVDEX02PTP_-- From nobody Thu Oct 6 11:20:53 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4B141204D9 for ; Thu, 6 Oct 2016 11:20:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.897 X-Spam-Level: X-Spam-Status: No, score=-4.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kvOr3AQgt2Ac for ; Thu, 6 Oct 2016 11:20:49 -0700 (PDT) Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id 250FD129765 for ; Thu, 6 Oct 2016 11:20:31 -0700 (PDT) Received: from localhost (h-85-226.a165.priv.bahnhof.se [94.254.85.226]) by mail.tail-f.com (Postfix) with ESMTPSA id 6CE561AE0352; Thu, 6 Oct 2016 20:20:30 +0200 (CEST) Date: Thu, 06 Oct 2016 20:20:30 +0200 (CEST) Message-Id: <20161006.202030.2009789249524290825.mbj@tail-f.com> To: andre-d-brizido@alticelabs.com From: Martin Bjorklund In-Reply-To: <3BAB6CADBB6CA243A443E7C6674F2AB40828F4908F@PTPTVDEX02.PTPortugal.corpPT.com> References: <3BAB6CADBB6CA243A443E7C6674F2AB40828F4908F@PTPTVDEX02.PTPortugal.corpPT.com> X-Mailer: Mew version 6.5 on Emacs 24.3 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Oct 2016 18:20:51 -0000 Andr=E9 Domingos Br=EDzido wrote: > Hi > = > Regarding the email thread below, I would like to check with you that= > my understanding is correct. > Any of these alternatives are acceptable in order for a server to be > compliant to the NETCONF specification: > = > 1. Buffer the entire reply until the result of the operation is > known, if the reply does not fit the buffer then send the "too big" > error [1] > = > 2. Silently discard errors and omit tags > = > 3. Send in the middle of (When you say in the > middle of you mean as a direct child, correct?) I meant deep inline, where the real element would have been. > 4. Drop the session (the least preferable) I don't know if (1) is preferred; it doesn't really help the client to get a 'too-big' error in this case. /martin > = > Best regards > Andre > = > = > [1] https://tools.ietf.org/html/rfc6241#appendix-A > = > = > > "Jernej Tuljak" wrote: > > > > -----Original Message----- > > > > From: Martin Bjorklund [mailto:mbj at tail-f.com] > > > > Sent: Tuesday, October 4, 2016 10:26 AM > > > > To: jernej.tuljak at mg-soft.si > > > > Cc: netconf at ietf.org > > > > Subject: Re: [Netconf] Mixing and "rpcResponses" in= > > > > NETCONF > > > > replies > > > > > > > > Hi, > > > > > > > > I think that both RFC 6241 and RFC 6020 are not clear on this, = and > > > > maybe even wrong (as you note). I think that that a request sh= ould: > > > > > > > > fail with one or more rpc-errors of type "error" > > > > > > > > OR > > > > > > > > succeed with or some other positive response, and optio= nally > > > > return one or more rpc-errors of type "warning" > > > > > > While I agree that this is how things should be, there is one > > > particular case that has been pointed out to us, which the above > > > cannot cover. That is, not knowing an error will occur beforehand= > > > while avoiding buffering whole replies. > > > > > > Imagine a constrained device that wishes to avoid keeping entire > > > replies buffered in memory and immediately starts flushing chunks= of > > > what later becomes a single (whole) reply on the client side. An = error > > > occurs during processing, but some chunks have already been sent.= The > > > device makes sure the reply ends up being well formed and include= s an > > > , which means "some positive response" + w= ith > > > "error" severity. This would probably means that the client needs= to > > > discard the positive part of the reply and give priority to > > > . > > > > > > It seems like a viable use case to me, but I am interested in opi= nions > > > of others. Has there been prior discussion on this topic (it seem= s > > > likely)? > > > > Yes. A typical example is if you do a and need to send back= > > lots of operational state, and an error occurs when you try to > > retreive some state from some hw. The simplest solution is just to= > > not send anything for such a node, but that is clearly not good; a > > client might interpret this in some unintentional way. Some device= s > > send inline errors in this case; i.e., in the middle of the > > you'll get an structure. A (bad) alternative if you st= ill > > want to be compliant to the spec is to drop the session from the > > server when this happens. > > > > > > /martin From nobody Thu Oct 6 11:33:41 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F158912975F for ; Thu, 6 Oct 2016 11:33:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.621 X-Spam-Level: X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BZ7n_eezstOm for ; Thu, 6 Oct 2016 11:33:30 -0700 (PDT) Received: from smtp2.telecom.pt (smtp2.telecom.pt [83.240.175.146]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBAF812975E for ; Thu, 6 Oct 2016 11:33:29 -0700 (PDT) From: =?iso-8859-1?Q?Andr=E9_Domingos_Br=EDzido?= To: Martin Bjorklund Date: Thu, 6 Oct 2016 19:33:27 +0100 Thread-Topic: Mixing and "rpcResponses" in NETCONF replies Thread-Index: AdIf/lOdxMbKf7I2QzqdFzC55y7QUQAAFKUQ Message-ID: <3BAB6CADBB6CA243A443E7C6674F2AB40828F4909C@PTPTVDEX02.PTPortugal.corpPT.com> References: <3BAB6CADBB6CA243A443E7C6674F2AB40828F4908F@PTPTVDEX02.PTPortugal.corpPT.com> <20161006.202030.2009789249524290825.mbj@tail-f.com> In-Reply-To: <20161006.202030.2009789249524290825.mbj@tail-f.com> Accept-Language: pt-PT Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: pt-PT Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "netconf@ietf.org" Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Oct 2016 18:33:36 -0000 But including the instead of the expected element will not brea= k the syntax defined in the YANG data model? Or standard YANG modules have to be augmented by proprietary modules in eve= ry potential point of failure? Best regards=20 Andre -----Original Message----- From: Martin Bjorklund [mailto:mbj@tail-f.com]=20 Sent: 6 de outubro de 2016 19:21 To: Andr=E9 Domingos Br=EDzido Cc: netconf@ietf.org Subject: Re: Mixing and "rpcResponses" in NETCONF replies Andr=E9 Domingos Br=EDzido wrote: > Hi >=20 > Regarding the email thread below, I would like to check with you that=20 > my understanding is correct. > Any of these alternatives are acceptable in order for a server to be=20 > compliant to the NETCONF specification: >=20 > 1. Buffer the entire reply until the result of the operation is=20 > known, if the reply does not fit the buffer then send the "too big" > error [1] >=20 > 2. Silently discard errors and omit tags >=20 > 3. Send in the middle of (When you say in the=20 > middle of you mean as a direct child, correct?) I meant deep inline, where the real element would have been. > 4. Drop the session (the least preferable) I don't know if (1) is preferred; it doesn't really help the client to get = a 'too-big' error in this case. /martin >=20 > Best regards > Andre >=20 >=20 > [1] https://tools.ietf.org/html/rfc6241#appendix-A >=20 >=20 > > "Jernej Tuljak" wrote: > > > > -----Original Message----- > > > > From: Martin Bjorklund [mailto:mbj at tail-f.com] > > > > Sent: Tuesday, October 4, 2016 10:26 AM > > > > To: jernej.tuljak at mg-soft.si > > > > Cc: netconf at ietf.org > > > > Subject: Re: [Netconf] Mixing and "rpcResponses" in=20 > > > > NETCONF replies > > > > > > > > Hi, > > > > > > > > I think that both RFC 6241 and RFC 6020 are not clear on this,=20 > > > > and maybe even wrong (as you note). I think that that a request sh= ould: > > > > > > > > fail with one or more rpc-errors of type "error" > > > > > > > > OR > > > > > > > > succeed with or some other positive response, and optionall= y > > > > return one or more rpc-errors of type "warning" > > > > > > While I agree that this is how things should be, there is one=20 > > > particular case that has been pointed out to us, which the above=20 > > > cannot cover. That is, not knowing an error will occur beforehand=20 > > > while avoiding buffering whole replies. > > > > > > Imagine a constrained device that wishes to avoid keeping entire=20 > > > replies buffered in memory and immediately starts flushing chunks=20 > > > of what later becomes a single (whole) reply on the client side.=20 > > > An error occurs during processing, but some chunks have already=20 > > > been sent. The device makes sure the reply ends up being well=20 > > > formed and includes an , which means "some positive=20 > > > response" + with "error" severity. This would probably=20 > > > means that the client needs to discard the positive part of the=20 > > > reply and give priority to . > > > > > > It seems like a viable use case to me, but I am interested in=20 > > > opinions of others. Has there been prior discussion on this topic=20 > > > (it seems likely)? > > > > Yes. A typical example is if you do a and need to send back=20 > > lots of operational state, and an error occurs when you try to=20 > > retreive some state from some hw. The simplest solution is just to=20 > > not send anything for such a node, but that is clearly not good; a=20 > > client might interpret this in some unintentional way. Some devices=20 > > send inline errors in this case; i.e., in the middle of the =20 > > you'll get an structure. A (bad) alternative if you=20 > > still want to be compliant to the spec is to drop the session from=20 > > the server when this happens. > > > > > > /martin From nobody Thu Oct 6 11:39:16 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 714E4129760 for ; Thu, 6 Oct 2016 11:39:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.897 X-Spam-Level: X-Spam-Status: No, score=-4.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1eyLLYjaSXZQ for ; Thu, 6 Oct 2016 11:39:13 -0700 (PDT) Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id 3345712975B for ; Thu, 6 Oct 2016 11:39:09 -0700 (PDT) Received: from localhost (h-85-226.a165.priv.bahnhof.se [94.254.85.226]) by mail.tail-f.com (Postfix) with ESMTPSA id 8FD251AE0352; Thu, 6 Oct 2016 20:39:07 +0200 (CEST) Date: Thu, 06 Oct 2016 20:39:07 +0200 (CEST) Message-Id: <20161006.203907.1563755577378708213.mbj@tail-f.com> To: andre-d-brizido@alticelabs.com From: Martin Bjorklund In-Reply-To: <3BAB6CADBB6CA243A443E7C6674F2AB40828F4909C@PTPTVDEX02.PTPortugal.corpPT.com> References: <3BAB6CADBB6CA243A443E7C6674F2AB40828F4908F@PTPTVDEX02.PTPortugal.corpPT.com> <20161006.202030.2009789249524290825.mbj@tail-f.com> <3BAB6CADBB6CA243A443E7C6674F2AB40828F4909C@PTPTVDEX02.PTPortugal.corpPT.com> X-Mailer: Mew version 6.5 on Emacs 24.3 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Oct 2016 18:39:15 -0000 Andr=E9 Domingos Br=EDzido wrote: > But including the instead of the expected element will no= t > break the syntax defined in the YANG data model? Since the is in a different XML namespace than the rest, clients will hopefully not break; some clients will be prepared for it, and some will just skip it. I'm just saying that some servers work like this. It is not well defined in the specs. > Or standard YANG modules have to be augmented by proprietary modules > in every potential point of failure? No that wouldn't be very useful. /martin > = > Best regards = > Andre > = > -----Original Message----- > From: Martin Bjorklund [mailto:mbj@tail-f.com] = > Sent: 6 de outubro de 2016 19:21 > To: Andr=E9 Domingos Br=EDzido > Cc: netconf@ietf.org > Subject: Re: Mixing and "rpcResponses" in NETCONF replies= > = > Andr=E9 Domingos Br=EDzido wrote: > > Hi > > = > > Regarding the email thread below, I would like to check with you th= at = > > my understanding is correct. > > Any of these alternatives are acceptable in order for a server to b= e = > > compliant to the NETCONF specification: > > = > > 1. Buffer the entire reply until the result of the operation is = > > known, if the reply does not fit the buffer then send the "too big"= > > error [1] > > = > > 2. Silently discard errors and omit tags > > = > > 3. Send in the middle of (When you say in the = > > middle of you mean as a direct child, correct?) > = > I meant deep inline, where the real element would have been. > = > > 4. Drop the session (the least preferable) > = > = > I don't know if (1) is preferred; it doesn't really help the client t= o > get a 'too-big' error in this case. > = > = > /martin > = > = > = > > = > > Best regards > > Andre > > = > > = > > [1] https://tools.ietf.org/html/rfc6241#appendix-A > > = > > = > > > "Jernej Tuljak" wrote: > > > > > -----Original Message----- > > > > > From: Martin Bjorklund [mailto:mbj at tail-f.com] > > > > > Sent: Tuesday, October 4, 2016 10:26 AM > > > > > To: jernej.tuljak at mg-soft.si > > > > > Cc: netconf at ietf.org > > > > > Subject: Re: [Netconf] Mixing and "rpcResponses" = in = > > > > > NETCONF replies > > > > > > > > > > Hi, > > > > > > > > > > I think that both RFC 6241 and RFC 6020 are not clear on this= , = > > > > > and maybe even wrong (as you note). I think that that a requ= est > > > > > should: > > > > > > > > > > fail with one or more rpc-errors of type "error" > > > > > > > > > > OR > > > > > > > > > > succeed with or some other positive response, and opt= ionally > > > > > return one or more rpc-errors of type "warning" > > > > > > > > While I agree that this is how things should be, there is one = > > > > particular case that has been pointed out to us, which the abov= e = > > > > cannot cover. That is, not knowing an error will occur beforeha= nd = > > > > while avoiding buffering whole replies. > > > > > > > > Imagine a constrained device that wishes to avoid keeping entir= e = > > > > replies buffered in memory and immediately starts flushing chun= ks = > > > > of what later becomes a single (whole) reply on the client side= . = > > > > An error occurs during processing, but some chunks have already= = > > > > been sent. The device makes sure the reply ends up being well = > > > > formed and includes an , which means "some positive = > > > > response" + with "error" severity. This would proba= bly = > > > > means that the client needs to discard the positive part of the= = > > > > reply and give priority to . > > > > > > > > It seems like a viable use case to me, but I am interested in = > > > > opinions of others. Has there been prior discussion on this top= ic = > > > > (it seems likely)? > > > > > > Yes. A typical example is if you do a and need to send ba= ck = > > > lots of operational state, and an error occurs when you try to = > > > retreive some state from some hw. The simplest solution is just = to = > > > not send anything for such a node, but that is clearly not good; = a = > > > client might interpret this in some unintentional way. Some devi= ces = > > > send inline errors in this case; i.e., in the middle of the = > > > you'll get an structure. A (bad) alternative if you = > > > still want to be compliant to the spec is to drop the session fro= m = > > > the server when this happens. > > > > > > > > > /martin > = From nobody Fri Oct 7 02:21:23 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78C1A12944D for ; Fri, 7 Oct 2016 02:21:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.621 X-Spam-Level: X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1W5MK8Cd1L71 for ; Fri, 7 Oct 2016 02:21:19 -0700 (PDT) Received: from smtp2.telecom.pt (smtp2.telecom.pt [83.240.175.146]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20A88129537 for ; Fri, 7 Oct 2016 02:21:18 -0700 (PDT) From: =?iso-8859-1?Q?Andr=E9_Domingos_Br=EDzido?= To: Martin Bjorklund Date: Fri, 7 Oct 2016 10:21:14 +0100 Thread-Topic: Mixing and "rpcResponses" in NETCONF replies Thread-Index: AdIgAPAQA6vBAQWTQxu9dMED4URBSAAew22A Message-ID: <3BAB6CADBB6CA243A443E7C6674F2AB40828F490F2@PTPTVDEX02.PTPortugal.corpPT.com> References: <3BAB6CADBB6CA243A443E7C6674F2AB40828F4908F@PTPTVDEX02.PTPortugal.corpPT.com> <20161006.202030.2009789249524290825.mbj@tail-f.com> <3BAB6CADBB6CA243A443E7C6674F2AB40828F4909C@PTPTVDEX02.PTPortugal.corpPT.com> <20161006.203907.1563755577378708213.mbj@tail-f.com> In-Reply-To: <20161006.203907.1563755577378708213.mbj@tail-f.com> Accept-Language: pt-PT Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: pt-PT Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "netconf@ietf.org" Subject: Re: [Netconf] Mixing and "rpcResponses" in NETCONF replies X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Oct 2016 09:21:22 -0000 Ok. Thank you for your reply. Best regards Andre -----Original Message----- From: Martin Bjorklund [mailto:mbj@tail-f.com]=20 Sent: 6 de outubro de 2016 19:39 To: Andr=E9 Domingos Br=EDzido Cc: netconf@ietf.org Subject: Re: Mixing and "rpcResponses" in NETCONF replies Andr=E9 Domingos Br=EDzido wrote: > But including the instead of the expected element will not=20 > break the syntax defined in the YANG data model? Since the is in a different XML namespace than the rest, client= s will hopefully not break; some clients will be prepared for it, and some = will just skip it. I'm just saying that some servers work like this. It is not well defined i= n the specs. > Or standard YANG modules have to be augmented by proprietary modules=20 > in every potential point of failure? No that wouldn't be very useful. /martin >=20 > Best regards > Andre >=20 > -----Original Message----- > From: Martin Bjorklund [mailto:mbj@tail-f.com] > Sent: 6 de outubro de 2016 19:21 > To: Andr=E9 Domingos Br=EDzido > Cc: netconf@ietf.org > Subject: Re: Mixing and "rpcResponses" in NETCONF replies >=20 > Andr=E9 Domingos Br=EDzido wrote: > > Hi > >=20 > > Regarding the email thread below, I would like to check with you=20 > > that my understanding is correct. > > Any of these alternatives are acceptable in order for a server to be=20 > > compliant to the NETCONF specification: > >=20 > > 1. Buffer the entire reply until the result of the operation is=20 > > known, if the reply does not fit the buffer then send the "too big" > > error [1] > >=20 > > 2. Silently discard errors and omit tags > >=20 > > 3. Send in the middle of (When you say in the=20 > > middle of you mean as a direct child, correct?) >=20 > I meant deep inline, where the real element would have been. >=20 > > 4. Drop the session (the least preferable) >=20 >=20 > I don't know if (1) is preferred; it doesn't really help the client to=20 > get a 'too-big' error in this case. >=20 >=20 > /martin >=20 >=20 >=20 > >=20 > > Best regards > > Andre > >=20 > >=20 > > [1] https://tools.ietf.org/html/rfc6241#appendix-A > >=20 > >=20 > > > "Jernej Tuljak" wrote: > > > > > -----Original Message----- > > > > > From: Martin Bjorklund [mailto:mbj at tail-f.com] > > > > > Sent: Tuesday, October 4, 2016 10:26 AM > > > > > To: jernej.tuljak at mg-soft.si > > > > > Cc: netconf at ietf.org > > > > > Subject: Re: [Netconf] Mixing and "rpcResponses"=20 > > > > > in NETCONF replies > > > > > > > > > > Hi, > > > > > > > > > > I think that both RFC 6241 and RFC 6020 are not clear on this,=20 > > > > > and maybe even wrong (as you note). I think that that a=20 > > > > > request > > > > > should: > > > > > > > > > > fail with one or more rpc-errors of type "error" > > > > > > > > > > OR > > > > > > > > > > succeed with or some other positive response, and optiona= lly > > > > > return one or more rpc-errors of type "warning" > > > > > > > > While I agree that this is how things should be, there is one=20 > > > > particular case that has been pointed out to us, which the above=20 > > > > cannot cover. That is, not knowing an error will occur=20 > > > > beforehand while avoiding buffering whole replies. > > > > > > > > Imagine a constrained device that wishes to avoid keeping entire=20 > > > > replies buffered in memory and immediately starts flushing=20 > > > > chunks of what later becomes a single (whole) reply on the client s= ide. > > > > An error occurs during processing, but some chunks have already=20 > > > > been sent. The device makes sure the reply ends up being well=20 > > > > formed and includes an , which means "some positive=20 > > > > response" + with "error" severity. This would=20 > > > > probably means that the client needs to discard the positive=20 > > > > part of the reply and give priority to . > > > > > > > > It seems like a viable use case to me, but I am interested in=20 > > > > opinions of others. Has there been prior discussion on this=20 > > > > topic (it seems likely)? > > > > > > Yes. A typical example is if you do a and need to send=20 > > > back lots of operational state, and an error occurs when you try=20 > > > to retreive some state from some hw. The simplest solution is=20 > > > just to not send anything for such a node, but that is clearly not=20 > > > good; a client might interpret this in some unintentional way. =20 > > > Some devices send inline errors in this case; i.e., in the middle=20 > > > of the you'll get an structure. A (bad)=20 > > > alternative if you still want to be compliant to the spec is to=20 > > > drop the session from the server when this happens. > > > > > > > > > /martin >=20 From nobody Fri Oct 7 13:42:33 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99B181295CE for ; Fri, 7 Oct 2016 13:42:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.934 X-Spam-Level: X-Spam-Status: No, score=-1.934 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SSaQK23gnmPU for ; Fri, 7 Oct 2016 13:42:30 -0700 (PDT) Received: from resqmta-ch2-09v.sys.comcast.net (resqmta-ch2-09v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:41]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7D48129720 for ; Fri, 7 Oct 2016 13:42:18 -0700 (PDT) Received: from resomta-ch2-18v.sys.comcast.net ([69.252.207.114]) by resqmta-ch2-09v.sys.comcast.net with SMTP id sbxobKeC81XXBsbyEbNQX0; Fri, 07 Oct 2016 20:42:18 +0000 Received: from hobgoblin.ariadne.com ([73.16.37.18]) by resomta-ch2-18v.sys.comcast.net with SMTP id sbyDbGOKQZx9SsbyDbbr9e; Fri, 07 Oct 2016 20:42:18 +0000 Received: from hobgoblin.ariadne.com (hobgoblin.ariadne.com [127.0.0.1]) by hobgoblin.ariadne.com (8.14.7/8.14.7) with ESMTP id u97KgGTb030828 for ; Fri, 7 Oct 2016 16:42:16 -0400 Received: (from worley@localhost) by hobgoblin.ariadne.com (8.14.7/8.14.7/Submit) id u97KgGie030825; Fri, 7 Oct 2016 16:42:16 -0400 X-Authentication-Warning: hobgoblin.ariadne.com: worley set sender to worley@alum.mit.edu using -f From: worley@ariadne.com (Dale R. Worley) To: netconf@ietf.org Sender: worley@ariadne.com (Dale R. Worley) Date: Fri, 07 Oct 2016 16:42:16 -0400 Message-ID: <87vax351sn.fsf@hobgoblin.ariadne.com> X-CMAE-Envelope: MS4wfK3K1LbLe1YUhlTxX9S040ovW5IN8ayx5ZlH6nlZPPs/wCUyRJthZIqQJz+dhKxtlAdvjYW4A9KNei6EBfG3+6sotZoTZkIqyY+4gWlA9xR+xJstkUfE k1F97+ubZ9FsQ6iJDQHzB8NEXTUV0wTG3v6CdJ3V9AkdxkMCUnv1DXqX Archived-At: Subject: [Netconf] IESG telechat Gen-ART review of draft-ietf-netconf-restconf-17 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Oct 2016 20:42:31 -0000 I am the assigned Gen-ART reviewer for this draft. The General Area Review Team (Gen-ART) reviews all IETF documents being processed by the IESG for the IETF Chair. Please wait for direction from your document shepherd or AD before posting a new version of the draft. For more information, please see the FAQ at . Document: draft-ietf-netconf-restconf-17 Reviewer: Dale R. Worley Review Date: 2016-10-07 IETF LC End Date: 2016-08-03 IESG Telechat date: 2016-10-13 Summary: This draft is ready for publication as a Standards Track RFC. This is a comparison of draft-ietf-netconf-restconf-17 against my review for draft-ietf-netconf-restconf-16. In my opinion, all review items have been resolved. I am repeating the following item because its resolution is by recognizing an error in the referenced RFC 6415, which perhaps ought to be considered by the IESG: The draft makes use of reltive URLs as values of the href attribute of the Link element in XRD documents (RFC 6415). Relative links are not usually considered to be "URIs", but rather "URI-references" (RFC 3986 section 4.1), and RFC 6415 uses "URI" consistently, not "URI-reference". Also, all examples in RFC 6415 show complete URIs. Note that the above issue has been resolved with the understanding that RFC 6415 is incorrectly stated, and it seems to have always been intended to allow relative URLs in XRD: Compare with its source, Extensible Resource Descriptor (XRD) Version 1.0 (http://docs.oasis-open.org/xri/xrd/v1.0/xrd-1.0.html) sections 2.6 and 1.5.2. This issue has been filed as erratum 4811 to RFC 6415 (https://www.rfc-editor.org/errata_search.php?eid=4811). Dale From nobody Mon Oct 10 11:38:28 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CBEBE129743; Mon, 10 Oct 2016 11:38:22 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Spencer Dawkins" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.34.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147612470282.31502.8004463503249672708.idtracker@ietfa.amsl.com> Date: Mon, 10 Oct 2016 11:38:22 -0700 Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org Subject: [Netconf] Spencer Dawkins' No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Oct 2016 18:38:23 -0000 Spencer Dawkins has entered the following ballot position for draft-ietf-netconf-restconf-17: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I'm not sure how PATCH is MUST support but optional to implement in The RESTCONF server MUST support the PATCH method. RESTCONF uses the HTTP PATCH method defined in [RFC5789] to provide an extensible framework for resource patching mechanisms. It is optional to implement by the server. Can you help me understand? From nobody Mon Oct 10 12:13:13 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3031D1295A2 for ; Mon, 10 Oct 2016 12:13:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W6iTCgXO6b7B for ; Mon, 10 Oct 2016 12:13:10 -0700 (PDT) Received: from mail-qk0-x235.google.com (mail-qk0-x235.google.com [IPv6:2607:f8b0:400d:c09::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 338CE12956C for ; Mon, 10 Oct 2016 12:13:10 -0700 (PDT) Received: by mail-qk0-x235.google.com with SMTP id n189so127567461qke.0 for ; Mon, 10 Oct 2016 12:13:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Tq9GgeQqggFtM2odGNNHf3PEZ87WDozwA0WM97+4c4Q=; b=ewjR0TOR7PQTzPo6X+lfJD1o7jzi9Ek7Wc8UQ+OE/5NWsW9QD8UJWTj924dAo/2RaC c/dITTbcyHrEWiLgtiGgw8fyFtjpm5XAs4I799lFctynpy0OqwofgI5rB5QC90+a9vjB 4RLFQSRXzdSOpCj8dmJWmEJI4z/Du4CG8LF+1soXoIPGXzJ9QDYNFrziIhG9t2UjjKah DXxQNeh6RAO9flk/VJxc3izwk3nUgEd/Em5t8pvHY7k1/KTarl1CuZGR/YiVbq4dLoCN /YcdgQyrJAv9istOgACshztZ7LBenNPPtBabT+UFh5emYvYDsQ5kr/WscYcT2Woiy6SJ LkeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Tq9GgeQqggFtM2odGNNHf3PEZ87WDozwA0WM97+4c4Q=; b=LvDEexjtn9+S67w0GIcD3QxGCkHgAGLLi2Z5KF+jNy+4IzdMZq7oMKi2rhFEe9K9DJ RtgXUHkDYy6uT326GTvHp3gIX39C1ya1d0hi+ZSpM8q9da0s8+TnEoql6MPYGjRh9Wmw OH8qJ8/3dm+d5N416pc6VASjjFpYcHWWW3+N4UPT+XbU70sydBqIY6HvsdC2k2vOocYE FCzzpdc8+IfdaaYVQ35UXxqet5FeiPZ5HxbZhBFn6v8+4E4ttzG30nWWMQ8uNo8s4QHP Gk8FjsV95AnjqzA6GCWgzj7vQs0ZI80ZAPlqfrAfho2CubhOTeHgMJxV4ztH0JZM3u+y m8yg== X-Gm-Message-State: AA6/9RlNhmYhauTDCgLAiycKEPjuKhqoy2TLifmgENNfb9NDlkjWjeqwcSgfgyT0q8HoYy36KUKKDT8yBgly+g== X-Received: by 10.194.78.43 with SMTP id y11mr14527916wjw.150.1476126789176; Mon, 10 Oct 2016 12:13:09 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.141.78 with HTTP; Mon, 10 Oct 2016 12:13:08 -0700 (PDT) In-Reply-To: <147612470282.31502.8004463503249672708.idtracker@ietfa.amsl.com> References: <147612470282.31502.8004463503249672708.idtracker@ietfa.amsl.com> From: Andy Bierman Date: Mon, 10 Oct 2016 12:13:08 -0700 Message-ID: To: Spencer Dawkins Content-Type: multipart/alternative; boundary=047d7beb944ae9b3e9053e878c81 Archived-At: Cc: Netconf , draft-ietf-netconf-restconf@ietf.org, The IESG , netconf-chairs@ietf.org Subject: Re: [Netconf] Spencer Dawkins' No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Oct 2016 19:13:12 -0000 --047d7beb944ae9b3e9053e878c81 Content-Type: text/plain; charset=UTF-8 On Mon, Oct 10, 2016 at 11:38 AM, Spencer Dawkins < spencerdawkins.ietf@gmail.com> wrote: > Spencer Dawkins has entered the following ballot position for > draft-ietf-netconf-restconf-17: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I'm not sure how PATCH is MUST support but optional to implement in > > The RESTCONF server MUST support the PATCH method. RESTCONF uses the > HTTP PATCH method defined in [RFC5789] to provide an extensible > framework for resource patching mechanisms. It is optional to > implement by the server. > > Can you help me understand? > > This is a bug. The contradiction in sec 4.1 OPTIONS will be corrected so it aligns with the MUST in sec. 4.6 PATCH Andy --047d7beb944ae9b3e9053e878c81 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Mon, Oct 10, 2016 at 11:38 AM, Spencer Dawkins <= ;spencer= dawkins.ietf@gmail.com> wrote:
Spencer Dawkins has entered the following ballot position for
draft-ietf-netconf-restconf-17: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/<= wbr>statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/d= raft-ietf-netconf-restconf/



-----------------------------------------------------------------= -----
COMMENT:
-----------------------------------------------------------------= -----

I'm not sure how PATCH is MUST support but optional to implement in

=C2=A0 =C2=A0The RESTCONF server MUST support the PATCH method.=C2=A0 RESTC= ONF uses the
=C2=A0 =C2=A0HTTP PATCH method defined in [RFC5789] to provide an extensibl= e
=C2=A0 =C2=A0framework for resource patching mechanisms.=C2=A0 It is option= al to
=C2=A0 =C2=A0implement by the server.

Can you help me understand?


This is a bug.
The contradic= tion in sec 4.1 OPTIONS will be corrected so it
aligns with the M= UST in sec. 4.6 PATCH


Andy


--047d7beb944ae9b3e9053e878c81-- From nobody Mon Oct 10 19:25:24 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BFFA129620; Mon, 10 Oct 2016 19:25:19 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Kathleen Moriarty" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.34.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147615271936.31486.3197245647561002208.idtracker@ietfa.amsl.com> Date: Mon, 10 Oct 2016 19:25:19 -0700 Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org Subject: [Netconf] Kathleen Moriarty's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Oct 2016 02:25:19 -0000 Kathleen Moriarty has entered the following ballot position for draft-ietf-netconf-restconf-17: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- The draft is nicely written, thank you for that. I have a point in the security consideration section that I think is important to clarify in the draft. Authentication for RESTconf - The method for HTTP authentication vary and some are really bad (HTTP Basic, digest isn't too far behind it). This draft just requires some method, but I think a warning to research the methods since they have widely varying security levels is important. For the HTTP Authentication methods, the RFCs cover the pitfalls well. Here is the sentence: Client authentication MUST be implemented using client certificates or MUST be implemented using an HTTP authentication scheme. How about: Client authentication MUST be implemented using client certificates or MUST be implemented using an HTTP authentication scheme. The strength of these methods vary greatly and (certificates are recommended or HTTP basic is not recommended). Digest isn't great either, but at least not recommending basic would be good. There are also a few newer experimental HTTPAuth methods that improve things, but are experimental. One gets rid of stored passwords (HOBA). From nobody Mon Oct 10 19:27:52 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B360C1297BE for ; Mon, 10 Oct 2016 19:27:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WjEMN8uUxSGE for ; Mon, 10 Oct 2016 19:27:46 -0700 (PDT) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0133.outbound.protection.outlook.com [104.47.40.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1EF31297C7 for ; Mon, 10 Oct 2016 19:27:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=waxF2gB6yNfx19Esmlgs4s4dTilrZitVp6lD3T/8wjU=; b=MyiU1W5lVmL4U4ydvCGp/7tujsZu+Bmbguc+uMeLUGRG4MCKa3Ay7hHUPity2nWzxi0VsIMfQYzarB4wzscB7xTBvi21nDTtE4hXUHEaw6h09slnvaOpFDem2yAyOikLV8QrgKJlkBEDPN7kPlDndjUHl6v46yz0bCce8wl8XZ0= Received: from DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) by DM2PR0501MB1453.namprd05.prod.outlook.com (10.161.224.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.649.6; Tue, 11 Oct 2016 02:27:44 +0000 Received: from DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) by DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) with mapi id 15.01.0649.016; Tue, 11 Oct 2016 02:27:44 +0000 From: Kent Watsen To: "netconf@ietf.org" Thread-Topic: [Netconf] zerotouch/16: How to encode a chain of certs? Thread-Index: AQHR9O1QL2hT7JffXUKb2eXuCtz2rKB39WAAgAASGwCAGR98gIARejYA Date: Tue, 11 Oct 2016 02:27:44 +0000 Message-ID: <4460E7FA-4151-4CD3-B9EA-9820CFA37D3D@juniper.net> References: <35D8022F-B00A-4916-92DD-3D1E4C44FA16@juniper.net> <1500904D-B8B7-47CC-B338-8434DB7772F0@juniper.net> In-Reply-To: <1500904D-B8B7-47CC-B338-8434DB7772F0@juniper.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.1.160916 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.12] x-ms-office365-filtering-correlation-id: cf71653b-d551-4314-273b-08d3f17e2f1e x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1453; 7:gxCXum7+IijR7b5jgD6yIdZi3XO0DwlmegffWNHu/aTHsKgDFVIaCd5EwEiQ40QU0BhfOb8U2jNXHMbNQGLVMovmLo0avSKWMoWePqTlHOzeFHjpa/GyMHwTjiddLlXQ91iKyXqUQ+v57sPg55P/YSW7mScIrz0e1Ai58aCxbIoE8olZRGjG3WMTa4C4Pezm2tiDpV8VKYAzlPPwM0qIvQVSovXqv7k25g1avcpKnpfAAmfecXYNIMAAZb3qdDIjOerodvbmYxbuOWBASyiZsBVukEpy2pZ11SreQ7rgfYbX4GCW6fjEax8fsStB7m0mYiP9DG9WmlzOUZiJ9fDkAShul4GEYhVQqt7/1F8ESlQ= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1453; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(138986009662008)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:DM2PR0501MB1453; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1453; x-forefront-prvs: 00922518D8 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(377454003)(189002)(19580405001)(6116002)(551544002)(102836003)(3846002)(586003)(450100001)(97736004)(107886002)(7736002)(86362001)(5002640100001)(6916009)(11100500001)(2501003)(2906002)(92566002)(19300405004)(87936001)(82746002)(19580395003)(10400500002)(83716003)(7846002)(83506001)(4001350100001)(189998001)(106116001)(16236675004)(66066001)(101416001)(81156014)(81166006)(1730700003)(76176999)(8676002)(15975445007)(77096005)(33656002)(122556002)(19625215002)(68736007)(50986999)(54356999)(8936002)(36756003)(106356001)(93886004)(110136003)(3660700001)(2900100001)(3280700002)(99286002)(2351001)(105586002)(5640700001)(2950100002)(5660300001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1453; H:DM2PR0501MB1455.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_4460E7FA41514CD3B9EA9820CFA37D3Djunipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Oct 2016 02:27:44.0914 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1453 Archived-At: Subject: Re: [Netconf] zerotouch/16: How to encode a chain of certs? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Oct 2016 02:27:49 -0000 --_000_4460E7FA41514CD3B9EA9820CFA37D3Djunipernet_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpUaGUgUEtDUyMxMiBmb3JtYXQgaXMgZ2l2aW5nIG1lIHRyb3VibGUuICAgSSBkdW1wZWQgaXRz IEFTTi4xIGNvbnRlbnQgdG8gZW5zdXJlIEkgd2FzIGRvY3VtZW50aW5nIHRoZSBzdHJ1Y3R1cmUg Y29ycmVjdGx5LCBvbmx5IHRvIGRpc2NvdmVyIHRoYXQgaXQgd2FzIHBhc3N3b3JkLWVuY3J5cHRl ZCwgZXZlbiB0aG91Z2ggSSBoaXQgPHJldHVybj4gZm9yIHRoZSBwYXNzd29yZCAobm90ZTogdGhp cyBpcyBiZWNhdXNlIGl04oCZcyB1c2luZyBhIHNhbHQgdmFsdWUpLiAgSSBzcGVudCBvdmVyIGFu IGhvdXIgbG9va2luZyBmb3IgYSB3YXkgdG8gcmVtb3ZlIHRoZSBwYXNzd29yZCBjb21wbGV0ZWx5 LCBidXQgdG8gbm8gYXZhaWwuICBVbmxlc3MgYW55b25lIGhhcyBhbiBpZGVhLCBJIHRoaW5rIHdl IHNob3VsZCBnaXZlIHVwIG9uIHRoZSBwa2NzIzEyIGZvcm1hdC4NCg0KU28gbm93IGl04oCZcyBq dXN0IFBFTSBhbmQgUEtDUyM3LCBidXQgYmV0d2VlbiB0aGUgdHdvLCBQS0NTIzcgaXMgYnkgZmFy IHRoZSBiZXR0ZXIgY2hvaWNlLiAgIFRoZSBpZGVhIG9mIHN1cHBvcnRpbmcgbW9yZSB0aGFuIG9u ZSBmb3JtYXQgd2FzIG9ubHkgcmVhbGx5IGludGVyZXN0aW5nIHdoZW4gcGtjcyMxMiB3YXMgaW4g dGhlIG1peC4gIE5vdyBJ4oCZbSBub3Qgc3VyZSBpZiBpdOKAmXMgd29ydGggaXQgYW55IG1vcmUu ICAgU28sIHNob3VsZCB3ZSBzdGljayB3aXRoOg0KDQogICAgICAgICAgICAgICstLXJvIGNlcnRp ZmljYXRlDQogICAgICAgICAgICAgICAgICArLS1ybyBmb3JtYXQgICAgZW51bWVyYXRpb24gICAg PC0tIGNob2ljZXMgYXJlIOKAnHBlbeKAnSBhbmQg4oCccGtjczfigJ0NCiAgICAgICAgICAgICAg ICAgICstLXJvIGRhdGEgICAgICBiaW5hcnkgICAgICAgICAgICAgICAgICAgPC0tIGVuY29kaW5n IGRlcGVuZHMgb24g4oCYZm9ybWF04oCZIGZpZWxkDQoNCm9yDQoNCiAgICAgICAgICAgICAgKy0t cm8gY2VydGlmaWNhdGUgIGJpbmFyeSAgICAgICAgICAgICAgICA8LS0gaGFyZGNvZGVkIHRvIHBr Y3MjNw0KDQoNCg0KTWVobWV0L01haGVzaCwgc2luY2UgeW91IHR3byBzZWxlY3RlZCBvcHRpb24g IzYgKHNlZSBiZWxvdykgYmVmb3JlLCBJ4oCZbSBlc3BlY2lhbGx5IGludGVyZXN0ZWQgaW4geW91 ciBvcGluaW9ucy4NCg0KVGhhbmtzLA0KS2VudA0KDQoNCg0KRnJvbTogTmV0Y29uZiA8bmV0Y29u Zi1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgS2VudCBXYXRzZW4gPGt3YXRzZW5AanVu aXBlci5uZXQ+DQpEYXRlOiBUaHVyc2RheSwgU2VwdGVtYmVyIDI5LCAyMDE2IGF0IDc6MzMgUE0N ClRvOiBNYWhlc2ggSmV0aGFuYW5kYW5pIDxtamV0aGFuYW5kYW5pQGdtYWlsLmNvbT4NCkNjOiAi bmV0Y29uZkBpZXRmLm9yZyIgPG5ldGNvbmZAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW05ldGNv bmZdIHplcm90b3VjaC8xNjogSG93IHRvIGVuY29kZSBhIGNoYWluIG9mIGNlcnRzPw0KDQoNClNv IGJvdGggTWFoZXNoIGFuZCBNZWhtZXQgKGFzIGNvbnRyaWJ1dG9ycyBJIGJlbGlldmUpIHNlbGVj dGVkIG9wdGlvbiAjNi4gIE5vIG90aGVyIHJlc3BvbnNlcyB3ZXJlIHJlY2VpdmVkLiAgVGh1cyBJ IHdpbGwgbW92ZSBmb3J3YXJkIHdpdGggb3B0aW9uICM2Lg0KDQpUaGFua3MsDQpLZW50DQoNCkZy b206IE5ldGNvbmYgPG5ldGNvbmYtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIEtlbnQg V2F0c2VuIDxrd2F0c2VuQGp1bmlwZXIubmV0Pg0KRGF0ZTogVHVlc2RheSwgU2VwdGVtYmVyIDEz LCAyMDE2IGF0IDc6NTQgUE0NClRvOiBNYWhlc2ggSmV0aGFuYW5kYW5pIDxtamV0aGFuYW5kYW5p QGdtYWlsLmNvbT4NCkNjOiAibmV0Y29uZkBpZXRmLm9yZyIgPG5ldGNvbmZAaWV0Zi5vcmc+DQpT dWJqZWN0OiBSZTogW05ldGNvbmZdIHplcm90b3VjaC8xNjogSG93IHRvIGVuY29kZSBhIGNoYWlu IG9mIGNlcnRzPw0KDQo8U05JUC8+DQoNClJlY29tbWVuZGF0aW9uczoNCiAgLSBJZiB3ZSBoYXZl IHRvIHBpY2sganVzdCBvbmUsIEnigJlkIGFzayBzZWN1cml0eSBleHBlcnRzIHRvIHBpY2sgYmV0 d2Vlbg0KICAgIHBrNyBhbmQgcDEyLiAgTm90ZTogcGs3IHdhcyBhIGJpdCBlYXNpZXIgb24gdGhl IGNvbW1hbmQgbGluZSwgaW4NCiAgICB0aGF0IGl0IGRpZG7igJl0IHByb21wdCBmb3IgcGFzc3dv cmQuICBBbHNvLCBwazcgcm91bmQtdHJpcHBpbmcNCiAgICBzdGFiaWxpemVkIGZhc3Rlci4NCiAg LSBJZiB3ZeKAmXJlIG9rYXkgd2l0aCBkZXZpY2VzIGhhdmluZyB0byBzdXBwb3J0IGFsbCBmb3Jt YXRzLA0KDQpbTWFoZXNoXSArMQ0KDQoNCg0KDQp0aGVuIEkNCiAgICB0aGluayBzb2x1dGlvbiAj NiBpcyBiZXR0ZXIgdGhhbiAjNS4NCg0KW01haGVzaF0gV2hhdCBpcyB0aGUgYWR2YW50YWdlIG9m IHNvbHV0aW9uICM2IG92ZXIgIzU/DQoNCg0KSSBqdXN0IGxpa2UgdGhlIGlkZWEgb2YgYWRkaW5n IGZ1dHVyZSBlbnVtZXJhdGlvbnMgbW9yZSB0aGFuIGFkZGluZyBsZWFmcy4gIFRoaXMgYXBwcm9h Y2ggZW5zdXJlcyBtb3JlIHByb2Nlc3Npbmcgc3RlcHMgYXJlIGFsd2F5cyB0aGUgc2FtZS4gIEl0 4oCZcyBub3QgbXVjaCwgYnV0IGl04oCZcyBzb21ldGhpbmcuLi4NCg0KS2VudA0KDQoNCg0KDQo= --_000_4460E7FA41514CD3B9EA9820CFA37D3Djunipernet_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eToiVGltZXMgTmV3IFJvbWFuIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZh bWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs LXJlcGx5Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFu Lm1zb0lucw0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToi IjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERl ZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9 DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGlu IDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJF Ti1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlv bjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 Q2FsaWJyaSI+VGhlIFBLQ1MjMTIgZm9ybWF0IGlzIGdpdmluZyBtZSB0cm91YmxlLiZuYnNwOyAm bmJzcDtJIGR1bXBlZCBpdHMgQVNOLjEgY29udGVudCB0byBlbnN1cmUgSSB3YXMgZG9jdW1lbnRp bmcgdGhlIHN0cnVjdHVyZSBjb3JyZWN0bHksIG9ubHkgdG8gZGlzY292ZXIgdGhhdCBpdCB3YXMg cGFzc3dvcmQtZW5jcnlwdGVkLCBldmVuIHRob3VnaCBJDQogaGl0ICZsdDtyZXR1cm4mZ3Q7IGZv ciB0aGUgcGFzc3dvcmQgKG5vdGU6IHRoaXMgaXMgYmVjYXVzZSBpdOKAmXMgdXNpbmcgYSBzYWx0 IHZhbHVlKS4mbmJzcDsgSSBzcGVudCBvdmVyIGFuIGhvdXIgbG9va2luZyBmb3IgYSB3YXkgdG8g cmVtb3ZlIHRoZSBwYXNzd29yZCBjb21wbGV0ZWx5LCBidXQgdG8gbm8gYXZhaWwuJm5ic3A7IFVu bGVzcyBhbnlvbmUgaGFzIGFuIGlkZWEsIEkgdGhpbmsgd2Ugc2hvdWxkIGdpdmUgdXAgb24gdGhl IHBrY3MjMTIgZm9ybWF0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlNvIG5vdyBpdOKAmXMg anVzdCBQRU0gYW5kIFBLQ1MjNywgYnV0IGJldHdlZW4gdGhlIHR3bywgUEtDUyM3IGlzIGJ5IGZh ciB0aGUgYmV0dGVyIGNob2ljZS4mbmJzcDsgJm5ic3A7VGhlIGlkZWEgb2Ygc3VwcG9ydGluZyBt b3JlIHRoYW4gb25lIGZvcm1hdCB3YXMgb25seSByZWFsbHkgaW50ZXJlc3Rpbmcgd2hlbiBwa2Nz IzEyIHdhcyBpbiB0aGUNCiBtaXguJm5ic3A7IE5vdyBJ4oCZbSBub3Qgc3VyZSBpZiBpdOKAmXMg d29ydGggaXQgYW55IG1vcmUuJm5ic3A7Jm5ic3A7IFNvLCBzaG91bGQgd2Ugc3RpY2sgd2l0aDo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7JiM0MzstLXJv IGNlcnRpZmljYXRlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyYjNDM7LS1ybyBmb3JtYXQm bmJzcDsmbmJzcDsmbmJzcDsgZW51bWVyYXRpb24mbmJzcDsmbmJzcDsmbmJzcDsgJmx0Oy0tIGNo b2ljZXMgYXJlIOKAnHBlbeKAnSBhbmQg4oCccGtjczfigJ08bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7JiM0MzstLXJvIGRhdGEmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYmluYXJ5 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDst LSBlbmNvZGluZyBkZXBlbmRzIG9uIOKAmGZvcm1hdOKAmSBmaWVsZDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmkiPm9yIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsm bmJzcDsmIzQzOy0tcm8gY2VydGlmaWNhdGUmbmJzcDsgYmluYXJ5Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7ICZsdDstLSBoYXJkY29kZWQgdG8gcGtjcyM3PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+TWVobWV0L01haGVz aCwgc2luY2UgeW91IHR3byBzZWxlY3RlZCBvcHRpb24gIzYgKHNlZSBiZWxvdykgYmVmb3JlLCBJ 4oCZbSBlc3BlY2lhbGx5IGludGVyZXN0ZWQgaW4geW91ciBvcGluaW9ucy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpIj5UaGFua3MsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aSI+S2VudDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5n OjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+DQo8L2I+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk5ldGNvbmYgJmx0O25l dGNvbmYtYm91bmNlc0BpZXRmLm9yZyZndDsgb24gYmVoYWxmIG9mIEtlbnQgV2F0c2VuICZsdDtr d2F0c2VuQGp1bmlwZXIubmV0Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UaHVyc2RheSwgU2VwdGVt YmVyIDI5LCAyMDE2IGF0IDc6MzMgUE08YnI+DQo8Yj5UbzogPC9iPk1haGVzaCBKZXRoYW5hbmRh bmkgJmx0O21qZXRoYW5hbmRhbmlAZ21haWwuY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+JnF1b3Q7 bmV0Y29uZkBpZXRmLm9yZyZxdW90OyAmbHQ7bmV0Y29uZkBpZXRmLm9yZyZndDs8YnI+DQo8Yj5T dWJqZWN0OiA8L2I+UmU6IFtOZXRjb25mXSB6ZXJvdG91Y2gvMTY6IEhvdyB0byBlbmNvZGUgYSBj aGFpbiBvZiBjZXJ0cz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2Fs aWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+U28gYm90 aCBNYWhlc2ggYW5kIE1laG1ldCAoYXMgY29udHJpYnV0b3JzIEkgYmVsaWV2ZSkgc2VsZWN0ZWQg b3B0aW9uICM2LiZuYnNwOyBObyBvdGhlciByZXNwb25zZXMgd2VyZSByZWNlaXZlZC4mbmJzcDsg VGh1cyBJIHdpbGwgbW92ZSBmb3J3YXJkIHdpdGggb3B0aW9uICM2Ljwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmkiPlRoYW5rcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5L ZW50PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAj QjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPkZy b206IDwvc3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpi bGFjayI+TmV0Y29uZiAmbHQ7bmV0Y29uZi1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYg b2YgS2VudCBXYXRzZW4gJmx0O2t3YXRzZW5AanVuaXBlci5uZXQmZ3Q7PGJyPg0KPGI+RGF0ZTog PC9iPlR1ZXNkYXksIFNlcHRlbWJlciAxMywgMjAxNiBhdCA3OjU0IFBNPGJyPg0KPGI+VG86IDwv Yj5NYWhlc2ggSmV0aGFuYW5kYW5pICZsdDttamV0aGFuYW5kYW5pQGdtYWlsLmNvbSZndDs8YnI+ DQo8Yj5DYzogPC9iPiZxdW90O25ldGNvbmZAaWV0Zi5vcmcmcXVvdDsgJmx0O25ldGNvbmZAaWV0 Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbTmV0Y29uZl0gemVyb3RvdWNoLzE2 OiBIb3cgdG8gZW5jb2RlIGEgY2hhaW4gb2YgY2VydHM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tcmlnaHQ6LjVpbjti YWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTpDYWxpYnJpIj4mbHQ7U05JUC8mZ3Q7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1yaWdodDouNWluO2JhY2tncm91bmQ6d2hpdGUiPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlJlY29t bWVuZGF0aW9uczo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7IC0gSWYgd2UgaGF2ZSB0byBw aWNrIGp1c3Qgb25lLCBJ4oCZZCBhc2sgc2VjdXJpdHkgZXhwZXJ0cyB0byBwaWNrIGJldHdlZW48 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7Jm5ic3A7ICZuYnNwO3BrNyBhbmQgcDEyLiAmbmJz cDtOb3RlOiBwazcgd2FzIGEgYml0IGVhc2llciBvbiB0aGUgY29tbWFuZCBsaW5lLCBpbjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsmbmJzcDsgdGhhdCBpdCBkaWRu4oCZdCBwcm9t cHQgZm9yIHBhc3N3b3JkLiZuYnNwOyBBbHNvLCBwazcgcm91bmQtdHJpcHBpbmc8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q2FsaWJyaSI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7c3RhYmlsaXplZCBmYXN0ZXIuPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOyAtIElmIHdl4oCZcmUgb2theSB3aXRoIGRldmljZXMg aGF2aW5nIHRvIHN1cHBvcnQgYWxsIGZvcm1hdHMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPltNYWhlc2hdICYjNDM7MTxvOnA+PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxv OnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2lu LWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpIj50aGVuIEk8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7dGhpbmsgc29sdXRpb24gIzYgaXMgYmV0dGVyIHRoYW4gIzUuPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+W01haGVzaF0gV2hhdCBpcyB0aGUgYWR2YW50YWdlIG9mIHNvbHV0aW9uICM2IG92 ZXIgIzU/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBqdXN0IGxpa2UgdGhlIGlkZWEgb2Yg YWRkaW5nIGZ1dHVyZSBlbnVtZXJhdGlvbnMgbW9yZSB0aGFuIGFkZGluZyBsZWFmcy4mbmJzcDsg VGhpcyBhcHByb2FjaCBlbnN1cmVzIG1vcmUgcHJvY2Vzc2luZyBzdGVwcyBhcmUgYWx3YXlzIHRo ZSBzYW1lLiZuYnNwOyBJdOKAmXMgbm90IG11Y2gsIGJ1dCBpdOKAmXMgc29tZXRoaW5nLi4uPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPktlbnQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_4460E7FA41514CD3B9EA9820CFA37D3Djunipernet_-- From nobody Wed Oct 12 06:16:41 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 75E3A129500; Wed, 12 Oct 2016 06:16:39 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Alissa Cooper" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.34.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147627819947.24260.10617949408094496315.idtracker@ietfa.amsl.com> Date: Wed, 12 Oct 2016 06:16:39 -0700 Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org Subject: [Netconf] Alissa Cooper's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 13:16:39 -0000 Alissa Cooper has entered the following ballot position for draft-ietf-netconf-restconf-17: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for your work on this. (1) I'm curious how the WG settled on using Server-Sent Events. My understanding is that the SSE framework is somewhat brittle when used on its own and there can be problems when there are intermediaries in the path. Did the WG consider other options (e.g., H2 server push or long polling)? (2) I know the jukebox module is just an example, but it actually made me wonder if there would ever be cause for the server to return a 451 status code in response to a POST or GET request rather than a 401 or 403. Obviously there is no analog in the netconf status codes and the use for this would be pretty atypical, but figured I would mention this thought since it occurred to me. From nobody Wed Oct 12 09:49:10 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C979129462 for ; Wed, 12 Oct 2016 09:49:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.62 X-Spam-Level: X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T3H-oqRHwy0K for ; Wed, 12 Oct 2016 09:49:08 -0700 (PDT) Received: from mail-qt0-f180.google.com (mail-qt0-f180.google.com [209.85.216.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C31BB1295C1 for ; Wed, 12 Oct 2016 09:49:07 -0700 (PDT) Received: by mail-qt0-f180.google.com with SMTP id s49so21818023qta.0 for ; Wed, 12 Oct 2016 09:49:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=oGru4k7OuMcbDcVWYoGy+vvLqqrI6xfGZ5Fe7SqfMdw=; b=nQ2DY1mvGlcguZ2ZjfHErYoUoWxMlPGnCEG7pB7RrHVbstVjfFTJqs4X8J+c7GshF/ tx6XVw8mOHWPhQnwq5pVOHTckrEt/l+4gPLOoLxvWwn0rIK4/OBXbvw+SLfxgFM9mnFT 6qHdw9i6YLOpXbupWGEF0nK0DkXzrgUzllM5tvF0alK/z+P4AETRDe80RVBQGazFnkk7 O5m/LNkYdAyQRtJr2IJLqmQyOVHUAoH1FJ3bqM/UsNfNvLaKpmfaGkw7uyeYH1Xvi4Am TCGxY+NDFUgy9ADqyET84n7f8pIUKW4bSTM99b32tpyyIxEN3x9uvt/Ieiuk64VTCL0E Ot0w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=oGru4k7OuMcbDcVWYoGy+vvLqqrI6xfGZ5Fe7SqfMdw=; b=VsVrCZtU81xFkhWY21eyasCcK3SZc0LBpT/jLBN32G38IW3Ysce9LGcMOx3x9sntZK 5jG4Y64f2+C6UAClmCsENcqBfwcfB1Dh6v+In3/R51+GIlvxDK8cpEozTprv/XfE5YBe evx0rdCGiuvXcUwnb77r3jRyVZQEkCncEjnyxO2KFq+bQ8aEwKJ7Njg80zOmS75iONKe 0/HRVdrzvclc4+5AkUFbqkGGiEoIK/ZPBXDA0HJHfqwuX9daGg2r/y94u0EcGInUawby 0S5Xyuq9kf47dQ/0ZCOdcznRHDhhWnX0vgE5S/eDbop0XCcInxY9O0IZV4496GdH40AO zQ6g== X-Gm-Message-State: AA6/9RlAZK3Y6Ly6l+b3XXs/vv6hUkXaMXDqJIkzrgR/Ei5Yr54SaoAyz2+9GihjZtpBsAV70DdRR4FGNdfWIg== X-Received: by 10.194.59.18 with SMTP id v18mr2926343wjq.69.1476290886676; Wed, 12 Oct 2016 09:48:06 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.141.78 with HTTP; Wed, 12 Oct 2016 09:48:05 -0700 (PDT) In-Reply-To: <147615271936.31486.3197245647561002208.idtracker@ietfa.amsl.com> References: <147615271936.31486.3197245647561002208.idtracker@ietfa.amsl.com> From: Andy Bierman Date: Wed, 12 Oct 2016 09:48:05 -0700 Message-ID: To: Kathleen Moriarty Content-Type: multipart/alternative; boundary=047d7bacb0a6e2cdd2053eadc1d0 Archived-At: Cc: Netconf , draft-ietf-netconf-restconf@ietf.org, The IESG , netconf-chairs@ietf.org Subject: Re: [Netconf] Kathleen Moriarty's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 16:49:10 -0000 --047d7bacb0a6e2cdd2053eadc1d0 Content-Type: text/plain; charset=UTF-8 Hi, The new text is fine with me. Andy On Mon, Oct 10, 2016 at 7:25 PM, Kathleen Moriarty < Kathleen.Moriarty.ietf@gmail.com> wrote: > Kathleen Moriarty has entered the following ballot position for > draft-ietf-netconf-restconf-17: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > The draft is nicely written, thank you for that. I have a point in the > security consideration section that I think is important to clarify in > the draft. > > Authentication for RESTconf - The method for HTTP authentication vary and > some are really bad (HTTP Basic, digest isn't too far behind it). This > draft just requires some method, but I think a warning to research the > methods since they have widely varying security levels is important. For > the HTTP Authentication methods, the RFCs cover the pitfalls well. Here > is the sentence: > > Client > authentication MUST be implemented using client certificates or MUST > be implemented using an HTTP authentication scheme. > > How about: > Client > authentication MUST be implemented using client certificates or MUST > be implemented using an HTTP authentication scheme. The strength of > these methods vary greatly and (certificates are recommended or HTTP > basic is not recommended). > > Digest isn't great either, but at least not recommending basic would be > good. There are also a few newer experimental HTTPAuth methods that > improve things, but are experimental. One gets rid of stored passwords > (HOBA). > > > --047d7bacb0a6e2cdd2053eadc1d0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

The new text is fine with me.
=


Andy


On Mon, Oct 10, 2016 at 7:= 25 PM, Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com<= /a>> wrote:
Kathleen Moriarty h= as entered the following ballot position for
draft-ietf-netconf-restconf-17: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/<= wbr>statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/d= raft-ietf-netconf-restconf/



-----------------------------------------------------------------= -----
COMMENT:
-----------------------------------------------------------------= -----

The draft is nicely written, thank you for that.=C2=A0 I have a point in th= e
security consideration section that I think is important to clarify in
the draft.

Authentication for RESTconf - The method for HTTP authentication vary and some are really bad (HTTP Basic, digest isn't too far behind it).=C2=A0= This
draft just requires some method, but I think a warning to research the
methods since they have widely varying security levels is important.=C2=A0 = For
the HTTP Authentication methods, the RFCs cover the pitfalls well.=C2=A0 He= re
is the sentence:

=C2=A0 =C2=A0Client
=C2=A0 =C2=A0authentication MUST be implemented using client certificates o= r MUST
=C2=A0 =C2=A0be implemented using an HTTP authentication scheme.

How about:
=C2=A0 =C2=A0Client
=C2=A0 =C2=A0authentication MUST be implemented using client certificates o= r MUST
=C2=A0 =C2=A0be implemented using an HTTP authentication scheme.=C2=A0 The = strength of
=C2=A0 =C2=A0these methods vary greatly and (certificates are recommended o= r HTTP
basic is not recommended).

Digest isn't great either, but at least not recommending basic would be=
good.=C2=A0 There are also a few newer experimental HTTPAuth methods that improve things, but are experimental.=C2=A0 One gets rid of stored password= s
(HOBA).



--047d7bacb0a6e2cdd2053eadc1d0-- From nobody Wed Oct 12 09:59:09 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42E3E129629 for ; Wed, 12 Oct 2016 09:59:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UWXv5mgiFTOi for ; Wed, 12 Oct 2016 09:59:05 -0700 (PDT) Received: from mail-qk0-x236.google.com (mail-qk0-x236.google.com [IPv6:2607:f8b0:400d:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20F56129619 for ; Wed, 12 Oct 2016 09:59:05 -0700 (PDT) Received: by mail-qk0-x236.google.com with SMTP id n189so42617648qke.0 for ; Wed, 12 Oct 2016 09:59:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=6FywrX3viHONJop0+KR35ZUQ1CxjkjYTrayuUdW066s=; b=arNyWGWWC4oXoFhxm83E9tPbqS7LedIgQcxpEBjEHhwSPp0s5PQV56inlClo3yXEbF rwu91HsMpLSN7uJTLIjoIBS5MnNl2tXgFGA7W+xturcEkB0U7/qmmVxev6XCANjTZPRm hlaqjg1AB9vD1GTYpzV+btWLsofhx85Aq6YZHn9nDRfZlsTbMgiDRBHX68YmLrxoqKt2 nBCPWa9eCi/5u/vUzpLfnoSNmCXgvkG9UaESBVwWbKP7jFPIU58Kcchw0d/QUVKGEhy9 4j2Ab9K1qElhD2YhhMd5oZh06PEvs/n0zU6iyr2ceC+Utl7TYZ10eua46Pjt4k9xa3Ik GOCQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=6FywrX3viHONJop0+KR35ZUQ1CxjkjYTrayuUdW066s=; b=aJLMHI7OGYlMmbKf++DMOGXBPOtqR1sqjiqDuXxXQWLaYEigd2tqeX173jeiyXbWTN 8V2pmQ5oQHd8YhzFE3ietg/YlN5UzS6+lAANMS9sH5YUzG3UdBtZ/QUbIjV1eLla7uks q+fv3wV9uezlfMSExdyyyawb1FuF8Bn9Rz7Nowa8Lt1W0w3TsvHwkSkYGEElt7ZLn5M0 TZmfSLytjqnkZY2tUWnnbl+DSrxAiD9jzr8Lmw1jFFpivOsFqc8BV0WzfQ3LLiAQsaU4 Pg8Ujwga419EYSHzvOvqyPatdSV37PtK8m7Zc5jwEVOUqCIYWjhIy+lWDoPns16ax6lK sHfQ== X-Gm-Message-State: AA6/9RmA9KUKh51jsHT6GDw8pZKndmuqA+Uxq2IUNflPk0f2TnMD6hso8Tk4nBWuWiyowY+g1iFO483pcM6PvA== X-Received: by 10.194.201.36 with SMTP id jx4mr2948335wjc.38.1476291544211; Wed, 12 Oct 2016 09:59:04 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.141.78 with HTTP; Wed, 12 Oct 2016 09:59:03 -0700 (PDT) In-Reply-To: <147627819947.24260.10617949408094496315.idtracker@ietfa.amsl.com> References: <147627819947.24260.10617949408094496315.idtracker@ietfa.amsl.com> From: Andy Bierman Date: Wed, 12 Oct 2016 09:59:03 -0700 Message-ID: To: Alissa Cooper Content-Type: multipart/alternative; boundary=047d7b873cac13f96e053eade975 Archived-At: Cc: Netconf , draft-ietf-netconf-restconf@ietf.org, The IESG , netconf-chairs@ietf.org Subject: Re: [Netconf] Alissa Cooper's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 16:59:08 -0000 --047d7b873cac13f96e053eade975 Content-Type: text/plain; charset=UTF-8 On Wed, Oct 12, 2016 at 6:16 AM, Alissa Cooper wrote: > Alissa Cooper has entered the following ballot position for > draft-ietf-netconf-restconf-17: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > Thanks for your work on this. > > (1) > I'm curious how the WG settled on using Server-Sent Events. My > understanding is that the SSE framework is somewhat brittle when used on > its own and there can be problems when there are intermediaries in the > path. Did the WG consider other options (e.g., H2 server push or long > polling)? > The new notification subscriptions work in NETCONF WG will address some issues with SSE. We were trying not to reinvent notification delivery and this seemed to be the most deployed standard approach when the decision was made. H2 server push will be supported in the new work. > (2) > I know the jukebox module is just an example, but it actually made me > wonder if there would ever be cause for the server to return a 451 status > code in response to a POST or GET request rather than a 401 or 403. > Obviously there is no analog in the netconf status codes and the use for > this would be pretty atypical, but figured I would mention this thought > since it occurred to me. > The table in sec. 7 for error-tag 'access-denied' lists status codes 401 and 403. The way to block access in RESTCONF is to configure NACM rules. (Other methods would not be visible to the RESTCONF server.) In this case a 403 error is returned. NACM does not record why a rule is configured (e.g., legal vs. operational). Andy --047d7b873cac13f96e053eade975 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Wed, Oct 12, 2016 at 6:16 AM, Alissa Cooper <alissa@cooperw.in&= gt; wrote:
Alissa Cooper has enter= ed the following ballot position for
draft-ietf-netconf-restconf-17: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/<= wbr>statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/d= raft-ietf-netconf-restconf/



-----------------------------------------------------------------= -----
COMMENT:
-----------------------------------------------------------------= -----

Thanks for your work on this.

(1)
I'm curious how the WG settled on using Server-Sent Events. My
understanding is that the SSE framework is somewhat brittle when used on its own and there can be problems when there are intermediaries in the
path. Did the WG consider other options (e.g., H2 server push or long
polling)?


The new notifi= cation subscriptions work in NETCONF WG will address some issues with SSE.<= /div>
We were trying not to reinvent notification delivery and this see= med to be the
most deployed standard approach when the decision w= as made. H2 server push
will be supported in the new work.
<= div>


(2)
I know the jukebox module is just an example, but it actually made me
wonder if there would ever be cause for the server to return a 451 status code in response to a POST or GET request rather than a 401 or 403.
Obviously there is no analog in the netconf status codes and the use for this would be pretty atypical, but figured I would mention this thought
since it occurred to me.


The table in sec. 7 for error-tag 'access-denied' lists status cod= es 401 and 403.
The way to block access in RESTCONF is to configu= re NACM rules.
(Other methods would not be visible to the RESTCON= F server.)
In this case a 403 error is returned.=C2=A0 NACM does = not record why a rule
is configured (e.g., legal vs. operational)= .


Andy

=C2= =A0

--047d7b873cac13f96e053eade975-- From nobody Wed Oct 12 11:26:06 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D872129461; Wed, 12 Oct 2016 11:26:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Alexey Melnikov" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.34.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> Date: Wed, 12 Oct 2016 11:26:00 -0700 Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org Subject: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 18:26:00 -0000 Alexey Melnikov has entered the following ballot position for draft-ietf-netconf-restconf-17: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- Thank you for a well written document. I have a few minor points which I would like to discuss before recommending approval of this document: 1) In 2.4: TLS server identity verification using RFC 6125 is underspecified. Please provide all details as described in Section 3 of RFC 6125, in particular, please specify which of CN-ID, DNS-ID, SRV-ID, URI-ID are allowed/required and whether wildcards are allowed in them. 2) In 3.5.3.1: api-path is using "|" instead of "/" for alternatives. The "*" must be before a rule, not after it. It looks like the ABNF was not validated with a tool, so there might be other errors in it. 3) In 4.6: ... server MUST support the PATCH method. ... . It is optional to implement by the server. - These statements seem to be in conflict. 4) In 5.2: The server is only required to implement one of XML / JSON. Does this mean that a compliant client need to support both in order to achieve interoperability? The document doesn't say that. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- In 1.4: is it possible to expose separate :candidate, :startup and :writeable-running over RESTCONF? Section 1.4 seem to imply that only one can be used. In 3.5.3: you are listing "reserved" URI characters, you should point to RFC 3986 as the authoritative reference. In 4.4.2: can 404 be returned instead of 403? On page 45 (in the middle of the page): some references to RFCs and sections look incorrect (wrong formatting). In 4.5: it would be good to see an example creating/replacing the whole datastore. At the bottom of page 47: I see an extra dot in the middle of a sentence. In 4.8.4: I think XPath should be a normative reference there. In 5.5: what is the reason for Cache-Control being a SHOULD and not a MUST? In 11.3.1: Subtype must include "+xml" in its value. Fragment identifier: can you just say "same as for application/xml"? File extension: don't you want to define a new one? (.xml is fine as a fallback) 11.3.2: The same comment about file extensions as above. From nobody Wed Oct 12 12:00:38 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BE841297BC; Wed, 12 Oct 2016 12:00:32 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Ben Campbell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.34.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147629883236.6321.3574116264597630104.idtracker@ietfa.amsl.com> Date: Wed, 12 Oct 2016 12:00:32 -0700 Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org Subject: [Netconf] Ben Campbell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 19:00:32 -0000 Ben Campbell has entered the following ballot position for draft-ietf-netconf-restconf-17: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- (I would have balloted DISCUSS based on the major comment, but Alexey beat me to it:) Major: - 4.6: The first patch says the sever MUST support PATCH, and also that implementation of PATCH is optional. Language in 4.1 seems to assume the latter. Minor: - 2.5: I'm a bit surprised to see basic authentication encouraged to the same degree as other options. - 5.2: Did the working group consider the interoperability impact of not making either encoding MTI? - 12, paragraph 4: Please consider not repeating the 2119 language from other sections. Editorial/Nits: -1.4, 6th paragraph: "...then this commit will act as the confirming commit": Which commit is "this" commit? - 5.3, first sentence: Missing word? From nobody Wed Oct 12 12:04:11 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE88F129647; Wed, 12 Oct 2016 12:04:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WYGJ7-nGmTqO; Wed, 12 Oct 2016 12:04:02 -0700 (PDT) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0108.outbound.protection.outlook.com [104.47.38.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9A65129640; Wed, 12 Oct 2016 12:03:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=zVkEADiTkw0dJi0L1LwvTcpElNG07C9E1TlZw3Mp/a0=; b=bbSw8DPAAM0IOEd02VWIGOQc2TPKTg8VPdOshZS3+IfZ6u8+A05gvQR22FYoSlUkktV8UdOK/SCIMyvqjF/4RVxnlBUxjwpuPjYSU7blasPELv2Tb21tkzPlnJ8uH0tBZNcm58lTDc73RBIMfgBpz21245q0Uby+FQDQmB0e6FA= Received: from DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) by DM2PR0501MB1453.namprd05.prod.outlook.com (10.161.224.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.649.6; Wed, 12 Oct 2016 19:03:51 +0000 Received: from DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) by DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) with mapi id 15.01.0649.016; Wed, 12 Oct 2016 19:03:52 +0000 From: Kent Watsen To: Andy Bierman , Kathleen Moriarty Thread-Topic: Kathleen Moriarty's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) Thread-Index: AQHSI2a491CSX45tqkaMYg3emHYmnqClCgCA///i4AA= Date: Wed, 12 Oct 2016 19:03:52 +0000 Message-ID: References: <147615271936.31486.3197245647561002208.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.14] x-ms-office365-filtering-correlation-id: 5cc26952-7fef-4391-1875-08d3f2d281b5 x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1453; 7:nCdAktzPUFDauMzMWqEEGRbEtBZt/XQ9VYwwQFM3BHhq5g0+tncgUpN7Y5VN1pt7Z9iAgAp5MO6gNsCfxx+kOskyVMiWAMha0ViKMoR4AneMV5lWx1UyY8FJgLJlY7xSeoQNNX6EUsJ6QSbyPf7VeWHPymBKoVtEMjdVL26xD6IzXd0RGiAGgbdizfFfTdTfLnW6j/tSSisVQCqTcPAINpTXcOSDn+Q5kvfWkHVDMMqPya1VRqzznOFYCW4zu3zynIhAtdavUDGJhKp5OQLEfD735i5YlkNESB06wejFVchFuOwvaJ2zECAOohd2KDjEQuXnQxZcKcVWp99JTVIJCeKr98/kXTYXmqaePwQ2Gvk= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1453; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(192374486261705)(138986009662008)(82608151540597)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:DM2PR0501MB1453; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1453; x-forefront-prvs: 0093C80C01 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(199003)(377454003)(189002)(24454002)(19580405001)(10400500002)(6116002)(551544002)(83716003)(86362001)(5002640100001)(97736004)(2906002)(4326007)(3660700001)(345774005)(102836003)(586003)(87936001)(82746002)(5001770100001)(4001350100001)(19300405004)(189998001)(7736002)(7906003)(92566002)(19580395003)(7846002)(83506001)(3846002)(16236675004)(54356999)(106116001)(33656002)(77096005)(19625215002)(66066001)(122556002)(68736007)(76176999)(8676002)(50986999)(230783001)(99286002)(15975445007)(8936002)(36756003)(106356001)(2900100001)(3280700002)(105586002)(19617315012)(2950100002)(81166006)(5660300001)(81156014)(101416001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1453; H:DM2PR0501MB1455.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_E016DFD0D1DC4CDEBFA955B804004CF3junipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2016 19:03:52.0383 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1453 Archived-At: Cc: Netconf , "draft-ietf-netconf-restconf@ietf.org" , The IESG , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Kathleen Moriarty's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 19:04:05 -0000 --_000_E016DFD0D1DC4CDEBFA955B804004CF3junipernet_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UHV0dGluZyB0aGUgZmluaXNoaW5nIHRvdWNoZXMgb24gS2F0aGxlZW7igJlzIHByb3Bvc2VkIHRl eHQ6DQoNCiAgIENsaWVudA0KICAgYXV0aGVudGljYXRpb24gTVVTVCBiZSBpbXBsZW1lbnRlZCB1 c2luZyBjbGllbnQgY2VydGlmaWNhdGVzIG9yIE1VU1QNCiAgIGJlIGltcGxlbWVudGVkIHVzaW5n IGFuIEhUVFAgYXV0aGVudGljYXRpb24gc2NoZW1lLiAgVGhlIHN0cmVuZ3RoIG9mDQogICB0aGVz ZSBtZXRob2RzIHZhcnkgZ3JlYXRseS4gIEZvciBleGFtcGxlLCB1c2Ugb2YgYSBjbGllbnQgY2Vy dGlmaWNhdGUNCiAgIGlzIFJFQ09NTUVOREVELCB3aGlsZSBIVFRQIEJhc2ljIGF1dGhlbnRpY2F0 aW9uIFtSRkM3NjE3XSBpcw0KICAgTk9UIFJFQ09NTUVOREVELg0KDQpBbHNvLCBJIHRoaW5rIHRo ZSBmb2xsb3dpbmcgc2VudGVuY2UgcmVncmFkaW5nIE5BQ00gc2hvdWxkIGJlIGRlbGV0ZWQsIGFz DQppdOKAmXMgbm90IHdlbGwgY29ubmVjdGVkIHRvIHRoZSBwYXJhZ3JhcGggYW5kIGl04oCZcyBh bHJlYWR5IG1lbnRpb25lZCBpbg0KU2VjdGlvbiAyLjUuDQoNClRob3VnaHRzPw0KDQpLZW50DQoN Cg0KDQpGcm9tOiBBbmR5IEJpZXJtYW4gPGFuZHlAeXVtYXdvcmtzLmNvbT4NCkRhdGU6IFdlZG5l c2RheSwgT2N0b2JlciAxMiwgMjAxNiBhdCAxMjo0OCBQTQ0KVG86IEthdGhsZWVuIE1vcmlhcnR5 IDxLYXRobGVlbi5Nb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4NCkNjOiBUaGUgSUVTRyA8aWVzZ0Bp ZXRmLm9yZz4sICJkcmFmdC1pZXRmLW5ldGNvbmYtcmVzdGNvbmZAaWV0Zi5vcmciIDxkcmFmdC1p ZXRmLW5ldGNvbmYtcmVzdGNvbmZAaWV0Zi5vcmc+LCAibmV0Y29uZi1jaGFpcnNAaWV0Zi5vcmci IDxuZXRjb25mLWNoYWlyc0BpZXRmLm9yZz4sICJFcnN1ZSwgTWVobWV0IChOb2tpYSAtIERFL011 bmljaCkiIDxtZWhtZXQuZXJzdWVAbm9raWEuY29tPiwgIm5ldGNvbmZAaWV0Zi5vcmciIDxuZXRj b25mQGlldGYub3JnPg0KU3ViamVjdDogUmU6IEthdGhsZWVuIE1vcmlhcnR5J3MgTm8gT2JqZWN0 aW9uIG9uIGRyYWZ0LWlldGYtbmV0Y29uZi1yZXN0Y29uZi0xNzogKHdpdGggQ09NTUVOVCkNClJl c2VudC1Gcm9tOiA8YWxpYXMtYm91bmNlc0BpZXRmLm9yZz4NClJlc2VudC1UbzogPGFuZHlAeXVt YXdvcmtzLmNvbT4sIDxtYmpAdGFpbC1mLmNvbT4sIDxrd2F0c2VuQGp1bmlwZXIubmV0Pg0KUmVz ZW50LURhdGU6IFdlZG5lc2RheSwgT2N0b2JlciAxMiwgMjAxNiBhdCAxMjo0OCBQTQ0KDQpIaSwN Cg0KVGhlIG5ldyB0ZXh0IGlzIGZpbmUgd2l0aCBtZS4NCg0KDQpBbmR5DQoNCg0KT24gTW9uLCBP Y3QgMTAsIDIwMTYgYXQgNzoyNSBQTSwgS2F0aGxlZW4gTW9yaWFydHkgPEthdGhsZWVuLk1vcmlh cnR5LmlldGZAZ21haWwuY29tPG1haWx0bzpLYXRobGVlbi5Nb3JpYXJ0eS5pZXRmQGdtYWlsLmNv bT4+IHdyb3RlOg0KS2F0aGxlZW4gTW9yaWFydHkgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBi YWxsb3QgcG9zaXRpb24gZm9yDQpkcmFmdC1pZXRmLW5ldGNvbmYtcmVzdGNvbmYtMTc6IE5vIE9i amVjdGlvbg0KDQpXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUg aW50YWN0IGFuZCByZXBseSB0byBhbGwNCmVtYWlsIGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0aGUg VG8gYW5kIENDIGxpbmVzLiAoRmVlbCBmcmVlIHRvIGN1dCB0aGlzDQppbnRyb2R1Y3RvcnkgcGFy YWdyYXBoLCBob3dldmVyLikNCg0KDQpQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQpmb3IgbW9yZSBpbmZvcm1h dGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENPTU1FTlQgcG9zaXRpb25zLg0KDQoNClRoZSBk b2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQg aGVyZToNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtbmV0Y29u Zi1yZXN0Y29uZi8NCg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkNPTU1FTlQ6DQotLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQoNClRoZSBkcmFmdCBpcyBuaWNlbHkgd3JpdHRlbiwgdGhhbmsgeW91IGZvciB0aGF0LiAgSSBo YXZlIGEgcG9pbnQgaW4gdGhlDQpzZWN1cml0eSBjb25zaWRlcmF0aW9uIHNlY3Rpb24gdGhhdCBJ IHRoaW5rIGlzIGltcG9ydGFudCB0byBjbGFyaWZ5IGluDQp0aGUgZHJhZnQuDQoNCkF1dGhlbnRp Y2F0aW9uIGZvciBSRVNUY29uZiAtIFRoZSBtZXRob2QgZm9yIEhUVFAgYXV0aGVudGljYXRpb24g dmFyeSBhbmQNCnNvbWUgYXJlIHJlYWxseSBiYWQgKEhUVFAgQmFzaWMsIGRpZ2VzdCBpc24ndCB0 b28gZmFyIGJlaGluZCBpdCkuICBUaGlzDQpkcmFmdCBqdXN0IHJlcXVpcmVzIHNvbWUgbWV0aG9k LCBidXQgSSB0aGluayBhIHdhcm5pbmcgdG8gcmVzZWFyY2ggdGhlDQptZXRob2RzIHNpbmNlIHRo ZXkgaGF2ZSB3aWRlbHkgdmFyeWluZyBzZWN1cml0eSBsZXZlbHMgaXMgaW1wb3J0YW50LiAgRm9y DQp0aGUgSFRUUCBBdXRoZW50aWNhdGlvbiBtZXRob2RzLCB0aGUgUkZDcyBjb3ZlciB0aGUgcGl0 ZmFsbHMgd2VsbC4gIEhlcmUNCmlzIHRoZSBzZW50ZW5jZToNCg0KICAgQ2xpZW50DQogICBhdXRo ZW50aWNhdGlvbiBNVVNUIGJlIGltcGxlbWVudGVkIHVzaW5nIGNsaWVudCBjZXJ0aWZpY2F0ZXMg b3IgTVVTVA0KICAgYmUgaW1wbGVtZW50ZWQgdXNpbmcgYW4gSFRUUCBhdXRoZW50aWNhdGlvbiBz Y2hlbWUuDQoNCkhvdyBhYm91dDoNCiAgIENsaWVudA0KICAgYXV0aGVudGljYXRpb24gTVVTVCBi ZSBpbXBsZW1lbnRlZCB1c2luZyBjbGllbnQgY2VydGlmaWNhdGVzIG9yIE1VU1QNCiAgIGJlIGlt cGxlbWVudGVkIHVzaW5nIGFuIEhUVFAgYXV0aGVudGljYXRpb24gc2NoZW1lLiAgVGhlIHN0cmVu Z3RoIG9mDQogICB0aGVzZSBtZXRob2RzIHZhcnkgZ3JlYXRseSBhbmQgKGNlcnRpZmljYXRlcyBh cmUgcmVjb21tZW5kZWQgb3IgSFRUUA0KYmFzaWMgaXMgbm90IHJlY29tbWVuZGVkKS4NCg0KRGln ZXN0IGlzbid0IGdyZWF0IGVpdGhlciwgYnV0IGF0IGxlYXN0IG5vdCByZWNvbW1lbmRpbmcgYmFz aWMgd291bGQgYmUNCmdvb2QuICBUaGVyZSBhcmUgYWxzbyBhIGZldyBuZXdlciBleHBlcmltZW50 YWwgSFRUUEF1dGggbWV0aG9kcyB0aGF0DQppbXByb3ZlIHRoaW5ncywgYnV0IGFyZSBleHBlcmlt ZW50YWwuICBPbmUgZ2V0cyByaWQgb2Ygc3RvcmVkIHBhc3N3b3Jkcw0KKEhPQkEpLg0KDQoNCg== --_000_E016DFD0D1DC4CDEBFA955B804004CF3junipernet_ Content-Type: text/html; charset="utf-8" Content-ID: <6A46487413AD42418FC6929F0CB35756@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eToiVGltZXMgTmV3IFJvbWFuIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5tc29JbnMNCgl7 bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5hbWU6IiI7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29y ZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBp biAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwv c3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9 ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmkiPlB1dHRpbmcgdGhlIGZpbmlzaGluZyB0b3VjaGVzIG9uIEthdGhsZWVu4oCZcyBw cm9wb3NlZCB0ZXh0OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOyZuYnNwOyBDbGll bnQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsgYXV0 aGVudGljYXRpb24gTVVTVCBiZSBpbXBsZW1lbnRlZCB1c2luZyBjbGllbnQgY2VydGlmaWNhdGVz IG9yIE1VU1Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJz cDsgYmUgaW1wbGVtZW50ZWQgdXNpbmcgYW4gSFRUUCBhdXRoZW50aWNhdGlvbiBzY2hlbWUuJm5i c3A7IFRoZSBzdHJlbmd0aCBvZjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmki PiZuYnNwOyAmbmJzcDt0aGVzZSBtZXRob2RzIHZhcnkgZ3JlYXRseS4mbmJzcDsgRm9yIGV4YW1w bGUsIHVzZSBvZiBhIGNsaWVudCBjZXJ0aWZpY2F0ZQ0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6Q2FsaWJyaSI+Jm5ic3A7Jm5ic3A7Jm5ic3A7aXMgUkVDT01NRU5ERUQsIHdoaWxlIEhU VFAgQmFzaWMgYXV0aGVudGljYXRpb24gW1JGQzc2MTddIGlzDQo8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsmbmJzcDtOT1QgUkVDT01NRU5ERUQuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+QWxzbywgSSB0aGluayB0aGUgZm9sbG93aW5nIHNlbnRl bmNlIHJlZ3JhZGluZyBOQUNNIHNob3VsZCBiZSBkZWxldGVkLCBhczxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmkiPml04oCZcyBub3Qgd2VsbCBjb25uZWN0ZWQgdG8gdGhlIHBh cmFncmFwaCBhbmQgaXTigJlzIGFscmVhZHkgbWVudGlvbmVkIGluDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpIj5TZWN0aW9uIDIuNS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxp YnJpIj5UaG91Z2h0cz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5LZW50PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGli cmk7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+QW5keSBCaWVybWFuICZsdDthbmR5QHl1bWF3b3Jrcy5j b20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgT2N0b2JlciAxMiwgMjAxNiBhdCAx Mjo0OCBQTTxicj4NCjxiPlRvOiA8L2I+S2F0aGxlZW4gTW9yaWFydHkgJmx0O0thdGhsZWVuLk1v cmlhcnR5LmlldGZAZ21haWwuY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+VGhlIElFU0cgJmx0O2ll c2dAaWV0Zi5vcmcmZ3Q7LCAmcXVvdDtkcmFmdC1pZXRmLW5ldGNvbmYtcmVzdGNvbmZAaWV0Zi5v cmcmcXVvdDsgJmx0O2RyYWZ0LWlldGYtbmV0Y29uZi1yZXN0Y29uZkBpZXRmLm9yZyZndDssICZx dW90O25ldGNvbmYtY2hhaXJzQGlldGYub3JnJnF1b3Q7ICZsdDtuZXRjb25mLWNoYWlyc0BpZXRm Lm9yZyZndDssICZxdW90O0Vyc3VlLCBNZWhtZXQgKE5va2lhIC0gREUvTXVuaWNoKSZxdW90OyAm bHQ7bWVobWV0LmVyc3VlQG5va2lhLmNvbSZndDssICZxdW90O25ldGNvbmZAaWV0Zi5vcmcmcXVv dDsgJmx0O25ldGNvbmZAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBLYXRo bGVlbiBNb3JpYXJ0eSdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLW5ldGNvbmYtcmVzdGNv bmYtMTc6ICh3aXRoIENPTU1FTlQpPGJyPg0KPGI+UmVzZW50LUZyb206IDwvYj4mbHQ7YWxpYXMt Ym91bmNlc0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5SZXNlbnQtVG86IDwvYj4mbHQ7YW5keUB5dW1h d29ya3MuY29tJmd0OywgJmx0O21iakB0YWlsLWYuY29tJmd0OywgJmx0O2t3YXRzZW5AanVuaXBl ci5uZXQmZ3Q7PGJyPg0KPGI+UmVzZW50LURhdGU6IDwvYj5XZWRuZXNkYXksIE9jdG9iZXIgMTIs IDIwMTYgYXQgMTI6NDggUE08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpLCA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlRoZSBuZXcgdGV4dCBpcyBmaW5lIHdpdGggbWUuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QW5keTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE1vbiwg T2N0IDEwLCAyMDE2IGF0IDc6MjUgUE0sIEthdGhsZWVuIE1vcmlhcnR5ICZsdDs8YSBocmVmPSJt YWlsdG86S2F0aGxlZW4uTW9yaWFydHkuaWV0ZkBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5L YXRobGVlbi5Nb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+ PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+S2F0aGxlZW4gTW9yaWFydHkgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBi YWxsb3QgcG9zaXRpb24gZm9yPGJyPg0KZHJhZnQtaWV0Zi1uZXRjb25mLXJlc3Rjb25mLTE3OiBO byBPYmplY3Rpb248YnI+DQo8YnI+DQpXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBz dWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byBhbGw8YnI+DQplbWFpbCBhZGRyZXNzZXMg aW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpczxi cj4NCmludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKTxicj4NCjxicj4NCjxicj4NClBs ZWFzZSByZWZlciB0byA8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVu dC9kaXNjdXNzLWNyaXRlcmlhLmh0bWwiIHRhcmdldD0iX2JsYW5rIj4NCmh0dHBzOi8vd3d3Lmll dGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbDwvYT48YnI+DQpmb3Ig bW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJU0NVU1MgYW5kIENPTU1FTlQgcG9zaXRpb25z Ljxicj4NCjxicj4NCjxicj4NClRoZSBkb2N1bWVudCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3Qg cG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZTo8YnI+DQo8YSBocmVmPSJodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLW5ldGNvbmYtcmVzdGNvbmYvIiB0YXJnZXQ9 Il9ibGFuayI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1uZXRj b25mLXJlc3Rjb25mLzwvYT48YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQotLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJy Pg0KQ09NTUVOVDo8YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KPGJyPg0KVGhlIGRyYWZ0IGlzIG5p Y2VseSB3cml0dGVuLCB0aGFuayB5b3UgZm9yIHRoYXQuJm5ic3A7IEkgaGF2ZSBhIHBvaW50IGlu IHRoZTxicj4NCnNlY3VyaXR5IGNvbnNpZGVyYXRpb24gc2VjdGlvbiB0aGF0IEkgdGhpbmsgaXMg aW1wb3J0YW50IHRvIGNsYXJpZnkgaW48YnI+DQp0aGUgZHJhZnQuPGJyPg0KPGJyPg0KQXV0aGVu dGljYXRpb24gZm9yIFJFU1Rjb25mIC0gVGhlIG1ldGhvZCBmb3IgSFRUUCBhdXRoZW50aWNhdGlv biB2YXJ5IGFuZDxicj4NCnNvbWUgYXJlIHJlYWxseSBiYWQgKEhUVFAgQmFzaWMsIGRpZ2VzdCBp c24ndCB0b28gZmFyIGJlaGluZCBpdCkuJm5ic3A7IFRoaXM8YnI+DQpkcmFmdCBqdXN0IHJlcXVp cmVzIHNvbWUgbWV0aG9kLCBidXQgSSB0aGluayBhIHdhcm5pbmcgdG8gcmVzZWFyY2ggdGhlPGJy Pg0KbWV0aG9kcyBzaW5jZSB0aGV5IGhhdmUgd2lkZWx5IHZhcnlpbmcgc2VjdXJpdHkgbGV2ZWxz IGlzIGltcG9ydGFudC4mbmJzcDsgRm9yPGJyPg0KdGhlIEhUVFAgQXV0aGVudGljYXRpb24gbWV0 aG9kcywgdGhlIFJGQ3MgY292ZXIgdGhlIHBpdGZhbGxzIHdlbGwuJm5ic3A7IEhlcmU8YnI+DQpp cyB0aGUgc2VudGVuY2U6PGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNwO0NsaWVudDxicj4NCiZuYnNw OyAmbmJzcDthdXRoZW50aWNhdGlvbiBNVVNUIGJlIGltcGxlbWVudGVkIHVzaW5nIGNsaWVudCBj ZXJ0aWZpY2F0ZXMgb3IgTVVTVDxicj4NCiZuYnNwOyAmbmJzcDtiZSBpbXBsZW1lbnRlZCB1c2lu ZyBhbiBIVFRQIGF1dGhlbnRpY2F0aW9uIHNjaGVtZS48YnI+DQo8YnI+DQpIb3cgYWJvdXQ6PGJy Pg0KJm5ic3A7ICZuYnNwO0NsaWVudDxicj4NCiZuYnNwOyAmbmJzcDthdXRoZW50aWNhdGlvbiBN VVNUIGJlIGltcGxlbWVudGVkIHVzaW5nIGNsaWVudCBjZXJ0aWZpY2F0ZXMgb3IgTVVTVDxicj4N CiZuYnNwOyAmbmJzcDtiZSBpbXBsZW1lbnRlZCB1c2luZyBhbiBIVFRQIGF1dGhlbnRpY2F0aW9u IHNjaGVtZS4mbmJzcDsgVGhlIHN0cmVuZ3RoIG9mPGJyPg0KJm5ic3A7ICZuYnNwO3RoZXNlIG1l dGhvZHMgdmFyeSBncmVhdGx5IGFuZCAoY2VydGlmaWNhdGVzIGFyZSByZWNvbW1lbmRlZCBvciBI VFRQPGJyPg0KYmFzaWMgaXMgbm90IHJlY29tbWVuZGVkKS48YnI+DQo8YnI+DQpEaWdlc3QgaXNu J3QgZ3JlYXQgZWl0aGVyLCBidXQgYXQgbGVhc3Qgbm90IHJlY29tbWVuZGluZyBiYXNpYyB3b3Vs ZCBiZTxicj4NCmdvb2QuJm5ic3A7IFRoZXJlIGFyZSBhbHNvIGEgZmV3IG5ld2VyIGV4cGVyaW1l bnRhbCBIVFRQQXV0aCBtZXRob2RzIHRoYXQ8YnI+DQppbXByb3ZlIHRoaW5ncywgYnV0IGFyZSBl eHBlcmltZW50YWwuJm5ic3A7IE9uZSBnZXRzIHJpZCBvZiBzdG9yZWQgcGFzc3dvcmRzPGJyPg0K KEhPQkEpLjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_E016DFD0D1DC4CDEBFA955B804004CF3junipernet_-- From nobody Wed Oct 12 12:15:24 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D84A12954D for ; Wed, 12 Oct 2016 12:15:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o-FMB_QWVVsT for ; Wed, 12 Oct 2016 12:15:20 -0700 (PDT) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0116.outbound.protection.outlook.com [104.47.33.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DAB7129539 for ; Wed, 12 Oct 2016 12:15:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ofDgy2kzsiNaF3Z/NjFBYbxxxhBG8qxJymd6qMSorHA=; b=VsNCkpdASQjChQnRwV1xzP3i8bQ2JKIRxNlJZlA6mTDZ1fntUgvmOQuJv6zty6oFX/QmC0bQUPpniNhJ9pnCJomF1//powjmLnAD+sttuwVpYCpQGJTN6gycQB+Q0ClPvJWmsC6hfo9q9MwFYxIwyjMmL3tqrgIOX9oCKLj4+5M= Received: from DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) by DM2PR0501MB1456.namprd05.prod.outlook.com (10.161.224.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.649.6; Wed, 12 Oct 2016 19:15:16 +0000 Received: from DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) by DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) with mapi id 15.01.0649.016; Wed, 12 Oct 2016 19:15:16 +0000 From: Kent Watsen To: "netconf@ietf.org" Thread-Topic: [Netconf] zerotouch/16: How to encode a chain of certs? Thread-Index: AQHR9O1QL2hT7JffXUKb2eXuCtz2rKB39WAAgAASGwCAGR98gIARejYAgAKr1oA= Date: Wed, 12 Oct 2016 19:15:16 +0000 Message-ID: References: <35D8022F-B00A-4916-92DD-3D1E4C44FA16@juniper.net> <1500904D-B8B7-47CC-B338-8434DB7772F0@juniper.net> <4460E7FA-4151-4CD3-B9EA-9820CFA37D3D@juniper.net> In-Reply-To: <4460E7FA-4151-4CD3-B9EA-9820CFA37D3D@juniper.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.14] x-ms-office365-filtering-correlation-id: 7ebd3944-511e-4899-3660-08d3f2d419c7 x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1456; 7:akOKeRHPrDfGm+A3nw/nvwDx87lHU1PI4c3KXlkbZi5JnPEkgj3/P4ODbM7FDO44znyF+zXgSqlFgBuFl7IjBoCtRqqkpWGgKbM/ZbQmriSWYJc2mz7PdiuIZEIwPCGvYVio0NrGAa3XfYmvA4/zb0UDdiD+ewYqccknid5p5j4NOtwy2hddt4QZWioTwPyDZ6017UOIOgA/KIOF30B/6vOLpEqfGM0J1bQ2Z4fj00FJLYzVAOCmYS1X0YEMLQYN+N2z2gK85uVTzIU/HU0s4TQ9pE/hNOmVqBck05NJc5khFB89D5rAlTpnZ/eVrUkKAcIuLR10sm3oQPO9/Xx6YBd0B/h7L4x3vab0mKOwjgI= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1456; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(138986009662008)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:DM2PR0501MB1456; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1456; x-forefront-prvs: 0093C80C01 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(46034005)(199003)(377454003)(189002)(11100500001)(19580395003)(19580405001)(3660700001)(2351001)(106116001)(586003)(36756003)(189998001)(19300405004)(3280700002)(6116002)(3846002)(107886002)(106356001)(102836003)(2950100002)(8936002)(19625215002)(6916009)(1730700003)(68736007)(81166006)(81156014)(8676002)(7736002)(551544002)(66066001)(7846002)(5002640100001)(10400500002)(99286002)(4001350100001)(2906002)(5640700001)(97736004)(15975445007)(110136003)(450100001)(77096005)(33656002)(101416001)(2900100001)(122556002)(50986999)(76176999)(86362001)(54356999)(87936001)(2501003)(92566002)(83506001)(83716003)(82746002)(16236675004)(93886004)(5660300001)(105586002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1456; H:DM2PR0501MB1455.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_C313C4A747A54A04B65E7CAC23FE46F6junipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2016 19:15:16.7745 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1456 Archived-At: Subject: Re: [Netconf] zerotouch/16: How to encode a chain of certs? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 19:15:23 -0000 --_000_C313C4A747A54A04B65E7CAC23FE46F6junipernet_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpObyByZXNwb25zZXMgc28gZmFyLiAgIFRvIGtlZXAgdGhlIGJhbGwgcm9sbGluZywgSeKAmWxs IGFzc3VtZSBqdXN0IHN1cHBvcnRpbmcgcGtjcyM3IGlzIG9rYXkgaWYgbm8gb2JqZWN0aW9ucyBh cmUgcmFpc2VkIGJ5IHRoaXMgRnJpZGF5Lg0KDQpUaGFua3MsDQpLZW50DQoNCg0KDQpGcm9tOiBO ZXRjb25mIDxuZXRjb25mLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBLZW50IFdhdHNl biA8a3dhdHNlbkBqdW5pcGVyLm5ldD4NCkRhdGU6IE1vbmRheSwgT2N0b2JlciAxMCwgMjAxNiBh dCAxMDoyNyBQTQ0KVG86ICJuZXRjb25mQGlldGYub3JnIiA8bmV0Y29uZkBpZXRmLm9yZz4NClN1 YmplY3Q6IFJlOiBbTmV0Y29uZl0gemVyb3RvdWNoLzE2OiBIb3cgdG8gZW5jb2RlIGEgY2hhaW4g b2YgY2VydHM/DQoNCg0KVGhlIFBLQ1MjMTIgZm9ybWF0IGlzIGdpdmluZyBtZSB0cm91YmxlLiAg IEkgZHVtcGVkIGl0cyBBU04uMSBjb250ZW50IHRvIGVuc3VyZSBJIHdhcyBkb2N1bWVudGluZyB0 aGUgc3RydWN0dXJlIGNvcnJlY3RseSwgb25seSB0byBkaXNjb3ZlciB0aGF0IGl0IHdhcyBwYXNz d29yZC1lbmNyeXB0ZWQsIGV2ZW4gdGhvdWdoIEkgaGl0IDxyZXR1cm4+IGZvciB0aGUgcGFzc3dv cmQgKG5vdGU6IHRoaXMgaXMgYmVjYXVzZSBpdOKAmXMgdXNpbmcgYSBzYWx0IHZhbHVlKS4gIEkg c3BlbnQgb3ZlciBhbiBob3VyIGxvb2tpbmcgZm9yIGEgd2F5IHRvIHJlbW92ZSB0aGUgcGFzc3dv cmQgY29tcGxldGVseSwgYnV0IHRvIG5vIGF2YWlsLiAgVW5sZXNzIGFueW9uZSBoYXMgYW4gaWRl YSwgSSB0aGluayB3ZSBzaG91bGQgZ2l2ZSB1cCBvbiB0aGUgcGtjcyMxMiBmb3JtYXQuDQoNClNv IG5vdyBpdOKAmXMganVzdCBQRU0gYW5kIFBLQ1MjNywgYnV0IGJldHdlZW4gdGhlIHR3bywgUEtD UyM3IGlzIGJ5IGZhciB0aGUgYmV0dGVyIGNob2ljZS4gICBUaGUgaWRlYSBvZiBzdXBwb3J0aW5n IG1vcmUgdGhhbiBvbmUgZm9ybWF0IHdhcyBvbmx5IHJlYWxseSBpbnRlcmVzdGluZyB3aGVuIHBr Y3MjMTIgd2FzIGluIHRoZSBtaXguICBOb3cgSeKAmW0gbm90IHN1cmUgaWYgaXTigJlzIHdvcnRo IGl0IGFueSBtb3JlLiAgIFNvLCBzaG91bGQgd2Ugc3RpY2sgd2l0aDoNCg0KICAgICAgICAgICAg ICArLS1ybyBjZXJ0aWZpY2F0ZQ0KICAgICAgICAgICAgICAgICAgKy0tcm8gZm9ybWF0ICAgIGVu dW1lcmF0aW9uICAgIDwtLSBjaG9pY2VzIGFyZSDigJxwZW3igJ0gYW5kIOKAnHBrY3M34oCdDQog ICAgICAgICAgICAgICAgICArLS1ybyBkYXRhICAgICAgYmluYXJ5ICAgICAgICAgICAgICAgICAg IDwtLSBlbmNvZGluZyBkZXBlbmRzIG9uIOKAmGZvcm1hdOKAmSBmaWVsZA0KDQpvcg0KDQogICAg ICAgICAgICAgICstLXJvIGNlcnRpZmljYXRlICBiaW5hcnkgICAgICAgICAgICAgICAgPC0tIGhh cmRjb2RlZCB0byBwa2NzIzcNCg0KDQoNCk1laG1ldC9NYWhlc2gsIHNpbmNlIHlvdSB0d28gc2Vs ZWN0ZWQgb3B0aW9uICM2IChzZWUgYmVsb3cpIGJlZm9yZSwgSeKAmW0gZXNwZWNpYWxseSBpbnRl cmVzdGVkIGluIHlvdXIgb3BpbmlvbnMuDQoNClRoYW5rcywNCktlbnQNCg0KDQoNCkZyb206IE5l dGNvbmYgPG5ldGNvbmYtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIEtlbnQgV2F0c2Vu IDxrd2F0c2VuQGp1bmlwZXIubmV0Pg0KRGF0ZTogVGh1cnNkYXksIFNlcHRlbWJlciAyOSwgMjAx NiBhdCA3OjMzIFBNDQpUbzogTWFoZXNoIEpldGhhbmFuZGFuaSA8bWpldGhhbmFuZGFuaUBnbWFp bC5jb20+DQpDYzogIm5ldGNvbmZAaWV0Zi5vcmciIDxuZXRjb25mQGlldGYub3JnPg0KU3ViamVj dDogUmU6IFtOZXRjb25mXSB6ZXJvdG91Y2gvMTY6IEhvdyB0byBlbmNvZGUgYSBjaGFpbiBvZiBj ZXJ0cz8NCg0KDQpTbyBib3RoIE1haGVzaCBhbmQgTWVobWV0IChhcyBjb250cmlidXRvcnMgSSBi ZWxpZXZlKSBzZWxlY3RlZCBvcHRpb24gIzYuICBObyBvdGhlciByZXNwb25zZXMgd2VyZSByZWNl aXZlZC4gIFRodXMgSSB3aWxsIG1vdmUgZm9yd2FyZCB3aXRoIG9wdGlvbiAjNi4NCg0KVGhhbmtz LA0KS2VudA0KDQpGcm9tOiBOZXRjb25mIDxuZXRjb25mLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJl aGFsZiBvZiBLZW50IFdhdHNlbiA8a3dhdHNlbkBqdW5pcGVyLm5ldD4NCkRhdGU6IFR1ZXNkYXks IFNlcHRlbWJlciAxMywgMjAxNiBhdCA3OjU0IFBNDQpUbzogTWFoZXNoIEpldGhhbmFuZGFuaSA8 bWpldGhhbmFuZGFuaUBnbWFpbC5jb20+DQpDYzogIm5ldGNvbmZAaWV0Zi5vcmciIDxuZXRjb25m QGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtOZXRjb25mXSB6ZXJvdG91Y2gvMTY6IEhvdyB0byBl bmNvZGUgYSBjaGFpbiBvZiBjZXJ0cz8NCg0KPFNOSVAvPg0KDQpSZWNvbW1lbmRhdGlvbnM6DQog IC0gSWYgd2UgaGF2ZSB0byBwaWNrIGp1c3Qgb25lLCBJ4oCZZCBhc2sgc2VjdXJpdHkgZXhwZXJ0 cyB0byBwaWNrIGJldHdlZW4NCiAgICBwazcgYW5kIHAxMi4gIE5vdGU6IHBrNyB3YXMgYSBiaXQg ZWFzaWVyIG9uIHRoZSBjb21tYW5kIGxpbmUsIGluDQogICAgdGhhdCBpdCBkaWRu4oCZdCBwcm9t cHQgZm9yIHBhc3N3b3JkLiAgQWxzbywgcGs3IHJvdW5kLXRyaXBwaW5nDQogICAgc3RhYmlsaXpl ZCBmYXN0ZXIuDQogIC0gSWYgd2XigJlyZSBva2F5IHdpdGggZGV2aWNlcyBoYXZpbmcgdG8gc3Vw cG9ydCBhbGwgZm9ybWF0cywNCg0KW01haGVzaF0gKzENCg0KDQoNCg0KDQp0aGVuIEkNCiAgICB0 aGluayBzb2x1dGlvbiAjNiBpcyBiZXR0ZXIgdGhhbiAjNS4NCg0KW01haGVzaF0gV2hhdCBpcyB0 aGUgYWR2YW50YWdlIG9mIHNvbHV0aW9uICM2IG92ZXIgIzU/DQoNCg0KSSBqdXN0IGxpa2UgdGhl IGlkZWEgb2YgYWRkaW5nIGZ1dHVyZSBlbnVtZXJhdGlvbnMgbW9yZSB0aGFuIGFkZGluZyBsZWFm cy4gIFRoaXMgYXBwcm9hY2ggZW5zdXJlcyBtb3JlIHByb2Nlc3Npbmcgc3RlcHMgYXJlIGFsd2F5 cyB0aGUgc2FtZS4gIEl04oCZcyBub3QgbXVjaCwgYnV0IGl04oCZcyBzb21ldGhpbmcuLi4NCg0K S2VudA0KDQoNCg0KDQo= --_000_C313C4A747A54A04B65E7CAC23FE46F6junipernet_ Content-Type: text/html; charset="utf-8" Content-ID: <52D8B212639FF8409D84FF6668AF0F80@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eToiVGltZXMgTmV3IFJvbWFuIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZh bWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWls U3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseTpD YWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5tc29JbnMNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5hbWU6IiI7DQoJdGV4dC1kZWNvcmF0aW9uOnVu ZGVybGluZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBl OmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJ e3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpk aXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hl YWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5r PSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPk5vIHJlc3BvbnNlcyBz byBmYXIuJm5ic3A7Jm5ic3A7IFRvIGtlZXAgdGhlIGJhbGwgcm9sbGluZywgSeKAmWxsIGFzc3Vt ZSBqdXN0IHN1cHBvcnRpbmcNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpIj5wa2NzIzcgaXMgb2theSA8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+aWYgbm8gb2JqZWN0aW9ucyBhcmUg cmFpc2VkIGJ5IHRoaXMgRnJpZGF5LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGli cmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlRoYW5rcyw8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5LZW50PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7 Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 Q2FsaWJyaTtjb2xvcjpibGFjayI+TmV0Y29uZiAmbHQ7bmV0Y29uZi1ib3VuY2VzQGlldGYub3Jn Jmd0OyBvbiBiZWhhbGYgb2YgS2VudCBXYXRzZW4gJmx0O2t3YXRzZW5AanVuaXBlci5uZXQmZ3Q7 PGJyPg0KPGI+RGF0ZTogPC9iPk1vbmRheSwgT2N0b2JlciAxMCwgMjAxNiBhdCAxMDoyNyBQTTxi cj4NCjxiPlRvOiA8L2I+JnF1b3Q7bmV0Y29uZkBpZXRmLm9yZyZxdW90OyAmbHQ7bmV0Y29uZkBp ZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtOZXRjb25mXSB6ZXJvdG91Y2gv MTY6IEhvdyB0byBlbmNvZGUgYSBjaGFpbiBvZiBjZXJ0cz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6Q2FsaWJyaSI+VGhlIFBLQ1MjMTIgZm9ybWF0IGlzIGdpdmluZyBtZSB0cm91YmxlLiZu YnNwOyAmbmJzcDtJIGR1bXBlZCBpdHMgQVNOLjEgY29udGVudCB0byBlbnN1cmUgSSB3YXMgZG9j dW1lbnRpbmcgdGhlIHN0cnVjdHVyZSBjb3JyZWN0bHksIG9ubHkgdG8gZGlzY292ZXIgdGhhdCBp dCB3YXMgcGFzc3dvcmQtZW5jcnlwdGVkLCBldmVuIHRob3VnaCBJDQogaGl0ICZsdDtyZXR1cm4m Z3Q7IGZvciB0aGUgcGFzc3dvcmQgKG5vdGU6IHRoaXMgaXMgYmVjYXVzZSBpdOKAmXMgdXNpbmcg YSBzYWx0IHZhbHVlKS4mbmJzcDsgSSBzcGVudCBvdmVyIGFuIGhvdXIgbG9va2luZyBmb3IgYSB3 YXkgdG8gcmVtb3ZlIHRoZSBwYXNzd29yZCBjb21wbGV0ZWx5LCBidXQgdG8gbm8gYXZhaWwuJm5i c3A7IFVubGVzcyBhbnlvbmUgaGFzIGFuIGlkZWEsIEkgdGhpbmsgd2Ugc2hvdWxkIGdpdmUgdXAg b24gdGhlIHBrY3MjMTIgZm9ybWF0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGli cmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlNvIG5vdyBp dOKAmXMganVzdCBQRU0gYW5kIFBLQ1MjNywgYnV0IGJldHdlZW4gdGhlIHR3bywgUEtDUyM3IGlz IGJ5IGZhciB0aGUgYmV0dGVyIGNob2ljZS4mbmJzcDsgJm5ic3A7VGhlIGlkZWEgb2Ygc3VwcG9y dGluZyBtb3JlIHRoYW4gb25lIGZvcm1hdCB3YXMgb25seSByZWFsbHkgaW50ZXJlc3Rpbmcgd2hl biBwa2NzIzEyIHdhcyBpbiB0aGUNCiBtaXguJm5ic3A7IE5vdyBJ4oCZbSBub3Qgc3VyZSBpZiBp dOKAmXMgd29ydGggaXQgYW55IG1vcmUuJm5ic3A7Jm5ic3A7IFNvLCBzaG91bGQgd2Ugc3RpY2sg d2l0aDo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7JiM0 MzstLXJvIGNlcnRpZmljYXRlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyYjNDM7LS1ybyBm b3JtYXQmbmJzcDsmbmJzcDsmbmJzcDsgZW51bWVyYXRpb24mbmJzcDsmbmJzcDsmbmJzcDsgJmx0 Oy0tIGNob2ljZXMgYXJlIOKAnHBlbeKAnSBhbmQg4oCccGtjczfigJ08L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7JiM0MzstLXJvIGRhdGEmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg YmluYXJ5Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICZsdDstLSBlbmNvZGluZyBkZXBlbmRzIG9uIOKAmGZvcm1hdOKAmSBmaWVsZDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OkNhbGlicmkiPm9yIDwvc3Bhbj4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICZuYnNwOyZuYnNwOyYjNDM7LS1ybyBjZXJ0aWZpY2F0ZSZuYnNwOyBiaW5hcnkmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0Oy0tIGhhcmRjb2RlZCB0byBwa2NzIzc8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpD YWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5NZWht ZXQvTWFoZXNoLCBzaW5jZSB5b3UgdHdvIHNlbGVjdGVkIG9wdGlvbiAjNiAoc2VlIGJlbG93KSBi ZWZvcmUsIEnigJltIGVzcGVjaWFsbHkgaW50ZXJlc3RlZCBpbiB5b3VyIG9waW5pb25zLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlRoYW5rcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTpDYWxpYnJpIj5LZW50PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj4N CjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+TmV0Y29u ZiAmbHQ7bmV0Y29uZi1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgS2VudCBXYXRz ZW4gJmx0O2t3YXRzZW5AanVuaXBlci5uZXQmZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlRodXJzZGF5 LCBTZXB0ZW1iZXIgMjksIDIwMTYgYXQgNzozMyBQTTxicj4NCjxiPlRvOiA8L2I+TWFoZXNoIEpl dGhhbmFuZGFuaSAmbHQ7bWpldGhhbmFuZGFuaUBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+Q2M6IDwv Yj4mcXVvdDtuZXRjb25mQGlldGYub3JnJnF1b3Q7ICZsdDtuZXRjb25mQGlldGYub3JnJmd0Ozxi cj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW05ldGNvbmZdIHplcm90b3VjaC8xNjogSG93IHRvIGVu Y29kZSBhIGNoYWluIG9mIGNlcnRzPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJp Ij5TbyBib3RoIE1haGVzaCBhbmQgTWVobWV0IChhcyBjb250cmlidXRvcnMgSSBiZWxpZXZlKSBz ZWxlY3RlZCBvcHRpb24gIzYuJm5ic3A7IE5vIG90aGVyIHJlc3BvbnNlcyB3ZXJlIHJlY2VpdmVk LiZuYnNwOyBUaHVzIEkgd2lsbCBtb3ZlIGZvcndhcmQgd2l0aCBvcHRpb24gIzYuPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6Q2FsaWJyaSI+VGhhbmtzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNh bGlicmkiPktlbnQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpi bGFjayI+RnJvbTogPC9zcGFuPg0KPC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJp O2NvbG9yOmJsYWNrIj5OZXRjb25mICZsdDtuZXRjb25mLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IG9u IGJlaGFsZiBvZiBLZW50IFdhdHNlbiAmbHQ7a3dhdHNlbkBqdW5pcGVyLm5ldCZndDs8YnI+DQo8 Yj5EYXRlOiA8L2I+VHVlc2RheSwgU2VwdGVtYmVyIDEzLCAyMDE2IGF0IDc6NTQgUE08YnI+DQo8 Yj5UbzogPC9iPk1haGVzaCBKZXRoYW5hbmRhbmkgJmx0O21qZXRoYW5hbmRhbmlAZ21haWwuY29t Jmd0Ozxicj4NCjxiPkNjOiA8L2I+JnF1b3Q7bmV0Y29uZkBpZXRmLm9yZyZxdW90OyAmbHQ7bmV0 Y29uZkBpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtOZXRjb25mXSB6ZXJv dG91Y2gvMTY6IEhvdyB0byBlbmNvZGUgYSBjaGFpbiBvZiBjZXJ0cz88L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1yaWdo dDouNWluO2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNhbGlicmkiPiZsdDtTTklQLyZndDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXJpZ2h0Oi41aW47YmFja2dyb3VuZDp3 aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3Vu ZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aSI+UmVjb21tZW5kYXRpb25zOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsgLSBJZiB3ZSBo YXZlIHRvIHBpY2sganVzdCBvbmUsIEnigJlkIGFzayBzZWN1cml0eSBleHBlcnRzIHRvIHBpY2sg YmV0d2Vlbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsgJm5ic3A7cGs3IGFuZCBw MTIuICZuYnNwO05vdGU6IHBrNyB3YXMgYSBiaXQgZWFzaWVyIG9uIHRoZSBjb21tYW5kIGxpbmUs IGluPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPiZuYnNwOyZuYnNwOyZuYnNwOyB0aGF0IGl0IGRpZG7i gJl0IHByb21wdCBmb3IgcGFzc3dvcmQuJm5ic3A7IEFsc28sIHBrNyByb3VuZC10cmlwcGluZzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzdGFiaWxpemVkIGZh c3Rlci48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+Jm5ic3A7IC0gSWYgd2XigJlyZSBva2F5IHdpdGgg ZGV2aWNlcyBoYXZpbmcgdG8gc3VwcG9ydCBhbGwgZm9ybWF0cyw8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+W01haGVzaF0gJiM0MzsxPG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPGJyPg0K PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRv cDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPnRoZW4gSTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndo aXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt0aGluayBzb2x1dGlvbiAjNiBpcyBiZXR0ZXIgdGhhbiAj NS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5bTWFoZXNoXSBXaGF0IGlzIHRoZSBhZHZhbnRhZ2Ugb2Yg c29sdXRpb24gIzYgb3ZlciAjNT88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGp1c3QgbGlr ZSB0aGUgaWRlYSBvZiBhZGRpbmcgZnV0dXJlIGVudW1lcmF0aW9ucyBtb3JlIHRoYW4gYWRkaW5n IGxlYWZzLiZuYnNwOyBUaGlzIGFwcHJvYWNoIGVuc3VyZXMgbW9yZSBwcm9jZXNzaW5nIHN0ZXBz IGFyZSBhbHdheXMgdGhlIHNhbWUuJm5ic3A7IEl04oCZcyBub3QgbXVjaCwgYnV0IGl04oCZcyBz b21ldGhpbmcuLi48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+S2VudDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_C313C4A747A54A04B65E7CAC23FE46F6junipernet_-- From nobody Wed Oct 12 12:15:54 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3883712964B; Wed, 12 Oct 2016 12:15:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.922 X-Spam-Level: X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GY8C-mXr71_b; Wed, 12 Oct 2016 12:15:51 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0098.outbound.protection.outlook.com [104.47.2.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA876129539; Wed, 12 Oct 2016 12:15:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=sMmiDAO4XWlsrx0wJ5sk/oS/YRzL4jUQMuucd+ZPMtM=; b=UiDhhaSdizdSzGgPyDBtlOZ+cJs47FVSftic+uQTLmT5Mmj05yRgkVsSR+9gitnwJ3NmgXjMsqicln67y9q6DwFLfg3yTlTLSAE4sStOFN0Pco0KY0pa0eZSk7G1iuYfrRmtr/riSINtBflMTMQrGvwlK79810wT4C8dP1jIBac= Received: from HE1PR0701MB2859.eurprd07.prod.outlook.com (10.168.91.149) by HE1PR0701MB2860.eurprd07.prod.outlook.com (10.168.91.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.5; Wed, 12 Oct 2016 19:15:47 +0000 Received: from HE1PR0701MB2859.eurprd07.prod.outlook.com ([10.168.91.149]) by HE1PR0701MB2859.eurprd07.prod.outlook.com ([10.168.91.149]) with mapi id 15.01.0669.005; Wed, 12 Oct 2016 19:15:47 +0000 From: "Ersue, Mehmet (Nokia - DE/Munich)" To: Ben Campbell , Alexey Melnikov , The IESG Thread-Topic: Ben Campbell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) Thread-Index: AQHSJLr5j7Zp9u+2UkWMy9YZxi7Np6ClL5LA Date: Wed, 12 Oct 2016 19:15:47 +0000 Message-ID: References: <147629883236.6321.3574116264597630104.idtracker@ietfa.amsl.com> In-Reply-To: <147629883236.6321.3574116264597630104.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mehmet.ersue@nokia.com; x-originating-ip: [131.228.32.173] x-ms-office365-filtering-correlation-id: dd042228-b07e-4295-f037-08d3f2d42c1b x-microsoft-exchange-diagnostics: 1; HE1PR0701MB2860; 7:GjUgOCd+YMf9/+V4Eg4yxamdHtgysQt05ZjA2ecuwrrJZNm53vbKgZX/GoIWcIXM9TRHfO9CoX8bsLylqiSo8I2pfNMqZIRFo/atqb98mFHmjnFek+rLFix8CunxosqXv4OPYS/j4ovrnOcdXUP/iEbLB7DbiL/1AvbpSwF1vy7Z3rLDcXpYil1KukqvKbAAM6Hw1YD56UJNOMrahD8PNMQehjXFxyusJrGq4TX9N4czA3eYPeCkzLmYN+S1WufVJyvYPmcSmJANu9aeEiBEmzSop3Ycr7GejCO3p2JxWpGu1cuf9RhYqyzo32tGGciHBEE4qwiX1j6Ve5kKHxmeKGzXHXwJcnILsNCGd/c5Sm0= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:HE1PR0701MB2860; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(82608151540597); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:HE1PR0701MB2860; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0701MB2860; x-forefront-prvs: 0093C80C01 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(377454003)(199003)(13464003)(189002)(33656002)(2950100002)(3280700002)(2906002)(11100500001)(66066001)(10400500002)(54356999)(50986999)(92566002)(15975445007)(77096005)(101416001)(105586002)(2900100001)(4326007)(76176999)(586003)(106356001)(102836003)(230783001)(6116002)(3846002)(106116001)(5002640100001)(74316002)(8666005)(87936001)(5660300001)(76576001)(7736002)(122556002)(7846002)(9686002)(81156014)(8676002)(7696004)(8936002)(189998001)(305945005)(3660700001)(81166006)(86362001)(19580405001)(68736007)(19580395003)(5001770100001)(97736004)(7059030); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1PR0701MB2860; H:HE1PR0701MB2859.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2016 19:15:47.4437 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2860 Archived-At: Cc: "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" , "netconf@ietf.org" Subject: Re: [Netconf] Ben Campbell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 19:15:53 -0000 SGkgQmVuLCBBbGV4ZXksDQoNCnRoZSBtYWpvciBwb2ludCBiZWxvdyBoYXMgYmVlbiBhbHNvIHBy b3ZpZGVkIGJ5IFNwZW5jZXIgYXMgYSBjb21tZW50Lg0KDQpUaGUgYXV0aG9ycyBzZWUgaXQgYXMg YSBidWcgYW5kIGFncmVlZCB0byByZXNvbHZlIHRoZSBjb250cmFkaWN0aW9uIGluIGZhdm9yIG9m IHRoZSBNVVNUIGluIHNlYy4gNC42IFBBVENIIGFuZCBjb3JyZWN0IHNlYy4gNC4xLg0KDQpNZWht ZXQgDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEJlbiBDYW1wYmVsbCBb bWFpbHRvOmJlbkBub3N0cnVtLmNvbV0gDQpTZW50OiBXZWRuZXNkYXksIE9jdG9iZXIgMTIsIDIw MTYgOTowMSBQTQ0KVG86IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPg0KQ2M6IGRyYWZ0LWlldGYt bmV0Y29uZi1yZXN0Y29uZkBpZXRmLm9yZzsgbmV0Y29uZi1jaGFpcnNAaWV0Zi5vcmc7IEVyc3Vl LCBNZWhtZXQgKE5va2lhIC0gREUvTXVuaWNoKSA8bWVobWV0LmVyc3VlQG5va2lhLmNvbT47IG5l dGNvbmZAaWV0Zi5vcmcNClN1YmplY3Q6IEJlbiBDYW1wYmVsbCdzIE5vIE9iamVjdGlvbiBvbiBk cmFmdC1pZXRmLW5ldGNvbmYtcmVzdGNvbmYtMTc6ICh3aXRoIENPTU1FTlQpDQoNCkJlbiBDYW1w YmVsbCBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCmRyYWZ0 LWlldGYtbmV0Y29uZi1yZXN0Y29uZi0xNzogTm8gT2JqZWN0aW9uDQoNCldoZW4gcmVzcG9uZGlu ZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvIGFsbA0K ZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZy ZWUgdG8gY3V0IHRoaXMNCmludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKQ0KDQoNClBs ZWFzZSByZWZlciB0byBodHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNz LWNyaXRlcmlhLmh0bWwNCmZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBh bmQgQ09NTUVOVCBwb3NpdGlvbnMuDQoNCg0KVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVy IGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJlOg0KaHR0cHM6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1uZXRjb25mLXJlc3Rjb25mLw0KDQoNCg0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KQ09NTUVOVDoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KKEkgd291bGQgaGF2ZSBiYWxsb3Rl ZCBESVNDVVNTIGJhc2VkIG9uIHRoZSBtYWpvciBjb21tZW50LCBidXQgQWxleGV5DQpiZWF0IG1l IHRvIGl0OikNCg0KTWFqb3I6DQotIDQuNjogIFRoZSBmaXJzdCBwYXRjaCBzYXlzIHRoZSBzZXZl ciBNVVNUIHN1cHBvcnQgUEFUQ0gsIGFuZCBhbHNvIHRoYXQNCmltcGxlbWVudGF0aW9uIG9mIFBB VENIIGlzIG9wdGlvbmFsLiBMYW5ndWFnZSBpbiA0LjEgc2VlbXMgdG8gYXNzdW1lIHRoZQ0KbGF0 dGVyLg0KDQpNaW5vcjoNCg0KLSAyLjU6IEknbSBhIGJpdCBzdXJwcmlzZWQgdG8gc2VlIGJhc2lj IGF1dGhlbnRpY2F0aW9uIGVuY291cmFnZWQgdG8gdGhlDQpzYW1lIGRlZ3JlZSBhcyBvdGhlciBv cHRpb25zLg0KDQotIDUuMjogIERpZCB0aGUgd29ya2luZyBncm91cCBjb25zaWRlciB0aGUgaW50 ZXJvcGVyYWJpbGl0eSBpbXBhY3Qgb2Ygbm90DQptYWtpbmcgZWl0aGVyIGVuY29kaW5nIE1UST8N Cg0KLSAxMiwgcGFyYWdyYXBoIDQ6IFBsZWFzZSBjb25zaWRlciBub3QgcmVwZWF0aW5nIHRoZSAy MTE5IGxhbmd1YWdlIGZyb20NCm90aGVyIHNlY3Rpb25zLg0KDQpFZGl0b3JpYWwvTml0czoNCg0K LTEuNCwgNnRoIHBhcmFncmFwaDogIi4uLnRoZW4gdGhpcyBjb21taXQgd2lsbCBhY3QgYXMgdGhl DQogICBjb25maXJtaW5nIGNvbW1pdCI6IFdoaWNoIGNvbW1pdCBpcyAidGhpcyIgY29tbWl0Pw0K DQotIDUuMywgZmlyc3Qgc2VudGVuY2U6IE1pc3Npbmcgd29yZD8NCg0KDQo= From nobody Wed Oct 12 12:34:23 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90D7C12965F; Wed, 12 Oct 2016 12:34:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bniudEVeJqvR; Wed, 12 Oct 2016 12:34:19 -0700 (PDT) Received: from mail-vk0-x234.google.com (mail-vk0-x234.google.com [IPv6:2607:f8b0:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 449A6129655; Wed, 12 Oct 2016 12:34:19 -0700 (PDT) Received: by mail-vk0-x234.google.com with SMTP id 83so32096362vkd.0; Wed, 12 Oct 2016 12:34:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=J6Gw6IYo23AdNYwvDrhh6Ouc2PYUQpcVqhy9cBDZ2vM=; b=bK9mpSNe/aYObBMPcEZen90QGEKzlW/EckXj24/NVFOyXCRW22/qPurgHuJR/Nv3TW cw0GM/B0PjTXtPpUFWMpl4fEUcIet7p9eMwZzmYJaexBRik5K8alPTTNetvI+inmEuMq yLoQPD/ckW8/E9N384Bu01daO1gAl7Gz6pksk+y+ra8tKkQM+XxV6DMHTKVmZ/eirDHW 7NpjRVeEIa5xVOKFJ/b4Et7e7dSdwadNmuKGZT4ZTKcx91lGErNXaTvRJpo5rS6XSgag 5EsHpxl5fR0kGEKyvJhHy4XhNibFsJ/NyVaiqzFycJ8AWscXGcD1GBrdC8DIVxPxprsl gG1Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=J6Gw6IYo23AdNYwvDrhh6Ouc2PYUQpcVqhy9cBDZ2vM=; b=cnHMAiixJzCR936Nyn/CviPZfB43+D/CL/5PKbCd52q4vOkOKNhWPFryAa7vHsLgYp ivrFhOG3iF7meP8GQrmLLlz9KHyFgR6C7EBy5vfrquTLsJLrAqAIY3OeoxIHP0GTu7g/ aVjs7D8V5DxjJeExDRoIQN1e2nnt4m4Bqi1+Vm5UxBRtkmblcUPs0IdNdI7/5GEiDmT9 jfNE1eRReReJmFZZSPmg+a1Tcsr1oj1uU+6RAyu9YT4+quJsYFN/LbOemJfsrBo+p0zS ELVsOMvoDGwgrR5QReFLRtCkJ0gd/EOmxHKgAFPJqmWcred0rSB8FRGsqiTcSy+iMl94 iWrw== X-Gm-Message-State: AA6/9Rk7WHrnTqbRjL7xSO+LplF7NaFcHql6hKjLE0A3abQTYuckzjBJuYvzMMLK4Vj6Q+H3hmm44PNrfZW3zw== X-Received: by 10.31.87.133 with SMTP id l127mr1794142vkb.152.1476300858336; Wed, 12 Oct 2016 12:34:18 -0700 (PDT) MIME-Version: 1.0 Received: by 10.176.82.68 with HTTP; Wed, 12 Oct 2016 12:34:17 -0700 (PDT) In-Reply-To: References: <147615271936.31486.3197245647561002208.idtracker@ietfa.amsl.com> From: Kathleen Moriarty Date: Wed, 12 Oct 2016 15:34:17 -0400 Message-ID: To: Kent Watsen Content-Type: multipart/alternative; boundary=001a114fa81c3e2d31053eb01446 Archived-At: Cc: "netconf-chairs@ietf.org" , Netconf , "draft-ietf-netconf-restconf@ietf.org" , The IESG Subject: Re: [Netconf] Kathleen Moriarty's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 19:34:21 -0000 --001a114fa81c3e2d31053eb01446 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Wed, Oct 12, 2016 at 3:03 PM, Kent Watsen wrote: > Putting the finishing touches on Kathleen=E2=80=99s proposed text: > > > > Client > > authentication MUST be implemented using client certificates or MUST > > be implemented using an HTTP authentication scheme. The strength of > > these methods vary greatly. For example, use of a client certificate > > is RECOMMENDED, while HTTP Basic authentication [RFC7617] is > > NOT RECOMMENDED. > > > This looks good, thank you. > Also, I think the following sentence regrading NACM should be deleted, as > > it=E2=80=99s not well connected to the paragraph and it=E2=80=99s already= mentioned in > > Section 2.5. > > > > Thoughts? > > > > Kent > > > > > > > > *From: *Andy Bierman > *Date: *Wednesday, October 12, 2016 at 12:48 PM > *To: *Kathleen Moriarty > *Cc: *The IESG , "draft-ietf-netconf-restconf@ietf.org" < > draft-ietf-netconf-restconf@ietf.org>, "netconf-chairs@ietf.org" < > netconf-chairs@ietf.org>, "Ersue, Mehmet (Nokia - DE/Munich)" < > mehmet.ersue@nokia.com>, "netconf@ietf.org" > *Subject: *Re: Kathleen Moriarty's No Objection on > draft-ietf-netconf-restconf-17: (with COMMENT) > *Resent-From: * > *Resent-To: *, , > *Resent-Date: *Wednesday, October 12, 2016 at 12:48 PM > > > > Hi, > > > > The new text is fine with me. > > > > > > Andy > > > > > > On Mon, Oct 10, 2016 at 7:25 PM, Kathleen Moriarty < > Kathleen.Moriarty.ietf@gmail.com> wrote: > > Kathleen Moriarty has entered the following ballot position for > draft-ietf-netconf-restconf-17: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > The draft is nicely written, thank you for that. I have a point in the > security consideration section that I think is important to clarify in > the draft. > > Authentication for RESTconf - The method for HTTP authentication vary and > some are really bad (HTTP Basic, digest isn't too far behind it). This > draft just requires some method, but I think a warning to research the > methods since they have widely varying security levels is important. For > the HTTP Authentication methods, the RFCs cover the pitfalls well. Here > is the sentence: > > Client > authentication MUST be implemented using client certificates or MUST > be implemented using an HTTP authentication scheme. > > How about: > Client > authentication MUST be implemented using client certificates or MUST > be implemented using an HTTP authentication scheme. The strength of > these methods vary greatly and (certificates are recommended or HTTP > basic is not recommended). > > Digest isn't great either, but at least not recommending basic would be > good. There are also a few newer experimental HTTPAuth methods that > improve things, but are experimental. One gets rid of stored passwords > (HOBA). > > > --=20 Best regards, Kathleen --001a114fa81c3e2d31053eb01446 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Wed, Oct 12, 2016 at 3:03 PM, Kent Watsen <kwatsen@juniper.net> wrote:

Putting the finishing touches on Kathleen=E2=80=99s proposed text:<= u>

=C2=A0

=C2=A0=C2=A0 Client

=C2=A0=C2=A0 authentication MUST be implemented using client certificates = or MUST

=C2=A0=C2=A0 be implemented using an HTTP authentication scheme.=C2=A0 The= strength of

=C2=A0 =C2=A0these methods vary greatly.=C2=A0 For example, use of = a client certificate

=C2=A0=C2=A0=C2=A0is RECOMMENDED, while HTTP Basic authentication [RFC7617= ] is

=C2=A0=C2=A0=C2=A0NOT RECOMMENDED.

=C2=A0

This looks good, tha= nk you.
=C2=A0

Also, I think the following sentence regrading NACM should be deleted, as<= u>

it=E2=80=99s not well connected to the paragraph and it=E2=80=99s already = mentioned in

Section 2.5.

=C2=A0

Thoughts?

=C2=A0

Kent

=C2=A0

=C2=A0

=C2=A0

F= rom: Andy Bierman <andy@yumaworks.com>= ;
Date: Wednesday, October 12, 2016 at 12:48 PM
To: Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com> Cc: The IESG <= iesg@ietf.org>, "draft-ietf-netconf-restconf@ietf.org&q= uot; <draft-ietf-netconf-restconf@ietf.org>, "netconf-chairs@ietf.org<= /a>" <= netconf-chairs@ietf.org>, "Ersue, Mehmet (Nokia - DE/Munich)&qu= ot; <mehmet.= ersue@nokia.com>, "netconf@ietf.org" <netconf@ietf.org>
Subject: Re: Kathleen Moriarty's No Objection on draft-ietf-netc= onf-restconf-17: (with COMMENT)
Resent-From: <alias-bounces@ietf.org>
Resent-To: <andy@yumaworks.com>, <mbj@tail-f.com>, <kwatsen@juniper.net>
Resent-Date: Wednesday, October 12, 2016 at 12:48 PM

=C2=A0

Hi,

=C2=A0

The new text is fine with me.

=C2=A0

=C2=A0

Andy

=C2=A0

=C2=A0

On Mon, Oct 10, 2016 at 7:25 PM, Kathleen Moriarty &= lt;Ka= thleen.Moriarty.ietf@gmail.com> wrote:

Kathleen Moriarty has= entered the following ballot position for
draft-ietf-netconf-restconf-17: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-netconf-<= wbr>restconf/



-----------------------------------------------------------------= -----
COMMENT:
-----------------------------------------------------------------= -----

The draft is nicely written, thank you for that.=C2=A0 I have a point in th= e
security consideration section that I think is important to clarify in
the draft.

Authentication for RESTconf - The method for HTTP authentication vary and some are really bad (HTTP Basic, digest isn't too far behind it).=C2=A0= This
draft just requires some method, but I think a warning to research the
methods since they have widely varying security levels is important.=C2=A0 = For
the HTTP Authentication methods, the RFCs cover the pitfalls well.=C2=A0 He= re
is the sentence:

=C2=A0 =C2=A0Client
=C2=A0 =C2=A0authentication MUST be implemented using client certificates o= r MUST
=C2=A0 =C2=A0be implemented using an HTTP authentication scheme.

How about:
=C2=A0 =C2=A0Client
=C2=A0 =C2=A0authentication MUST be implemented using client certificates o= r MUST
=C2=A0 =C2=A0be implemented using an HTTP authentication scheme.=C2=A0 The = strength of
=C2=A0 =C2=A0these methods vary greatly and (certificates are recommended o= r HTTP
basic is not recommended).

Digest isn't great either, but at least not recommending basic would be=
good.=C2=A0 There are also a few newer experimental HTTPAuth methods that improve things, but are experimental.=C2=A0 One gets rid of stored password= s
(HOBA).

=C2=A0




--
Best regards,
Kathleen
--001a114fa81c3e2d31053eb01446-- From nobody Wed Oct 12 12:45:40 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5FF7129518; Wed, 12 Oct 2016 12:45:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.896 X-Spam-Level: X-Spam-Status: No, score=-4.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RGYwm2iLIlZk; Wed, 12 Oct 2016 12:45:35 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1994127A90; Wed, 12 Oct 2016 12:45:35 -0700 (PDT) Received: from [10.0.1.21] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id u9CJjVeT050321 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 12 Oct 2016 14:45:32 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.21] From: "Ben Campbell" To: "Ersue, Mehmet" Date: Wed, 12 Oct 2016 14:45:31 -0500 Message-ID: <2FADDB8F-7BA7-48AA-94AE-B5A2944A6FED@nostrum.com> In-Reply-To: References: <147629883236.6321.3574116264597630104.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.5r5263) Archived-At: Cc: "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" , The IESG , Alexey Melnikov Subject: Re: [Netconf] Ben Campbell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 19:45:38 -0000 On 12 Oct 2016, at 14:15, Ersue, Mehmet (Nokia - DE/Munich) wrote: > Hi Ben, Alexey, > > the major point below has been also provided by Spencer as a comment. > > The authors see it as a bug and agreed to resolve the contradiction in > favor of the MUST in sec. 4.6 PATCH and correct sec. 4.1. Thanks, that would resolve my concern on those sections. Ben. > > Mehmet > > -----Original Message----- > From: Ben Campbell [mailto:ben@nostrum.com] > Sent: Wednesday, October 12, 2016 9:01 PM > To: The IESG > Cc: draft-ietf-netconf-restconf@ietf.org; netconf-chairs@ietf.org; > Ersue, Mehmet (Nokia - DE/Munich) ; > netconf@ietf.org > Subject: Ben Campbell's No Objection on > draft-ietf-netconf-restconf-17: (with COMMENT) > > Ben Campbell has entered the following ballot position for > draft-ietf-netconf-restconf-17: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut > this > introductory paragraph, however.) > > Please refer to > https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > (I would have balloted DISCUSS based on the major comment, but Alexey > beat me to it:) > > Major: > - 4.6: The first patch says the sever MUST support PATCH, and also > that > implementation of PATCH is optional. Language in 4.1 seems to assume > the > latter. > > Minor: > > - 2.5: I'm a bit surprised to see basic authentication encouraged to > the > same degree as other options. > > - 5.2: Did the working group consider the interoperability impact of > not > making either encoding MTI? > > - 12, paragraph 4: Please consider not repeating the 2119 language > from > other sections. > > Editorial/Nits: > > -1.4, 6th paragraph: "...then this commit will act as the > confirming commit": Which commit is "this" commit? > > - 5.3, first sentence: Missing word? > From nobody Wed Oct 12 13:51:07 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D90691295A4; Wed, 12 Oct 2016 13:50:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GKDUvpNZrkte; Wed, 12 Oct 2016 13:50:58 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0124.outbound.protection.outlook.com [104.47.37.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44F3E129525; Wed, 12 Oct 2016 13:50:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=7m72IhBvMgQlIHy2OXmpgftIOJEdLRvHzGYjCJYWhK8=; b=iMSTTiDPeHjfPmVZ8VxTpW+A7w5CEqfazz382p2LqU2RmZQN8SzVcJQTUKpl4idb9ak3UK3sTUQgD6MtRNVzZwDQivDmLqL4hM/fldAboR7O6RNLZFTmCeQv4KWlFf+Pfke6KtGrjhwQPvspZiU1/AlVtRY8UQErv59tGs/C4ok= Received: from DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) by DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.649.6; Wed, 12 Oct 2016 20:50:57 +0000 Received: from DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) by DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) with mapi id 15.01.0649.016; Wed, 12 Oct 2016 20:50:57 +0000 From: Kent Watsen To: Alexey Melnikov , The IESG Thread-Topic: Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) Thread-Index: AQHSJLYXZuU/DamBjEmJ49yHFR/2lKClCCyA Date: Wed, 12 Oct 2016 20:50:57 +0000 Message-ID: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> In-Reply-To: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.14] x-ms-office365-filtering-correlation-id: 2ff873bd-2229-4e73-864e-08d3f2e17774 x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1455; 7:VIwXLa1vmCn/MhUYNgHH/vJDx0u35HRzA0qOQrMH6ia+zXtyo7BmaL/IoahN/Hlg0+xQ1viQEXpnogMrdah1gr9GL4QQCgyatG8vIdlfhm1ZDzgv6JKz65kUQxphMV6JDr6yXREBnN2NOtmaq9hxhm1pgDJ2a6jBZMVZJ74RqBVJR5ZqctlEaF/EW9q0F7MPyrMQnM3BfQpe7CYiCR0eEOT0+Xpi1tMVlGmLZnA2nIaKkcC1GEgsDGn0OD+5qnCIQN2viFcThaVb5Z5pP7aIP/iSj41hZW9JAr0f4WsdETmR0Ojd1yJGLGGC7XfbF4Sc7r4xoMXATcYu/VF/G5BzbmIZaT2f+aggKgJQIMJbptk= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1455; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:DM2PR0501MB1455; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1455; x-forefront-prvs: 0093C80C01 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(199003)(10400500002)(76176999)(99286002)(54356999)(66066001)(81156014)(68736007)(189998001)(5660300001)(8676002)(36756003)(50986999)(81166006)(101416001)(5002640100001)(7846002)(230783001)(92566002)(8666005)(305945005)(77096005)(122556002)(7736002)(2950100002)(3280700002)(106116001)(11100500001)(106356001)(105586002)(86362001)(4326007)(2900100001)(5001770100001)(33656002)(102836003)(8936002)(3660700001)(6116002)(83506001)(83716003)(97736004)(586003)(82746002)(2906002)(87936001)(3846002)(4001350100001)(7059030)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1455; H:DM2PR0501MB1455.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2016 20:50:57.2358 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1455 Archived-At: Cc: "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2016 20:51:00 -0000 SGkgQWxleGV5LA0KDQpSZWdhcmRpbmcgeW91ciBESVNDVVNTICMxOg0KIA0KICBJbiAyLjQ6IFRM UyBzZXJ2ZXIgaWRlbnRpdHkgdmVyaWZpY2F0aW9uIHVzaW5nIFJGQyA2MTI1IGlzDQogIHVuZGVy c3BlY2lmaWVkLiBQbGVhc2UgcHJvdmlkZSBhbGwgZGV0YWlscyBhcyBkZXNjcmliZWQgaW4gU2Vj dGlvbiAzIG9mDQogIFJGQyA2MTI1LCBpbiBwYXJ0aWN1bGFyLCBwbGVhc2Ugc3BlY2lmeSB3aGlj aCBvZiBDTi1JRCwgRE5TLUlELCBTUlYtSUQsDQogIFVSSS1JRCBhcmUgYWxsb3dlZC9yZXF1aXJl ZCBhbmQgd2hldGhlciB3aWxkY2FyZHMgYXJlIGFsbG93ZWQgaW4gdGhlbS4NCg0KDQpSRVNUQ09O RiBpcyBiYXNlZCBvbiBIVFRQUyBbUkZDMjgxOF07IGl0IGlzIGV4cGVjdGVkIHRoYXQgUkVTVENP TkYgc2VydmVycyB3aWxsIGZvbGxvdyBnZW5lcmFsIEhUVFBTIGd1aWRlbGluZXMgZm9yIHRoZWly IHNlcnZlciBjZXJ0aWZpY2F0ZXMuICBTZWN0aW9uIDIuNCB1c2VkIHRvIGJlIGxvbmdlciwgYnV0 IHRoZSBXRyBmZWx0IHRoYXQgcmVwZWF0aW5nIHRleHQgZnJvbSBvdGhlciBkcmFmdHMgbWlnaHQg bGVhZCB0byBhbWJpZ3VpdHkgYW5kL29yIGNvbmZsaWN0LCBhcyBzbyB3ZSB0cmltbWVkIGl0IGRv d24gdG8gd2hhdCBpdCBpcyBub3cuDQoNCkFkZGl0aW9uYWxseSwgSeKAmW0gdGhpbmtpbmcgdGhh dCBTZWN0aW9uIDMgb2YgUkZDIDYxMjUgcmVnYXJkcyBhcHBsaWNhdGlvbiBpbnN0YW5jZXMgbW9y ZQ0Kc28gdGhhbiBnZW5lcmljIFRMUy1iYXNlZCBwcm90b2NvbHMuICBTcGVjaWZpY2FsbHksIHdo aWxlIHRoZSBSRVNUQ09ORiAqcHJvdG9jb2wqIG1heSBub3QgYmUgc2Vuc2l0aXZlIHRvIGhvdyBh IGdpdmVuIFJFU1RDT05GIHNlcnZlciBpcyBkaXNjb3ZlcmVkLCBhIGdpdmVuIFJFU1RDT05GIHNl cnZlciAqZG9lcyBjYXJlKiwgYXMgaXQgd291bGQgbmVlZCB0byBlbnN1cmUgdGhhdCBpdHMgc2Vy dmVyIGNlcnQgaXMgZmlsbGVkIGluIHN1ZmZpY2llbnRseSBmb3IgdGhlIGNsaWVudCB0byB2YWxp ZGF0ZSBpdCAoaS5lLiwgd2l0aCBtYXRjaGluZyByZWZlcmVuY2UgaWRlbnRpZmllcnMpLg0KDQpJ cyB0aGlzIHJlc3BvbnNlIHN1ZmZpY2llbnQgdG8gYWRkcmVzcyB0aGlzIERJU0NVU1M/DQoNClRo YW5rcywNCktlbnQNCg0KDQo= From nobody Wed Oct 12 17:33:23 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E9FFE1294F0; Wed, 12 Oct 2016 17:33:17 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.34.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147631879723.6373.4811934777234946594.idtracker@ietfa.amsl.com> Date: Wed, 12 Oct 2016 17:33:17 -0700 Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org Subject: [Netconf] Stephen Farrell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 00:33:18 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-netconf-restconf-17: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - What about tls1.3 0RTT/replayable-data? There may be a case to be made to mention this here and e.g. to say that only idempotent requests (or none) are allowed use 0RTT early data. Equally you could argue to not say anything since tls1.3 isn't yet finished. I'd argue that saying something here is better (and that saying to not use 0RTT at all is best) since RESTCONF will use standard https libraries, which will at some point soon support 0RTT and that might even make that happen more easily than they ought. (This isn't a discuss as tls1.3 isn't yet done so I'd not feel right blocking on this basis, but were tls1.3 done, which it will be soon I hope, this would be a definite discuss as RESTCONF differs enough from a browser for this to be a cause of possibly really bad security problems.) 1.4: "Note that there are no interactions at all between the NETCONF protocol and RESTCONF protocol. It is possible that locks are in use on a RESTCONF server, even though RESTCONF cannot manipulate locks. In such a case, the RESTCONF protocol will not be granted write access to data resources within a datastore." What you mean is clear, but the text is, I think, self-contradictory - what is described is an interaction between the two protocols. (And so is the fact that access controls need to be commensurate between the two protocols.) - section 2: would it be useful to add a reference to BCP195 and say that adhering to that is a good idea? I think you could maybe actually lose some (but not all) of the text here via that single reference. (That might help a bit with Alexey's discuss, not sure.) - 2.5: "MUST use tls-cilent-auth or MUST use any HTTP authentication scheme" is (as Kathleen noted) wishy washy. And that leaves out html-form-based client auth methods too it seems. I think you could word this better. (Not that that's likely to affect the reality that clients here will just use web engines so there's probably no point in expecting that RESTCONF can use anything out of the ordinary.) The same comment applies to section 12 where the same wishy-washy statement occurs. - 12: "There are many patterns of attack..." that screams out for references, please add some to give the reader a chance to understand if they don't already know. From nobody Thu Oct 13 05:41:08 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6E101295D4; Thu, 13 Oct 2016 05:41:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cooperw.in header.b=q3givlxu; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=ITRSMGYK Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 42tPnyB8ySTe; Thu, 13 Oct 2016 05:41:03 -0700 (PDT) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1589129423; Thu, 13 Oct 2016 05:41:03 -0700 (PDT) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 2AC5220569; Thu, 13 Oct 2016 08:41:03 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute3.internal (MEProxy); Thu, 13 Oct 2016 08:41:03 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=cooperw.in; h=cc :content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-sasl-enc:x-sasl-enc; s=mesmtp; bh=cG5Oo Qhyv6yFHkeV2ktiKz3ejfg=; b=q3givlxuuRK+LHO2K5OPs0g6pjzMeq7HyD2fd 6Dnp8R+gL8MeBF0mVcUtRiXp2usi1Uw4jDlk5QT8hCoMRQ33lLQoFGCdKnJzYp7J QmH8F1189sVghISLygeGQlnboFyaVbdfoM2DWprr7gGwY9GvxkJ76JWq7oSzoFIQ rLwLKg= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=smtpout; bh=cG5OoQhyv6yFHkeV2ktiKz3ejfg=; b=ITRSM GYKCyKH7R174N8FybK508AaJ275jxybykQGKV4FmjCskwmv0cG9G+TqjM0lHB3WW nScyCNjxtr8mbij29NxjNIXM5JOc/D7Iy+wTmHX1bFyzTa46B8v2ZptkHeku2xOb 1lxwOAx1jTQQSGUULf8V6O+Pa/R4h2WkFMLmU0= X-Sasl-enc: dS2l+wET/i76+V5fNZ51zftDOfhF2iySCcw03D5yG2UY 1476362462 Received: from sjc-alcoop-8812.cisco.com (unknown [128.107.241.187]) by mail.messagingengine.com (Postfix) with ESMTPA id C7086CC08C; Thu, 13 Oct 2016 08:41:01 -0400 (EDT) Content-Type: multipart/alternative; boundary="Apple-Mail=_0C690B13-94A3-4A9D-88C0-8C90A2052C2A" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Alissa Cooper In-Reply-To: Date: Thu, 13 Oct 2016 08:41:00 -0400 Message-Id: <8B3850C2-956C-4ABD-A83A-EF16E51B94B2@cooperw.in> References: <147627819947.24260.10617949408094496315.idtracker@ietfa.amsl.com> To: Andy Bierman X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Netconf , draft-ietf-netconf-restconf@ietf.org, IESG , netconf-chairs@ietf.org Subject: Re: [Netconf] Alissa Cooper's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 12:41:06 -0000 --Apple-Mail=_0C690B13-94A3-4A9D-88C0-8C90A2052C2A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Thanks for the explanations. Alissa > On Oct 12, 2016, at 12:59 PM, Andy Bierman wrote: >=20 >=20 >=20 > On Wed, Oct 12, 2016 at 6:16 AM, Alissa Cooper > wrote: > Alissa Cooper has entered the following ballot position for > draft-ietf-netconf-restconf-17: No Objection >=20 > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut = this > introductory paragraph, however.) >=20 >=20 > Please refer to = https://www.ietf.org/iesg/statement/discuss-criteria.html = > for more information about IESG DISCUSS and COMMENT positions. >=20 >=20 > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ = >=20 >=20 >=20 > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- >=20 > Thanks for your work on this. >=20 > (1) > I'm curious how the WG settled on using Server-Sent Events. My > understanding is that the SSE framework is somewhat brittle when used = on > its own and there can be problems when there are intermediaries in the > path. Did the WG consider other options (e.g., H2 server push or long > polling)? >=20 >=20 > The new notification subscriptions work in NETCONF WG will address = some issues with SSE. > We were trying not to reinvent notification delivery and this seemed = to be the > most deployed standard approach when the decision was made. H2 server = push > will be supported in the new work. >=20 >=20 >=20 > (2) > I know the jukebox module is just an example, but it actually made me > wonder if there would ever be cause for the server to return a 451 = status > code in response to a POST or GET request rather than a 401 or 403. > Obviously there is no analog in the netconf status codes and the use = for > this would be pretty atypical, but figured I would mention this = thought > since it occurred to me. >=20 >=20 > The table in sec. 7 for error-tag 'access-denied' lists status codes = 401 and 403. > The way to block access in RESTCONF is to configure NACM rules. > (Other methods would not be visible to the RESTCONF server.) > In this case a 403 error is returned. NACM does not record why a rule > is configured (e.g., legal vs. operational). >=20 >=20 > Andy --Apple-Mail=_0C690B13-94A3-4A9D-88C0-8C90A2052C2A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
Thanks for the explanations.
Alissa

On Oct 12, 2016, at 12:59 PM, Andy Bierman = <andy@yumaworks.com> wrote:



On = Wed, Oct 12, 2016 at 6:16 AM, Alissa Cooper <alissa@cooperw.in> wrote:
Alissa Cooper has = entered the following ballot position for
draft-ietf-netconf-restconf-17: No = Objection

When responding, please keep the = subject line intact and reply to all
email addresses = included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT = positions.


The document, = along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for your work on this.

(1)
I'm curious how the WG settled on using = Server-Sent Events. My
understanding is that the SSE = framework is somewhat brittle when used on
its own and = there can be problems when there are intermediaries in the
path. Did the WG consider other options (e.g., H2 server push = or long
polling)?


The new notification subscriptions work in NETCONF WG will = address some issues with SSE.
We were trying not to = reinvent notification delivery and this seemed to be the
most deployed standard approach when the decision was made. = H2 server push
will be supported in the new = work.



(2)
I know the jukebox module is just an example, but it actually = made me
wonder if there would ever be cause for the server = to return a 451 status
code in response to a POST or GET = request rather than a 401 or 403.
Obviously there is no = analog in the netconf status codes and the use for
this = would be pretty atypical, but figured I would mention this thought
since it occurred to me.


The table in sec. 7 for error-tag 'access-denied' lists = status codes 401 and 403.
The way to block access = in RESTCONF is to configure NACM rules.
(Other = methods would not be visible to the RESTCONF server.)
In this case a 403 error is returned.  NACM does not = record why a rule
is configured (e.g., legal vs. = operational).


Andy

= --Apple-Mail=_0C690B13-94A3-4A9D-88C0-8C90A2052C2A-- From nobody Thu Oct 13 05:49:37 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7576212975E; Thu, 13 Oct 2016 05:49:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FqWt7eyKXE9y; Thu, 13 Oct 2016 05:49:28 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0120.outbound.protection.outlook.com [104.47.0.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E0AB12945E; Thu, 13 Oct 2016 05:49:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=5jZwXRrPsgVrpLdLSc7iLzgFXedy+flcaI3UeOci7g4=; b=KOuN2RpwZeyErUYVihb0W1Ojn6hqcjoO+7WstZGGMaZKrtb3vpTdlxZ/hfnET21yqom0ZJS7D+6GuLnFxnYMBvp/2vOwZQkAzB3waK+LDE7ewCm0620qoXCSokvTKNJgVQa+LbkzDoiZrZ/Ma1CWxRG4MJuQ3OWZucMq1WXoJk0= Received: from HE1PR0701MB2859.eurprd07.prod.outlook.com (10.168.91.149) by HE1PR0701MB2859.eurprd07.prod.outlook.com (10.168.91.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.5; Thu, 13 Oct 2016 12:49:25 +0000 Received: from HE1PR0701MB2859.eurprd07.prod.outlook.com ([10.168.91.149]) by HE1PR0701MB2859.eurprd07.prod.outlook.com ([10.168.91.149]) with mapi id 15.01.0669.011; Thu, 13 Oct 2016 12:49:25 +0000 From: "Ersue, Mehmet (Nokia - DE/Munich)" To: Alexey Melnikov , The IESG Thread-Topic: Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) Thread-Index: AQHSJLYX1AAqwcMOFEWwvHtypR9lJKCmUkSg Date: Thu, 13 Oct 2016 12:49:25 +0000 Message-ID: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> In-Reply-To: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mehmet.ersue@nokia.com; x-originating-ip: [131.228.2.19] x-ms-office365-filtering-correlation-id: 72157b54-2c7a-4216-6e4b-08d3f3675cde x-microsoft-exchange-diagnostics: 1; HE1PR0701MB2859; 7:8ZHrsONnyJBc+aUTPdsp8t2VC2WQ0f2u0aUrz3Kf+v1zzbmouSC06BWItz1ni4I4ClMonHymmbm4RZmjeyCqwwlP94nR2E97qLMurb//z1RAYKMwlHpJ+0bwHcMJ+9fx99Mhy1CPrDmzzpzBs8QaxiPGW5nuShq7f5T94Ci5d173+1GmQP+UEzlO/7ktufAcw/l12NOhnh8EcgNx6NKo6C2S6FoW1HkqpL92GS523zea4ZlfYgSEIx8Eg0JVZMFggDojuxH22nrweIO9RiBPb6LnZFmYuIuL8F244on6hPye3hw0+0dWzWw7dMcTa5QGppDQe6n/5qN9ccgqTm5qwpLLsmI+Z5KWOvvOciv7Ves= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:HE1PR0701MB2859; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(82608151540597); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:HE1PR0701MB2859; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0701MB2859; x-forefront-prvs: 0094E3478A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(199003)(377454003)(13464003)(3280700002)(10400500002)(5002640100001)(8676002)(101416001)(5660300001)(3660700001)(7846002)(92566002)(66066001)(9686002)(2906002)(86362001)(8666005)(4326007)(76176999)(54356999)(50986999)(122556002)(87936001)(74316002)(8936002)(19580395003)(586003)(76576001)(189998001)(68736007)(102836003)(345774005)(6116002)(3846002)(97736004)(2900100001)(105586002)(7736002)(2950100002)(305945005)(106356001)(19580405001)(33656002)(77096005)(11100500001)(5001770100001)(230783001)(7696004)(106116001)(81156014)(81166006)(15975445007)(7059030); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1PR0701MB2859; H:HE1PR0701MB2859.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Oct 2016 12:49:25.3523 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2859 Archived-At: Cc: "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" , "netconf@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 12:49:30 -0000 SGkgQWxleGV5LA0KDQpjb25jZXJuaW5nOg0KPiBEaXNjdXNzIDQpIEluIDUuMjoNCj4gVGhlIHNl cnZlciBpcyBvbmx5IHJlcXVpcmVkIHRvIGltcGxlbWVudCBvbmUgb2YgWE1MIC8gSlNPTi4gRG9l cyB0aGlzDQo+IG1lYW4gdGhhdCBhIGNvbXBsaWFudCBjbGllbnQgbmVlZCB0byBzdXBwb3J0IGJv dGggaW4gb3JkZXIgdG8gYWNoaWV2ZQ0KPiBpbnRlcm9wZXJhYmlsaXR5PyBUaGUgZG9jdW1lbnQg ZG9lc24ndCBzYXkgdGhhdC4NCg0KU2VjdGlvbiA1LjIgc2F5czoNCj09ICAgUmVxdWVzdCBpbnB1 dCBjb250ZW50IGVuY29kaW5nIGZvcm1hdCBpcyBpZGVudGlmaWVkIHdpdGggdGhlIENvbnRlbnQt DQo9PSAgIFR5cGUgaGVhZGVyIGZpZWxkLiAgVGhpcyBmaWVsZCBNVVNUIGJlIHByZXNlbnQgaWYg YSBtZXNzYWdlLWJvZHkgaXMNCj09ICAgc2VudCBieSB0aGUgY2xpZW50Lg0KPT0NCj09ICAgVGhl IHNlcnZlciBNVVNUIHN1cHBvcnQgdGhlICJBY2NlcHQiIGhlYWRlciBmaWVsZCBhbmQgIjQwNiBO b3QNCj09ICAgQWNjZXB0YWJsZSIgc3RhdHVzLWxpbmUsIGFzIGRlZmluZWQgaW4gW1JGQzcyMzFd LiAgVGhlIHJlc3BvbnNlDQo9PSAgIG91dHB1dCBjb250ZW50IGVuY29kaW5nIGZvcm1hdHMgdGhh dCB0aGUgY2xpZW50IHdpbGwgYWNjZXB0IGFyZQ0KPT0gICBpZGVudGlmaWVkIHdpdGggdGhlIEFj Y2VwdCBoZWFkZXIgZmllbGQgaW4gdGhlIHJlcXVlc3QuIA0KDQpXZSB0aGluayB0aGF0IHRoZSBj bGllbnQgYmVoYXZpb3IgaXMgZGVmaW5lZCB2aWEgdGhlIEFjY2VwdCBoZWFkZXIuDQpJIHdvbmRl ciB3aGV0aGVyIHRoaXMgaXMgc3VmZmljaWVudCBmcm9tIHlvdXIgcG92LiBJZiBub3QgY291bGQg eW91IHBsZWFzZSANCmdpdmUgdXMgYSBoaW50IHdoYXQgc2hvdWxkIGJlIG1lbnRpb25lZCBhZGRp dGlvbmFsbHkuDQoNClRoZXJlIGlzIGFub3RoZXIgdGhyZWFkIGZvciBEaXNjdXNzIDEpIA0KRGlz Y3VzcyAyKSB3aWxsIGJlIGZpeGVkIGFzIHJlcXVlc3RlZC4NCkRpc2N1c3MgMykgaXMgYSBidWcg YW5kIHdpbGwgYmUgZml4ZWQgYXMgcmVxdWVzdGVkLg0KDQpUaGFua3MsIA0KTWVobWV0IA0KDQoN Ci0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBbGV4ZXkgTWVsbmlrb3YgW21haWx0 bzphYW1lbG5pa292QGZhc3RtYWlsLmZtXSANClNlbnQ6IFdlZG5lc2RheSwgT2N0b2JlciAxMiwg MjAxNiA4OjI2IFBNDQpUbzogVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc+DQpDYzogZHJhZnQtaWV0 Zi1uZXRjb25mLXJlc3Rjb25mQGlldGYub3JnOyBuZXRjb25mLWNoYWlyc0BpZXRmLm9yZzsgRXJz dWUsIE1laG1ldCAoTm9raWEgLSBERS9NdW5pY2gpIDxtZWhtZXQuZXJzdWVAbm9raWEuY29tPjsg bmV0Y29uZkBpZXRmLm9yZw0KU3ViamVjdDogQWxleGV5IE1lbG5pa292J3MgRGlzY3VzcyBvbiBk cmFmdC1pZXRmLW5ldGNvbmYtcmVzdGNvbmYtMTc6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQp DQoNCkFsZXhleSBNZWxuaWtvdiBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3Np dGlvbiBmb3INCmRyYWZ0LWlldGYtbmV0Y29uZi1yZXN0Y29uZi0xNzogRGlzY3Vzcw0KDQpXaGVu IHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBs eSB0byBhbGwNCmVtYWlsIGFkZHJlc3NlcyBpbmNsdWRlZCBpbiB0aGUgVG8gYW5kIENDIGxpbmVz LiAoRmVlbCBmcmVlIHRvIGN1dCB0aGlzDQppbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVy LikNCg0KDQpQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1l bnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQpmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNH IERJU0NVU1MgYW5kIENPTU1FTlQgcG9zaXRpb25zLg0KDQoNClRoZSBkb2N1bWVudCwgYWxvbmcg d2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCmh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtbmV0Y29uZi1yZXN0Y29uZi8NCg0K DQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCkRJU0NVU1M6DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNClRoYW5rIHlvdSBm b3IgYSB3ZWxsIHdyaXR0ZW4gZG9jdW1lbnQuIEkgaGF2ZSBhIGZldyBtaW5vciBwb2ludHMgd2hp Y2ggSQ0Kd291bGQgbGlrZSB0byBkaXNjdXNzIGJlZm9yZSByZWNvbW1lbmRpbmcgYXBwcm92YWwg b2YgdGhpcyBkb2N1bWVudDoNCg0KMSkgSW4gMi40OiBUTFMgc2VydmVyIGlkZW50aXR5IHZlcmlm aWNhdGlvbiB1c2luZyBSRkMgNjEyNSBpcw0KdW5kZXJzcGVjaWZpZWQuIFBsZWFzZSBwcm92aWRl IGFsbCBkZXRhaWxzIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDMgb2YNClJGQyA2MTI1LCBpbiBw YXJ0aWN1bGFyLCBwbGVhc2Ugc3BlY2lmeSB3aGljaCBvZiBDTi1JRCwgRE5TLUlELCBTUlYtSUQs DQpVUkktSUQgYXJlIGFsbG93ZWQvcmVxdWlyZWQgYW5kIHdoZXRoZXIgd2lsZGNhcmRzIGFyZSBh bGxvd2VkIGluIHRoZW0uDQoNCjIpIEluIDMuNS4zLjE6DQoNCmFwaS1wYXRoIGlzIHVzaW5nICJ8 IiBpbnN0ZWFkIG9mICIvIiBmb3IgYWx0ZXJuYXRpdmVzLg0KDQpUaGUgIioiIG11c3QgYmUgYmVm b3JlIGEgcnVsZSwgbm90IGFmdGVyIGl0Lg0KDQpJdCBsb29rcyBsaWtlIHRoZSBBQk5GIHdhcyBu b3QgdmFsaWRhdGVkIHdpdGggYSB0b29sLCBzbyB0aGVyZSBtaWdodCBiZQ0Kb3RoZXIgZXJyb3Jz IGluIGl0Lg0KDQozKSBJbiA0LjY6IA0KLi4uIHNlcnZlciBNVVNUIHN1cHBvcnQgdGhlIFBBVENI IG1ldGhvZC4gLi4uIC4gSXQgaXMgb3B0aW9uYWwgdG8NCmltcGxlbWVudCBieSB0aGUgc2VydmVy Lg0KDQogLSBUaGVzZSBzdGF0ZW1lbnRzIHNlZW0gdG8gYmUgaW4gY29uZmxpY3QuDQoNCjQpIElu IDUuMjoNCg0KVGhlIHNlcnZlciBpcyBvbmx5IHJlcXVpcmVkIHRvIGltcGxlbWVudCBvbmUgb2Yg WE1MIC8gSlNPTi4gRG9lcyB0aGlzDQptZWFuIHRoYXQgYSBjb21wbGlhbnQgY2xpZW50IG5lZWQg dG8gc3VwcG9ydCBib3RoIGluIG9yZGVyIHRvIGFjaGlldmUNCmludGVyb3BlcmFiaWxpdHk/IFRo ZSBkb2N1bWVudCBkb2Vzbid0IHNheSB0aGF0Lg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkNPTU1FTlQ6 DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQoNCkluIDEuNDogaXMgaXQgcG9zc2libGUgdG8gZXhwb3NlIHNlcGFy YXRlIDpjYW5kaWRhdGUsIDpzdGFydHVwIGFuZA0KOndyaXRlYWJsZS1ydW5uaW5nIG92ZXIgUkVT VENPTkY/IFNlY3Rpb24gMS40IHNlZW0gdG8gaW1wbHkgdGhhdCBvbmx5IG9uZQ0KY2FuIGJlIHVz ZWQuDQoNCkluIDMuNS4zOiB5b3UgYXJlIGxpc3RpbmcgInJlc2VydmVkIiBVUkkgY2hhcmFjdGVy cywgeW91IHNob3VsZCBwb2ludCB0bw0KUkZDIDM5ODYgYXMgdGhlIGF1dGhvcml0YXRpdmUgcmVm ZXJlbmNlLg0KDQpJbiA0LjQuMjogY2FuIDQwNCBiZSByZXR1cm5lZCBpbnN0ZWFkIG9mIDQwMz8N Cg0KT24gcGFnZSA0NSAoaW4gdGhlIG1pZGRsZSBvZiB0aGUgcGFnZSk6IHNvbWUgcmVmZXJlbmNl cyB0byBSRkNzIGFuZA0Kc2VjdGlvbnMgbG9vayBpbmNvcnJlY3QgKHdyb25nIGZvcm1hdHRpbmcp Lg0KDQpJbiA0LjU6IGl0IHdvdWxkIGJlIGdvb2QgdG8gc2VlIGFuIGV4YW1wbGUgY3JlYXRpbmcv cmVwbGFjaW5nIHRoZSB3aG9sZQ0KZGF0YXN0b3JlLg0KDQpBdCB0aGUgYm90dG9tIG9mIHBhZ2Ug NDc6IEkgc2VlIGFuIGV4dHJhIGRvdCBpbiB0aGUgbWlkZGxlIG9mIGENCnNlbnRlbmNlLg0KDQpJ biA0LjguNDogSSB0aGluayBYUGF0aCBzaG91bGQgYmUgYSBub3JtYXRpdmUgcmVmZXJlbmNlIHRo ZXJlLg0KDQpJbiA1LjU6IHdoYXQgaXMgdGhlIHJlYXNvbiBmb3IgQ2FjaGUtQ29udHJvbCBiZWlu ZyBhIFNIT1VMRCBhbmQgbm90IGENCk1VU1Q/DQoNCkluIDExLjMuMToNCg0KU3VidHlwZSBtdXN0 IGluY2x1ZGUgIit4bWwiIGluIGl0cyB2YWx1ZS4NCg0KRnJhZ21lbnQgaWRlbnRpZmllcjogY2Fu IHlvdSBqdXN0IHNheSAic2FtZSBhcyBmb3IgYXBwbGljYXRpb24veG1sIj8NCg0KRmlsZSBleHRl bnNpb246IGRvbid0IHlvdSB3YW50IHRvIGRlZmluZSBhIG5ldyBvbmU/ICgueG1sIGlzIGZpbmUg YXMgYQ0KZmFsbGJhY2spDQoNCjExLjMuMjoNCg0KVGhlIHNhbWUgY29tbWVudCBhYm91dCBmaWxl IGV4dGVuc2lvbnMgYXMgYWJvdmUuDQoNCg0K From nobody Thu Oct 13 05:54:32 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F26E129777; Thu, 13 Oct 2016 05:53:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.897 X-Spam-Level: X-Spam-Status: No, score=-4.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gytkX9-Q68HZ; Thu, 13 Oct 2016 05:53:55 -0700 (PDT) Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id B430312976E; Thu, 13 Oct 2016 05:53:54 -0700 (PDT) Received: from localhost (h-85-226.a165.priv.bahnhof.se [94.254.85.226]) by mail.tail-f.com (Postfix) with ESMTPSA id 1DB151AE028F; Thu, 13 Oct 2016 14:53:53 +0200 (CEST) Date: Thu, 13 Oct 2016 14:53:52 +0200 (CEST) Message-Id: <20161013.145352.361577829898316308.mbj@tail-f.com> To: aamelnikov@fastmail.fm From: Martin Bjorklund In-Reply-To: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> X-Mailer: Mew version 6.5 on Emacs 24.3 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, iesg@ietf.org, netconf-chairs@ietf.org Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 12:53:58 -0000 Hi, "Alexey Melnikov" wrote: > Alexey Melnikov has entered the following ballot position for > draft-ietf-netconf-restconf-17: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > Thank you for a well written document. I have a few minor points which I > would like to discuss before recommending approval of this document: [...] > 2) In 3.5.3.1: > > api-path is using "|" instead of "/" for alternatives. > > The "*" must be before a rule, not after it. > > It looks like the ABNF was not validated with a tool, so there might be > other errors in it. Correct :( I have now fixed the bugs in these rules (there were other bugs as well...), and I have added tool-validation of the grammar. Thanks for spotting this! /martin From nobody Thu Oct 13 06:19:11 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BDF71294FB; Thu, 13 Oct 2016 06:19:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=SJHgWmpR; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=T3rLQAzv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7n5TrP6YUyIU; Thu, 13 Oct 2016 06:19:02 -0700 (PDT) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8582D1294F8; Thu, 13 Oct 2016 06:19:02 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id EBE7F204D0; Thu, 13 Oct 2016 09:19:01 -0400 (EDT) Received: from web5 ([10.202.2.215]) by compute4.internal (MEProxy); Thu, 13 Oct 2016 09:19:01 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=B5RKCVfxI+KO9vK+Gn8y47g+YcU=; b=SJHgWm pR0UjoLiZoSkVFwRPhBQsMITWRz/OsqJtxpQrJtpR/HRJ0DrquTavYwFgJfBEL2R OS8XwQCC++EKOavvFlDSy8uyxqShdE8TMUkUU16ZafBF5NEDS+p30EpxoFBgDVsN 89j/q2FR3FOh6ap+1PIZi7SxFu8WTEKmtdWv0= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=B5RKCVfxI+KO9vK +Gn8y47g+YcU=; b=T3rLQAzvUl32BlVF3WMh/Xjbyvqz+XPamdBbVh6FxwDhMSC S/eBaXE1bNJoFcuN1O3oW8S5yjGKJvGjF17p1F/rFtyngP0Zkmek2O6eFx4h1G6H D+xPEc+UlKhN/aBs4FaRYnl53N7Hwp8mAF7okO99gDUVdlBOuDY4W61Aihrk= Received: by mailuser.nyi.internal (Postfix, from userid 99) id BB38296EAB; Thu, 13 Oct 2016 09:19:01 -0400 (EDT) Message-Id: <1476364741.1635058.754766169.7B7110D1@webmail.messagingengine.com> X-Sasl-Enc: 3wm0niEynYRKjHnY/TcoAsg4/2x+W5f7PEMTtOYoW5QN 1476364741 From: Alexey Melnikov To: "Ersue, Mehmet (Nokia - DE/Munich)" , The IESG MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-cdbff290 Date: Thu, 13 Oct 2016 14:19:01 +0100 In-Reply-To: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> Archived-At: Cc: draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org, netconf@ietf.org Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 13:19:05 -0000 Hi Mehmet, On Thu, Oct 13, 2016, at 01:49 PM, Ersue, Mehmet (Nokia - DE/Munich) wrote: > Hi Alexey, > > concerning: > > Discuss 4) In 5.2: > > The server is only required to implement one of XML / JSON. Does this > > mean that a compliant client need to support both in order to achieve > > interoperability? The document doesn't say that. > > Section 5.2 says: > == Request input content encoding format is identified with the > Content- > == Type header field. This field MUST be present if a message-body is > == sent by the client. > == > == The server MUST support the "Accept" header field and "406 Not > == Acceptable" status-line, as defined in [RFC7231]. The response > == output content encoding formats that the client will accept are > == identified with the Accept header field in the request. > > We think that the client behavior is defined via the Accept header. > I wonder whether this is sufficient from your pov. If not could you > please > give us a hint what should be mentioned additionally. My concern is that you seem to be requiring clients to support 2 encodings, because servers are not required to support both of them. This seems like a high bar for implementations. Was this discussed in the WG? > There is another thread for Discuss 1) Yes, I will reply to that separately. > Discuss 2) will be fixed as requested. > Discuss 3) is a bug and will be fixed as requested. > > Thanks, > Mehmet > > > -----Original Message----- > From: Alexey Melnikov [mailto:aamelnikov@fastmail.fm] > Sent: Wednesday, October 12, 2016 8:26 PM > To: The IESG > Cc: draft-ietf-netconf-restconf@ietf.org; netconf-chairs@ietf.org; Ersue, > Mehmet (Nokia - DE/Munich) ; netconf@ietf.org > Subject: Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: > (with DISCUSS and COMMENT) > > Alexey Melnikov has entered the following ballot position for > draft-ietf-netconf-restconf-17: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > Thank you for a well written document. I have a few minor points which I > would like to discuss before recommending approval of this document: > > 1) In 2.4: TLS server identity verification using RFC 6125 is > underspecified. Please provide all details as described in Section 3 of > RFC 6125, in particular, please specify which of CN-ID, DNS-ID, SRV-ID, > URI-ID are allowed/required and whether wildcards are allowed in them. > > 2) In 3.5.3.1: > > api-path is using "|" instead of "/" for alternatives. > > The "*" must be before a rule, not after it. > > It looks like the ABNF was not validated with a tool, so there might be > other errors in it. > > 3) In 4.6: > ... server MUST support the PATCH method. ... . It is optional to > implement by the server. > > - These statements seem to be in conflict. > > 4) In 5.2: > > The server is only required to implement one of XML / JSON. Does this > mean that a compliant client need to support both in order to achieve > interoperability? The document doesn't say that. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > In 1.4: is it possible to expose separate :candidate, :startup and > :writeable-running over RESTCONF? Section 1.4 seem to imply that only one > can be used. > > In 3.5.3: you are listing "reserved" URI characters, you should point to > RFC 3986 as the authoritative reference. > > In 4.4.2: can 404 be returned instead of 403? > > On page 45 (in the middle of the page): some references to RFCs and > sections look incorrect (wrong formatting). > > In 4.5: it would be good to see an example creating/replacing the whole > datastore. > > At the bottom of page 47: I see an extra dot in the middle of a > sentence. > > In 4.8.4: I think XPath should be a normative reference there. > > In 5.5: what is the reason for Cache-Control being a SHOULD and not a > MUST? > > In 11.3.1: > > Subtype must include "+xml" in its value. > > Fragment identifier: can you just say "same as for application/xml"? > > File extension: don't you want to define a new one? (.xml is fine as a > fallback) > > 11.3.2: > > The same comment about file extensions as above. > > From nobody Thu Oct 13 06:30:36 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26F2C12978E; Thu, 13 Oct 2016 06:30:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MCOG3tfj_4rP; Thu, 13 Oct 2016 06:30:25 -0700 (PDT) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0103.outbound.protection.outlook.com [104.47.36.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8ECB21294F8; Thu, 13 Oct 2016 06:30:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=oMoy8/hZg8VB3I1ouKr6jHzm8NOrmWWndhuqWe6W0po=; b=jlt/WKuRt/xSYKQ5d8p7DPjF2KdGZ+nWygm9HoIHFW5s7sGfYYB3NyvSAlBKNjL8kQIfnQr6NiU3v++aMk8/fJtwW/Yn1LYrJWkyeADpnCZOoPDATDiJ7HjCsJGG3q8kfNW5WetuJbKBAi/J6u9bC76W7Ch8kEthPUSbmeXU+7A= Received: from DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) by DM2PR0501MB1454.namprd05.prod.outlook.com (10.161.224.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.649.6; Thu, 13 Oct 2016 13:30:21 +0000 Received: from DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) by DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) with mapi id 15.01.0649.016; Thu, 13 Oct 2016 13:30:21 +0000 From: Kent Watsen To: Alexey Melnikov , "Ersue, Mehmet (Nokia - DE/Munich)" , The IESG Thread-Topic: Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) Thread-Index: AQHSJLYXZuU/DamBjEmJ49yHFR/2lKCmVwiAgAAIRYD//8AdAA== Date: Thu, 13 Oct 2016 13:30:21 +0000 Message-ID: <40571571-4D4A-4121-ABF6-95AD6AF0C0EF@juniper.net> References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476364741.1635058.754766169.7B7110D1@webmail.messagingengine.com> In-Reply-To: <1476364741.1635058.754766169.7B7110D1@webmail.messagingengine.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.14] x-ms-office365-filtering-correlation-id: 0fafafa6-8627-4d89-2a29-08d3f36d14f0 x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1454; 7:ZXOtZBbcGbCsQP2ox67+9LAMoDzwhMcnjQJxVQBdF10r6sLCQbuFc2iIj7gq0A+IpISpo3R1uc0dQd+XR4/E6/rgS/XbCcmvAdj6L+AWm28jtIhAPlgDTIOJOiMF5Usg4b8EeNtVrTI0zWnjIZRvzsbzP7F3QNT3HoffBwQcDo5Qqvp9X+M2bWSAyOyWlsVZ8SrVLYXnFhvnSrksUMT6hh2utq5nfP0iMKlUdyp7dMbIIgk5jK6n6doa+Moy1y6GoRpAGL+yJo5ncxC1qsLdZVudIvs77TuPAboPVU6jLawIS/miJBraqIWEQwxk7v0xEFt3WRmwqEW/n1pip3GUjFVJyJgiRw8jxgeajvG/Z6I= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1454; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:DM2PR0501MB1454; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1454; x-forefront-prvs: 0094E3478A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(189002)(7736002)(76176999)(54356999)(5001770100001)(5002640100001)(68736007)(86362001)(586003)(2950100002)(2900100001)(3846002)(10400500002)(6116002)(102836003)(2906002)(50986999)(5660300001)(105586002)(8936002)(101416001)(106116001)(66066001)(77096005)(305945005)(92566002)(230783001)(33656002)(189998001)(36756003)(106356001)(81156014)(99286002)(3660700001)(83506001)(82746002)(81166006)(83716003)(3280700002)(4326007)(7846002)(8666005)(87936001)(122556002)(4001350100001)(11100500001)(97736004)(8676002)(7059030)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1454; H:DM2PR0501MB1455.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <5475EEAD6683784C914D064892C7E7A7@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Oct 2016 13:30:21.5608 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1454 Archived-At: Cc: "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" , "netconf@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 13:30:28 -0000 DQpIaSBBbGV4ZXksDQoNCiAgICBNeSBjb25jZXJuIGlzIHRoYXQgeW91IHNlZW0gdG8gYmUgcmVx dWlyaW5nIGNsaWVudHMgdG8gc3VwcG9ydCAyDQogICAgZW5jb2RpbmdzLCBiZWNhdXNlIHNlcnZl cnMgYXJlIG5vdCByZXF1aXJlZCB0byBzdXBwb3J0IGJvdGggb2YgdGhlbS4NCiAgICBUaGlzIHNl ZW1zIGxpa2UgYSBoaWdoIGJhciBmb3IgaW1wbGVtZW50YXRpb25zLiBXYXMgdGhpcyBkaXNjdXNz ZWQgaW4NCiAgICB0aGUgV0c/DQoNClllcywgdGhlIFdHIGRpc2N1c3NlZCB0aGlzIGV4dGVuc2l2 ZWx5LCBhYm91dCBhIHllYXIgYWdvLiAgQXQgZmlyc3Qgd2UgaGFkIFhNTCBlbmNvZGluZyBhcyBt YW5kYXRvcnkgdG8gaW1wbGVtZW50LCBidXQgdGhlcmUgd2VyZSBtYW55IHdobyB3YW50ZWQgdGhl aXIgUkVTVENPTkYgc2VydmVycyB0byBvbmx5IGhhdmUgdG8gc3VwcG9ydCBKU09OLiAgVGhpcyB3 YXMvaXMgZXNwZWNpYWxseSBjb25jZXJuaW5nIGZvciBsb3ctZW5kIHNlcnZlcnMsIHdoZXJlIHJl c291cmNlcyBhcmUgdGlnaHQuDQoNCg0KSeKAmWQgcG9pbnQgeW91IHRvIHRoZSB0aHJlYWQsIGJ1 dCBJIGhhdmUgdG8ganVtcCBpbnRvIGEgbWVldGluZyB0aWdodCBub3cuLi4NCg0KVGhhbmtzLA0K S2VudA0KDQoNCg== From nobody Thu Oct 13 06:34:32 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49DE512979F; Thu, 13 Oct 2016 06:34:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=dMOBWh/h; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=B7HVUgUz Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jcuUy5bIcQl3; Thu, 13 Oct 2016 06:34:30 -0700 (PDT) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E74211293F4; Thu, 13 Oct 2016 06:34:29 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 59D6920746; Thu, 13 Oct 2016 09:34:29 -0400 (EDT) Received: from web5 ([10.202.2.215]) by compute4.internal (MEProxy); Thu, 13 Oct 2016 09:34:29 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=FffAA5PeLda83u3WGmNBh+h68y4=; b=dMOBWh /hfSiCFkMWF790FsZx79xn5fF0ZhYl6S860upmxW5eqWGM3JbcTUF+sM89/Yyt2S MbgxoNPhBafV5oZcQpmsXLiiqCaIbg5JYKx0jbJ1E8td5zHCA9wvGrRfNsHdFdm1 TfMrGBAaXxjF1ChHKWBhjcy7jrAXdj60eQoM0= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=FffAA5PeLda83u3 WGmNBh+h68y4=; b=B7HVUgUzj1FR+yHlY3Nh7XJ8pRz6OXY+ETLtZXSWpIoQ8Bh DsOG5aG6kYDUkji1ErLnxe5UJUJVVecbTVsViqtBJ9v496j99PPLSPlt5fb3up7S 4LMaJpNRh25/Q8IyRdQFMVmJxB/fIEPimLDGEJTH81WxzlQMRVS6uxo2dro0= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 3734096EAB; Thu, 13 Oct 2016 09:34:29 -0400 (EDT) Message-Id: <1476365669.1638728.754785289.72D5C6EC@webmail.messagingengine.com> X-Sasl-Enc: RzIPWB9E54o0BYSJUg26U0jlVpnZzxOzZSg1JR3Z09Zw 1476365669 From: Alexey Melnikov To: Kent Watsen , "Ersue, Mehmet (Nokia - DE/Munich)" , The IESG MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" X-Mailer: MessagingEngine.com Webmail Interface - ajax-cdbff290 In-Reply-To: <40571571-4D4A-4121-ABF6-95AD6AF0C0EF@juniper.net> References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476364741.1635058.754766169.7B7110D1@webmail.messagingengine.com> <40571571-4D4A-4121-ABF6-95AD6AF0C0EF@juniper.net> Date: Thu, 13 Oct 2016 14:34:29 +0100 Archived-At: Cc: draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org, netconf@ietf.org Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 13:34:31 -0000 Hi Kent, On Thu, Oct 13, 2016, at 02:30 PM, Kent Watsen wrote: >=20 > Hi Alexey, >=20 > My concern is that you seem to be requiring clients to support 2 > encodings, because servers are not required to support both of them. > This seems like a high bar for implementations. Was this discussed in > the WG? >=20 > Yes, the WG discussed this extensively, about a year ago. At first we > had XML encoding as mandatory to implement, but there were many who > wanted their RESTCONF servers to only have to support JSON. This was/is > especially concerning for low-end servers, where resources are tight. >=20 >=20 > I=E2=80=99d point you to the thread, but I have to jump into a meeting ti= ght > now... Ok, I trust that this discussion has happened. I would like a sentence to be added that says that for interoperability clients need to support both encodings, unless they are working against a specific implementation. That would address this point. Thank you, Alexey From nobody Thu Oct 13 06:42:59 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D04021297B0; Thu, 13 Oct 2016 06:42:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.518 X-Spam-Level: X-Spam-Status: No, score=-17.518 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-2.996, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B2uflyPgS_xp; Thu, 13 Oct 2016 06:42:46 -0700 (PDT) Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD1E71297AD; Thu, 13 Oct 2016 06:42:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1338; q=dns/txt; s=iport; t=1476366161; x=1477575761; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=UPmX08NX0XrTa1qviNZSsw56NeW5vsE3iDmAKG+vAK0=; b=bViQPDTll1rUdnmzbi78YFftUpWgFoYWEBzCav9qCj/jK95cFxNVLrJs hu7xYikCLYAlfXL6HSfxkHYZkdnG8YCOKGA7HBqmJZJHwkp/qGWeA/jRP D8/qhg2V0Grn45VaLkmCZrXY0KwAkKU1w1f6evZV7m8THl68piuKZm6fy Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CtAQDFjv9X/xbLJq1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgzwBAQEBAXQqjgaXBJIlgg+CCimFeAKCORQBAgEBAQEBAQFeJ4R?= =?us-ascii?q?iAQEEIw8BBTYLEAsOCgICJgICVwYBDAgBAYhMDrY3jQcBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBARkFgQeFNoF9CIJQh0uCWwEEmgKGJ4lWiWmGDIkpg1CDfx42QwUIgyq?= =?us-ascii?q?BPDyJGAEBAQ?= X-IronPort-AV: E=Sophos;i="5.31,339,1473120000"; d="scan'208";a="647373136" Received: from aer-iport-nat.cisco.com (HELO aer-core-4.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 13 Oct 2016 13:42:36 +0000 Received: from [10.60.67.85] (ams-bclaise-8914.cisco.com [10.60.67.85]) by aer-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id u9DDgZgu010012; Thu, 13 Oct 2016 13:42:35 GMT To: Alexey Melnikov , Kent Watsen , "Ersue, Mehmet (Nokia - DE/Munich)" , The IESG References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476364741.1635058.754766169.7B7110D1@webmail.messagingengine.com> <40571571-4D4A-4121-ABF6-95AD6AF0C0EF@juniper.net> <1476365669.1638728.754785289.72D5C6EC@webmail.messagingengine.com> From: Benoit Claise Message-ID: Date: Thu, 13 Oct 2016 15:42:39 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 In-Reply-To: <1476365669.1638728.754785289.72D5C6EC@webmail.messagingengine.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org, netconf@ietf.org Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 13:42:53 -0000 On 10/13/2016 3:34 PM, Alexey Melnikov wrote: > Hi Kent, > > On Thu, Oct 13, 2016, at 02:30 PM, Kent Watsen wrote: >> Hi Alexey, >> >> My concern is that you seem to be requiring clients to support 2 >> encodings, because servers are not required to support both of them. >> This seems like a high bar for implementations. Was this discussed in >> the WG? >> >> Yes, the WG discussed this extensively, about a year ago. At first we >> had XML encoding as mandatory to implement, but there were many who >> wanted their RESTCONF servers to only have to support JSON. This was/is >> especially concerning for low-end servers, where resources are tight. >> >> >> I’d point you to the thread, but I have to jump into a meeting tight >> now... > Ok, I trust that this discussion has happened. Yes. See https://mailarchive.ietf.org/arch/msg/netconf/YSEbLd-nnI0dlkeiIeGW-z6JqDg and search for "Discovery of the Encoding Format WAS:FW: Opinion poll for the RESTCONF encoding" on the NETCONF mailing list > I would like a sentence > to be added that says that for interoperability clients need to support > both encodings, unless they are working against a specific > implementation. That would address this point. That seems reasonable. Regards, B. > > Thank you, > Alexey > > . > From nobody Thu Oct 13 07:05:24 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 177201297B9; Thu, 13 Oct 2016 07:05:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=Z4GFRPan; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=QiCEf/a2 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bBVloRt0vjyf; Thu, 13 Oct 2016 07:05:22 -0700 (PDT) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 509581298C9; Thu, 13 Oct 2016 06:57:08 -0700 (PDT) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id B6E2E2048B; Thu, 13 Oct 2016 09:57:07 -0400 (EDT) Received: from web5 ([10.202.2.215]) by compute4.internal (MEProxy); Thu, 13 Oct 2016 09:57:07 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=ImsZ05+Glpst+986oQ60ANYvZW8=; b=Z4GFRP anoMFpVsBmn686P06D+fymhwq6D1dkrP9gmuSeXExxu8yzEePkV61wPd20qsmAgV 1AlbzSLhgfVyuBPla4bU59gKiybH5wserM6CF7v6x+oRaedEhM+a8TCZWFpfoan/ w8TYBF5ViIaX/oiHfCOwxLNVBXcXQAXs8CeTM= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=ImsZ05+Glpst+98 6oQ60ANYvZW8=; b=QiCEf/a2+2YWnbn4nCfU1zLu8IR9fBBT74hS66i+F2aVYbE e0zcXnuJVRHNI5sIJ4onsa8I/Xqh4XCS7Pu/IkP3yNpPB55DnEtishc+Fi+FHt8I Yo02c+mLeE7c3Zo6Pa9cDpVNezX3p358KcZ9D0uQwgcere95968f6BF/92bY= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 822679669D; Thu, 13 Oct 2016 09:57:07 -0400 (EDT) Message-Id: <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> X-Sasl-Enc: wJIJPaIr8+1p7Q7EM02LK00ka42IC6xjOyjewlnhbTDU 1476367027 From: Alexey Melnikov To: Kent Watsen , The IESG MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" X-Mailer: MessagingEngine.com Webmail Interface - ajax-cdbff290 Date: Thu, 13 Oct 2016 14:57:07 +0100 In-Reply-To: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 14:05:23 -0000 Hi Kent, On Wed, Oct 12, 2016, at 09:50 PM, Kent Watsen wrote: > Hi Alexey, >=20 > Regarding your DISCUSS #1: >=20=20 > In 2.4: TLS server identity verification using RFC 6125 is > underspecified. Please provide all details as described in Section 3 of > RFC 6125, in particular, please specify which of CN-ID, DNS-ID, SRV-ID, > URI-ID are allowed/required and whether wildcards are allowed in them. >=20 >=20 > RESTCONF is based on HTTPS [RFC2818]; it is expected that RESTCONF > servers will follow general HTTPS guidelines for their server > certificates. Section 2.4 used to be longer, but the WG felt that > repeating text from other drafts might lead to ambiguity and/or conflict, > as so we trimmed it down to what it is now. It is a shame that RFC 2818 was not updated to use RFC 6125. However this is not your problem. So basically you have 2 choices: you either reference RFC 2818 (and don't reference RFC 6125 at all) or you add more information about how to use RFC 6125. > Additionally, I=E2=80=99m thinking that Section 3 of RFC 6125 regards app= lication > instances more > so than generic TLS-based protocols.=20 It was intended for protocols. > Specifically, while the RESTCONF > *protocol* may not be sensitive to how a given RESTCONF server is > discovered, a given RESTCONF server *does care*, as it would need to > ensure that its server cert is filled in sufficiently for the client to > validate it (i.e., with matching reference identifiers). >=20 > Is this response sufficient to address this DISCUSS? >=20 > Thanks, > Kent >=20 >=20 From nobody Thu Oct 13 09:00:30 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 181B5129559; Thu, 13 Oct 2016 09:00:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6hBS3DT-cnFp; Thu, 13 Oct 2016 09:00:19 -0700 (PDT) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0137.outbound.protection.outlook.com [104.47.36.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECECF127077; Thu, 13 Oct 2016 09:00:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=tnxGB4H25vDZ5mnMEYYXxV+e7kFF4ogiWriJw/XPwso=; b=B4gjb0K4UQjuCj6B+XjkURZO4erLSnLxNam4BbrgUV5FfmvXvKCln4UIf9f2zAaFW1mw63R5LvJPWFi/ae4VP1VjPVyhTpk9uAQefzetPQ5yRXfchAY4MIZCwzyLaz9Q5YILyivxhy94FH2/zcebKBrIcTop1S4PwRfgYtcfOhU= Received: from DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) by DM2PR0501MB1456.namprd05.prod.outlook.com (10.161.224.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.649.6; Thu, 13 Oct 2016 16:00:17 +0000 Received: from DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) by DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) with mapi id 15.01.0649.016; Thu, 13 Oct 2016 16:00:17 +0000 From: Kent Watsen To: Alexey Melnikov , The IESG Thread-Topic: Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) Thread-Index: AQHSJLYXZuU/DamBjEmJ49yHFR/2lKClCCyAgAFhxoD//99aAA== Date: Thu, 13 Oct 2016 16:00:17 +0000 Message-ID: <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> In-Reply-To: <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.14] x-ms-office365-filtering-correlation-id: 1af441ec-01c3-4de6-4e5a-08d3f38206ef x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1456; 7:0WG33VVExRFh8C0n/3cqC2T+BwrVHc9W/ViqnpUcMVOmbp3i9d9SyE4971v4lsODz3Cx8psXsQLrlxc2cVM7iwHjzq1aRNCpafAVgsVc+hMeoVjuFgaRkSD9U7ogcfY2XvGnM2++nHHBXz92pYBGzoesL7oHeyKdZ1H8Zpl2V4Qmamv5c9LUo0XnClfJfxcXtLQrZFPoDsAJqXhGv/kZhSL1ktyD7tzTSszzmznGu3+T30iXERGu8AM3R1ZltqsSf6HSQO92WpXD3Z6A+6dpKIvSKJvIXArrQdqYOAkm/uIP46bNLuDLPyVcTRH+FL0oA1+9GQZx7qGzHOTXTb8ay8xtb4UmOG5iUk/izd56C8s= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1456; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:DM2PR0501MB1456; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1456; x-forefront-prvs: 0094E3478A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(199003)(77096005)(5660300001)(97736004)(5001770100001)(4001350100001)(99286002)(4326007)(10400500002)(2906002)(82746002)(105586002)(86362001)(76176999)(122556002)(50986999)(2900100001)(83506001)(83716003)(92566002)(101416001)(87936001)(54356999)(106356001)(3280700002)(6116002)(2950100002)(3846002)(102836003)(106116001)(3660700001)(33656002)(8936002)(189998001)(36756003)(586003)(7846002)(7736002)(8666005)(68736007)(5002640100001)(305945005)(230783001)(11100500001)(8676002)(81156014)(81166006)(66066001)(7059030)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1456; H:DM2PR0501MB1455.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <9417CE1F01922A4DB170116FAE235125@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Oct 2016 16:00:17.5425 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1456 Archived-At: Cc: "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 16:00:22 -0000 DQoNCkhpIEFsZXhleSwNCg0KDQo+SXQgaXMgYSBzaGFtZSB0aGF0IFJGQyAyODE4IHdhcyBub3Qg dXBkYXRlZCB0byB1c2UgUkZDIDYxMjUuIEhvd2V2ZXINCj50aGlzIGlzIG5vdCB5b3VyIHByb2Js ZW0uDQoNCkZXSVcsIFJFU1RDT05GIGFjdHVhbGx5IHJlZmVyZW5jZXMgUkZDIDcyMzAsIHdoaWNo IHJlZmVyZW5jZXMgUkZDIDI4MTgsIGJ1dCB5b3VyIHBvaW50IGlzIHN0aWxsIHZhbGlkLg0KDQoN Cg0KPlNvIGJhc2ljYWxseSB5b3UgaGF2ZSAyIGNob2ljZXM6IHlvdSBlaXRoZXIgcmVmZXJlbmNl IFJGQyAyODE4IChhbmQNCj5kb24ndCByZWZlcmVuY2UgUkZDIDYxMjUgYXQgYWxsKSBvciB5b3Ug YWRkIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgaG93DQo+dG8gdXNlIFJGQyA2MTI1Lg0KDQpSZWdh cmRpbmcgY2hvaWNlICMxOiBTY2FubmluZyB0aGUgUkVTVENPTkYgZHJhZnQsIHRoZSBvbmx5IHJl ZmVyZW5jZSB0byBSRkMgNjEyNSBpcyBoYXBwZW5pbmcgaW4gdGhpcyBzZWN0aW9uIChTZWN0aW9u IDIuNCksIHNvIHN3aXRjaGluZyB0byBSRkMgMjgxOCB3b3VsZCBiZSBmYWlybHkgZWFzeS4gIFBy ZXN1bWFibHkgdGhpcyBzZWN0aW9uIHdvdWxkIGJlIHJld3JpdHRlbiB0byBwb2ludCB0byBSRkMg MjgxOCwgU2VjdGlvbiAzLjEgaW5zdGVhZC4NCg0KUmVnYXJkaW5nIGNob2ljZSAjMjogd291bGQg YWRkaW5nIHRvIHRoZSBiZWdpbm5pbmcgb2YgdGhpcyBzZWN0aW9uIChTZWN0aW9uIDIuNCkgc29t ZXRoaW5nIGxpa2UgdGhlIGZvbGxvd2luZyBiZSBva2F5PyAg4oCcUkVTVENPTkYgc2VydmVycyB1 c2luZyBEZXZJRCBjZXJ0aWZpY2F0ZXMgTVVTVCBjb25maWd1cmUgdGhlaXIgY2VydGlmaWNhdGVz IGFjY29yZGluZyB0byBJRUVFLTgwMi4xQVItMjAwOSwgb3RoZXJ3aXNlIFJFU1RDT05GIHNlcnZl cnMgU0hPVUxEIGNvbmZpZ3VyZSB0aGVpciBjZXJ0aWZpY2F0ZXMgYWNjb3JkaW5nIHRvIHRoZSBn dWlkZWxpbmVzIGluIFNlY3Rpb24gMyBvZiBSRkMgNjEyNS7igJ0NCg0KDQpLZW50DQoNCg0KDQoN Cg0KDQo= From nobody Thu Oct 13 12:48:14 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41BBB129596; Thu, 13 Oct 2016 12:48:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LVemX02hh4jW; Thu, 13 Oct 2016 12:48:11 -0700 (PDT) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0131.outbound.protection.outlook.com [104.47.41.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B1F2129547; Thu, 13 Oct 2016 12:48:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=BeR+jCr5+9zL9I4UPAz8fP8QdunuzSZevmYBhgZZzc4=; b=WCmWB8TjDV6Afbu3piNL86FLJAEOkHU/2QQmIOAWR/hIgcRjFeQWx0I1IyOLOrnRO9uVfHj5fvsTwGdwa+21neAxx6rOCm4fR50Tk72VsBMNFECg/h8puJp2g8oPlaj+yr57BG5RiOIxNKsO1eOnEzIxYxegc5rfA1od4p6LtvQ= Received: from DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) by DM2PR0501MB1453.namprd05.prod.outlook.com (10.161.224.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.649.6; Thu, 13 Oct 2016 19:48:10 +0000 Received: from DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) by DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) with mapi id 15.01.0649.016; Thu, 13 Oct 2016 19:48:10 +0000 From: Kent Watsen To: Stephen Farrell , The IESG Thread-Topic: Stephen Farrell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) Thread-Index: AQHSJOlmKLRBeqxHykiJ9QgTqKgs3aCmiJAA Date: Thu, 13 Oct 2016 19:48:10 +0000 Message-ID: <9C1A4E60-85EE-4BFF-9697-189B59B0EAB6@juniper.net> References: <147631879723.6373.4811934777234946594.idtracker@ietfa.amsl.com> In-Reply-To: <147631879723.6373.4811934777234946594.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.14] x-ms-office365-filtering-correlation-id: 0b286b04-f641-463c-7a0d-08d3f3a1dc67 x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1453; 7:KHJgAqnDHXPkmRebZDUv88I5T5sgBSk6iy7CIeqSblQXfQMAukXsQYJ6ubTvgEfJEXT14Is+bRFAsdk3cDhSdiiH+NtljvMQRm3BhQiCzK+WpT6J/VPZ3TZXKOvKur9DCfH3KQYVP/SFcAxej1j5KV1vC8GMxN5CpDa3VHP5d396pEZqbDnjptZFh0gVUsnV+pFi4EmILvKmbFKvMOPtbJIxOqp/rJnFkrIVMwsH/xSkyyLdSHbF+DLsva2u15wAaVpAR1sRXwzUhEn1RVEa6/U1iRjBEx2XNc97VVY4OpTwQn1T5zmv0DNlgBayzL1HW8qt9lee9hp2rcRsLHNoWsb6+AooM4zfdNMfGSp1xM8= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1453; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:DM2PR0501MB1453; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1453; x-forefront-prvs: 0094E3478A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(189002)(68736007)(122556002)(66066001)(77096005)(33656002)(76176999)(8676002)(54356999)(50986999)(106116001)(105586002)(2900100001)(36756003)(81156014)(101416001)(5660300001)(2950100002)(230783001)(8936002)(99286002)(3280700002)(106356001)(2906002)(102836003)(3660700001)(11100500001)(4326007)(81166006)(6116002)(10400500002)(83716003)(86362001)(5002640100001)(586003)(97736004)(87936001)(7846002)(83506001)(305945005)(5001770100001)(189998001)(4001350100001)(82746002)(7736002)(92566002)(3846002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1453; H:DM2PR0501MB1455.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <4ABE0959BA103943A74421E9EB723E70@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Oct 2016 19:48:10.0393 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1453 Archived-At: Cc: "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Stephen Farrell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Oct 2016 19:48:13 -0000 SGkgU3RlcGhlbiwNCg0KSnVzdCBwaWNraW5nIG91dCB5b3VyIGNvbW1lbnRzIHRoYXQgYWZmZWN0 IG15IHNlY3Rpb25zOg0KDQoNCg0KPiAtIFdoYXQgYWJvdXQgdGxzMS4zIDBSVFQvcmVwbGF5YWJs ZS1kYXRhPyBUaGVyZSBtYXkgYmUgYSBjYXNlDQo+IHRvIGJlIG1hZGUgdG8gbWVudGlvbiB0aGlz IGhlcmUgYW5kIGUuZy4gdG8gc2F5IHRoYXQgb25seQ0KPiBpZGVtcG90ZW50IHJlcXVlc3RzIChv ciBub25lKSBhcmUgYWxsb3dlZCB1c2UgMFJUVCBlYXJseSBkYXRhLg0KPiBFcXVhbGx5IHlvdSBj b3VsZCBhcmd1ZSB0byBub3Qgc2F5IGFueXRoaW5nIHNpbmNlIHRsczEuMyBpc24ndA0KPiB5ZXQg ZmluaXNoZWQuIEknZCBhcmd1ZSB0aGF0IHNheWluZyBzb21ldGhpbmcgaGVyZSBpcyBiZXR0ZXIN Cj4gKGFuZCB0aGF0IHNheWluZyB0byBub3QgdXNlIDBSVFQgYXQgYWxsIGlzIGJlc3QpIHNpbmNl DQo+IFJFU1RDT05GIHdpbGwgdXNlIHN0YW5kYXJkIGh0dHBzIGxpYnJhcmllcywgd2hpY2ggd2ls bCBhdCBzb21lDQo+IHBvaW50IHNvb24gc3VwcG9ydCAwUlRUIGFuZCB0aGF0IG1pZ2h0IGV2ZW4g bWFrZSB0aGF0IGhhcHBlbg0KPiBtb3JlIGVhc2lseSB0aGFuIHRoZXkgb3VnaHQuIA0KDQpIb3cg YWJvdXQgdGhpcyBpbiB0aGUgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbj8NCg0KICBT ZWN0aW9uIDIuMSBzdGF0ZXMg4oCcQSBSRVNUQ09ORiBzZXJ2ZXIgTVVTVCBzdXBwb3J0IHRoZSBU TFMNCiAgcHJvdG9jb2wgW1JGQzUyNDZd4oCdLiAgVGhpcyBsYW5ndWFnZSBsZWF2ZXMgb3BlbiB0 aGUgcG9zc2liaWxpdHkNCiAgdGhhdCBhIFJFU1RDT05GIHNlcnZlciBtaWdodCBhbHNvIHN1cHBv cnQgZnV0dXJlIHZlcnNpb25zIG9mIHRoZQ0KICBUTFMgcHJvdG9jb2wuICAgT2Ygc3BlY2lmaWMg Y29uY2VybiwgVExTIDEuMyBbZHJhZnQtaWV0Zi10bHMtdGxzMTNdDQogIGludHJvZHVjZXMgc3Vw cG9ydCBmb3IgMC1SVFQgaGFuZHNoYWtlcyB0aGF0IGNhbiBsZWFkIHRvIHNlY3VyaXR5DQogIGlz c3VlcyBmb3IgUkVTVCBBUElzLCBhcyBkZXNjcmliZWQgaW4gdGhlIEFwcGVuZGl4IG9mIHRoZSBU TFMgMS4zDQogIFJGQy4gIEl0IGlzIHRoZXJlZm9yZSBSRUNPTU1FTkRFRCB0aGF0IFJFU1RDT05G IHNlcnZlcnMgZG8gbm90DQogIHN1cHBvcnQgMC1SVFQgYXQgYWxsIChub3QgZXZlbiBmb3IgaWRl bXBvdGVudCByZXF1ZXN0cykgdW50aWwgYW4NCiAgdXBkYXRlIHRvIHRoaXMgUkZDIGd1aWRlcyBv dGhlcndpc2UuDQoNCg0KPiAtIHNlY3Rpb24gMjogd291bGQgaXQgYmUgdXNlZnVsIHRvIGFkZCBh IHJlZmVyZW5jZSB0byBCQ1AxOTUNCj4gYW5kIHNheSB0aGF0IGFkaGVyaW5nIHRvIHRoYXQgaXMg YSBnb29kIGlkZWE/ICBJIHRoaW5rIHlvdQ0KPiBjb3VsZCBtYXliZSBhY3R1YWxseSBsb3NlIHNv bWUgKGJ1dCBub3QgYWxsKSBvZiB0aGUgdGV4dCBoZXJlDQo+IHZpYSB0aGF0IHNpbmdsZSByZWZl cmVuY2UuIChUaGF0IG1pZ2h0IGhlbHAgYSBiaXQgd2l0aA0KPiBBbGV4ZXkncyBkaXNjdXNzLCBu b3Qgc3VyZS4pDQoNCkN1cnJlbnRseSBzZWN0aW9uIDIgaGFzIHRoZSBzZW50ZW5jZTog4oCcQSBS RVNUQ09ORiBzZXJ2ZXIgTVVTVCANCnN1cHBvcnQgdGhlIFRMUyBwcm90b2NvbCBbUkZDNTI0Nl0u 4oCdICAgV291bGQgaXQgYmUgYWNjZXB0YWJsZQ0KdG8gYWRkIHRvIHRoYXQgc2VudGVuY2Ug4oCc LCBhbmQgU0hPVUxEIGFkaGVyZSB0byBCQ1AgMTk1LuKAnT8gDQoNCkFzIGZvciByZW1vdmluZyB0 ZXh0IGFmdGVyIHJlZmVyZW5jaW5nIEJDUCAxOTUsIEkgZG9u4oCZdCBzZWUgbXVjaA0Kb3Zlcmxh cC4gIEZvciBpbnN0YW5jZSwgQkNQIDE5NSBoYXMgYSB3aG9sZSBzZWN0aW9uIHRvIHJlY29tbWVu ZA0KVExTIDEuMiwgYnV0IGFscmVhZHkgUkVTVENPTkYgaXMgdXNpbmcgVExTIDEuMi4gIFBsZWFz ZSBsZXQgbWUgDQprbm93IGlmIHlvdSBoYWQgYW4gaWRlYSBmb3Igd2hpY2ggdGV4dCBjb3VsZCBi ZSByZW1vdmVkLg0KDQoNCg0KPiAtIDIuNTogIk1VU1QgdXNlIHRscy1jaWxlbnQtYXV0aCBvciBN VVNUIHVzZSBhbnkgSFRUUA0KPiBhdXRoZW50aWNhdGlvbiBzY2hlbWUiIGlzIChhcyBLYXRobGVl biBub3RlZCkgd2lzaHkgd2FzaHkuDQo+IEFuZCB0aGF0IGxlYXZlcyBvdXQgaHRtbC1mb3JtLWJh c2VkIGNsaWVudCBhdXRoIG1ldGhvZHMgdG9vIGl0DQo+IHNlZW1zLiBJIHRoaW5rIHlvdSBjb3Vs ZCB3b3JkIHRoaXMgYmV0dGVyLiAoTm90IHRoYXQgdGhhdCdzDQo+IGxpa2VseSB0byBhZmZlY3Qg dGhlIHJlYWxpdHkgdGhhdCBjbGllbnRzIGhlcmUgd2lsbCBqdXN0IHVzZQ0KPiB3ZWIgZW5naW5l cyBzbyB0aGVyZSdzIHByb2JhYmx5IG5vIHBvaW50IGluIGV4cGVjdGluZyB0aGF0DQo+IFJFU1RD T05GIGNhbiB1c2UgYW55dGhpbmcgb3V0IG9mIHRoZSBvcmRpbmFyeS4pIFRoZSBzYW1lDQo+IGNv bW1lbnQgYXBwbGllcyB0byBzZWN0aW9uIDEyIHdoZXJlIHRoZSBzYW1lIHdpc2h5LXdhc2h5DQo+ IHN0YXRlbWVudCBvY2N1cnMuDQoNCldlaXJkLCBJIHNlYXJjaGVkIG15IG1haWwgYW5kIEkgY2Fu 4oCZdCBmaW5kIEthdGhsZWVuIGNhbGxpbmcgDQpvdXQgdGhhdCDigJx3aXNoeSB3YXNoeeKAnSBz ZW50ZW5jZS4gIFJlZ2FyZGxlc3MsIEkgbG9va2VkIGF0IGl0DQphZ2FpbiBhbmQgZG9u4oCZdCBz ZWUgaG93IHRvIHdvcmQgaXQgYmV0dGVyLiAgRldJVywgdGhlIGN1cnJlbnQNCndvcmRpbmcgaXMg dGhlIHJlc3VsdCBvZiBXRyB3b3Jkc21pdGhpbmc7IHRoZSBzZW50ZW5jZSB1c2UNCnRvIGhhdmUg TUFZIGluc3RlYWQgb2YgTVVTVCwgYnV0IGZvbGtzIGZlbHQgdGhhdCBpdCB3YXNu4oCZdA0KYWNj dXJhdGUgZW5vdWdoLiAgRG8geW91IGhhdmUgYSBzdWdnZXN0aW9uIGZvciB3b3JkaW5nIGl0IGJl dHRlcj8NCg0KQXMgZm9yIGxlYXZpbmcgb3V0IGh0bWwtZm9ybSBiYXNlZCBhdXRoLCB0aGlzIGlz IGZpbmUsIFJFU1RDT05GDQpkb2VzbuKAmXQgc3VwcG9ydCBmb3Jtcy4NCg0KDQpUaGFua3MsDQpL ZW50DQoNCg0K From nobody Fri Oct 14 03:42:20 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2406E129486; Fri, 14 Oct 2016 03:42:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.297 X-Spam-Level: X-Spam-Status: No, score=-7.297 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vWz55tmf6oV6; Fri, 14 Oct 2016 03:42:12 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E0DD12940A; Fri, 14 Oct 2016 03:42:12 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id B187BBE38; Fri, 14 Oct 2016 11:42:10 +0100 (IST) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e5XKxnZb0ZB6; Fri, 14 Oct 2016 11:42:10 +0100 (IST) Received: from [134.226.36.93] (bilbo.dsg.cs.tcd.ie [134.226.36.93]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 1F85EBE32; Fri, 14 Oct 2016 11:42:10 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1476441730; bh=ZrcwWYAnfn2CsG2sHyY55hYNgPvdvCUAOTZKziWY5TY=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=AbMqTbTwMXoOwcSGyWDMn6iG42lgAt/AZ+pC98tXjKkDL4hzm60p8H4YgQpDRXlRq vN4013PbvWh4HZn4xws4zWemFc6dDl929aEyFpAEy3YPzip0Lrk/GnDNFLYsxsQe5i A2TyqbJgk1hoChq8Ru8KS9AsR3FSIea3PgY6uvLQ= To: Kent Watsen , The IESG References: <147631879723.6373.4811934777234946594.idtracker@ietfa.amsl.com> <9C1A4E60-85EE-4BFF-9697-189B59B0EAB6@juniper.net> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <033b5ee8-1286-74d2-e148-33e90a332cc4@cs.tcd.ie> Date: Fri, 14 Oct 2016 11:42:09 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <9C1A4E60-85EE-4BFF-9697-189B59B0EAB6@juniper.net> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030004050308020504060309" Archived-At: Cc: "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Stephen Farrell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Oct 2016 10:42:14 -0000 This is a cryptographically signed message in MIME format. --------------ms030004050308020504060309 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Kent, On 13/10/16 20:48, Kent Watsen wrote: > Hi Stephen, >=20 > Just picking out your comments that affect my sections: >=20 >=20 >=20 >> - What about tls1.3 0RTT/replayable-data? There may be a case >> to be made to mention this here and e.g. to say that only >> idempotent requests (or none) are allowed use 0RTT early data. >> Equally you could argue to not say anything since tls1.3 isn't >> yet finished. I'd argue that saying something here is better >> (and that saying to not use 0RTT at all is best) since >> RESTCONF will use standard https libraries, which will at some >> point soon support 0RTT and that might even make that happen >> more easily than they ought.=20 >=20 > How about this in the Security Considerations section? >=20 > Section 2.1 states =E2=80=9CA RESTCONF server MUST support the TLS > protocol [RFC5246]=E2=80=9D. This language leaves open the possibili= ty > that a RESTCONF server might also support future versions of the > TLS protocol. Of specific concern, TLS 1.3 [draft-ietf-tls-tls13] > introduces support for 0-RTT handshakes that can lead to security > issues for REST APIs, as described in the Appendix of the TLS 1.3 > RFC. It is therefore RECOMMENDED that RESTCONF servers do not > support 0-RTT at all (not even for idempotent requests) until an > update to this RFC guides otherwise. >=20 I like that. >=20 >> - section 2: would it be useful to add a reference to BCP195 >> and say that adhering to that is a good idea? I think you >> could maybe actually lose some (but not all) of the text here >> via that single reference. (That might help a bit with >> Alexey's discuss, not sure.) >=20 > Currently section 2 has the sentence: =E2=80=9CA RESTCONF server MUST=20 > support the TLS protocol [RFC5246].=E2=80=9D Would it be acceptable > to add to that sentence =E2=80=9C, and SHOULD adhere to BCP 195.=E2=80=9D= ?=20 Again, that's an improvement I think. >=20 > As for removing text after referencing BCP 195, I don=E2=80=99t see muc= h > overlap. For instance, BCP 195 has a whole section to recommend > TLS 1.2, but already RESTCONF is using TLS 1.2. Please let me=20 > know if you had an idea for which text could be removed. Haven't had time to do that sorry and won't have today so you're probably right to not delete anything at this point. >=20 >=20 >=20 >> - 2.5: "MUST use tls-cilent-auth or MUST use any HTTP >> authentication scheme" is (as Kathleen noted) wishy washy. >> And that leaves out html-form-based client auth methods too it >> seems. I think you could word this better. (Not that that's >> likely to affect the reality that clients here will just use >> web engines so there's probably no point in expecting that >> RESTCONF can use anything out of the ordinary.) The same >> comment applies to section 12 where the same wishy-washy >> statement occurs. >=20 > Weird, I searched my mail and I can=E2=80=99t find Kathleen calling=20 > out that =E2=80=9Cwishy washy=E2=80=9D sentence. =20 I meant Kathleen's ballot comment [1] She didn't say "wishy washy" though:-) [1] https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ballot/#kath= leen-moriarty > Regardless, I looked at it > again and don=E2=80=99t see how to word it better. FWIW, the current > wording is the result of WG wordsmithing; the sentence use > to have MAY instead of MUST, but folks felt that it wasn=E2=80=99t > accurate enough. Do you have a suggestion for wording it better? So the current (-17) text is: To authenticate a client, a RESTCONF server MUST use TLS based client certificates (Section 7.4.6 of [RFC5246]), or MUST use any HTTP authentication scheme defined in the HTTP Authentication Scheme Registry (Section 5.1 in [RFC7235]). The construct "MUST use or MUST use " is what I meant by wishy washy since that really means "use or " doesn't it? If it was acceptable then I'd go for: To authenticate a client, a RESTCONF server SHOULD require TLS client authentication (Section 7.4.6 of [RFC5246]). If TLS client authentication is not feasible (e.g. because one cannot build the required PKI for clients) then HTTP authentication can be used. In the latter case one of the HTTP authentication scheme defined in the HTTP Authentication Scheme Registry (Section 5.1 in [RFC7235]) MUST be used. >=20 > As for leaving out html-form based auth, this is fine, RESTCONF > doesn=E2=80=99t support forms. Ack. Thanks, S. >=20 >=20 > Thanks, > Kent >=20 >=20 --------------ms030004050308020504060309 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjEwMTQx MDQyMDlaMC8GCSqGSIb3DQEJBDEiBCCSbiliosWiVFQVOIYm/Ed18VKv+c3J3CiqYvJmYYk8 lDBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQAaG4W+6dI4DDD8nGiqy63HjrVz9w9Q6rZ1fCVx7qinV+bEx2kdToUr Pu7bS1uU0VCU71VZ6cxdVYDziYKH3384Ix0wZtgJcl/08oG4rXz+ButTj5XatkRWvpmxycdJ AN4GJjxXIHDxk5hrvnnTnKI/r6EsG9TxzNwKq5BJK5sKnmNI9Bcpa0xKEWZeqB07BKyNcYUk k00E75hKrp8o/jaTaWA47aGBkEJbLL6whDeQPi4V2N/tD+V2rhSGlPYR037c4Iv8b7kE0wF7 bdGhUOUQZnlFxEM+wWDH7vcbudXXvX9U/v/xGGj9ahjn0nXgZa9lLcgKLQJxwpY6Mbnkeu93 AAAAAAAA --------------ms030004050308020504060309-- From nobody Fri Oct 14 11:31:04 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 586571295D5; Fri, 14 Oct 2016 11:30:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.922 X-Spam-Level: X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jfBpUB_N0ZnV; Fri, 14 Oct 2016 11:30:54 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0102.outbound.protection.outlook.com [104.47.37.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14A461293E0; Fri, 14 Oct 2016 11:30:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=5ed3yf/M3REs/KPMvMGwp3xp2MD1WwMMvArLrLtqvKM=; b=jqly88FWOfyuq+tGiG3groD9WhJcwc7tsnkKZ1vL0GOVkhliIkbz9AIG7xZVtUWcDgHo1gPDSaHVu9y+9BoH9ICvchcvGlsy7ESEIC3sdbVGVHxKwNIapzFeXq7OLJu4+vR+sYPLMr+zwnZ9w3wclZNllEma3Ozb7uZqEWwL7+A= Received: from DM2PR0501MB1455.namprd05.prod.outlook.com (10.161.224.152) by DM2PR0501MB1456.namprd05.prod.outlook.com (10.161.224.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.679.5; Fri, 14 Oct 2016 18:30:52 +0000 Received: from DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) by DM2PR0501MB1455.namprd05.prod.outlook.com ([10.161.224.152]) with mapi id 15.01.0649.027; Fri, 14 Oct 2016 18:30:52 +0000 From: Kent Watsen To: Stephen Farrell , The IESG Thread-Topic: Stephen Farrell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) Thread-Index: AQHSJOlmKLRBeqxHykiJ9QgTqKgs3aCmiJAAgAE814CAAD/mgA== Date: Fri, 14 Oct 2016 18:30:52 +0000 Message-ID: <87D96CEC-79D9-42F4-B5A6-E1A26F50FC90@juniper.net> References: <147631879723.6373.4811934777234946594.idtracker@ietfa.amsl.com> <9C1A4E60-85EE-4BFF-9697-189B59B0EAB6@juniper.net> <033b5ee8-1286-74d2-e148-33e90a332cc4@cs.tcd.ie> In-Reply-To: <033b5ee8-1286-74d2-e148-33e90a332cc4@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.14] x-ms-office365-filtering-correlation-id: 5a44fe7d-1e17-4c9a-26c0-08d3f4603ab3 x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1456; 7:AkGwZwAOkRqoEbla6Mskg82t6p1e6T7wmhCM/RaxTGM0FWs4vYut/fBMcYZ0G0OE5oSaH3jFd+E+pHgHQqCTP7tRgGwJRnnmXwzqJJtyNnoGEl9HAv2dUtMYLiuhUOTQ21vkMpo+S52iAiNdyQGSpZ/+2Kw8yGPtaMjbYkeEF5W9cUJFPfi5Wswed4oUULuaMGI3WIIf4RJyjGjLSYA95A4Oid+znPmgFsnppfFCEMUEjl1MB0tHcclF4lMf9cD5jV5IOxLwiHcV/jMvuR9p/BBFcyjnSIBYAF/lyssBFhN9oZ7X4ilXj016hnie694Rz41FHH3xToS9IgZfcCdtAtop7PTSFb55tHtp9OMzUzQ= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1456; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:DM2PR0501MB1456; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1456; x-forefront-prvs: 0095BCF226 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(76104003)(189002)(199003)(68736007)(83716003)(2950100002)(66066001)(230783001)(5001770100001)(97736004)(86362001)(4001350100001)(122556002)(106116001)(106356001)(76176999)(54356999)(50986999)(189998001)(101416001)(3660700001)(10400500002)(105586002)(99286002)(3280700002)(5002640100001)(82746002)(83506001)(33656002)(102836003)(6116002)(3846002)(586003)(4326007)(11100500001)(92566002)(5660300001)(87936001)(8676002)(2906002)(7736002)(2900100001)(7846002)(305945005)(81156014)(36756003)(77096005)(81166006)(8936002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1456; H:DM2PR0501MB1455.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <89F9738A5127634CB46A6285AF964632@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2016 18:30:52.6437 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1456 Archived-At: Cc: "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Stephen Farrell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Oct 2016 18:30:56 -0000 SGkgU3RlcGhlbiwNCg0KU2tpcHBpbmcgc3RyYWlnaHQgdG8gdGhlIG9wZW4gcG9pbnRzOg0KDQoN Cg0KPiBJIG1lYW50IEthdGhsZWVuJ3MgYmFsbG90IGNvbW1lbnQgWzFdDQo+DQo+IFNoZSBkaWRu J3Qgc2F5ICJ3aXNoeSB3YXNoeSIgdGhvdWdoOi0pDQoNCkkgc2VlLCB0aGlzIGlzIHdoZXJlIHNo ZSBhbmQgSSBzZXR0bGVkIG9uIHRoaXMgdGV4dDoNCg0KICAgQ2xpZW50DQogICBhdXRoZW50aWNh dGlvbiBNVVNUIGJlIGltcGxlbWVudGVkIHVzaW5nIGNsaWVudCBjZXJ0aWZpY2F0ZXMgb3IgTVVT VA0KICAgYmUgaW1wbGVtZW50ZWQgdXNpbmcgYW4gSFRUUCBhdXRoZW50aWNhdGlvbiBzY2hlbWUu ICBUaGUgc3RyZW5ndGggb2YNCiAgIHRoZXNlIG1ldGhvZHMgdmFyeSBncmVhdGx5LiAgRm9yIGV4 YW1wbGUsIHVzZSBvZiBhIGNsaWVudCBjZXJ0aWZpY2F0ZQ0KICAgaXMgUkVDT01NRU5ERUQsIHdo aWxlIEhUVFAgQmFzaWMgYXV0aGVudGljYXRpb24gW1JGQzc2MTddIGlzDQogICBOT1QgUkVDT01N RU5ERUQuDQoNCg0KDQo+IElmIGl0IHdhcyBhY2NlcHRhYmxlIHRoZW4gSSdkIGdvIGZvcjoNCj4N Cj4gICBUbyBhdXRoZW50aWNhdGUgYSBjbGllbnQsIGEgUkVTVENPTkYgc2VydmVyIFNIT1VMRCBy ZXF1aXJlIFRMUw0KPiAgIGNsaWVudCBhdXRoZW50aWNhdGlvbiAoU2VjdGlvbiA3LjQuNiBvZiBb UkZDNTI0Nl0pLg0KPg0KPiAgIElmIFRMUyBjbGllbnQgYXV0aGVudGljYXRpb24gaXMgbm90IGZl YXNpYmxlIChlLmcuIGJlY2F1c2UNCj4gICBvbmUgY2Fubm90IGJ1aWxkIHRoZSByZXF1aXJlZCBQ S0kgZm9yIGNsaWVudHMpIHRoZW4gSFRUUA0KPiAgIGF1dGhlbnRpY2F0aW9uIGNhbiBiZSB1c2Vk LiBJbiB0aGUgbGF0dGVyIGNhc2Ugb25lIG9mIHRoZSBIVFRQDQo+ICAgYXV0aGVudGljYXRpb24g c2NoZW1lIGRlZmluZWQgaW4gdGhlIEhUVFAgQXV0aGVudGljYXRpb24gU2NoZW1lDQo+ICAgUmVn aXN0cnkgKFNlY3Rpb24gNS4xIGluIFtSRkM3MjM1XSkgTVVTVCBiZSB1c2VkLg0KDQpUbyBiZSBo b25lc3QsIEkgdGhpbmsgeW91ciB0ZXh0IHN0YXRlcyB0aGUgcmVjb21tZW5kYXRpb24gbW9yZSBj bGVhcmx5LiAgSSB0aGluayB3ZSBzaG91bGQgdXNlIHlvdXIgdGV4dCBmb3IgdGhpcyBzZWN0aW9u IGluIHRoZSBkcmFmdCwgYW5kIHRoZW4gYWRkIHRvIHRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9u cyBzZWN0aW9uIHNvbWV0aGluZyBsaWtlIHRoZSBmb2xsb3dpbmcgdG8gY2FwdHVyZSBLYXRobGVl buKAmXMgY29tbWVudDoNCg0KICBTZWN0aW9uIDIuNSByZWNvbW1lbmRzIFRMUyBjbGllbnQgY2Vy dGlmaWNhdGUgYmFzZWQgYXV0aGVudGljYXRpb24sDQogIGJ1dCBhbGxvd3MgdGhlIHVzZSBvZiBh bnkgYXV0aGVudGljYXRpb24gc2NoZW1lIGRlZmluZWQgaW4gdGhlIEhUVFANCiAgQXV0aGVudGlj YXRpb24gU2NoZW1lIFJlZ2lzdHJ5LiAgSW1wbGVtZW50YXRpb25zIG5lZWQgdG8gYmUgYXdhcmUN CiAgdGhhdCB0aGUgc3RyZW5ndGggb2YgdGhlc2UgbWV0aG9kcyB2YXJ5IGdyZWF0bHksIGFuZCB0 aGF0IHNvbWUgbWF5IGJlDQogIGNvbnNpZGVyZWQgZXhwZXJpbWVudGFsLiAgU2VsZWN0aW9uIG9m IGFueSBvZiB0aGVzZSBzY2hlbWVzIFNIT1VMRA0KICBiZSBwZXJmb3JtZWQgYWZ0ZXIgcmVhZGlu ZyB0aGUgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbiBvZiANCiAgdGhlIFJGQyBhc3Nv Y2lhdGVkIHdpdGggdGhlIHNjaGVtZeKAmXMgcmVnaXN0cnkgZW50cnkuDQoNCldoYXQgZG8geW91 IHRoaW5rPw0KDQoNCkFjdHVhbGx5LCBJ4oCZZCBsaWtlIHRvIG1vZGlmeSB5b3VyIHRleHQgYWJv dmUganVzdCBhIGxpdHRsZSB0bzoNCg0KICAgVG8gYXV0aGVudGljYXRlIGEgY2xpZW50LCBhIFJF U1RDT05GIHNlcnZlciBTSE9VTEQgcmVxdWlyZSBUTFMNCiAgIGNsaWVudCBjZXJ0aWZpY2F0ZSBi YXNlZCBhdXRoZW50aWNhdGlvbiAoU2VjdGlvbiA3LjQuNiBvZiBbUkZDNTI0Nl0pLg0KICAgSWYg Y2VydGlmaWNhdGUgYmFzZWQgYXV0aGVudGljYXRpb24gaXMgbm90IGZlYXNpYmxlIChlLmcuIGJl Y2F1c2UNCiAgIG9uZSBjYW5ub3QgYnVpbGQgdGhlIHJlcXVpcmVkIFBLSSBmb3IgY2xpZW50cykg dGhlbiBhbiBIVFRQDQogICBhdXRoZW50aWNhdGlvbiBNQVkgYmUgdXNlZC4gSW4gdGhlIGxhdHRl ciBjYXNlIG9uZSBvZiB0aGUgSFRUUA0KICAgYXV0aGVudGljYXRpb24gc2NoZW1lcyBkZWZpbmVk IGluIHRoZSBIVFRQIEF1dGhlbnRpY2F0aW9uIFNjaGVtZQ0KICAgUmVnaXN0cnkgKFNlY3Rpb24g NS4xIGluIFtSRkM3MjM1XSkgTVVTVCBiZSB1c2VkLg0KDQpPa2F5Pw0KDQoNClRoYW5rcywNCktl bnQNCg0KDQoNCg0K From nobody Fri Oct 14 12:52:11 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C884012952D; Fri, 14 Oct 2016 12:52:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.297 X-Spam-Level: X-Spam-Status: No, score=-7.297 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-2.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E9QhvIGsxNVy; Fri, 14 Oct 2016 12:52:01 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74084129591; Fri, 14 Oct 2016 12:51:57 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 606B6BE38; Fri, 14 Oct 2016 20:51:55 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hHDEY73tSEvN; Fri, 14 Oct 2016 20:51:54 +0100 (IST) Received: from [10.87.48.210] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 832D9BE32; Fri, 14 Oct 2016 20:51:53 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1476474714; bh=SW2CTCrYZ5ZvWOWA8dSdoh9uFK6PjzAOAwWFEf95ojQ=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=er2iQwu2D/J6JaHWxz5ZvrZkq8We+QOZHT/cU4gWuJfarCpRSum20Iiy1QhBp7LGu jlBk0kkmSy6nIg4NU9S461/T+S234QQ2GswVctbf8CzsSYlU2GVcIQpEMxaalw3JKT wLIMjF5/qPHqf2S/QxGCcTWEGiPFnKa7E6g+fd6I= To: Kent Watsen , The IESG References: <147631879723.6373.4811934777234946594.idtracker@ietfa.amsl.com> <9C1A4E60-85EE-4BFF-9697-189B59B0EAB6@juniper.net> <033b5ee8-1286-74d2-e148-33e90a332cc4@cs.tcd.ie> <87D96CEC-79D9-42F4-B5A6-E1A26F50FC90@juniper.net> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: Date: Fri, 14 Oct 2016 20:51:53 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <87D96CEC-79D9-42F4-B5A6-E1A26F50FC90@juniper.net> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms000807070803000401000509" Archived-At: Cc: "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Stephen Farrell's No Objection on draft-ietf-netconf-restconf-17: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Oct 2016 19:52:04 -0000 This is a cryptographically signed message in MIME format. --------------ms000807070803000401000509 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Kent, That all works for me, Cheers, S. On 14/10/16 19:30, Kent Watsen wrote: > Hi Stephen, >=20 > Skipping straight to the open points: >=20 >=20 >=20 >> I meant Kathleen's ballot comment [1] >> >> She didn't say "wishy washy" though:-) >=20 > I see, this is where she and I settled on this text: >=20 > Client > authentication MUST be implemented using client certificates or MUST= > be implemented using an HTTP authentication scheme. The strength of= > these methods vary greatly. For example, use of a client certificat= e > is RECOMMENDED, while HTTP Basic authentication [RFC7617] is > NOT RECOMMENDED. >=20 >=20 >=20 >> If it was acceptable then I'd go for: >> >> To authenticate a client, a RESTCONF server SHOULD require TLS >> client authentication (Section 7.4.6 of [RFC5246]). >> >> If TLS client authentication is not feasible (e.g. because >> one cannot build the required PKI for clients) then HTTP >> authentication can be used. In the latter case one of the HTTP >> authentication scheme defined in the HTTP Authentication Scheme >> Registry (Section 5.1 in [RFC7235]) MUST be used. >=20 > To be honest, I think your text states the recommendation more clearly.= I think we should use your text for this section in the draft, and then= add to the Security Considerations section something like the following = to capture Kathleen=E2=80=99s comment: >=20 > Section 2.5 recommends TLS client certificate based authentication, > but allows the use of any authentication scheme defined in the HTTP > Authentication Scheme Registry. Implementations need to be aware > that the strength of these methods vary greatly, and that some may be= > considered experimental. Selection of any of these schemes SHOULD > be performed after reading the Security Considerations section of=20 > the RFC associated with the scheme=E2=80=99s registry entry. >=20 > What do you think? >=20 >=20 > Actually, I=E2=80=99d like to modify your text above just a little to: >=20 > To authenticate a client, a RESTCONF server SHOULD require TLS > client certificate based authentication (Section 7.4.6 of [RFC5246])= =2E > If certificate based authentication is not feasible (e.g. because > one cannot build the required PKI for clients) then an HTTP > authentication MAY be used. In the latter case one of the HTTP > authentication schemes defined in the HTTP Authentication Scheme > Registry (Section 5.1 in [RFC7235]) MUST be used. >=20 > Okay? >=20 >=20 > Thanks, > Kent >=20 >=20 >=20 >=20 --------------ms000807070803000401000509 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjEwMTQx OTUxNTNaMC8GCSqGSIb3DQEJBDEiBCAftXFOIEYHjKKCF9FSvDifNy/iURWrym2YVxZnoYbm WzBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQCEPjHJO1MA6z7Q1YADtcbSwv44pvoIaCQ/UOINJ1hmSY1GI/WgR6wE BUqK7ZvwPbxeTORANOj0ARRqsSAutJA01vDk55kbmKFFnzLW9yvZPjiXDrTY6AnLKPHF+ExD LxN85Pjg0ZpWRqg/XozIo9k7+/VOg2C4KxD0ZsUJJYoMBf+L5D0c8FHrl9cxISkcPSekx1Lb +r/gapTmK9v3S1+DKLIA6nYwpXqEjGmkn1aSy2uB7mSuJgZajdMEsgupkI+bkUvcm1XUjBtK b9mynd+eCDXmi5BykCG7SURg6WYtiPkN/A83Mm+V+s/FZXrMtVzn/R2eIFbyEhgEtK+9xEu8 AAAAAAAA --------------ms000807070803000401000509-- From nobody Sat Oct 15 15:08:34 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1E7612941C; Sat, 15 Oct 2016 15:08:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.821 X-Spam-Level: X-Spam-Status: No, score=-0.821 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=chIShTmR; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=c3yoqDI8 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OlNxUD06cIW3; Sat, 15 Oct 2016 15:08:31 -0700 (PDT) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9941127071; Sat, 15 Oct 2016 15:08:31 -0700 (PDT) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 1B88B20524; Sat, 15 Oct 2016 18:08:31 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute6.internal (MEProxy); Sat, 15 Oct 2016 18:08:31 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=LuHC1FLkNDQYuwiG5FrOrTXo1FM=; b=chIShT mRPsIrdHXgtGaItR4y/D6NhLX8MTCVqj58IKP4QD3UR7jQZj8AomC2O3GEnQogw9 vqShamitIM5eUGn7v9HzAXTPgs9Po5qGxe26Lm2c3weYaz21QsHyX5C2Cdffc0f2 ZqwDmDOAzn9BgRWg9XtREOgzWRnlwicXfmxgI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=LuHC1FLkNDQYuwi G5FrOrTXo1FM=; b=c3yoqDI8uJb7xHyBDTWIeNXEtRWLL0GDuftw9bJ09QOB4nu 33TrR2jG+/qbev4OkdBKXR/F2PcfTwA9RxoCLteKPFKLOxu+FgsWR4eZD5ifK1Hi 0h5Jhn+TTs7wim5D61SXMj/msmXyyGkrcDmRwXMKD4LAEtSgU+Jn99HA/lGk= X-Sasl-enc: JpqO9sbSUdCD80yYZl1AAJkZKBij0zQDm1YkZVOV85VB 1476569310 Received: from [192.168.0.6] (cpc5-nmal20-2-0-cust24.19-2.cable.virginm.net [92.234.84.25]) by mail.messagingengine.com (Postfix) with ESMTPA id ADD4EF29D1; Sat, 15 Oct 2016 18:08:30 -0400 (EDT) Content-Type: text/plain; charset=windows-1251 Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPad Mail (13G36) In-Reply-To: <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> Date: Sat, 15 Oct 2016 23:22:31 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> To: Kent Watsen Archived-At: Cc: "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , The IESG , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Oct 2016 22:08:33 -0000 Hi Kent, > On 13 Oct 2016, at 17:00, Kent Watsen wrote: >=20 > Hi Alexey, >=20 >> It is a shame that RFC 2818 was not updated to use RFC 6125. However >> this is not your problem. >=20 > FWIW, RESTCONF actually references RFC 7230, which references RFC 2818, bu= t your point is still valid. Exactly, it affects all protocols using HTTPS. >=20 >> So basically you have 2 choices: you either reference RFC 2818 (and >> don't reference RFC 6125 at all) or you add more information about how >> to use RFC 6125. >=20 > Regarding choice #1: Scanning the RESTCONF draft, the only reference to RFC= 6125 is happening in this section (Section 2.4), so switching to RFC 2818 w= ould be fairly easy. Presumably this section would be rewritten to point to= RFC 2818, Section 3.1 instead. Yes (I didn't check the section). > Regarding choice #2: would adding to the beginning of this section (Sectio= n 2.4) something like the following be okay? =93RESTCONF servers using DevI= D certificates MUST configure their certificates according to IEEE-802.1AR-2= 009, otherwise RESTCONF servers SHOULD configure their certificates accordin= g to the guidelines in Section 3 of RFC 6125.=94 This, plus you still need to say which of CN-ID, DNS-ID, SRV-ID and/or URI-I= D are to be used and whether wildcards are allowed in CN-IDs and DNS-IDs (if= used). From nobody Mon Oct 17 01:25:49 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B8BF1295C2; Mon, 17 Oct 2016 01:25:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.732 X-Spam-Level: X-Spam-Status: No, score=-4.732 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZlYmGoHoQyCl; Mon, 17 Oct 2016 01:25:46 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60C9E12959F; Mon, 17 Oct 2016 01:25:46 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id EACBCBDCC; Mon, 17 Oct 2016 09:25:43 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5XxcNqhrSv0F; Mon, 17 Oct 2016 09:25:41 +0100 (IST) Received: from [10.87.48.210] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 14601BE2F; Mon, 17 Oct 2016 09:25:35 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1476692735; bh=ighw0O312rtDw/BBtJuFYAcc12XNZW1UHg98GcreujE=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=okIiwuHx0NWalNOi5XQueDBZAVhVLCdv7/d+lKxoiyz2PQqY5Zy9pM/oRben3NB6S YcJPzNCt5hrCN0is7wc8tq0b/zMUawTCJ+mk0qkOuiJV9D14izGCq/6MRH8AvJib1S CJRbImY4lHHIX6fEDtLtXozdyJxeuPaOdYifhvVA= To: Kent Watsen , Alexey Melnikov , The IESG References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> Date: Mon, 17 Oct 2016 09:25:35 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms060404080206040907020609" Archived-At: Cc: "draft-ietf-netconf-restconf@ietf.org" , "netconf@ietf.org" , "netconf-chairs@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 08:25:48 -0000 This is a cryptographically signed message in MIME format. --------------ms060404080206040907020609 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Alexey, Kent was asking me about this offlist, and I'm also a bit puzzled now... On 13/10/16 17:00, Kent Watsen wrote: >> So basically you have 2 choices: you either reference RFC 2818 >> (and don't reference RFC 6125 at all) or you add more information >> about how to use RFC 6125. Isn't that a false dichotomy? At least if by "add more" you mean, "you must add all of things"? But see below... >=20 > Regarding choice #1: Scanning the RESTCONF draft, the only reference > to RFC 6125 is happening in this section (Section 2.4), so switching > to RFC 2818 would be fairly easy. Presumably this section would be > rewritten to point to RFC 2818, Section 3.1 instead. >=20 > Regarding choice #2: would adding to the beginning of this section > (Section 2.4) something like the following be okay? =E2=80=9CRESTCONF > servers using DevID certificates MUST configure their certificates > according to IEEE-802.1AR-2009, otherwise RESTCONF servers SHOULD > configure their certificates according to the guidelines in Section 3 > of RFC 6125.=E2=80=9D Actually, I'd have thought that 6125, appendix B would help here - why wouldn't the same as is used for netconf [1] work here? If that works, I'd just refer to that and we should be fine. (And it'd be nice if we get the benefit that the same server cert can work for both too I guess.) Cheers, S. [1] https://tools.ietf.org/html/rfc6125#appendix-B.7 >=20 >=20 > Kent >=20 >=20 >=20 >=20 >=20 >=20 --------------ms060404080206040907020609 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjEwMTcw ODI1MzVaMC8GCSqGSIb3DQEJBDEiBCAUkDqiLa1oaZ9tbTijHZPn+CpqlR8yKTwSyHlgTXY9 UzBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQCwCo6Jv1vGTtnWiUHuDWnvSaQDCBty7K6ZQVCeFdB2mTn3WHtuwTta f+rdhl+oQCXF0RmBAf0yFgGk1SAXY8rMpxaS/JbT8VOLUYn4Z4N8kzWjrFTTaRUOJEY0P+Bk 0hVmu5xz8BYVetvTDwomnBFaRVi7tw+kzQYCduUP0+2grMYRh2iB0cwlt+CVQDOU6irVRwEM e4ewYEv3ibZBbIfiSQaNN4sf/0zLCs6u3inMCN9uJ6zxoveARb9ZtlTjmT3zG3fnl9VnwXb/ c1cTG39JOI/Ox7bEHqobmgmGTSlXf90Vf2jo6Z9w2HgBQrcZRMxtcHMBUc2TH82gvajRez7t AAAAAAAA --------------ms060404080206040907020609-- From nobody Mon Oct 17 01:58:25 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 246611295C2; Mon, 17 Oct 2016 01:58:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=aUnFcvQ+; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=Ybf/Cz8T Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0SjS5_8oI7t7; Mon, 17 Oct 2016 01:58:15 -0700 (PDT) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5E091294AA; Mon, 17 Oct 2016 01:58:15 -0700 (PDT) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id D617A20593; Mon, 17 Oct 2016 04:58:10 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute6.internal (MEProxy); Mon, 17 Oct 2016 04:58:10 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=h26rAK+EOo2hmnElMVZMjTCJpow=; b=aUnFcv Q+92C2yT/1lDVZ52sDRCTGdsatC+cZZ3nU4aPF3EHhn86J9A56IxnHeasLh3yW8/ XkYRi4mbuiP8+J2ZXN2jWTZMsP8fIFHA9J3ikyIBtLv+y+QarinYW1eBhTyn9qLj Lfd16kDYcJyuWK3xNO7sOt2jb+RI7dZ8lDT1M= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=h26rAK+EOo2hmnE lMVZMjTCJpow=; b=Ybf/Cz8TL5sgEeN8JeOPA4LyXzZ6gqdLj/+8vakNIsSrPFt I1SARTkxLcUhZSSH+7QktYX/X8FkSMPfgZf+04TvLUmsz2k/MJdMcRNwjIeQtdJ9 rNOPC0S51+EtXQaOJ0UfM/1koyKCoaOlBGqQvaWLw/6HZ4K/GX8QLzIWP3FM= X-Sasl-enc: i3VGSGR6IBzI7/WqFemz7Azigv/JrYV154F4nhm0ul7w 1476694690 Received: from [10.215.235.141] (unknown [185.69.145.86]) by mail.messagingengine.com (Postfix) with ESMTPA id 143AFF29CF; Mon, 17 Oct 2016 04:58:10 -0400 (EDT) Content-Type: text/plain; charset=windows-1251 Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPhone Mail (13G35) In-Reply-To: <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> Date: Mon, 17 Oct 2016 10:02:17 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> To: Stephen Farrell Archived-At: Cc: "netconf-chairs@ietf.org" , The IESG , "draft-ietf-netconf-restconf@ietf.org" , "netconf@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 08:58:17 -0000 Hi Stephen, > On 17 Oct 2016, at 09:25, Stephen Farrell wrot= e: >=20 >=20 > Hi Alexey, >=20 > Kent was asking me about this offlist, and I'm also a bit > puzzled now... >=20 > On 13/10/16 17:00, Kent Watsen wrote: >>> So basically you have 2 choices: you either reference RFC 2818 >>> (and don't reference RFC 6125 at all) or you add more information >>> about how to use RFC 6125. >=20 > Isn't that a false dichotomy? At least if by "add more" > you mean, "you must add all of things"? No. Just saying "Use RFC 6125" is incorrect, because it provides a template,= not a fully specified set of rules. So any document referencing it need to p= rescribe which identity types are used (CN-ID, DNS-ID, etc) and whether wild= cards are allowed in any of them. I didn't imply that a spec needs to support all identity types. Most likely N= ETCONF should support DNS-ID. Possibly CN-ID. SRV-ID is only used if somethi= ng like DNS SRV is used for server discovery. > But see > below... >=20 >>=20 >> Regarding choice #1: Scanning the RESTCONF draft, the only reference >> to RFC 6125 is happening in this section (Section 2.4), so switching >> to RFC 2818 would be fairly easy. Presumably this section would be >> rewritten to point to RFC 2818, Section 3.1 instead. >>=20 >> Regarding choice #2: would adding to the beginning of this section >> (Section 2.4) something like the following be okay? =93RESTCONF >> servers using DevID certificates MUST configure their certificates >> according to IEEE-802.1AR-2009, otherwise RESTCONF servers SHOULD >> configure their certificates according to the guidelines in Section 3 >> of RFC 6125.=94 >=20 > Actually, I'd have thought that 6125, appendix B would help > here - why wouldn't the same as is used for netconf [1] > work here? If that works, I'd just refer to that and we > should be fine. (And it'd be nice if we get the benefit > that the same server cert can work for both too I guess.) >=20 > Cheers, > S. >=20 > [1] https://tools.ietf.org/html/rfc6125#appendix-B.7 >=20 >=20 >>=20 >>=20 >> Kent >=20 From nobody Mon Oct 17 02:06:00 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC8F4129503; Mon, 17 Oct 2016 02:05:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.732 X-Spam-Level: X-Spam-Status: No, score=-4.732 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k2bCMz7IjwRp; Mon, 17 Oct 2016 02:05:53 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CF741294AA; Mon, 17 Oct 2016 02:05:53 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 93403BDF9; Mon, 17 Oct 2016 10:05:51 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DyIgvfNK4BIa; Mon, 17 Oct 2016 10:05:50 +0100 (IST) Received: from [10.87.48.210] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 88CE7BDCC; Mon, 17 Oct 2016 10:05:49 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1476695150; bh=ovQdlSgNU0uQSRQr1edrNxOulTkcpyz3BWGUoGH8tcs=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=E01LdesVkUuGjFpOMKES+QCHbQ8ZLG09nY/pwnZkiylMMDkMbYkFEPDPYUolp2Iuo wSUfuuoUvLbvGJKdIS75yLSUUavtZwkUKY4Hmemzb+ilQazeOFgKXbpGRktWPeL3ix CJPhXjjv0gcALnKj0zGwWy0zNB7SM9GF8Na6+HfI= To: Alexey Melnikov References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <16fb7842-8e1a-bfae-b16e-ad4352f61566@cs.tcd.ie> Date: Mon, 17 Oct 2016 10:05:49 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms070807050000080109010105" Archived-At: Cc: "netconf-chairs@ietf.org" , "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , The IESG Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 09:05:54 -0000 This is a cryptographically signed message in MIME format. --------------ms070807050000080109010105 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 17/10/16 10:02, Alexey Melnikov wrote: > Hi Stephen, >=20 >> On 17 Oct 2016, at 09:25, Stephen Farrell >> wrote: >>=20 >>=20 >> Hi Alexey, >>=20 >> Kent was asking me about this offlist, and I'm also a bit puzzled >> now... >>=20 >> On 13/10/16 17:00, Kent Watsen wrote: >>>> So basically you have 2 choices: you either reference RFC 2818=20 >>>> (and don't reference RFC 6125 at all) or you add more >>>> information about how to use RFC 6125. >>=20 >> Isn't that a false dichotomy? At least if by "add more" you mean, >> "you must add all of things"? >=20 > No. Just saying "Use RFC 6125" is incorrect, because it provides a > template, not a fully specified set of rules. So any document > referencing it need to prescribe which identity types are used > (CN-ID, DNS-ID, etc) and whether wild cards are allowed in any of > them. >=20 > I didn't imply that a spec needs to support all identity types. Most > likely NETCONF should support DNS-ID. Possibly CN-ID. SRV-ID is only > used if something like DNS SRV is used for server discovery. Right. DNS-ID is what's needed with CN only needed if there are legacy deployment issues. Those used be more important than now though. Anyway, what's wrong with just saying "same as 6125, B.7"? (I.e. [1] below.) S. >=20 >> But see below... >>=20 >>>=20 >>> Regarding choice #1: Scanning the RESTCONF draft, the only >>> reference to RFC 6125 is happening in this section (Section 2.4), >>> so switching to RFC 2818 would be fairly easy. Presumably this >>> section would be rewritten to point to RFC 2818, Section 3.1 >>> instead. >>>=20 >>> Regarding choice #2: would adding to the beginning of this >>> section (Section 2.4) something like the following be okay? >>> =E2=80=9CRESTCONF servers using DevID certificates MUST configure the= ir >>> certificates according to IEEE-802.1AR-2009, otherwise RESTCONF >>> servers SHOULD configure their certificates according to the >>> guidelines in Section 3 of RFC 6125.=E2=80=9D >>=20 >> Actually, I'd have thought that 6125, appendix B would help here - >> why wouldn't the same as is used for netconf [1] work here? If that >> works, I'd just refer to that and we should be fine. (And it'd be >> nice if we get the benefit that the same server cert can work for >> both too I guess.) >>=20 >> Cheers, S. >>=20 >> [1] https://tools.ietf.org/html/rfc6125#appendix-B.7 >>=20 >>=20 >>>=20 >>>=20 >>> Kent >>=20 >=20 --------------ms070807050000080109010105 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjEwMTcw OTA1NDlaMC8GCSqGSIb3DQEJBDEiBCA4QneV+83fvCmi8MANK0OmOEL3pSSXszYRvSAbviWr 7DBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQBwOpunCowjKEyf+sOgTpyrzRy4ULkUZHcWUch6BgDVYEY+46gzDJUj LFjt+BB9NFlu7nR0iMDXLtbEJNXnSJkHGbxWQYn4xwop0rYywagb2hN1wjEtnNTCtxibEqia 46WQI9fe1LI1/zeRA7uIxO6cxwB7XVSrja4QH1whjQZ9L2QOas6B/11ArP84e2wAz/HciGwa MtgE9TODif7wK9WPFw7U27XAzLTot7voi1/yKBedSTEAtc5uOz6RwgGBT43HaHYqzDAl2mOx PjcPOXIPAVjc7eQLFTFVuhlirrHDLKXffgr/a9TYlLAMmPxj6ul3IT+5Vzz+Iu3yBlNpi4R+ AAAAAAAA --------------ms070807050000080109010105-- From nobody Mon Oct 17 02:08:15 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 111A9129503; Mon, 17 Oct 2016 02:08:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=JoJSQDN/; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=OyjP+FvC Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WTs1f-EnhpZo; Mon, 17 Oct 2016 02:08:10 -0700 (PDT) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5B7212944E; Mon, 17 Oct 2016 02:08:10 -0700 (PDT) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 22783206CA; Mon, 17 Oct 2016 05:08:10 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute6.internal (MEProxy); Mon, 17 Oct 2016 05:08:10 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=oaN98R3ZtIW/4QwF+9TXyJVQ9I8=; b=JoJSQD N/v6gpsXHUOsmmoybX5BXFTTSH2ig1SPv6l+yf6+Zit+X8fx6s1cfFfOw+OMBLiZ Qz19okUqtJ4BILM2YzKfWuOM/ADCDVR2D2RP9u39LiLpIHA8Ldv75z73FUiAs987 mqn+FRWaLYkg73xMW1+96x46v0PMT10VGtSg4= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=oaN98R3ZtIW/4Qw F+9TXyJVQ9I8=; b=OyjP+FvCmtChj2p4wlxlN2y114Rtf7LdVtWWm/wfQRDzUDK rLwFhY3dzrkkt1WpHEQ5sJQ9C3S1OS7BX6Ehd+Z9jd/vN5WhLakfxd8KAmZ4YDqp trJIxT1t0FXW/Itf8JuBIMwLDsE+hRC2c8gAHJQP0AmI5R/C7KQL2hVDtazU= X-Sasl-enc: RmpCt3YWkBGukPyazlZBqEAtZhbuiZgn9LTYO/1EUXrm 1476695289 Received: from [10.215.235.141] (unknown [185.69.145.86]) by mail.messagingengine.com (Postfix) with ESMTPA id B94ABF29CE; Mon, 17 Oct 2016 05:08:09 -0400 (EDT) Content-Type: text/plain; charset=windows-1251 Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPhone Mail (13G35) In-Reply-To: <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> Date: Mon, 17 Oct 2016 10:12:16 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <4C30A242-3897-4355-B3FD-945B38CAA9D6@fastmail.fm> References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> To: Stephen Farrell Archived-At: Cc: "netconf-chairs@ietf.org" , The IESG , "draft-ietf-netconf-restconf@ietf.org" , "netconf@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 09:08:12 -0000 > On 17 Oct 2016, at 10:02, Alexey Melnikov wrote: >=20 > Hi Stephen, >=20 >> On 17 Oct 2016, at 09:25, Stephen Farrell wro= te: >>=20 >>=20 >> Hi Alexey, >>=20 >> Kent was asking me about this offlist, and I'm also a bit >> puzzled now... >>=20 >> On 13/10/16 17:00, Kent Watsen wrote: >>>> So basically you have 2 choices: you either reference RFC 2818 >>>> (and don't reference RFC 6125 at all) or you add more information >>>> about how to use RFC 6125. >>=20 >> Isn't that a false dichotomy? At least if by "add more" >> you mean, "you must add all of things"? >=20 > No. Just saying "Use RFC 6125" is incorrect, because it provides a templat= e, not a fully specified set of rules. So any document referencing it need t= o prescribe which identity types are used (CN-ID, DNS-ID, etc) and whether w= ild cards are allowed in any of them. >=20 > I didn't imply that a spec needs to support all identity types. Most likel= y NETCONF should support DNS-ID. Possibly CN-ID. SRV-ID is only used if some= thing like DNS SRV is used for server discovery. >=20 >> But see >> below... >>=20 >>>=20 >>> Regarding choice #1: Scanning the RESTCONF draft, the only reference >>> to RFC 6125 is happening in this section (Section 2.4), so switching >>> to RFC 2818 would be fairly easy. Presumably this section would be >>> rewritten to point to RFC 2818, Section 3.1 instead. >>>=20 >>> Regarding choice #2: would adding to the beginning of this section >>> (Section 2.4) something like the following be okay? =93RESTCONF >>> servers using DevID certificates MUST configure their certificates >>> according to IEEE-802.1AR-2009, otherwise RESTCONF servers SHOULD >>> configure their certificates according to the guidelines in Section 3 >>> of RFC 6125.=94 >>=20 >> Actually, I'd have thought that 6125, appendix B would help >> here - why wouldn't the same as is used for netconf [1] >> work here? If that works, I'd just refer to that and we >> should be fine. The text in B.7 is what was used before RFC 6125. So just referencing it is i= ncorrect. I think the text in B.7 basically says: DNS-ID type is used for matching. CN-ID type might be used. Wildcards are allowed in both. URI-ID and SRV-ID are not used. >> (And it'd be nice if we get the benefit >> that the same server cert can work for both too I guess.) >>=20 >> Cheers, >> S. >>=20 >> [1] https://tools.ietf.org/html/rfc6125#appendix-B.7 >>=20 >>=20 >>>=20 >>>=20 >>> Kent >=20 From nobody Mon Oct 17 02:11:33 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 089331294AA; Mon, 17 Oct 2016 02:11:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.732 X-Spam-Level: X-Spam-Status: No, score=-4.732 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q6-uhz6P2Jpa; Mon, 17 Oct 2016 02:11:31 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE5E1129477; Mon, 17 Oct 2016 02:11:30 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 3E456BDF9; Mon, 17 Oct 2016 10:11:29 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TcdFrS00mKmG; Mon, 17 Oct 2016 10:11:28 +0100 (IST) Received: from [10.87.48.210] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 7B368BDCC; Mon, 17 Oct 2016 10:11:27 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1476695488; bh=wT9i2TzIKAWiMLlBrVMo0a4gNuaQPdPa+zzQT+P4eL8=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=R0/B15fs2VML4wQWiPyXp8oYlU+20JsLkG+ZKxQQo8Cvcz5cM3uUPI0a7xRvtlEEd AcZHiTnH+CF0Z93eM0t1orV6wkLCBs43nzLHwwwLM6Wdfewm9II77PkuCdkZQdH4o2 ML871uGmNLroN/wmLSTOdHNluu1R3zOIBa3Vx9wY= To: Alexey Melnikov References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> <4C30A242-3897-4355-B3FD-945B38CAA9D6@fastmail.fm> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: Date: Mon, 17 Oct 2016 10:11:27 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <4C30A242-3897-4355-B3FD-945B38CAA9D6@fastmail.fm> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030400070804000009050504" Archived-At: Cc: "netconf-chairs@ietf.org" , The IESG , "draft-ietf-netconf-restconf@ietf.org" , "netconf@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 09:11:32 -0000 This is a cryptographically signed message in MIME format. --------------ms030400070804000009050504 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 17/10/16 10:12, Alexey Melnikov wrote: > The text in B.7 is what was used before RFC 6125. So just referencing > it is incorrect. I don't get that at all. Because... >=20 > I think the text in B.7 basically says: >=20 > DNS-ID type is used for matching.=20 > CN-ID type might be used. > Wildcards are allowed in both. > URI-ID and SRV-ID are not used. I'd bet the above is what's still wanted here, isn't it? If so, why would we care about how that text is pointed at? Or are there additional things do you think actually need to be stated to get TLS interop for this application? If so, what? (Sorry, I'm not seeing it.) S. --------------ms030400070804000009050504 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjEwMTcw OTExMjdaMC8GCSqGSIb3DQEJBDEiBCDUMoilUj0FiSY4Ai7A6BJMj0s4OM7ajsB8hh/AQPaQ wjBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQAawQwvx/lCxHgOV3i4Y1EP6hzCdIEGy+7b0LTtx/zbcQ4ltlvjDFJm v5ap5W14p80rUls1AvDONhMvbIPYnd4buEwFBR/KMyBfcyIJeKESQRr/105T0NQoZhix6DVc sDZlp2x4DuepassGG5TA9gJ76mE3Uv24MW8zgAFEYOuOQ/WE7PF+2u/pGCtaV2eYWNfbSxpM rViQfr3eMITXPgHAP8ExkDe2BzA+RjiR2e97R+dilMiq/cqwwg9kSAgXNOrqrvNGNnDew3CZ 2fR1jta5prJQUOv6Dvrv4vV4RI8+akDJ38/nETkSIuMlhMXJWnzYL/RMLdAk28OYIZh9eD/Q AAAAAAAA --------------ms030400070804000009050504-- From nobody Mon Oct 17 05:06:21 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AABFB12962A; Mon, 17 Oct 2016 05:06:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=oCLG1yzq; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=WHZIShnu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b3UqM8ZAR7gn; Mon, 17 Oct 2016 05:06:13 -0700 (PDT) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C505129431; Mon, 17 Oct 2016 05:06:13 -0700 (PDT) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 46F642068A; Mon, 17 Oct 2016 08:06:12 -0400 (EDT) Received: from web5 ([10.202.2.215]) by compute6.internal (MEProxy); Mon, 17 Oct 2016 08:06:12 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=NXD5cspz3JJNekLXhmFKU8VOuM4=; b=oCLG1y zqEDlWi4o46z3SbtEleUsW1ZbkluyfVnd07XjEFDaRveoKOgdEOkwQfrtVykYa7L 7GNTi74XKdT3FmeZsCvqRv1yHFXRhshACUHhqUXbQFS6mqcqL3Alr0AmaO93pPQz IZadlMQSwH6tULIJRp55QzZ/zs0MCvOtQ97cI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=NXD5cspz3JJNekL XhmFKU8VOuM4=; b=WHZIShnuNfQr6EFRp8gXTkOfrw2W1Yv6Mml5RAGywjTbVWD uRVpLIFHQykXZJudNLRSYfRWOIBkj6SDB1pO4UUVJrXAYzj2IZhL4T7D8F+nt2ki afL5gTAb9YKymQf8/G0Thd0VF/7kFN3V/kTmpCoubafQZtpxzCjP9P1GFm74= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 12D7096EA5; Mon, 17 Oct 2016 08:06:12 -0400 (EDT) Message-Id: <1476705972.47062.758292033.30FFA782@webmail.messagingengine.com> X-Sasl-Enc: ++j28cOU9rOOne0kG+DJ2mgdwB7QV/sNRBEJNuKbaBOV 1476705972 From: Alexey Melnikov To: Stephen Farrell MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-cdbff290 In-Reply-To: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> <4C30A242-3897-4355-B3FD-945B38CAA9D6@fastmail.fm> Date: Mon, 17 Oct 2016 13:06:12 +0100 Archived-At: Cc: netconf-chairs@ietf.org, The IESG , draft-ietf-netconf-restconf@ietf.org, netconf@ietf.org Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 12:06:15 -0000 Hi Stephen, On Mon, Oct 17, 2016, at 10:11 AM, Stephen Farrell wrote: > > > On 17/10/16 10:12, Alexey Melnikov wrote: > > The text in B.7 is what was used before RFC 6125. So just referencing > > it is incorrect. > > I don't get that at all. Because... > > > > > I think the text in B.7 basically says: > > > > DNS-ID type is used for matching. > > CN-ID type might be used. > > Wildcards are allowed in both. > > URI-ID and SRV-ID are not used. > > I'd bet the above is what's still wanted here, isn't it? Yes. My text above, not what in B.7 :-). > If so, why would we care about how that text is pointed > at? Because B.7 is extracts from RFCs that were used to motivate creation of RFC 6125. It is using old, incorrect language that should not be used. > Or are there additional things do you think actually need > to be stated to get TLS interop for this application? If > so, what? (Sorry, I'm not seeing it.) > > S. > > Email had 1 attachment: > + smime.p7s > 5k (application/pkcs7-signature) From nobody Mon Oct 17 08:39:50 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95628129455 for ; Mon, 17 Oct 2016 08:39:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.951 X-Spam-Level: X-Spam-Status: No, score=-14.951 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6UPc4rdQw3iy for ; Mon, 17 Oct 2016 08:39:48 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7370312987F for ; Mon, 17 Oct 2016 08:39:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9724; q=dns/txt; s=iport; t=1476718787; x=1477928387; h=from:to:subject:date:message-id:mime-version; bh=XRQgjyU8BhHohsNDKmt7tI4AvRgEJypV7pfYfaYqxGI=; b=ao3kTl51hsyUjEwhyUss1hrllwLT83CPh7p+IPHD/29RQ8ekJU/omz9d xlY/87jg5v8epTEfwXqevJ/IZ/PNgu75+I4q3LYE9DsBpxeccF9CRHICa ouUBEqy4lSWRyjoGYGOT3BLHMNaxbrNglq6ftBq1IVIaAxr2wQYR7nM3z w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ASAgCx7wRY/5xdJa1CGhsBAQEDAQEBC?= =?us-ascii?q?QEBAYMHNQEBAQEBHVd8B40tpiiDBYIPgggqh2E4FAECAQEBAQEBAV4cC4RoLV4?= =?us-ascii?q?BLQsMPCYBBBuISg4tpT+VAodlAQEBAQEBBAEBAQEBAR0Fhj2GEYJ1ZIF+gxMFm?= =?us-ascii?q?gYBhieJVY98jHuDfwEeNlKCfhyBU3IBBId8gQABAQE?= X-IronPort-AV: E=Sophos;i="5.31,357,1473120000"; d="scan'208,217";a="160825156" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Oct 2016 15:39:46 +0000 Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id u9HFdkNx009271 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 17 Oct 2016 15:39:46 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 17 Oct 2016 11:39:45 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1210.000; Mon, 17 Oct 2016 11:39:45 -0400 From: "Eric Voit (evoit)" To: "netconf@ietf.org" Thread-Topic: Minutes 12-Oct: NETCONF/RESTCONF/HTTP2 Subscription & Event drafts Thread-Index: AdIoixulcu09baBzThKnB44leMks/gAASwSw Date: Mon, 17 Oct 2016 15:39:45 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.229] Content-Type: multipart/alternative; boundary="_000_fced9b4992a8476a9e5ab4b95e4f8fbbXCHRTP013ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [Netconf] Minutes 12-Oct: NETCONF/RESTCONF/HTTP2 Subscription & Event drafts X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 15:39:49 -0000 --_000_fced9b4992a8476a9e5ab4b95e4f8fbbXCHRTP013ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Minutes below posted at: https://github.com/netconf-wg/yang-push/wiki/Minutes-2016-10-12 Meeting Materials Attending WebEx Recording password: sD33qGEJ Andy Bierman, Alexander Clemm, Ambika Tripathy, Eric Voit, Tim Jenkins, Bal= azs Lengyel, Kent Watsen, Walker Per our last call, we walked through a new version of yang-push. It is now= posted here: https://github.com/netconf-wg/yang-push/blob/drafts/draft-ietf-netconf-yang= -push-04.txt We will post to IETF web site in the upcoming days. Reply all with any cha= nges you would like to see before posting. Changes include: o Updates-not-sent flag added if publisher is unable to meet commitment= s o Push updates done via anydata o Not notifiable extension added for items which can't be sent on-chang= e o Dampening period is across all objects in a single subscription o Moved start/stop times into rfc5277bis o Anchor time for added periodic subscription o Message format for synch-on-start o QoS parameters not allowed to be modified by RPC o Descriptions, definitions, & other material moved into 5277bis o Client and Server changed to Subscriber, Publisher, and Receiver o Significant text updates to materials throughout --_000_fced9b4992a8476a9e5ab4b95e4f8fbbXCHRTP013ciscocom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Minutes below posted a= t:

https://github.com/netconf-wg/yang-push/wiki/Minute= s-2016-10-12

 

<= span style=3D"font-family:"Segoe UI",sans-serif">WebEx Recording<= /span>

password: sD33qGEJ

Andy Bierman, Alexande= r Clemm, Ambika Tripathy, Eric Voit, Tim Jenkins, Balazs Lengyel, Kent Wats= en, Walker

 

 

Per our last call, we = walked through a new version of yang-push.  It is now posted here:

https://github.com/netconf-= wg/yang-push/blob/drafts/draft-ietf-netconf-yang-push-04.txt

We will post to IETF w= eb site in the upcoming days.  Reply all with any changes you would li= ke to see before posting.

 

Changes include:

   o&nb= sp; Updates-not-sent flag added if publisher is unable to meet commitments<= o:p>

  o  Pu= sh updates done via anydata

   o  N= ot notifiable extension added for items which can’t be sent on-change=

   o  D= ampening period is across all objects in a single subscription

   o  M= oved start/stop times into rfc5277bis

   o  A= nchor time for added periodic subscription

   o  M= essage format for synch-on-start

   o  Q= oS parameters not allowed to be modified by RPC

  o  De= scriptions, definitions, & other material moved into 5277bis=

   o  C= lient and Server changed to Subscriber, Publisher, and Receiver<= /span>

   o  S= ignificant text updates to materials throughout

 

 

--_000_fced9b4992a8476a9e5ab4b95e4f8fbbXCHRTP013ciscocom_-- From nobody Mon Oct 17 10:56:32 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4085812988A; Mon, 17 Oct 2016 10:56:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.922 X-Spam-Level: X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KmE4vAxdO5XK; Mon, 17 Oct 2016 10:56:23 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0137.outbound.protection.outlook.com [104.47.37.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 708041295C6; Mon, 17 Oct 2016 10:56:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Mr31H2Y0L61IZ+ziaCcco50fHkcqM00ybgvhZRIjyH8=; b=HhLwXk6+4flB+YBxbR1nf2nRKUk8jIlxAUBtq+2IwnYXtfAGrGRqdC8ThC+eSpnoFVLJWHDGHRhMBTcCuAOMaE2K/IgrUIcQ6MIZIPkDsHkub0SkUoJCO4Hjd8Mg3kanGEfsMvDiLTrDaM24OSR/o1Xrh1U2B3pAf/QRGCJ/Qac= Received: from BN3PR0501MB1442.namprd05.prod.outlook.com (10.160.117.151) by BN3PR0501MB1444.namprd05.prod.outlook.com (10.160.117.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.5; Mon, 17 Oct 2016 17:56:21 +0000 Received: from BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) by BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) with mapi id 15.01.0539.025; Mon, 17 Oct 2016 17:56:21 +0000 From: Kent Watsen To: Alexey Melnikov , Stephen Farrell Thread-Topic: Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) Thread-Index: AQHSJLYXZuU/DamBjEmJ49yHFR/2lKClCCyAgAFhxoD//99aAIAGDViAgAAKQYCAAALKAP///8aAgAAw0wCAAB7FAA== Date: Mon, 17 Oct 2016 17:56:21 +0000 Message-ID: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> <4C30A242-3897-4355-B3FD-945B38CAA9D6@fastmail.fm> <1476705972.47062.758292033.30FFA782@webmail.messagingengine.com> In-Reply-To: <1476705972.47062.758292033.30FFA782@webmail.messagingengine.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.13] x-ms-office365-filtering-correlation-id: b663d246-aa31-4276-04b1-08d3f6b6e767 x-microsoft-exchange-diagnostics: 1; BN3PR0501MB1444; 7:AbHyY8zID9zrnZfRMZpvGRjwA8l0XI5ZTU7I6p8KDWLAjHXfshMZhbn5eUWgYvr8/GSPsBjrDrwn4CIOk7RaR2nKkDTDbzKjMyUu+Cgf6zxBPZ/xSdOhoy6UzfDT+ev0I73wBR+wS4CaP1FUsqh7T1VmX1VSSReIth0I0EsdbSYoHvFBbOFmeEUpCeif41V5ReWKFtWSSjhHbca5hQogHtLM8utCgNS+O4GR0KoipLbRGOoA62rnXglN8vxMuTH4+9TMVFHseZUtarL5eNHmZnOObHrdiww6Mt1btDJuyiWrz37TpILxdYaJSMUTMiViipFKWkXhPX+0zxrozCf6vbi0HKvc+XED2iEZLLYMz1s= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0501MB1444; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:BN3PR0501MB1444; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0501MB1444; x-forefront-prvs: 0098BA6C6C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(377454003)(24454002)(51444003)(199003)(189002)(101416001)(36756003)(54356999)(76176999)(83506001)(11100500001)(8666005)(105586002)(99286002)(33656002)(2950100002)(81166006)(3660700001)(81156014)(10400500002)(8676002)(106356001)(3280700002)(50986999)(66066001)(92566002)(189998001)(4326007)(2906002)(3846002)(102836003)(6116002)(586003)(230783001)(93886004)(5002640100001)(122556002)(5890100001)(8936002)(4001350100001)(97736004)(5001770100001)(68736007)(106116001)(77096005)(7736002)(305945005)(82746002)(19580405001)(87936001)(83716003)(19580395003)(2900100001)(86362001)(5660300001)(7846002)(7059030)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0501MB1444; H:BN3PR0501MB1442.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Oct 2016 17:56:21.4779 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0501MB1444 Archived-At: Cc: "draft-ietf-netconf-restconf@ietf.org" , "netconf-chairs@ietf.org" , The IESG , "netconf@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 17:56:25 -0000 VGhhbmtzIFN0ZXBoZW4gZm9yIGhlbHBpbmchDQoNCkhpIEFsZXhleSwgSSB0aGluayB0aGF0IEni gJlsbCBnbyB0aGUgUkZDIDI4MTggcm91dGUuICBGb2xsb3dpbmcgaXMgbXkgcHJvcG9zZWQgdGV4 dC4gIFBsZWFzZSBzdWdnZXN0IGFueSBjaGFuZ2VzIHlvdSB0aGluayB3b3VsZCBpbXByb3ZlIGl0 IQ0KDQpPTEQ6DQoNCiAgIDIuNC4gIEF1dGhlbnRpY2F0ZWQgU2VydmVyIElkZW50aXR5DQoNCiAg ICAgIFRoZSBSRVNUQ09ORiBjbGllbnQgTVVTVCBjaGVjayB0aGUgaWRlbnRpdHkgb2YgdGhlIHNl cnZlciBhY2NvcmRpbmcNCiAgICAgIHRvIFNlY3Rpb24gNiBvZiBbUkZDNjEyNV0sIGluY2x1ZGlu ZyBwcm9jZXNzaW5nIHRoZSBvdXRjb21lIGFzDQogICAgICBkZXNjcmliZWQgaW4gU2VjdGlvbiA2 LjYgb2YgW1JGQzYxMjVdLg0KDQpORVc6DQoNCiAgIDIuNC4gIEF1dGhlbnRpY2F0ZWQgU2VydmVy IElkZW50aXR5DQoNCiAgICAgIFRoZSBSRVNUQ09ORiBjbGllbnQgTVVTVCBjaGVjayB0aGUgaWRl bnRpdHkgb2YgdGhlIHNlcnZlciBhY2NvcmRpbmcNCiAgICAgIHRvIFNlY3Rpb24gMy4xIG9mIFtS RkMyODE4XS4NCg0KDQpEb2VzIHRoaXMgdXBkYXRlIGNsZWFyIHlvdXIgRElTQ1VTUyBpdGVtICMx Pw0KDQoNClRoYW5rcywNCktlbnQNCg0KDQoNCk9uIDEwLzE3LzE2LCA4OjA2IEFNLCAiQWxleGV5 IE1lbG5pa292IiA8YWFtZWxuaWtvdkBmYXN0bWFpbC5mbT4gd3JvdGU6DQoNCkhpIFN0ZXBoZW4s DQoNCk9uIE1vbiwgT2N0IDE3LCAyMDE2LCBhdCAxMDoxMSBBTSwgU3RlcGhlbiBGYXJyZWxsIHdy b3RlOg0KPiANCj4gDQo+IE9uIDE3LzEwLzE2IDEwOjEyLCBBbGV4ZXkgTWVsbmlrb3Ygd3JvdGU6 DQo+ID4gVGhlIHRleHQgaW4gQi43IGlzIHdoYXQgd2FzIHVzZWQgYmVmb3JlIFJGQyA2MTI1LiBT byBqdXN0IHJlZmVyZW5jaW5nDQo+ID4gaXQgaXMgaW5jb3JyZWN0Lg0KPiANCj4gSSBkb24ndCBn ZXQgdGhhdCBhdCBhbGwuIEJlY2F1c2UuLi4NCj4gDQo+ID4gDQo+ID4gSSB0aGluayB0aGUgdGV4 dCBpbiBCLjcgYmFzaWNhbGx5IHNheXM6DQo+ID4gDQo+ID4gRE5TLUlEIHR5cGUgaXMgdXNlZCBm b3IgbWF0Y2hpbmcuIA0KPiA+IENOLUlEIHR5cGUgbWlnaHQgYmUgdXNlZC4NCj4gPiBXaWxkY2Fy ZHMgYXJlIGFsbG93ZWQgaW4gYm90aC4NCj4gPiBVUkktSUQgYW5kIFNSVi1JRCBhcmUgbm90IHVz ZWQuDQo+IA0KPiBJJ2QgYmV0IHRoZSBhYm92ZSBpcyB3aGF0J3Mgc3RpbGwgd2FudGVkIGhlcmUs IGlzbid0IGl0Pw0KDQpZZXMuIE15IHRleHQgYWJvdmUsIG5vdCB3aGF0IGluIEIuNyA6LSkuDQoN Cj4gSWYgc28sIHdoeSB3b3VsZCB3ZSBjYXJlIGFib3V0IGhvdyB0aGF0IHRleHQgaXMgcG9pbnRl ZA0KPiBhdD8NCg0KQmVjYXVzZSBCLjcgaXMgZXh0cmFjdHMgZnJvbSBSRkNzIHRoYXQgd2VyZSB1 c2VkIHRvIG1vdGl2YXRlIGNyZWF0aW9uIG9mDQpSRkMgNjEyNS4gSXQgaXMgdXNpbmcgb2xkLCBp bmNvcnJlY3QgbGFuZ3VhZ2UgdGhhdCBzaG91bGQgbm90IGJlIHVzZWQuDQoNCj4gT3IgYXJlIHRo ZXJlIGFkZGl0aW9uYWwgdGhpbmdzIGRvIHlvdSB0aGluayBhY3R1YWxseSBuZWVkDQo+IHRvIGJl IHN0YXRlZCB0byBnZXQgVExTIGludGVyb3AgZm9yIHRoaXMgYXBwbGljYXRpb24/IElmDQo+IHNv LCB3aGF0PyAoU29ycnksIEknbSBub3Qgc2VlaW5nIGl0LikNCj4gDQo+IFMuDQo+IA0KPiBFbWFp bCBoYWQgMSBhdHRhY2htZW50Og0KPiArIHNtaW1lLnA3cw0KPiAgIDVrIChhcHBsaWNhdGlvbi9w a2NzNy1zaWduYXR1cmUpDQoNCg0K From nobody Mon Oct 17 11:42:18 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C409F1295D0; Mon, 17 Oct 2016 11:42:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=fHn+HFmI; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=Cp3rCx4L Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dUP3MytZaJe6; Mon, 17 Oct 2016 11:42:12 -0700 (PDT) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F9F41294C5; Mon, 17 Oct 2016 11:42:12 -0700 (PDT) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 863F620575; Mon, 17 Oct 2016 14:42:11 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute6.internal (MEProxy); Mon, 17 Oct 2016 14:42:11 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=O6nCqW3v/SuOPdIbfmq0mEhBKuc=; b=fHn+HF mIIWrzSYONuwVz8TIvc/5pDkwB7269G+fAjmeAT51bcj4CVR07swoPPBZ0kWRglF lHciGk5u+D5pN4ERqRFh0PBbpTNASnhEtO0A+SLYl3w2aCq3dMTAyxNkI64wS/sa LjoJOFazTQ7VMnK3en2jTBbvEUIZKOcm/a0yc= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=O6nCqW3v/SuOPdI bfmq0mEhBKuc=; b=Cp3rCx4LJVaZKo4mFwuHMHEdcmtQ7utJWnqMjsswMwhqJuS X89BFgZFDOObuPRmjHV8o4w8x2jEruNft4sfT1Ha4zlPhzEAzOoR58NJx+Hs1hrC B8T8eSmSpl1Kenh7h0tMJb4b9/fZCtf9kiYO6JObDJmlv7vgCLEAm1+RAWpw= X-Sasl-enc: tcwRy3nh95H8SXGkGgRNROXq4izynZGar7r0xflxrFH6 1476729731 Received: from [192.168.0.5] (cpc5-nmal20-2-0-cust24.19-2.cable.virginm.net [92.234.84.25]) by mail.messagingengine.com (Postfix) with ESMTPA id 1DC4BF29CB; Mon, 17 Oct 2016 14:42:11 -0400 (EDT) Content-Type: text/plain; charset=windows-1251 Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPhone Mail (13G35) In-Reply-To: Date: Mon, 17 Oct 2016 19:46:20 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> <4C30A242-3897-4355-B3FD-945B38CAA9D6@fastmail.fm> <1476705972.47062.758292033.30FFA782@webmail.messagingengine.com> To: Kent Watsen Archived-At: Cc: "netconf-chairs@ietf.org" , "netconf@ietf.org" , "draft-ietf-netconf-restconf@ietf.org" , Stephen Farrell , The IESG Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 18:42:14 -0000 > On 17 Oct 2016, at 18:56, Kent Watsen wrote: >=20 > Thanks Stephen for helping! >=20 > Hi Alexey, I think that I=92ll go the RFC 2818 route. Following is my pro= posed text. Please suggest any changes you think would improve it! >=20 > OLD: >=20 > 2.4. Authenticated Server Identity >=20 > The RESTCONF client MUST check the identity of the server according > to Section 6 of [RFC6125], including processing the outcome as > described in Section 6.6 of [RFC6125]. >=20 > NEW: >=20 > 2.4. Authenticated Server Identity >=20 > The RESTCONF client MUST check the identity of the server according > to Section 3.1 of [RFC2818]. >=20 >=20 > Does this update clear your DISCUSS item #1? Yes. >=20 >=20 > Thanks, > Kent >=20 >=20 >=20 > On 10/17/16, 8:06 AM, "Alexey Melnikov" wrote: >=20 > Hi Stephen, >=20 >> On Mon, Oct 17, 2016, at 10:11 AM, Stephen Farrell wrote: >>=20 >>=20 >>> On 17/10/16 10:12, Alexey Melnikov wrote: >>> The text in B.7 is what was used before RFC 6125. So just referencing >>> it is incorrect. >>=20 >> I don't get that at all. Because... >>=20 >>>=20 >>> I think the text in B.7 basically says: >>>=20 >>> DNS-ID type is used for matching.=20 >>> CN-ID type might be used. >>> Wildcards are allowed in both. >>> URI-ID and SRV-ID are not used. >>=20 >> I'd bet the above is what's still wanted here, isn't it? >=20 > Yes. My text above, not what in B.7 :-). >=20 >> If so, why would we care about how that text is pointed >> at? >=20 > Because B.7 is extracts from RFCs that were used to motivate creation of > RFC 6125. It is using old, incorrect language that should not be used. >=20 >> Or are there additional things do you think actually need >> to be stated to get TLS interop for this application? If >> so, what? (Sorry, I'm not seeing it.) >>=20 >> S. >>=20 >> Email had 1 attachment: >> + smime.p7s >> 5k (application/pkcs7-signature) >=20 >=20 From nobody Mon Oct 17 14:24:15 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E79B6129471 for ; Mon, 17 Oct 2016 14:24:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.922 X-Spam-Level: X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ktyewBdkMSqP for ; Mon, 17 Oct 2016 14:24:11 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0129.outbound.protection.outlook.com [104.47.37.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BFA61294EA for ; Mon, 17 Oct 2016 14:24:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=MBLV+3KqMafbDLvX9EfBY8vHI2W/xZTC8XxTxah0mlY=; b=Wu31N29B7UCZcmvDIBovkIUQbITQTnmyif2LhFVjeizM7R8iiswNkPOBl/ulM91w3t4W9OZdo1+EZ6FpL60xJxUW3VC29M2UAEUa3r1wEhBHl5PQ2fooAdEqzEm07I2gz/eAlMc7HdqZbi8BM6z8F5XYeIJEnqC+okeeVAQDOm0= Received: from BN3PR0501MB1442.namprd05.prod.outlook.com (10.160.117.151) by BN3PR0501MB1442.namprd05.prod.outlook.com (10.160.117.151) with Microsoft SMTP Server (TLS) id 15.1.539.6; Mon, 17 Oct 2016 21:24:09 +0000 Received: from BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) by BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) with mapi id 15.01.0539.025; Mon, 17 Oct 2016 21:24:09 +0000 From: Kent Watsen To: "netconf@ietf.org" Thread-Topic: [Anima-bootstrap] DRAFT minutes from past three meetings Thread-Index: AQHSKIJcr2G7mK1UNUOJ+7Zftpn2I6Cs5YQA Date: Mon, 17 Oct 2016 21:24:09 +0000 Message-ID: <432E7E2A-7676-4F05-B17D-BCBC4E370DAF@juniper.net> References: <16867.1476714344@obiwan.sandelman.ca> In-Reply-To: <16867.1476714344@obiwan.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.13] x-ms-office365-filtering-correlation-id: 3a8bd5fb-90c5-45c7-9793-08d3f6d3eec3 x-microsoft-exchange-diagnostics: 1; BN3PR0501MB1442; 6:kVo+tj9y6G6r0jmD2Ktehij3F6sTPUMaRnqOSzpzgdQ7zL/MZ/IDeL9K6nMcaCd8h9ae+wBZsKFUYKmEufobkMQaTy5r9MqyELSl7s4eYQKmlRCNlytPou36OUVc7Gyzt0igiFA92xfhYJie66NKr5xmwVy3sghrzPGfwdsp+I1Evm61dzJHFCy9ZaCaFDVgy6zmtby0pH9/CehCsWUKhJ0RwF4Qt1rz9b9tGAvaelMForkuByAYSRhO3eJ9RcvR8g4eVOAuXriZapXJYyxViNDjPvoIcjqLJpdHwpg288crZ1XDSRs664BiiZOEXRtek8FLYHZBfv0hcXEcB+kDjA==; 5:XQK7N+gyh5bmXmRUMO+mXDSACZSc4y9ptbVINrLuQuUXXL4LoahsqxW5IjuE54l5xZ4bsl2LYls0elW8TGV7h598OzRYflTzCxiuw7KZJcUv9ojBdWzMPMQ2gXMrLLBE+snjx/mT+DU7iTIWVibwFw==; 24:WCEFVy993ec0QNCzV+XdsDEfkTn+/g2v7oMKSDmIqlUUl8hAQ+iJf03IxaYU9zY0NgJoqe12Reksm1NVppdZeDjwBRAMWqVvzWSHL0sSqmA=; 7:hgU3MrqYENSQ8voj6CW7irYH+rsa70Dsyy2bJuBMJskmwJiYrCL1TKkMn0Z/O1OAcdFEyKrxJWwiYFLMdDqHSQCp9ebbobfc5dwkAGuB9zJiQ/1sJ0qyxvYqWiWRpf5Hhs5NqCxXZF0BvdUt4Pd+n/5DW/XH07EG8XO3cvFcC2yTSFYHDtTDBQgWVdulgTB2a9WMnx1ehlFYWkYre+b5F6kArR4Ts++ijaWAV0qRyqShVDRWktWr1ROIuKkTEVwBUkYZvz2DjLjNms5q75KIydn+Dmqp9+WgtFtD8AMPriPIrRGaGMSJcyuR/yn/NQLVS7zpoEdg90x90wntLFS2iw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0501MB1442; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(60795455431006)(158342451672863)(166708455590820)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:BN3PR0501MB1442; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0501MB1442; x-forefront-prvs: 0098BA6C6C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(377454003)(189002)(24454002)(199003)(69234005)(52314003)(377424004)(2473002)(101416001)(122556002)(561944003)(19580395003)(450100001)(97736004)(83716003)(33656002)(83506001)(4001150100001)(4001350100001)(82746002)(19580405001)(107886002)(87936001)(2501003)(189998001)(11100500001)(7736002)(6916009)(2950100002)(305945005)(2906002)(110136003)(36756003)(5002640100001)(81156014)(99286002)(15975445007)(99936001)(50986999)(54356999)(76176999)(77096005)(8936002)(2900100001)(7846002)(66066001)(1730700003)(5660300001)(106116001)(92566002)(2351001)(8676002)(105586002)(3280700002)(10400500002)(3660700001)(5640700001)(81166006)(106356001)(586003)(3846002)(102836003)(6116002)(68736007)(575784001)(86362001)(21314002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0501MB1442; H:BN3PR0501MB1442.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_003_432E7E2A76764F05B17DBCBC4E370DAFjunipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Oct 2016 21:24:09.2428 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0501MB1442 Archived-At: Subject: [Netconf] FW: [Anima-bootstrap] DRAFT minutes from past three meetings X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2016 21:24:14 -0000 --_003_432E7E2A76764F05B17DBCBC4E370DAFjunipernet_ Content-Type: text/plain; charset="utf-8" Content-ID: <343001FB01FD954EBDCB48C2C663771C@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 RllJIC0gbWludXRlcyBmb3IgdGhlIGxhc3QgMyBBTklNQSBib290c3RyYXAgRFQgbWVldGluZ3Mu DQoNCktlbnQNCg0KDQoNCk9uIDEwLzE3LzE2LCAxMDoyNSBBTSwgIkFuaW1hLWJvb3RzdHJhcCBv biBiZWhhbGYgb2YgTWljaGFlbCBSaWNoYXJkc29uIiA8YW5pbWEtYm9vdHN0cmFwLWJvdW5jZXNA aWV0Zi5vcmcgb24gYmVoYWxmIG9mIG1jcitpZXRmQHNhbmRlbG1hbi5jYT4gd3JvdGU6DQoNCg0K VGhpcyBzZXQgb2YgbWludXRlcyBjb3ZlcnMgbWVldGluZ3MgaW4gU2VwdGVtYmVyIDIwMTYgYW5k IE9jdG9iZXIgMjAxNiwNCiAgICAgU2VwdGVtYmVyIDIwLCAyMDE2OiBtY3IsIGtlbnQsIG1heCwg bWljaGFlbCBiZWhyaW5nZXIsDQogICAgIE9jdG9iZXIgICAwNCwgMjAxNjogbWNyLCBtYXgsIE1p Y2hhZWxCLCBrZW50LCB0b2VybGVzcw0KICAgICBPY3RvYmVyICAgMTEsIDIwMTY6IG1jciwgbWlj aGFlbEIsIFRvZXJsZXNzLCBLZW50LCBNYXggKG1lZXRpbmcgd2VudA0KICAgICAgICAgICAgICAg ICAgICAgICAgIHVudGlsIDEyOjMwKQ0KDQowKSB0aGUgb2xkIHdlYmV4IGV4cGlyZWQsIGFuZCBh IG5ldyBvbmUgd2FzIGNyZWF0ZWQuDQogICBXRUVLTFkgSU5WSVRFLCBTRUUgQU5JTUEgQk9PVFNU UkFQIFdJS0k6DQogICAgICAgIGh0dHBzOi8vdHJhYy50b29scy5pZXRmLm9yZy93Zy9hbmltYS90 cmFjL3dpa2kvQm9vdHN0cmFwDQoNClN1bW1hcnk6IG92ZXIgdGhlIHRocmVlIHdlZWtzIHdlIGhh ZCBtYW55IGRpc2N1c3Npb25zIGFib3V0IHRoZSBleGFjdCBmb3JtYXQNCiAgICAgICAgIGFuZCBu YXR1cmUgb2YgdGhlIG93bmVyc2hpcCB2b3VjaGVyLCBhbmQgdGhlIGRpZmZlcmVudCBtb2RlcyBp bg0KICAgICAgICAgd2hpY2ggZW5yb2xsbWVudCBjYW4gb2NjdXIuDQoNClN1bW1hcnkgb2YgYWN0 aW9uczoNCkFDVElPTjogbWNyIHRvIGZpbmQgc29tZSB0ZXh0IGFib3V0IHdoeSBKU09OIHNlZW1z IHRvIGJlIHByZWZlcnJlZCBhbW9uZw0KICAgICAgICAibmV3IGtpZHMiDQpBQ1RJT046IG1heCB0 byBydW4gdGhlIG93bmVyc2hpcCB2b3VjaGVyIG1vZGVsIHRvIGJ1aWxkIGFuIGV4YW1wbGUNCiAg ICAgICAgYXV0aG9yaXphdGlvbiB0b2tlbiBhbmQgZW5zdXJlIGl0IGFsbCBnb3QgY292ZXJlZA0K ICAgICAgICBrZW50IHRvIGV4cGFuZCAyLjIgKGV4YW1wbGVzKQ0KICAgICAgICBtY3IgZ28gYWRk IHRoZSBHUkFTUCB0ZXh0IGZvciByZWdpc3RyYXIgZGlzY292ZXJ5IGJ5IHRoZSBwcm94eQ0KICAg ICAgICBtY3IgdG8gYWRkIHRleHQgdG8gIlByaXZhY3kgQ29uc2lkZXJhdGlvbnMiIHNlY3Rpb24g YWJvdXQNCiAgICAgICAgICAgIGltcGxpY2F0aW9ucyBvZiBkaXJlY3Rpb24gb2YgVExTIGNvbm5l Y3Rpb25zLCBhbmQgd2hvIHJldmVhbHMNCiAgICAgICAgICAgIGlkZW50aXR5IGZpcnN0Lg0KDQoN Ck9uIDIwMTYtMDktMjcgd2UgY2xvc2VkIG9mZiBzb21lIGxpbmdlcmluZyBkaXNjdXNzaW9uIGFi b3V0IHBvc3NpYmxlIEZMSVAuDQoNClN1bW1hcnk6IGJlY2F1c2UgdGhlIHBsZWRnZSBpZGVudGl0 eSBpcyByZXF1aXJlZCB0byBnZW5lcmF0ZSB0aGUgb3duZXJzaGlwDQogICAgICAgICB2b3VjaGVy IHdlIG11c3QgZXhwb3NlIHRoZSBwbGVkZ2UgdG8gYW4gYWN0aXZlIGF0dGFja2VyDQoNCiAgICAg bWNyOiBpZiB0aGUgcGxlZGdlIGV4cG9zZXMgYSBoYXNoJ2QgaWRlbnRpdHkgdGhpcyBtaWdodCBy ZXNvbHZlIHRoZQ0KICAgICBwcm9ibGVtLiBUaGlzIG9ubHkgd29ya3MgaW4gdGhlIG5vbi1mbGlw cGVkIGNhc2UgYmVjYXVzZSBpbiB0aGUNCiAgICAgbm9uLWZsaXBwZWQgY2FzZSB0aGUgY2xpZW50 IGF1dGhlbnRpY2F0aW9uIGlzIG9wdGlvbmFsIGluIFRMUy4gKHRoZQ0KICAgICBjdXJyZW50IGRy YWZ0IGluZGljYXRlcyB3ZSBtdXN0IGF1dGhlbnRpY2F0ZSB0aGUgY2xpZW50KQ0KDQogICAgIElu IG9yZGVyIHRvIHByZXNlcnZlIHRoZSBpZGVudGl0eSBvZiB0aGUgcGxlZGdlIGluIHRoZSBjYXNl IG9mIHRoZQ0KICAgICBhY3RpdmUgYXR0YWNrZXIsIHdlIHdvdWxkIGhhdmUgdG8gbW9kaWZ5IHRo ZSBjcnlwdG9ncmFwaGljIG1lY2hhbmlzbSBpbg0KICAgICBhIHdheSBiZXlvbmQgd2hhdCBUTFMx LjMgY2FuIHByb3ZpZGUuDQoNCiAgICAgVGhpcyB0b3BpYyBpcyBtb290IGdpdmVuIHRoYXQgdGhl IE1BU0Egc2VydmVyIGRvZXMgbm90IHZlcmlmeSBvd25lcnNoaXANCiAgICAgaXRzZWxmIC0tIGlu c3RlYWQgaXQgb25seSBsb2dzIHRoZSBldmVudHMgZm9yIHJlZ2lzdHJhcidzIHRvIGRvIHRoZWly IG93bg0KICAgICB2ZXJpZmljYXRpb24uIFtUaGUgZXhhY3QgcGFyYWdyYXBoIGZvciB0aGlzIGlz IG5vdCBjbGVhciBpbiB0aGUgLTAzDQogICAgIGRyYWZ0LiBUT0RPOiBtYWtlIHRoaXMgY2xlYXJl ciFdLiBUaGlzIGltcGxpZXMgdGhhdCBhbnkgY3J5cHRvL2hhbmRzaGFrZQ0KICAgICBvcHRpbWl6 YXRpb24gaXMgdWx0aW1hdGVseSBvbmx5IGFuIG9wdGltaXphdGlvbiBhbmQgYW4gYWN0aXZlIGF0 dGFja2VyDQogICAgIGNhbiBpbiBmYWN0IG9idGFpbiB0aGUgZGV2aWNlIGlkZW50aXR5LiBTbyB0 aGUgYmVzdCB3ZSBjYW4gZG8gaXMgZW5zdXJlDQogICAgIGxvZ2dpbmcgb2NjdXJzIGF0IHRoZSBN QVNBLiBCdXQgdGhpcyB3b3VsZCBoYXZlIGJlZW4gYXZhaWxhYmxlIHRvIHRoZQ0KICAgICBSZWdp c3RyYXIgYW55d2F5LCBhbmQgbW9yZSBkaXJlY3RseSwgd2hlbiB0aGUgY3J5cHRvIGhhbmRzaGFr ZQ0KICAgICBmYWlsZWQuIE1heCdzIHBvc2l0aW9uOiBhbm90aGVyIHByZS1tYXR1cmUgb3B0aW1p emF0aW9uLg0KDQogICAgIG1jcjogcG9pbnRzIG91dCB0aGF0IGF1dGhvcml0YXRpdmUgTUFTQSBz ZXJ2ZXJzIGNvdWxkIHNodXQgdGhpcyBkb3duLg0KDQogICAgIFRoaXMgc2hvdWxkIGJlIGV4cGxh aW5lZCBmdXJ0aGVyIGluIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucw0KICAgICBzZWN0aW9u LiAoVGhlcmUgaXMgYWxyZWFkeSBzaW1pbGFyIHRleHQgdGhlcmUpLg0KDQpPbiAyMDE2LTEwLTA0 IHdlIGF0dGVtcHRlZCB0byBtYWtlIGEgVE9ETyBsaXN0IGZvciB0aGluZ3MgbWlzc2luZyBpbmRy YWZ0LA0Kbm90aW5nIHRoYXQgMjAxNi0xMC0zMSBpcyB0aGUgSW50ZXJuZXQgRHJhZnQgc3VibWlz c2lvbiBjdXQtb2ZmLg0KDQoxLiBTZWN0aW9uIDMuMiAocHJveHkgYmVoYXZpb3IpIHVwZGF0ZWQg dG8gaW5kaWNhdGUgdXNlIG9mIEdSQVNQIHRvIGZpbmQNCiAgIFJlZ2lzdHJhci4gIFRoaXMgbWln aHQgcmVxdWlyZSBHUkFTUCBvYmplY3RpdmUgZm9yIHJlZ2lzdHJhciBkaXNjb3ZlcnkgYmUNCiAg IGFkZGVkLiBDb3VsZCBiZSBkZWZpbmVkIGluIHRoZSBib290c3RyYXAgZG9jdW1lbnQuDQogICBQ cm92aWRlIGFueSBndWlkYW5jZSByZSBHUkFTUCBvcHRpb25zIHNvIHRoYXQgaW1wbGVtZW50YXRp b24gaXMgY2xlYXIuDQogICBNYWludGFpbiBjbGFyaXR5IG9uIGhvdyBhIHByb3h5IC8gcmVnaXN0 cmFyIHdvcmtzIHdoZW4gR1JBU1AgaXMgbm90DQogICBhdmFpbGFibGUgKGUuZy4gcHJveHkgY29u ZmlnIG9yIG90aGVyIGRpc2NvdmVyeSBpcyBhbiBvcHRpb24pDQoNCjIuIEEgZmluYWxpemVkIGZv cm1hdCBmb3IgdGhlIG93bmVyc2hpcCB2b3VjaGVyL2F1dGhvcml6YXRpb24gdG9rZW4gdGhhdCBp cw0KICAgY29tbW9uLg0KICAgQW5kIGhhcyBhIHNpbmdsZSBORVcgbmFtZSB0byBhdm9pZCBjb25m dXNpb24gd2l0aCBwcmlvciBkaXNjdXNzaW9ucyAoIk1BU0ENCiAgIHRva2VuIj8pIFRoZSAibW9k ZSIgb2YgdGhlIE1BU0Egc2VydmVyIChpZiBpdCBkb2VzICJhdWRpdCBtb2RlIiBvcg0KICAgIm93 bmVyc2hpcCB2YWxpZGF0aW9uIikgY291bGQgYmUgaW5kaWNhdGVkIGluIHRoaXMgTUFTQSB0b2tl bi4NCiAgIEtlbnQncyBkcmFmdCBpczogaHR0cHM6Ly9naXRodWIuY29tL25ldGNvbmYtd2cvb3du ZXJzaGlwLXZvdWNoZXIvYmxvYi9tYXN0ZXIvZHJhZnQta3dhdHNlbi1uZXRjb25mLW93bmVyc2hp cC12b3VjaGVyLnhtbA0KICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc1MTUjc2Vj dGlvbi00LjEuNg0KDQogICAqKiogd291bGQgbGlrZSBhIG1vcmUgcHJlc2NyaXB0aXZlIGRvY3Vt ZW50ICoqKg0KDQozLiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1hbmlt YS1ib290c3RyYXBwaW5nLWtleWluZnJhLTAzI3NlY3Rpb24tMy4xLjENCmRvZXMgbm90IHNwZWNp ZnkgYSBHUkFTUCBtZWNoYW5pc20gZm9yIHByb3h5IGRpc2NvdmVyeSwgc2hvdWxkIGl0Pw0KICBt YXggZmVlbHMsICJubyIgYmVjYXVzZSBkZWZpbmluZyBhbiBpbnNlY3VyZSBtb2RlIG9mIEdSQVNQ IGlzIGRpZmZpY3VsdC4NCiAgbWNyIGZlZWxzLCAibm8iIGJlY2F1c2UgZGlzY292ZXJ5IGJ5IG11 bHRpY2FzdCBVRFAgYnV0IHJlcGx5cyBhcmUgYnkgVENQDQogICAgICB3aGljaCBtZWFucyB0aGUg bmV3IG5vZGUgbmVlZHMgdG8gb3BlbiBhIFRDUCBwb3J0IHRvIGdldCBhIHJlcGx5IGJhY2suIFdl DQogICAgICBqdXN0IGhhZCBhIGxvbmcgY29udmVyc2F0aW9uIGFib3V0IFRDUC9VRFAgZXRjIChy ZSBmbGlwcGluZyB0aGUgaGFuZHNoYWtlKQ0KICAgICAgYW5kIHRoaXMgYWRkcyBtb3JlIGNvbmZ1 c2lvbi4NCiAgZ3JvdXAgY29uY2x1c2lvbjogY2xvc2UgdGhpcy4gIk5vIi4gKGFncmVlbWVudCBv biB0aGUgY2FsbCBpcyBub3RlZDsgd2l0aA0KICAgICAgICB0b2VybGVzcyB2b3RpbmcgZm9yIGdy YXNwIGJ1dCBhY2NlcHRpbmcgdGhlIGdyb3VwIGRlY2lzaW9uKQ0KDQoNCk9uIDIwMTYtMTAtMTE6 DQoNCldlIGRpc2N1c3NlZCB0aGUgd2F5cyBpbiB3aGljaCBkcmFmdC1rd2F0c2VuLW5ldGNvbmYt b3duZXJzaGlwLXZvdWNoZXIueG1sDQppbnN0YW50aWF0ZXMgaXRzZWxmIGludG8gSlNPTiwgYW5k IHdlIGRpc2N1c3NlZCBjb25jcmV0ZSBjaG9pY2VzIGZvciBhIHdheQ0KdG8gc2lnbiB0aGlzIG9i amVjdDoNCiAgMSkgSk9TRQ0KICAyKSBKV1QNCiAgMykgUEtDUzcgc2lnbmVkIG9iamVjdA0KDQpX ZSBoYWQgbXVjaCBkaXNjdXNzaW9uIHdoaWNoIHdlIGJhc2VkIHVwb24gc29tZSBtaXMtdW5kZXJz dGFuZGluZ3Mgb2YNCnRoZSB0ZXJtcyBmb3IgdGhlIGZvciB2YXJpb3VzIHN0ZXBzLCBhbmQgYWxz byB0aGlzIHJhcG9ydGV1ciBzdWdnZXN0cw0KdGhhdCB3ZSB3b3JraW5nIHdpdGggZGlmZmVyZW50 IG1lbnRhbCBtb2RlbHMgYXMgdG8gd2hhdCBpcyBnb2luZyBvbi4NClRoYXQgZGlzY3Vzc2lvbiBp cyByYXRoZXIgaGFyZCB0byBjYXB0dXJlIGludG8gbWludXRlcy4NCg0KV2UgZnVydGhlciBkaXNj dXNzZWQgdGhlIGZvbGxvd2luZyBhYnN0cmFjdGVkIHRpbWUgc2VxdWVuY2UgZGlhZ3JhbToNCg0K ICBwbGVkZ2UgICAgICAgICByZWdpc3RyYXIgICAgICAgICAgbWFzYSAgICAgICAgICAgIHZlbmRv cg0KKEEpICA8KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKipNSUMqKioqKioq DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgW2F0ICBtYW51ZmFjdHVyaW5nIHRpbWVd DQoNCihCKSAgLS0tLS1NSUMtLS0tLS0tPiAgW3Byb2JhYmx5IGFzIHBhcnQgb2YgKEQpVExTIENs aWVudENlcnRpZmljYXRlXQ0KKEMpICAtLWF1ZGl0IG5vbmNlLS0+ICBbNS4xIC9yZXF1ZXN0YXVk aXR0b2tlbl0NCiAgICAgICAgW25vbmNlXQ0KKEQpICAgICAgICAgICAgICAgICAgLXJlcSBhdWRp dC10b2tlbi0+DQogICAgICAgICAgICAgICAgICAgICAgWzUuMiAvcmVxdWVzdGF1ZGl0dG9rZW5d DQogICAgICAgICAgICAgICAgICAgICAgU2lnUmVnaXN0cmFyKFtub25jZSArIDgwMi4xQVIgc2Vy aWFsLW51bWJlcl0pDQoNCihFKSAgICAgICAgICAgICAgICAgIDwtLSBbYXV0aHogdG9rZW5dLS0N CiAgICAgICAgICAgICAgICAgICAgICBbNS4zIGFwcGxpY2F0aW9uL2F1dGhvcml6YXRpb24tdG9r ZW5dDQogICAgICAgICAgICAgICAgICAgICAgU2lnTWFzYShbRGV2SURTZXJpYWxOdW1iZXIsIGRv bWFpbkNBY2VydF0pDQoNCihGKSAgPC0tYXVkaXQgdG9rZW4tLS0NCiAgICAgIChvYmplY3QgZnJv bSBFKQ0KDQogICAgIDwtYXR0cmlidXRlcy0tLS0tDQogICAgIC0tLWNlcnQgcmVxLS0tLS0+DQog ICAgIDwtLUxEZXZJRC0tLS0tLS0tDQoNCg0KKEEpIElEZXZJRCBpbnN0YWxsZWQgbXkgbWFudWZh Y3R1cmVyLCBhdCBidWlsZCB0aW1lLiBJbmNsdWRlcw0KICAgIGFuY2hvciBjZXJ0aWZpY2F0ZShz KSBmb3IgbWFudWZhY3R1cmVyLg0KDQooQikgaW5mb3JtYXRpb24gYWJvdXQgdGhlIE5ldyBFbnRp dHkncyBJRA0KKEMpIHVzaW5nIHByb3Zpc2lvbmFsIEVTVCBjb25uZWN0aW9uLCBhbiBhdWRpdCBu b25jZSBpcyByZXF1ZXN0ZWQuDQogICAgc2VjdGlvbiA1LjENCihEKSB0aGUgcmVnaXN0cmFyIGNv bnRhY3RzIHRoZSBNQVNBIGZvciBhbiBhdWRpdCB0b2tlbiAoNS4yKQ0KKEUpIGFuIGF1dGhvcml6 YXRpb24gdG9rZW4gaXMgcmV0dXJuZWQgKDUuMykNCihGKSB0aGUgYXV0aG9yaXphdGlvbiB0b2tl biAod2hpY2ggYWN0cyBhcyBhbiBvd25lcnNoaXAgdm91Y2hlcikgaXMNCiAgICByZXR1cm5lZCB0 byB0aGUgTmV3IEVudGl0eSwgZW5kaW5nIHRoZSBwcm92aXNpb25hbCBwYXJ0Lg0KDQpJbiBvdXIg ZGlzY3Vzc2lvbnMgbGFzdCB3ZWVrIGFuZCB0aGUgd2VlayBiZWZvcmUsIHdlIGhhZCBhIGxvdCBv ZiBkZWJhdGUNCmFzIHRvIHdoZXRoZXIgdGhlIGNvbnRlbnRzIG9mIChFKSBuZWVkcyB0byBoYXZl IGFueSBtZWFuaW5nIHRvIHRoZSBSZWdpc3RyYXIsDQphbmQgaWYgc28sIHdoYXQgbWVhbmluZyBk b2VzIGl0IGhhdmUuDQoNCldlIGhhZCBhIGxvdCBvZiBjb25mdXNpb24gYmV0d2VlbiB0aGUgdGVy bXMgYXVkaXQgdG9rZW4sIGF1dGhvcml6YXRpb24gdG9rZW4NCmFuZCBvd25lcnNoaXAgdm91Y2hl ci4gIChMb29raW5nIGFib3ZlLCBpdCBzZWVtcyByZWFzb25hYmxlIGFzIGF1ZGl0DQp0b2tlbiBh bmQgYXV0aG9yaXphdGlvbiB0b2tlbiBhcmUgbWl4ZWQgdXAgaW4gQyxELEUsIHdpdGggYW4gYXV0 aG9yaXphdGlvbg0KdG9rZW4gYmVpbmcgdGhlIHJlcGx5IHRvIHRoZSAvcmVxdWVzdGF1ZGl0dG9r ZW4gcXVlcnkhKQ0KDQpTb21lIEpTT04gZGlhZ3JhbXMgdGhhdCBjYW1lIGZyb20gIGRyYWZ0LWt3 YXRzZW4tbmV0Y29uZi1vd25lcnNoaXAtdm91Y2hlci54bWwNCih3aGljaCwgZnVsbHkgZm9ybWF0 dGVkIHdhcyBkaXN0cmlidXRlZCBieSBlbWFpbCwgYW5kIGlzIGFsc28gYXQ6DQogICBodHRwOi8v d3d3LnNhbmRlbG1hbi5jYS90bXAvZHJhZnQta3dhdHNlbi1uZXRjb25mLW93bmVyc2hpcC12b3Vj aGVyLTAwLnR4dCApDQoNCnsgICJpZXRmLW93bmVyc2hpcC12b3VjaGVyOnZvdWNoZXIiOg0KICAg IHsgICAgImFzc2VydGlvbiI6ICJsb2dnZWQiLA0KICAgICAgICAgICJvd25lci1pZCI6ICJSZWdp c3RyYXIzMjQ1IiwNCiAgICAgICAgICAidW5pcXVlLWlkIjogIkpBREExMjM0NTY3ODkiLA0KICAg ICAgICAgICAgICAgb3I6ICAidW5pcXVlLWlkIjogWyJKQURBMTIzNDU2Nzg5IiwNCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAiQUFBMTIzNDU2Nzg5ICIsDQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIkNDQzEyMzQ1Njc4OSJdICAgPz8/DQogICAgICAgICAgImNy ZWF0ZWQtb24iOiAiMjAxNi0xMC0wN1QxOTozMTo0MloiLA0KICAgICAgICAgICJub25jZSI6ICI5 ODc5ODc2MjM0ODk1NjciLCAgfQ0KfQ0KDQp7ICAiaWV0Zi1vd25lcnNoaXAtdm91Y2hlcjp2b3Vj aGVyIjoNCiAgICB7ICAgICJhc3NlcnRpb24iOiBbICJsb2dnZWQiLCAib3duZWQiIF0NCiAgICAg ICAgICAib3duZXItaWQiOiB7DQogICAgICAgICAgICAgICAidHlwZSIgIDogWyAiRE4iLCAib3du ZXItY2VydCIsICJDQS1maW5nZXJwcmludCIgXQ0KICAgICAgICAgICAgICAgInZhbHVlIiAgOiAi UmVnaXN0cmFyMzI0NSINCiAgICAgICAgICAgfQ0KICAgICAgICAgICJ1bmlxdWUtaWQiOiB7DQog ICAgICAgICAgICAgICJ0eXBlIiA6IFsic2luZ2xlIiwgImxpc3QiLCAib3RoZXIiXQ0KICAgICAg ICAgICAgICAidmFsdWUiIDogIkpBREExMjM0NTY3ODkiLA0KICAgICAgICAgICAgICBvcjoNCiAg ICAgICAidmFsdWUiOiBbIkpBREExMjM0NTY3ODkiLCAgIkFBQTEyMzQ1Njc4OSAiLCAgIkNDQzEy MzQ1Njc4OSJdDQogICAgICAgICBvcjoNCiAgICAgICAidmFsdWUiOiA8b3RoZXI+DQogICAgICAg ICAgImNyZWF0ZWQtb24iOiAiMjAxNi0xMC0wN1QxOTozMTo0MloiLA0KICAgICAgICAgICJub25j ZSI6ICI5ODc5ODc2MjM0ODk1NjciLCAgfQ0KfQ0KDQogICA8dm91Y2hlciB4bWxucz0idXJuOmll dGY6cGFyYW1zOnhtbDpuczp5YW5nOmlldGYtb3duZXJzaGlwLXZvdWNoZXIiPg0KICAgICAgICA8 YXNzZXJ0aW9uPnZlcmlmaWVkPC9hc3NlcnRpb24+DQogICAgICAgIDxvd25lci1pZD5vd25lci0y MzQ1MjM0NTwvb3duZXItaWQ+DQogICAgICAgIDx1bmlxdWUtaWQ+QUFBMTIzNDU2Nzg5PC91bmlx dWUtaWQ+DQogICAgICAgIDx1bmlxdWUtaWQ+QkJCMTIzNDU2Nzg5PC91bmlxdWUtaWQ+DQogICAg ICAgIDx1bmlxdWUtaWQ+Q0NDMTIzNDU2Nzg5PC91bmlxdWUtaWQ+DQogICAgICAgIDxjcmVhdGVk LW9uPjIwMTYtMTAtMDdUMTk6MzE6NDJaPC9jcmVhdGVkLW9uPg0KICAgIDwvdm91Y2hlcj4NCg0K VGhlIG93bmVyIGNlcnRpZmljYXRlOg0KICAgICAgIE93bmVyIENlcnRpZmljYXRlOiAgVGhlIHRl cm0gIm93bmVyIGNlcnRpZmljYXRlIiBpcyB1c2VkIGluIHRoaXMNCiAgICAgICBkb2N1bWVudCB0 byByZXByZXNlbnQgYW4gWC41MDkgY2VydGlmaWNhdGUsIHNpZ25lZCBieSB0aGUNCiAgICAgICBk ZXZpY2UncyBtYW51ZmFjdHVyZXIgb3IgZGVsZWdhdGUsIHRoYXQgYmluZHMgYW4gb3duZXIgaWRl bnRpdHkNCiAgICAgICB0byB0aGUgb3duZXIncyBwcml2YXRlIGtleSwgd2hpY2ggdGhlIG93bmVy IGNhbiBzdWJzZXF1ZW50bHkgdXNlDQogICAgICAgdG8gc2lnbiBhcnRpZmFjdHMuICBUaGUgb3du ZXIgY2VydGlmaWNhdGUgaXMgdXNlZCBieSBkZXZpY2VzIHdoZW4NCiAgICAgICB2YWxpZGF0aW5n IG93bmVyIHNpZ25hdHVyZXMgb24gc2lnbmVkIGRhdGEuICBUaGUgb3duZXINCiAgICAgICBjZXJ0 aWZpY2F0ZSBpcyBmb3JtYWxseSBkZWZpbmVkIGJ5IHRoZSAib3duZXItY2VydGlmaWNhdGUiDQog ICAgICAgY29udGFpbmVyIGluIHRoZSBZQU5HIG1vZHVsZSBkZWZpbmVkIGluIFNlY3Rpb24gNy40 Lg0KDQpUaGlzIGltcGxpZXMgdGhhdCB0aGUgbWFudWZhY3R1cmVyIGlzc3VlcyB0aGUgb3duZXIg Y2VydGlmaWNhdGUgdG8gdGhlDQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0 Zi1uZXRjb25mLXplcm90b3VjaC0wOSNzZWN0aW9uLTYuMw0KDQpNQ1IgZHVnIHVwIGFuIGVtYWls IGZyb20gMjAxNCwgd2hpY2ggaXMgYXQ6DQogIF5eXl5eIGNvdWxkIHRoZXJlIGJlIGEgaGllcmFy Y2h5IG9mIHRoZXNlPw0KICBzZWU6DQogIGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJj aC9tc2cvNnRpc2NoLXNlY3VyaXR5LzJrT2JKTGtMbGh1SS1IVTlzNXlxZlJtMG4wMA0KDQphbmQg YXNrZWQgZm9yIGZlZWRiYWNrIG9uIHRoaXMsIHdoaWNoIHdhcyByZWNlaXZlZCBsYXN0IHdlZWsu DQoNCkFDVElPTjogbWNyIHRvIGZpbmQgc29tZSB0ZXh0IGFib3V0IHdoeSBKU09OIHNlZW1zIHRv IGJlIHByZWZlcnJlZC4NCg0KVGhpcyBkaWFncmFtIGdyZXcgdG8gZXhwbGFpbiB0aGUgYXVkaXQt b25seSBzY2VuYXJpbywgYnV0IGlzIHByb2JhYmx5IG5lZWRzDQp0byBiZSByZXZpc2VkIHRvIHNo b3cganVzdCB0aGUgYXVkaXQtb25seSBzaXR1YXRpb24uDQoNCg0KICAgTUFTQSAtLS0tLS0gTUFT QS10b2tlbiAtLS0tLS0tLS0tLS0tLS0tLT4gICBSZWdpc3RyYXINCiAgICAgICAgICAgICAgICBc LS0gYXVkaXQtbG9nIChNQVNBIHNpZ25lZCkuLi4uLi4uLi4uLnwNCiAgICAgICAgICAgICAgICAg XCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHYgIHByb2NlZWQgb25seSBpZiBs b2cgaXMgIk9LIiAobm8gdW5leHBlY3RlZCBlbGVtZW50KQ0KICAgICAgICAgICAgICAgICAgXC0t IFhYWCAgICAgICAgICAgICAgICAgLi4uLi4uLi4uLi4ufCAgLS0tLS0tLS0tLS0tLS0tLS0tLS0+ ICAgUGxlZGdlIChDbGllbnQpDQogICAgICAgICAgICAgICAgICAgICAgICBvd25lcnNoaXAtdm91 Y2hlciAobWFudWZhY3R1cmVyIHNpZ25lZCkNCiAgICAgICAgICAgICAgICAgICAgICAgICAgVmFs aWRhdGlvbjogc2VlIHNlY3Rpb24gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWll dGYtbmV0Y29uZi16ZXJvdG91Y2gtMDkjc2VjdGlvbi02LjMNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIDEpIG1hbnVmYWN0dXJlciBzaWduYXR1cmUgb24gdm91Y2hlcg0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgMikgcGxlZGdlIHNlcmlhbCBpbiB2b3VjaGVyIG1hdGNoZXMN CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDMpIG93bmVyLWlkIGluIHZvdWNoZXIgaXMg dmFsaWRhdGVkDQogICAgICAgICAgICAgICAgICAgICBvciBhdXRob3JpemF0aW9uLXRva2VuL2F1 ZGl0LXRva2VuIChNQVNBIHNpZ25lZCkNCiAgICAgICAgICAgICAgICAgICAgICAgIG5lZWQgdG8g ZWxpbWluYXRlIG9uZSB0ZXJtLiBNQVg6IGNvcnJlY3QgdGVybSBpcyBhdWRpdC10b2tlbg0KICAg ICAgICAgICAgICAgICAgICAgICAgYXV0aG9yaXplcyB0byBqb2luIHRvIGRvbWFpbiBpZGVudGlm aWVkIHdpdGggU0hBMjU2IGhhc2ggb2YNCiAgICAgICAgICAgICAgICAgICAgICAgIHB1YmxpYyBr ZXkgb2YgQ0Egb2YgZG9tYWluDQoNCiAgICAgICAgICAgICAgICAgICAgICAgIENvbnRlbnRpb25z Og0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICBmb3JtYXQvY29udGVudCBvZiAib3duZXIt aWQiIGluIG93bmVyc2hpcCB2b3VjaGVyOg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGp1c3QgU0hBMjU2IChNQVgpIG9yIEROIG9mIGEgY2VydGlmaWNhdGUgKEtlbnQgb3JpZ2lu YWwgcHJvcG9zYWwpDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtIEROIHJl cXVpcmVzIE1BU0EvbWFudWZhY3R1cmVyIHRvIHJ1biBQS0kgc2VydmljZQ0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgLSBLZW50OiBUcnVzdC1tb2RlbCBvZiBwdWJsaWMtQ0Eg aXMgZGFuZ2Vyb3VzDQoNCg0KU2luY2UgdGhlIGF1ZGl0IGxvZyBnb2VzIHRvIHRoZSByZWdpc3Ry YXIsIGFuZCB0aGUgdG9rZW5zL3ZvdWNoZXIgZ29lcyB0byB0aGUNCnBsZWRnZSwgdGhleSBzaG91 bGQgYmUgaW5kZXBlbmRlbnRseSBzaWduZWQsIHNvIHRoYXQgdGhleSBjYW4gYmUgcGFzcyBvbg0K c2VwYXJhdGVseS4NCg0KVGhlIHBsZWRnZSBoYXMgdG8gdmVyaWZ5IHRoZSBNSUMsIG5lZWRzIHRo ZSBtYW51ZmFjdHVyZXIgc2lnbmluZyBrZXkuDQoNClRoZSByZWdpc3RyYXIgaGFzIHRvIHZlcmlm eSB0aGF0IHRoZSBhdWRpdC1sb2cgaGFzIHByb3Blcmx5IHNpZ25lZCBieSB0aGUNCk1BU0EuDQoN CmF1ZGl0LXRva2VuIGlzIGEgc3Vic2V0IG9mIHRoZSBhdWRpdC1sb2csIGlzIGEgc3RhdGVtZW50 IGJ5IHRoZSBNQVNBIHRoYXQgdGhlDQpNQVNBIGhhcyBsb2dnZWQgdGhlIGNsYWltLg0KDQpBbiBh dXRob3JpemF0aW9uIHRva2VuL2F1ZGl0LXRva2VuIGlzIGFuIG9iamVjdCBzaWduZWQgYnkgdGhl IE1BU0Egc2VydmVyLA0Kd2hpY2ggaXMgc2VudCB0byB0aGUgcGxlZGdlLCBhbmQgYXV0aG9yaXpl cyB0aGUgcGxlZGdlIHRvIGpvaW4gYSBuZXR3b3JrLA0Kbm90aW5nIHRoYXQgdGhpcyBhY3Rpdml0 eSBoYXMgYmVlbiBhdWRpdGVkIChsb2dnZWQpLg0KDQpBbiBvd25lcnNoaXAgdm91Y2hlciBjb250 YWlucyB0aGUgUEtDUy1uYW1lIChETikgb2YgdGhlIHBhcnRpY3VsYXIgZG9tYWluIHRvDQpqb2lu Lg0KDQoNCg0KDQotLQ0KTWljaGFlbCBSaWNoYXJkc29uIDxtY3IrSUVURkBzYW5kZWxtYW4uY2E+ LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MNCiAtPSBJUHY2IElvVCBjb25zdWx0aW5nID0tDQoN Cg0KDQoNCg0K --_003_432E7E2A76764F05B17DBCBC4E370DAFjunipernet_ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: signature.asc Content-Disposition: attachment; filename="signature.asc"; size=474; creation-date="Mon, 17 Oct 2016 21:24:09 GMT"; modification-date="Mon, 17 Oct 2016 21:24:09 GMT" Content-ID: <9A4133C1EDAA6B4EBA54CFFA7F649828@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0NClZlcnNpb246IEdudVBHIHYxDQoNCmlRRVZB d1VCV0FUZlpZQ0xjUHZkME4xbEFRSVl4QWdBcGpHV0VheDRCNUlVaktPekhRSUNWVjFjT1AwRjRN UzINClk2bS9USVJEdEprWU5UakhweUErbVl1K0IrTFJzNGx0YjBPUWFab3BsT2I4RGNmbHVSbW91 WmhmSVJYbUFnNk8NCnNPazhKdUhrVEsyT2xzWmNtMEVHRFB5WlBjTDNCODVGMTNGaFBTeUZMbHU2 RVJLNUtqb3N5My9PUURRdlFMd28NCkNTWjMwUnd1VVczZDVyZ1ljSzYxTnEyVWRsWkJwdjhDOXcw Y3RmbjlSRUp1S0F2MVpvOUdvSXJ4Q0ttZjI3eDcNClEvT0VjK1BBRWxLQ28vYTNoRkw2RnNBcldX U0d4Rk1UNVp0a3ozUC9DODRuenNucGVSRU5OVEZKdmtPT3c3bXkNCjJLRHlycHI4TlJiWkFhcGx0 Ukh3NHdYdE92VHFkdEtzTUpFQ1ZmWHQ0b01UWjJIeFhIS1Fsdz09DQo9czUycQ0KLS0tLS1FTkQg UEdQIFNJR05BVFVSRS0tLS0t --_003_432E7E2A76764F05B17DBCBC4E370DAFjunipernet_ Content-Type: text/plain; name="ATT00001.txt" Content-Description: ATT00001.txt Content-Disposition: attachment; filename="ATT00001.txt"; size=160; creation-date="Mon, 17 Oct 2016 21:24:09 GMT"; modification-date="Mon, 17 Oct 2016 21:24:09 GMT" Content-ID: <66D1BB8F6B950D4FA8F0E89FBD20EA61@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFuaW1hLWJv b3RzdHJhcCBtYWlsaW5nIGxpc3QNCkFuaW1hLWJvb3RzdHJhcEBpZXRmLm9yZw0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hbmltYS1ib290c3RyYXANCg== --_003_432E7E2A76764F05B17DBCBC4E370DAFjunipernet_-- From nobody Wed Oct 19 02:54:36 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D10E12945B; Wed, 19 Oct 2016 02:54:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7YlNVWS_X_or; Wed, 19 Oct 2016 02:54:33 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0101.outbound.protection.outlook.com [104.47.2.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A10F512985D; Wed, 19 Oct 2016 02:54:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector1-btconnect-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=qwS/t8ypSpzTQeas/CJyRZWhS8xLj3RJvuzCuU5rp24=; b=RhlKQjIsTMiB5DyKx7nnAgby0zt9bsoS9bO/nP0lTadiYJNErcVUal1KbYiYoeO6ATDz7JvRjiLhcQNdiIWdupGbWQxso4ByaOUcH0WB6l6V8IxGAL4kw/zKu+CBseKtgavljRcJMAx1j8WrT6XqffFpi7/fumNCdvUFq5zTGAA= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=ietfc@btconnect.com; Received: from pc6 (81.159.102.255) by DB6PR0701MB2997.eurprd07.prod.outlook.com (10.168.84.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.5; Wed, 19 Oct 2016 09:54:30 +0000 Message-ID: <03bc01d229ee$723077e0$4001a8c0@gateway.2wire.net> From: t.petch To: Alexey Melnikov , Stephen Farrell References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> Date: Wed, 19 Oct 2016 10:51:57 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Originating-IP: [81.159.102.255] X-ClientProxiedBy: DB4PR06CA0029.eurprd06.prod.outlook.com (10.160.40.157) To DB6PR0701MB2997.eurprd07.prod.outlook.com (10.168.84.135) X-MS-Office365-Filtering-Correlation-Id: 507eb5c4-8e3f-4d20-7b13-08d3f805ebec X-Microsoft-Exchange-Diagnostics: 1; DB6PR0701MB2997; 2:657T4UIUhS+pUZPZg695tr/1ygdXLS5tKUKJHyDQyphox2EnuC8mKEB+bP1BrL8hAeyRt3IpZffxaVHvUvLdyvW3Xjk8eJtUK1B7eiNaY6kQ+vdNIvjbKerlolArLJ/e7CAh6xxpPxE4lAiE3MHV4V/EQv1PkBsGFjMZ0oLSZFhTEU1tpldyPwvFdRcgLtcS71KUEKjLKOByf+NOfujH7w==; 3:hpA01mgPC6mAvDc95OJ1FbqrvGDt3JfvuJEpTptqJDMIks5oIJ1OCoh1x+6pbTKTeDc0bTeacicOxk5TTs8/cOPiZyKXb5doBS5URnC8iUJbkeHkKY0MKuwS9KafcFVOlurQ+Dq4qPT7xjoKfRkEsg==; 25:FSh2DqHZ9PKgRwWbbkrY5tdm0FQtCvlHxWNgneymQV7NoWM0Gijf5BTdyG92mEMVPH5S9WfksOe1tGcJH0fZsCM8D+STXE41v4z8m1BiJwJL3RoVhGL0ggK1T74Y0OVQ+SyCoNfgpYrWS6nN1fofcHKShVsljT65ta4I+Vhi+WWFNKxlIN91n/61xEJ3JAiblDAKNqqLH6LImcDNp3dYKrU7IwlOrcGSsgB/W0VDYWzLe+KnYb0CxGMw32fQWFroNTNUURcokPuwpUbzoGZ0cyIAsQ78I2Edz1+qD9fh970gJOF7lppx5z63WHtaj7Fl5ivY6oLIy68kOYa42Un8Rr7FCXg1nLo2WJlfVpf0WvihzRrU4FZF/g6FBb+Sn15AJnVme7UUROFjzQteXiAFE0AJ6p+rJ5krtUjbR6mUxCU= X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB6PR0701MB2997; X-Microsoft-Exchange-Diagnostics: 1; DB6PR0701MB2997; 31:ncvCykaVPSaLHsR22fGdMItYfw0Ik5SlVikv7xiRy3pC7+T5vYKJpkIMnnd3IZtnQPDOsVVlGfRP4CHQbMrMB94+I4K6w+z/J/f/EMbbKuyB3nQLDxAWm+4euCABT0LzuekCI6DeEyBHLWjrpC1y5oxW1833CXWfOOVLWPVVrL2VFa5t/QMXHG57+d1YOK22d0BuxwoxWHakSvJleDRuawVzkL9oR34B5HSXDkO20vv6oN9TO/iX8MIGYTHxXnUeo6v1KEGKs6qbOgDYmJjdfg==; 4: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(32856632585715)(158342451672863)(192374486261705); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046); SRVR:DB6PR0701MB2997; BCL:0; PCL:0; RULEID:; SRVR:DB6PR0701MB2997; X-Forefront-PRVS: 0100732B76 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(7916002)(13464003)(24454002)(189002)(377454003)(199003)(15975445007)(1456003)(33646002)(61296003)(97736004)(66066001)(6666003)(4720700003)(50226002)(9686002)(1556002)(44736004)(50466002)(19580395003)(92566002)(44716002)(189998001)(50986999)(62236002)(68736007)(5001770100001)(77096005)(19580405001)(47776003)(2906002)(8666005)(81686999)(76176999)(3846002)(4326007)(230700001)(84392002)(230783001)(81166006)(6116002)(7846002)(586003)(8676002)(81156014)(81816999)(105586002)(86362001)(116806002)(93886004)(5660300001)(106356001)(42186005)(14496001)(305945005)(23756003)(101416001)(7736002)(74416001)(7059030)(7726001)(7756004); DIR:OUT; SFP:1102; SCL:1; SRVR:DB6PR0701MB2997; H:pc6; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:0; LANG:en; Received-SPF: None (protection.outlook.com: btconnect.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; DB6PR0701MB2997; 23:y287Heeg4GI55yyTS05z7/GV4xdEGzUQXru49?= =?iso-8859-1?Q?Vgs0AwVzVhm6jDVk6VKRaZMUFhDk/zfdu8B6DZIzXjbMIUoTLxQFIR7v98?= =?iso-8859-1?Q?DIKjTa9uBF4acp0jbIDZQPMUnANPHUnRn1idkU7jvUr2yY1jr2FKiK7Irf?= =?iso-8859-1?Q?DXv8s5cwXn9zP/1ny2t8ItkpSfC7rpwyXGx2GTuQu0R04DjQFPZDPGWaF2?= =?iso-8859-1?Q?yfG+sOqwsqSIdcUlH04HEw9MzcqXk8FA/xDxEu4G8yfSli/sU3ytHSInsJ?= =?iso-8859-1?Q?nNvLzGksfC7n2rHW94WtAystG6qm+s6EQGETM552VW0hcYeBDfIHqzAKEB?= =?iso-8859-1?Q?BH5eVcVBVeNuqXJVHeKq2SQxTbfkxOp9wLHnfzG43oeIucO8/0ApsrT8Gj?= =?iso-8859-1?Q?D498cUPVfToQKOz7N3L5s5Jc/d7SAIgb63qdY5ushAcm0m0zLMSMdLdiym?= =?iso-8859-1?Q?iX+Or9Yxd1u0+7my93omAjKRP+zz0U4r8J6voyLbUD/dak3pY3/z1ZwDXf?= =?iso-8859-1?Q?tiAC2Xk04+K2Z6bb2ojdDJBmwp/gI9aRlJd6yuAKl2rrpsOvuzO70mgykb?= =?iso-8859-1?Q?z1bJ01JCvTPH1/zFU45fiSOAl+lEInB0stdpyWPoiM6rcT9BkIjJpIRMCw?= =?iso-8859-1?Q?5o6Lf5f15vKPjigz8lgv+S0wrGzlf23jo4IKFxBpv5pg2Jh82zq34ZItAN?= =?iso-8859-1?Q?Zi9mceSlbsZN+Nh2WXt+KR3jgk84uWldY7v0Yw9Cxx76aamjxI+u4lOGdj?= =?iso-8859-1?Q?lXG/MFrAtjG+PZeyuyUlidXLO+q6RL8iDt8CUulqjD18M+4GLNM9CPWoKG?= =?iso-8859-1?Q?QjPKILjeN90MoDwBLZblYWYLhgmTRixTmW8jk9aUKgcg4FlKJ4S2XzBVnO?= =?iso-8859-1?Q?eR8UHiH97KbRyCLcPccTtPsI8CPMrDATrEEnVm11KJ5TJUx1MBU2FiVtkr?= =?iso-8859-1?Q?baOnU1yvBgMc49g3XlZQ56x9aCEmtVVWPZBS4ZUAWM9N7xHxvJbkUC/8Y5?= =?iso-8859-1?Q?FoYVdptZggFkemmhD0Y+Z+O2Q19dfaXMNJNHSDMrijBdJbhf2E8WlUWJpH?= =?iso-8859-1?Q?UPiSLRY9na4HcFN7NVMCTS6YQ+7skk7zwymrmh3l/DydsRQkbIjnP50tiG?= =?iso-8859-1?Q?OnYM0B9q1NKCm4FU8piF6tSMiKH5YPpuWLRQqhOc2uJde5SuWR0Bttg0OW?= =?iso-8859-1?Q?d7kja40t+DTJtaPcxRAXqwit7QI6jlRn+0iTClH39n5BmalsMUHn5vrPkG?= =?iso-8859-1?Q?FHJsEX/NcI79FjrppM8xAn4BzEpJScd0cl+6Bpb+S5CesFi/WpBtRRa141?= =?iso-8859-1?Q?lC4jD9v0tEvElypuROwjifXKU05b3sR4T39tMn3exZopreFoj8S6vKiyh8?= =?iso-8859-1?Q?MMLnM6c0DxDtBomcwb99D+yVLS9NtB+Qbh/Kbcz9OiLVlTmRAcsXgP0D4I?= =?iso-8859-1?Q?q+VMvNz7T+qW5sSeMwnGYTIw7ld3eVLEb52TgTZkAXJTNdwA7KwaFTkLN1?= =?iso-8859-1?Q?uZl9kfJbeFi5QA8gjgNA+NeYPLIbkzvFSL04MgrFCrChSglx3+EeqeSYs0?= =?iso-8859-1?Q?dSOMxH6DMx4Hc5hRsyD2xnfXRPyBWTRmqhn4osa47BWL+mheb?= X-Microsoft-Exchange-Diagnostics: 1; DB6PR0701MB2997; 6:Fb4+wAM7mMGau9rTj6BCQd8yhZWnZXlrjga2XwTsfND0hlU0gF/sMHGir0eNqwdnYtAISMCocFNr6FHrEU0G5MAtJ6KWk3fp3qQRRmeX9rMnjEafuAiRsCkA1MhFQs/Das1Db1x+hKH/xFLmJZgBCtEjY73Nm78pKUDRorVW6CEsERz4NdcLD/lzZD9zBH9oxQ+Vk90x1Qr5ZQlcmuhF23NMFqBN+dBtlkn3U9ZMb3WycZlJT/2iWOGthx9/w4Vs7OJwoFuHqo+1iV0StdcYiHbxfnCAb1KwSNm7+w3fX5Gj8TEZ2304ZCpU+gfalP3J; 5:GGVfFfGCUckM8slNQ+mjwm8inutUNC1UykFg0GruH/Yt5GeRXT4pe5EnwkEEjPx5jHf+J18gaLHV8g0I8xXqDwk7WbDRmPPpkRI2/e48wcmwRFufyqz613eAOwgDtM+4yT8wXn8py5jlQdAHXPd2Zg==; 24:bAG9iz5BG9/0Tasmo3oouOJPTlRiDrA2UUPJU5MbT1otpXNXvg9ymym+be2UtkMITTr8CJWTrX+noQ5B1cnnMiQAfkQ2zFWOjZUya9V9oZM=; 7:kjcRvo6HlIhaZggUN9QDApGgZt/oe3al57w1DKbpa8w/ApToTCdQv0SVguxzPZazRY7Ho3Q7kaJmbt8BMDdtIKodBvEQolx8lX4LCFTdIOL1vfC3GVBimGbKyotxXvZjqnOTwpA1sSLdjS9xJKSLaOKeY3wbwSugIBLrPohu/SJXtthkmSSxXKMn5uKue29rrxO7GmPqElskk8BmZnH0lYUYW2BWD/nErsxC+ZyB1xm053xgTNUMTGoy2kdkrZ2qwYLahTrUeLEYQMNy+Yt8JT0z7+3hC6//JoCOCcFGNPUTwI43FtQawZn1NLjc5YrOZED3qW/QzEXfmsCaw59URN2u9pyf/1Vgcy5JWPjfMbA= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Oct 2016 09:54:30.1797 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0701MB2997 Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org, The IESG Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Oct 2016 09:54:35 -0000 ----- Original Message ----- From: "Alexey Melnikov" To: "Stephen Farrell" Sent: Monday, October 17, 2016 10:02 AM > Hi Stephen, > > > On 17 Oct 2016, at 09:25, Stephen Farrell wrote: > > > > > > Hi Alexey, > > > > Kent was asking me about this offlist, and I'm also a bit > > puzzled now... > > > > On 13/10/16 17:00, Kent Watsen wrote: > >>> So basically you have 2 choices: you either reference RFC 2818 > >>> (and don't reference RFC 6125 at all) or you add more information > >>> about how to use RFC 6125. > > > > Isn't that a false dichotomy? At least if by "add more" > > you mean, "you must add all of things"? > > No. Just saying "Use RFC 6125" is incorrect, because it provides a template, not a fully specified set of rules. So any document referencing it need to prescribe which identity types are used (CN-ID, DNS-ID, etc) and whether wild cards are allowed in any of them. > > I didn't imply that a spec needs to support all identity types. Most likely NETCONF should support DNS-ID. Possibly CN-ID. SRV-ID is only used if something like DNS SRV is used for server discovery. Alexey I realise that this has now been resolved by eliminating all reference to RFC6125 but ... When I look at RFC7589, all I see is ' The NETCONF client MUST check the identity of the server according to Section 6 of [RFC6125]. ' Admittedly, this was June 2015 and so a long time ago in security terms but I am still surprised at the present discussion about how to verify server identity! Tom Petch > > But see > > below... > > > >> > >> Regarding choice #1: Scanning the RESTCONF draft, the only reference > >> to RFC 6125 is happening in this section (Section 2.4), so switching > >> to RFC 2818 would be fairly easy. Presumably this section would be > >> rewritten to point to RFC 2818, Section 3.1 instead. > >> > >> Regarding choice #2: would adding to the beginning of this section > >> (Section 2.4) something like the following be okay? "RESTCONF > >> servers using DevID certificates MUST configure their certificates > >> according to IEEE-802.1AR-2009, otherwise RESTCONF servers SHOULD > >> configure their certificates according to the guidelines in Section 3 > >> of RFC 6125." > > > > Actually, I'd have thought that 6125, appendix B would help > > here - why wouldn't the same as is used for netconf [1] > > work here? If that works, I'd just refer to that and we > > should be fine. (And it'd be nice if we get the benefit > > that the same server cert can work for both too I guess.) > > > > Cheers, > > S. > > > > [1] https://tools.ietf.org/html/rfc6125#appendix-B.7 > > > > > >> > >> > >> Kent > > > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > From nobody Wed Oct 19 02:58:40 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 308D312959F; Wed, 19 Oct 2016 02:58:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=hY0tEBzm; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=sZaaQEST Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LLOT9SOKJR3o; Wed, 19 Oct 2016 02:58:32 -0700 (PDT) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D4F512985D; Wed, 19 Oct 2016 02:58:31 -0700 (PDT) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id C818C208D8; Wed, 19 Oct 2016 05:58:30 -0400 (EDT) Received: from web5 ([10.202.2.215]) by compute6.internal (MEProxy); Wed, 19 Oct 2016 05:58:30 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=dyZI2lwFC8k/usXVolzLHzZLAgE=; b=hY0tEB zm6jCeN9cUYwQ8woMYzMH6WThKkVXeLIaH1ZQf1i7GWfPsVXz2iGLY+pemZtY7Av jzcPkXiB91h7IJBXAvUszcUj2RAOLJgnPqJLhHBcX7R0QcFfXTx9q5fCvKwYlxd6 gdJ13am2pTJUaoMGNGi/RBLyXRlY0Mhv/VT4Y= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=dyZI2lwFC8k/usX VolzLHzZLAgE=; b=sZaaQESTS271zAp5cL9CsUGwDjgMZ3PIPWWAJM2pynmvkp8 eVbQqO0M0Cw7wz9spTky6bSZ39b9JqTzOjz1VMlE5VSYqfij2WkMHdL0ydlW+Zsr FdyvymHaBYcWzDRfwvAOK/prpjbPyw0qa+/kSvSisi2XwPQuVEhetmZCjwHk= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 9A611974DF; Wed, 19 Oct 2016 05:58:30 -0400 (EDT) Message-Id: <1476871110.666784.760651193.04B9D416@webmail.messagingengine.com> X-Sasl-Enc: mviXqaTJ9EY127J3yDa0IpN6fG5tj+OMy9i19dEE5XUj 1476871110 From: Alexey Melnikov To: "t.petch" , Stephen Farrell MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-8de8db3f Date: Wed, 19 Oct 2016 10:58:30 +0100 In-Reply-To: <03bc01d229ee$723077e0$4001a8c0@gateway.2wire.net> References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> <03bc01d229ee$723077e0$4001a8c0@gateway.2wire.net> Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org, The IESG Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Oct 2016 09:58:34 -0000 Hi Tom, On Wed, Oct 19, 2016, at 10:51 AM, t.petch wrote: > ----- Original Message ----- > From: "Alexey Melnikov" > To: "Stephen Farrell" > Sent: Monday, October 17, 2016 10:02 AM > > > Hi Stephen, > > > > > On 17 Oct 2016, at 09:25, Stephen Farrell > wrote: > > > > > > > > > Hi Alexey, > > > > > > Kent was asking me about this offlist, and I'm also a bit > > > puzzled now... > > > > > > On 13/10/16 17:00, Kent Watsen wrote: > > >>> So basically you have 2 choices: you either reference RFC 2818 > > >>> (and don't reference RFC 6125 at all) or you add more information > > >>> about how to use RFC 6125. > > > > > > Isn't that a false dichotomy? At least if by "add more" > > > you mean, "you must add all of things"? > > > > No. Just saying "Use RFC 6125" is incorrect, because it provides a > template, not a fully specified set of rules. So any document > referencing it need to prescribe which identity types are used (CN-ID, > DNS-ID, etc) and whether wild cards are allowed in any of them. > > > > I didn't imply that a spec needs to support all identity types. Most > likely NETCONF should support DNS-ID. Possibly CN-ID. SRV-ID is only > used if something like DNS SRV is used for server discovery. > > Alexey > > I realise that this has now been resolved by eliminating all reference > to RFC6125 but ... > > When I look at RFC7589, all I see is > > ' The NETCONF client MUST check the identity of the server according > to > Section 6 of [RFC6125]. ' > > Admittedly, this was June 2015 and so a long time ago in security terms > but I am still surprised at the present discussion about how to verify > server identity! I was not on IESG at the time. So arguably this RFC is also slightly underspecified. If it helps, I can write down specific text to be added. > Tom Petch > > > > But see > > > below... > > > > > >> > > >> Regarding choice #1: Scanning the RESTCONF draft, the only > reference > > >> to RFC 6125 is happening in this section (Section 2.4), so > switching > > >> to RFC 2818 would be fairly easy. Presumably this section would be > > >> rewritten to point to RFC 2818, Section 3.1 instead. > > >> > > >> Regarding choice #2: would adding to the beginning of this section > > > >> (Section 2.4) something like the following be okay? "RESTCONF > > >> servers using DevID certificates MUST configure their certificates > > >> according to IEEE-802.1AR-2009, otherwise RESTCONF servers SHOULD > > >> configure their certificates according to the guidelines in Section > 3 > > >> of RFC 6125." > > > > > > Actually, I'd have thought that 6125, appendix B would help > > > here - why wouldn't the same as is used for netconf [1] > > > work here? If that works, I'd just refer to that and we > > > should be fine. (And it'd be nice if we get the benefit > > > that the same server cert can work for both too I guess.) > > > > > > Cheers, > > > S. > > > > > > [1] https://tools.ietf.org/html/rfc6125#appendix-B.7 > > > > > > > > >> > > >> > > >> Kent > > > > > > > _______________________________________________ > > Netconf mailing list > > Netconf@ietf.org > > https://www.ietf.org/mailman/listinfo/netconf > > > From nobody Wed Oct 19 04:28:33 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC6C5129981 for ; Wed, 19 Oct 2016 04:28:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U5kzPq7LQC-m for ; Wed, 19 Oct 2016 04:28:29 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40102.outbound.protection.outlook.com [40.107.4.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17612129952 for ; Wed, 19 Oct 2016 04:28:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector1-btconnect-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=XYB0SVRP55hr065peGlgYwtj/XP80fUHY1TKHTVTFWg=; b=UQEBd0yA8sHYE/w+tuPw2TB6O7YostQKoDy6AmGhjuA1UQu5i42at2zVBkE9nGjFGD/MzMJs3IIPq9ojlXNTAES+ywQcHDAsS4bdBHThuxjoEMI6kqc+CQ/Yn73nEfD0pqkORrZK3D3Ql1DuLy7t5d8LqvpubM6xD0kz9cHo2DA= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=ietfc@btconnect.com; Received: from pc6 (81.159.102.255) by VI1PR0701MB3007.eurprd07.prod.outlook.com (10.173.72.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.679.4; Wed, 19 Oct 2016 11:28:26 +0000 Message-ID: <00a201d229fb$91741640$4001a8c0@gateway.2wire.net> From: t.petch To: Alexey Melnikov , Stephen Farrell References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> <03bc01d229ee$723077e0$4001a8c0@gateway.2wire.net> <1476871110.666784.760651193.04B9D416@webmail.messagingengine.com> Date: Wed, 19 Oct 2016 12:23:55 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Originating-IP: [81.159.102.255] X-ClientProxiedBy: DB4PR05CA0021.eurprd05.prod.outlook.com (10.160.40.31) To VI1PR0701MB3007.eurprd07.prod.outlook.com (10.173.72.149) X-MS-Office365-Filtering-Correlation-Id: 1c5c1d0e-e538-4d1f-8e68-08d3f8130b48 X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 2:ugt4YzMjE5anwvMJY5q19K4ShUJ7pRjdrGy0YJCNrSs+4nUGPlAD3WLKRy3UF0kGt2wMr/Glepg40myDc8nBifosFKSqqBsr28CINsOF2toBcPhF7A5aFhf4vpN/G7Dt1Dbi32cxJ0kX5YqHzSwz+y0EDTFVUjfFpIJbyzioLOjtxL7/5t0uAmxFo/bhIKg6x4G0u+G9fWBFL9I/KWjlhw==; 3:taGDtc1DUGrpQ1qckSG9WOQLV+KAbXHpzvCn73QTLd1A8LOJES3MctEqiE16iYQh1tFF1I6ZGdjl+3unDExTYBByTRibFYab5e9m5OMS3dBLCdBWQJHbn6tKjVPrLoh+OXasQDww3em/AM9FKbNS9g== X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:VI1PR0701MB3007; X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 25: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 X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 31:hCD6giaFvT3RWg1wBgZBftPlXP2fpi0oDZYEpRdzS/5zUl3j9klFs8rbuwDBzlog92Qf/NG/Lsc3vNQUTn3Yi9LvQO39C+pcbMsfSD3/wCEXH4hcKg1HgSmM3nWOWGjgJVjD70drPY19yEGPvRpcWhnQrMTFUGcEWUaKQ3wN/KRyNHECEllO5IZvqDkB9jUZaQQG04aowTZJpRdMY36U/tKuNDc7u1tOK7gcMS10jxLw6kknAlw/97YzC+mWEA0N; 4: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(32856632585715)(158342451672863)(192374486261705); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001); SRVR:VI1PR0701MB3007; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0701MB3007; X-Forefront-PRVS: 0100732B76 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(7916002)(189002)(13464003)(199003)(377454003)(24454002)(3846002)(50226002)(586003)(116806002)(19580395003)(1556002)(101416001)(19580405001)(93886004)(61296003)(9686002)(230783001)(14496001)(68736007)(86362001)(230700001)(42186005)(6116002)(105586002)(106356001)(2906002)(33646002)(6666003)(4720700003)(5660300001)(1456003)(81816999)(81686999)(8666005)(81156014)(92566002)(7736002)(50986999)(7846002)(84392002)(305945005)(76176999)(4326007)(50466002)(189998001)(23756003)(81166006)(77096005)(97736004)(47776003)(66066001)(8676002)(44736004)(5001770100001)(44716002)(15975445007)(62236002)(74416001)(7059030)(7726001)(7756004); DIR:OUT; SFP:1102; SCL:1; SRVR:VI1PR0701MB3007; H:pc6; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:0; LANG:en; Received-SPF: None (protection.outlook.com: btconnect.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; VI1PR0701MB3007; 23:hhRk90h5cxi4ZKhEtEnKpHBw3UQFwPZTlT5q4?= =?iso-8859-1?Q?iFwW69mc2fiUFu8NLrb0Qbmm86lzsmblQgD+mXDR3uxzEQ0cmOZSbK4Zg+?= =?iso-8859-1?Q?3TS0PQH2E/igFeEWWMUhRWJSscU0HoJ9YrKrdabPEVVgm1utPWQ0yABdOw?= =?iso-8859-1?Q?quch0aiFWN+olEPFQjn06JxmO4/K708IvLJh5Lfk6CeeSfrIDQeVLTd/O/?= =?iso-8859-1?Q?wHhoM5wGG+Hxa0yPwJrrmfh3MXvAMtQe/HCkKXMY/BT2qaijZpfVO5E71O?= =?iso-8859-1?Q?LIXGNFduzRVWvulJig59XAXcx+eamzjBArq/QAqFf8JByE/crPBJlovBL4?= =?iso-8859-1?Q?1ZyYDSgamum8Y8AIu8cTsgbVK2F4v/aqNNxj3WKdMVFaVEfCAFBqHlDT2d?= =?iso-8859-1?Q?S2HUMkyVAJ1RYB1zV+2ePcO+mPOHz7hQGPMryPB+Ut6BPL0pkJfXIxwLrI?= =?iso-8859-1?Q?nm6Jdtc7Gib4kZERMrD4H/Rnbvnqp5whaWj+q4IvJzV/DE1pfJT7Vh6ZfM?= =?iso-8859-1?Q?hIUyv8XoFrn1GIlLonQ4K+vWEf6jqSJZ+Z3KsvS9vfvs2z2XYJnh6sPF6u?= =?iso-8859-1?Q?DT0hhrYiO/OshzM0A1bYqSDOOTw0vKu6L9QcO3EAdAR3hRIr28ywEEm1tW?= =?iso-8859-1?Q?rE/qN6OhrERYOLK26zbKqWiUyb+hAWAa+z0HlFy6SOcJ04iypvDf6WKJq3?= =?iso-8859-1?Q?JtlX67KtqzyBWPlSlO5E92CHksNq3tFGrzEwebfConMQ1N+qu9PmckS2Ei?= =?iso-8859-1?Q?06Df50xifkb0W5znPpaUalXqG9gELwi2Wt2w6p7Wo2zyUEY5bY/DQaDvbP?= =?iso-8859-1?Q?P9GCmtmZFv3MbwmG1po8k6TgYs+CgUYhNNbLLjj6XT3BMRXbRld2hqPKFj?= =?iso-8859-1?Q?cjRPF9bzLVnQLKzNJKmO8T0Epopqql3fnBKYXtxdW9NIRFwNj8A0PrpPC8?= =?iso-8859-1?Q?jae5vYJiXfoWWZsyjnPReLdEDEJL/5seouwuJwtmXXqKWRt3eKlHBxyGLl?= =?iso-8859-1?Q?GJg45cJhqK3UtL5BKBruP6caiR1l/9pZXXtesIOgHJlTPlPjm93hz27PAJ?= =?iso-8859-1?Q?mmmK+gUJV0ovPStk/vRwoYncisUt2pGGHWDqKNb2a7w1XuH1/rNh8C5CsJ?= =?iso-8859-1?Q?KTy1L+BTVRvgL5yP3BtR04RH/jID+pCTK1TVYyQ7CxgywC4Ba2q4Zbptof?= =?iso-8859-1?Q?x5jtpj1oO1F+LR7XY87K2QYdzxVlgPWKFVf//11awAMoB+ZAR7qzR2Ys+I?= =?iso-8859-1?Q?97kfoJ47dxOTgq/uB4cxYq0W9WA6XeifTSph9Jz3vEGRjK0Aq5eoRYJ2zU?= =?iso-8859-1?Q?d11ggzTsANnipggHEbdgxfDjD9hmx7BYc8wJFOyQ6pazU5drozau5FB8Yd?= =?iso-8859-1?Q?LNhSutYJMeHTTMSJFh4DJ9TNFnAif1fjvwKaJ4Y7kijK4dLwv9S6vATmID?= =?iso-8859-1?Q?G3oRauKRC0NLw5IIkFnBRHhdoUFV6hpkp0HSL6fjas2wIyyESlcDogJ9Uv?= =?iso-8859-1?Q?CtHTYzH6a623bfsfI2G+LR/fg6CneHT9KHq3PoxGuKDqHxl5cURdZ5MOy5?= =?iso-8859-1?Q?UFIxXsdD+xGmwIGiD0h5H9Rtg6o2j1xl3Rh4oC4O3OX4JGfV9?= X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 6:bWmv0pIwJ8iANt9kZS0o9Sa7xiIG2cSerHnw9I0wpJLwv+aa1pmUU7LZf58+aLaL+e5Sz1sK4WVzDibvblftNha9FM1/xnSHsb1vbkAsiOuz/ElzCblb5wY8IpVcib+Gve+fFHPkYaYaY0yAb53s2p6LjTve/AqO94pYkvvsIrvDQH6g8SJYpJebHkXkYtmVj7ERXVyQeBL3LNF9oP8o7q0EAzTgbCpegP/U2SVrK9KQ5gjuWBrvn2+hLYparPIAlJR7HGgS//wilhP/d6v1mwbN85mQiACemWzgws3e1qQ88HWrD0JX5/0qy5lcSWc8; 5:QomHMYXaJIwmlqnxHfhKt3/o6ddRM54yyEVGsD4sr1ZRzoI/pQBavbpfprrwrOTNyFo93u5nvm0rrz/OvrT+YPzdLeNn9gdfXL5O9/xmX1mbnAtdFnYNRi5djefjEnXpEVC8Lb9a7ZlyddJVaYZ+DAyZCZGGEu+mRy6u6CTXxZE=; 24:KzIpcazWrL16LghA7ToYmA2W7wwKQUQvlkv5kuxN+Y2EJqrZvVGq+ZV/FrJz1csbk0CMt526HNLvyrNpdbj8PBouG+ZS6CqespLNYI7rV9Q= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; VI1PR0701MB3007; 7:pXtrJOXJ/retdhF3PdDnp/EcFPliYMivv9NZAASOy5B6lq1xO0Hr/hZPRVIGI/Otx9YS7Vsz/NhUobhEvMrc4VsCzfnzPKFK9mWfGiJV6Mifmf2mvtJFwPJLtK3EUZBYWsXTMO7BQcpe1aWKqUnv5yUghm1J3pgZcTuV371Ed126uxm+KGitTRUI0OYAogCiS3OuNlH6XV1QBrzpQXrIIoUdKlMjMNus9WcqrSEXXqCxh4tfeqRoL87FBzEP9V874bRwrjVZZlU9ZUg96011l/m+U6DNRsE8mbiteFvDdkmy4GzsGefpeTlX4KPEGGUTTekKzEhACt8kbWJOiFd7SXWqPzoFjwv1QhQBSorHLiA= X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Oct 2016 11:28:26.2029 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0701MB3007 Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Oct 2016 11:28:32 -0000 ----- Original Message ----- From: "Alexey Melnikov" Sent: Wednesday, October 19, 2016 10:58 AM > Hi Tom, > > On Wed, Oct 19, 2016, at 10:51 AM, t.petch wrote: > > ----- Original Message ----- > > From: "Alexey Melnikov" > > To: "Stephen Farrell" > > Sent: Monday, October 17, 2016 10:02 AM > > > > > Hi Stephen, > > > > > > > On 17 Oct 2016, at 09:25, Stephen Farrell > > wrote: > > > > > > > > > > > > Hi Alexey, > > > > > > > > Kent was asking me about this offlist, and I'm also a bit > > > > puzzled now... > > > > > > > > On 13/10/16 17:00, Kent Watsen wrote: > > > >>> So basically you have 2 choices: you either reference RFC 2818 > > > >>> (and don't reference RFC 6125 at all) or you add more information > > > >>> about how to use RFC 6125. > > > > > > > > Isn't that a false dichotomy? At least if by "add more" > > > > you mean, "you must add all of things"? > > > > > > No. Just saying "Use RFC 6125" is incorrect, because it provides a > > template, not a fully specified set of rules. So any document > > referencing it need to prescribe which identity types are used (CN-ID, > > DNS-ID, etc) and whether wild cards are allowed in any of them. > > > > > > I didn't imply that a spec needs to support all identity types. Most > > likely NETCONF should support DNS-ID. Possibly CN-ID. SRV-ID is only > > used if something like DNS SRV is used for server discovery. > > > > Alexey > > > > I realise that this has now been resolved by eliminating all reference > > to RFC6125 but ... > > > > When I look at RFC7589, all I see is > > > > ' The NETCONF client MUST check the identity of the server according > > to > > Section 6 of [RFC6125]. ' > > > > Admittedly, this was June 2015 and so a long time ago in security terms > > but I am still surprised at the present discussion about how to verify > > server identity! > > I was not on IESG at the time. So arguably this RFC is also slightly > underspecified. > > If it helps, I can write down specific text to be added. Alexey, [Trimming the distribution since this is no longer about the DISCUSS] No, leave it for now. I was involved in this part of the text for both this I-D, and for RFC7589, and earlier ones, and have commented to one of your predecessors how I never know what to expect from a security review (even when it is the same person as before) so your DISCUSS was no surprise. I will learn from it ready for the next time:-) Tom Petch > > > > > > But see > > > > below... > > > > > > > >> > > > >> Regarding choice #1: Scanning the RESTCONF draft, the only > > reference > > > >> to RFC 6125 is happening in this section (Section 2.4), so > > switching > > > >> to RFC 2818 would be fairly easy. Presumably this section would be > > > >> rewritten to point to RFC 2818, Section 3.1 instead. > > > >> > > > >> Regarding choice #2: would adding to the beginning of this section > > > > > >> (Section 2.4) something like the following be okay? "RESTCONF > > > >> servers using DevID certificates MUST configure their certificates > > > >> according to IEEE-802.1AR-2009, otherwise RESTCONF servers SHOULD > > > >> configure their certificates according to the guidelines in Section > > 3 > > > >> of RFC 6125." > > > > > > > > Actually, I'd have thought that 6125, appendix B would help > > > > here - why wouldn't the same as is used for netconf [1] > > > > work here? If that works, I'd just refer to that and we > > > > should be fine. (And it'd be nice if we get the benefit > > > > that the same server cert can work for both too I guess.) > > > > > > > > Cheers, > > > > S. > > > > > > > > [1] https://tools.ietf.org/html/rfc6125#appendix-B.7 > > > > > > > >> Kent From nobody Wed Oct 19 05:31:28 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE96D1294F0 for ; Wed, 19 Oct 2016 05:31:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.922 X-Spam-Level: X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ghXbd2DNzPhX for ; Wed, 19 Oct 2016 05:31:25 -0700 (PDT) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0100.outbound.protection.outlook.com [104.47.36.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4DA41295F9 for ; Wed, 19 Oct 2016 05:31:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=REShQH9dY6te9C7rgq/2jJeT7mZZboSwh33Vw2+6ojk=; b=D8lW9UWjoJ7JdhJ9d8JMA1IU8SqFWSW0Q/wNiWEe46k0lj/hEO22PBOvAl7ZKq0h9QVFpVHTTb9FDz2OtOtzQOqA0QUBWOM1r9z5m+7SKuECh9wSwlTjapH8IZ5pfUCe6KJT+vIjFkJhPK17wltBzcEdN0bfqXgrzoxuQk5Fwh0= Received: from BN3PR0501MB1442.namprd05.prod.outlook.com (10.160.117.151) by BN3PR0501MB1441.namprd05.prod.outlook.com (10.160.117.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.5; Wed, 19 Oct 2016 12:31:20 +0000 Received: from BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) by BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) with mapi id 15.01.0539.025; Wed, 19 Oct 2016 12:31:20 +0000 From: Kent Watsen To: t.petch , Alexey Melnikov , Stephen Farrell Thread-Topic: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) Thread-Index: AQHSJLYXZuU/DamBjEmJ49yHFR/2lKClCCyAgAFhxoD//99aAIAGDViAgAAKQYCAAzNMMYAAARMAgAAZLA7//855AA== Date: Wed, 19 Oct 2016 12:31:20 +0000 Message-ID: References: <147629676050.6272.6328109776621806303.idtracker@ietfa.amsl.com> <1476367027.1646202.754810753.4633AA8E@webmail.messagingengine.com> <132EEC87-D108-41D8-BDEE-8B5286AB8CAC@juniper.net> <05435b15-0a9b-efeb-b16d-c8ed1d340d9a@cs.tcd.ie> <43B07E4F-8BFC-4DD0-8607-B9B9832BAB9C@fastmail.fm> <03bc01d229ee$723077e0$4001a8c0@gateway.2wire.net> <1476871110.666784.760651193.04B9D416@webmail.messagingengine.com> <00a201d229fb$91741640$4001a8c0@gateway.2wire.net> In-Reply-To: <00a201d229fb$91741640$4001a8c0@gateway.2wire.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.13] x-ms-office365-filtering-correlation-id: 56e45e6e-8f00-473d-aea5-08d3f81bd475 x-microsoft-exchange-diagnostics: 1; BN3PR0501MB1441; 7:k7GlAicne2OPlmVV2C0FILVfRAdx+p8BDi6Fly3YPfx3r7R1LO/RgRs/hGSoLukQZfPG5LkFZ/ZqdJXKSRm15zh2rqFgJJL5UzTT/LxJxEBdo+vECl1ASe87Cr2ZfTEVbtEPUpKaBgfbFJ4GKkNh4LFRkpkGl/UTecyj3Tv0JmohGdncpvpaxRSaT69gPEEXyUzRYMj8PeFA2/b/7O03r9+Pl7YRR4AzqzIzY4UFP7CwrAn11bfleX5N8E/KHWA6mDUmAGu0gPcnTl/RZTBZIfcewNiBpqsHGDL48juDuPXeyoCOIvNGM6gY2eki1LRIM+9r2cpV1+oruhiXUbIZNjmRXUttUH34ohzFoMj4K5Q= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0501MB1441; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026); SRVR:BN3PR0501MB1441; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0501MB1441; x-forefront-prvs: 0100732B76 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(189002)(51914003)(11100500001)(3280700002)(87936001)(7846002)(122556002)(2900100001)(66066001)(92566002)(3846002)(586003)(102836003)(6116002)(7736002)(5002640100001)(8676002)(101416001)(106116001)(77096005)(2906002)(2950100002)(106356001)(99286002)(4326007)(3660700001)(76176999)(36756003)(50986999)(54356999)(5660300001)(10400500002)(81166006)(93886004)(8936002)(81156014)(33656002)(105586002)(230783001)(86362001)(189998001)(305945005)(4001350100001)(82746002)(97736004)(5001770100001)(83506001)(68736007)(83716003)(8666005)(7059030)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0501MB1441; H:BN3PR0501MB1442.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <1CC2E257E5C65C4D80526515E762E50F@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Oct 2016 12:31:20.0478 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0501MB1441 Archived-At: Cc: "netconf@ietf.org" Subject: Re: [Netconf] Alexey Melnikov's Discuss on draft-ietf-netconf-restconf-17: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Oct 2016 12:31:27 -0000 PiA+IFdoZW4gSSBsb29rIGF0IFJGQzc1ODksIGFsbCBJIHNlZSBpcw0KPiA+DQo+ID4gJyAgIFRo ZSBORVRDT05GIGNsaWVudCBNVVNUIGNoZWNrIHRoZSBpZGVudGl0eSBvZiB0aGUgc2VydmVyDQo+ ID4gICAgIGFjY29yZGluZyB0byBTZWN0aW9uIDYgb2YgW1JGQzYxMjVdLiAnDQoNClRoYW5rcyBU b20sIEkgd2FzIGdvaW5nIHRvIHJhaXNlIHRoaXMgaW5jb25zaXN0ZW5jeSBhcyB3ZWxsLg0KDQoN Cg0KPiBJZiBpdCBoZWxwcywgSSBjYW4gd3JpdGUgZG93biBzcGVjaWZpYyB0ZXh0IHRvIGJlIGFk ZGVkLg0KDQpBbGV4ZXksIHRoYW5rcyBmb3IgdGhlIG9mZmVyLCBidXQgd2XigJlyZSBnb29kIGZv ciBub3cuDQoNCg0KDQoNCktlbnQNCg0K From nobody Wed Oct 19 08:07:34 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1F101295D4 for ; Wed, 19 Oct 2016 08:07:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s_vj9CbdUp34 for ; Wed, 19 Oct 2016 08:07:29 -0700 (PDT) Received: from trail.lhotka.name (trail.lhotka.name [77.48.224.143]) by ietfa.amsl.com (Postfix) with ESMTP id C8E34129678 for ; Wed, 19 Oct 2016 08:07:28 -0700 (PDT) Received: from localhost (unknown [195.113.220.110]) by trail.lhotka.name (Postfix) with ESMTPSA id 6A8621CC0418 for ; Wed, 19 Oct 2016 17:07:28 +0200 (CEST) From: Ladislav Lhotka To: Netconf Date: Wed, 19 Oct 2016 17:07:24 +0200 Message-ID: MIME-Version: 1.0 Content-Type: text/plain Archived-At: Subject: [Netconf] typo in restconf-17 example X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Oct 2016 15:07:31 -0000 Hi, my colleague just discovered $SUBJ, I am not sure whether it has been already reported: in the jukebox example on page 123, line 23 reads: "length" " 286 The third '"' should be replaced by a colon. Lada -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C From nobody Wed Oct 19 13:03:31 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 207841296D1 for ; Wed, 19 Oct 2016 13:03:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.332 X-Spam-Level: X-Spam-Status: No, score=-2.332 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ng5B21jIWnAE for ; Wed, 19 Oct 2016 13:03:29 -0700 (PDT) Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id 1E64D129579 for ; Wed, 19 Oct 2016 13:03:29 -0700 (PDT) Received: from localhost (h-85-226.a165.priv.bahnhof.se [94.254.85.226]) by mail.tail-f.com (Postfix) with ESMTPSA id 89A541AE028F; Wed, 19 Oct 2016 22:03:27 +0200 (CEST) Date: Wed, 19 Oct 2016 22:03:27 +0200 (CEST) Message-Id: <20161019.220327.286845868677973159.mbj@tail-f.com> To: lhotka@nic.cz From: Martin Bjorklund In-Reply-To: References: X-Mailer: Mew version 6.5 on Emacs 24.3 / Mule 6.0 (HANACHIRUSATO) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] typo in restconf-17 example X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Oct 2016 20:03:30 -0000 Ladislav Lhotka wrote: > Hi, > > my colleague just discovered $SUBJ, I am not sure whether it has been > already reported: in the jukebox example on page 123, line 23 reads: > > "length" " 286 > > The third '"' should be replaced by a colon. Thanks, now fixed (found two more...) /martin From nobody Wed Oct 19 14:14:29 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1ED012978B for ; Wed, 19 Oct 2016 14:14:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.952 X-Spam-Level: X-Spam-Status: No, score=-14.952 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YRA5mab1GH_5 for ; Wed, 19 Oct 2016 14:14:21 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D88D8129715 for ; Wed, 19 Oct 2016 14:14:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=55145; q=dns/txt; s=iport; t=1476911660; x=1478121260; h=from:to:subject:date:message-id:mime-version; bh=Q/qgXtU8r4bPS9gl1AVNSe2lw2FxqJxTQqD+GvqWv40=; b=Lpi0RwKH0szigR9yJGvW8FSFcExxF6+SfW2qoMASg8kEh0DRgma1A5K0 Wd9zjjzWMIkg3rD1cEWDN064KljWz6cfw1NL38yNpSvhzhfXS2qe+wQ0F 4GFNY62j0behGnFxkcu+avU3jUG52GyxtXZEb2GfmzAXMmu7KHY8/+jzG 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CCAQBL4QdY/5ldJa1CGhoBAQEBAgEBA?= =?us-ascii?q?QEIAQEBAYMINgEBAQEBHVd9B40tqSeCD4IIKYd7PxQBAgEBAQEBAQFiHQuEaS1?= =?us-ascii?q?DGwEtCwgBAzwmAQQbiEoOLaZHlQKHdgEBAQEBBQEBAQEBARwFhj2GEYNZgX6DE?= =?us-ascii?q?wWORYtIAYYoiVqQAIx+g38BHjZVgwUcgVNyAQSGCSqBBYEAAQEB?= X-IronPort-AV: E=Sophos;i="5.31,516,1473120000"; d="scan'208,217";a="337894856" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Oct 2016 21:14:19 +0000 Received: from XCH-RTP-015.cisco.com (xch-rtp-015.cisco.com [64.101.220.155]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id u9JLEJTK032336 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 19 Oct 2016 21:14:19 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-015.cisco.com (64.101.220.155) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 19 Oct 2016 17:14:18 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1210.000; Wed, 19 Oct 2016 17:14:17 -0400 From: "Eric Voit (evoit)" To: "netconf@ietf.org" Thread-Topic: Minutes 19-Oct: NETCONF/RESTCONF/HTTP2 Subscription & Event drafts Thread-Index: AdIqTWQP20aiK6QPS7qJBQEOF8LQzwAAEhbw Date: Wed, 19 Oct 2016 21:14:17 +0000 Message-ID: <18d707b971f2415398ca943501a2950a@XCH-RTP-013.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.229] Content-Type: multipart/alternative; boundary="_000_18d707b971f2415398ca943501a2950aXCHRTP013ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [Netconf] Minutes 19-Oct: NETCONF/RESTCONF/HTTP2 Subscription & Event drafts X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Oct 2016 21:14:27 -0000 --_000_18d707b971f2415398ca943501a2950aXCHRTP013ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Posted at: https://github.com/netconf-wg/yang-push/wiki/Minutes-2016-10-19 Meeting Materials Attending WebEx Recording password: ZwtX2CHj Andy Bierman, Alexander Clemm, Ambika Tripathy, Einar Nilsen-Nygaard, Eric = Voit, Tim Jenkins, Balazs Lengyel, Kent Watsen, Walker Debate today was on whether to use streams, and which ones should be define= d in the draft(s). The basic question comes from where should we place the= complexity of the overall filtering. Specifically: is it better to have a = single complex filter on a network element without a stream, or is it bette= r to have a standardized pre-filter which reduces the domain of objects aga= inst which a user defined stream is applied. We had rough consensus on the following: * Existing Netconf stream construct needs to stay * There is use in having optional custom vendor YANG stream(s) acting a= s a pre-filter that can be assigned by a vendor * If no stream is defined, this means the universe of all YANG objects = on a device is in scope * Note: If/when OpState is adopted, then a default of no-filter migh= t prove problematic as all YANG objects could mean all YANG objects across = all datastores. We had majority, but no final consensus on the following: * We should have a standard list of streams that vendors can choose to = support on a device. * The definition of what the list should be can be updated over time= . (i.e., Perhaps this list shouldn't be in the base technology spec.) * Example of something which would be a useful standardized stream w= ould be a Hardware Events stream. Predefining all of these via filter is no= t viable as different vendors might expose their models within a box, and w= ill change as new models are added. * Vendor streams for notifications of 5277bis events might also be usef= ul, and should be assignable We had other discussions on: * Named stream definitions will need to consider and map to the OpState= discussions. We don't want to create unnecessary parallel structures. * Ring buffers and Streams/Priorities - It might be possible to have ri= ng buffers to temporarily store events for potential replay. These buffers = would not be exposed in any implementation. * Ring buffer by high/medium/low priority: here the publisher determ= ines where to temporarily store events based on Publisher determined potent= ial relevance * Ring buffer by named stream: might be more efficient in storing th= e right objects for the right amount of time. But what about replicated obj= ects across streams? what about new and custom streams? Implementation migh= t be complex. * Datastore and/or YANG module name needs to be a valid entry for a fil= ter. We need to provide guidance on filter conditions which need to added a= s syntax examples. * This is another reason streams might be useful to standardize * Balazs thinks that filtering on Metadata might be useful here. Alb= erto: does this make things more complex? We need a future session on filt= ering examples. Proposal for Streams Below in the table are some of the streams we discussed. I recommend that w= e define identities for #1 & #2 within 5277bis, augmented by #3 & #4 within= yangpush, and possibly augmented by #5-#7 in a separate streams draft, and= we could also add #8-#11 to that separate draft should OpState be adopted. # Stream type name Current mapping practices If OpState accepted, add additional stream mapping when 1 netconf Existing netconf notification stream n/a Now 2 custom-events (vendor defines one or more of this stream type) tbd Now 3 yangpush running + config=3Dfalse objects operational-state Now 4 custom-yang (vendor defines one or more of this stream type) tbd Now 5 config running config=3Dtrue streams draft 6 operational config=3Dfalse objects config=3Dfalse streams draft 7 operational-no-counters config=3Dfalse objects + not-notifiable-on-change=3Dtrue config=3Dfalse + not-notifiable-on-change=3Dtrue streams draft 8 running n/a running if OpState adopted, streams draft 9 startup n/a startup if OpState adopted, streams draft 10 intended n/a intended if OpState adopted, streams draft 11 applied n/a applied if OpState adopted, streams draft Note: that we need to be careful about the definition and population of a #= 3 yangpush stream so that it maps closely to OpState's "operational-state". --_000_18d707b971f2415398ca943501a2950aXCHRTP013ciscocom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Posted at:<= /span>

https://github.com/ne= tconf-wg/yang-push/wiki/Minutes-2016-10-19

 

WebEx Recording

password: ZwtX2CHj

Andy Bierman, Alexande= r Clemm, Ambika Tripathy, Einar Nilsen-Nygaard, Eric Voit, Tim Jenkins, Bal= azs Lengyel, Kent Watsen, Walker

D= ebate today was on whether to use streams, and which ones should be defined= in the draft(s).  The basic question comes from where should we place= the complexity of the overall filtering. Specifically: is it better to have a single complex filter on a network element without = a stream, or is it better to have a standardized pre-filter which reduces t= he domain of objects against which a user defined stream is applied.

W= e had rough consensus on the following:

  • Existing Netcon= f stream construct needs to stay
  • There is use in= having optional custom vendor YANG stream(s) acting as a pre-filter that c= an be assigned by a vendor
  • If no stream is= defined, this means the universe of all YANG objects on a device is in sco= pe
    • Note: If/when O= pState is adopted, then a default of no-filter might prove problematic as a= ll YANG objects could mean all YANG objects across all datastores.

W= e had majority, but no final consensus on the following:<= /h2>

  • We should have = a standard list of streams that vendors can choose to support on a device.<= o:p>
    • The definition = of what the list should be can be updated over time. (i.e., Perhaps this li= st shouldn’t be in the base technology spec.)
      • <= li class=3D"MsoNormal" style=3D"color:#333333;margin-top:3.0pt;mso-margin-b= ottom-alt:auto;mso-list:l2 level2 lfo6;background:white;box-sizing: border-= box"> Example of some= thing which would be a useful standardized stream would be a Hardware Event= s stream. Predefining all of these via filter is not viable as different ve= ndors might expose their models within a box, and will change as new models are added.
  • Vendor streams = for notifications of 5277bis events might also be useful, and should be ass= ignable

W= e had other discussions on:

  • Named stream de= finitions will need to consider and map to the OpState discussions.  W= e don’t want to create unnecessary parallel structures.
  • Ring buffers an= d Streams/Priorities - It might be possible to have ring buffers to tempora= rily store events for potential replay. These buffers would not be exposed = in any implementation.
    • Ring buffer by = high/medium/low priority: here the publisher determines where to temporaril= y store events based on Publisher determined potential relevance=
    • Ring buffer by = named stream: might be more efficient in storing the right objects for the = right amount of time. But what about replicated objects across streams? wha= t about new and custom streams? Implementation might be complex.
  • Datastore and/o= r YANG module name needs to be a valid entry for a filter. We need to provi= de guidance on filter conditions which need to added as syntax examples.
    • This is another= reason streams might be useful to standardize
    • Balazs thinks t= hat filtering on Metadata might be useful here. Alberto: does this make thi= ngs more complex?  We need a future session on filtering examples.

P= roposal for Streams

B= elow in the table are some of the streams we discussed. I recommend that we= define identities for #1 & #2 within 5277bis, augmented by #3 & #4= within yangpush, and possibly augmented by #5-#7 in a separate streams draft, and we could also add #8-#11 to that separate dr= aft should OpState be adopted.

1

netconf

Existing netconf notif= ication stream

n/a<= /p>

Now<= /p>

2

custom-events

(vendor defines one or= more of this stream type)

tbd<= /p>

Now<= /p>

3

yangpush

running + config= =3Dfalse objects

operational-state=

Now<= /p>

4

custom-yang=

(vendor defines one or= more of this stream type)

tbd<= /p>

Now<= /p>

5

config

running

config=3Dtrue

streams draft

6

operational=

config=3Dfalse objects=

config=3Dfalse

streams draft

7

operational-no-counter= s

config=3Dfalse objects= + not-notifiable-on-change=3Dtrue

config=3Dfalse + n= ot-notifiable-on-change=3Dtrue

streams draft

8

running

n/a<= /p>

running

if OpState adopted, st= reams draft

9

startup

n/a<= /p>

startup

if OpState adopted, st= reams draft

10

intended

n/a<= /p>

intended

if OpState adopted, st= reams draft

11

applied

n/a<= /p>

applied

if OpState adopted, st= reams draft

N= ote: that we need to be careful about the definition and population of a #3= yangpush stream so that it maps closely to OpState's "operational-sta= te".

 

--_000_18d707b971f2415398ca943501a2950aXCHRTP013ciscocom_-- From nobody Thu Oct 20 11:33:59 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 703741295E7; Thu, 20 Oct 2016 11:33:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.332 X-Spam-Level: X-Spam-Status: No, score=-2.332 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RC03YK0h3djr; Thu, 20 Oct 2016 11:33:51 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2759F1294D4; Thu, 20 Oct 2016 11:33:51 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id D3A05203AD; Thu, 20 Oct 2016 14:48:32 -0400 (EDT) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 16073639BA; Thu, 20 Oct 2016 14:33:50 -0400 (EDT) From: Michael Richardson To: anima@ietf.org, netconf@ietf.org In-Reply-To: <83877198-8FCF-4AFA-9B75-3200683ADE0B@juniper.net> References: <83877198-8FCF-4AFA-9B75-3200683ADE0B@juniper.net> X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Netconf] Regarding MCR's email from 2014 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Oct 2016 18:33:53 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I include Kent's email at the bottom, in complete form, but I'll reply inli= ne to a copy up here. This is fundamentally about the format and requirements for the ownership voucher. > This is the ownership-voucher idea, but with the following distinctio= ns: > 1) uses X.509 certs > - this is compelling, as using an existing standard with lots of > available tooling sounds like a win. Yes, when I thought hard about the problem, I realized that while they were not attestations as to identity (which a certificate usually is), that they were attestations as to ownership, and then I realized that it was identical to the SIDR work that binds ISPs to BGP4-ASN and IP address range= s. So, in: https://datatracker.ietf.org/doc/draft-richardson-anima-idevid-cert/ I blantantly stole from RFC3779, even forgetting to delete some of the terminology.. > 2) uses a delegation model > - that is, each owner generates a sub-cert when selling some of their > stock. This I have mixed feelings about. On one hand it seems > natural/intuitive, and yet it does also mean that the > delegates have to 1) setup PKI and 2) be trustworthy. I agree that it's a serious challenge to get things setup! 1) My comments are that we can skip many layers in the hierarchy depending = upon the value and cluefulness of the layers. A MASA, provided by the end-customer with a PSK from a QR code, can retrieve the end-certificate from the vendor directly. It's basically a form of PSK authenticated ES= T. 2) For higher value items (like routers from big manufacturers), I suspect that this system would actually be simpler than the nonsense I have gone through trying to obtain firmware... At the least, it would filter out clueless intermediaries that simply cost everyone time and money. > 3) this solution seems geared for consumer-oriented gear, stuff one > might get a Best Buy. Well, is this because my example involved Road Runners and Coyotes, and Cadabra was the original name for Amazon, I learnt from Wikipedia. I don't think that it's a failure of such a system if it can be made to work at the scale of retail. I'd say it's a major feature. The retail scale is both massive (Best Buy moves a lot of devices), and miniscule (people on= ly buy one or two devices/year at present). At the personal level, the question becomes: is there actually *any* infrastructure we can depend upon? At the retail level, the question is the opposite: if there are any human interactions required, it's a fail. > 1) only the manufacturer can sign the vouchers > - no one else needs to setup signing infrastructure > - manufacturer can ensure a voucher is only created once per device > - manufacturer MAY be able to reassigned a voucher, but this might > entail needing to maintain something like a voucher-revocation-list > (VRL?), which would create further dependencies on clocks (ugh!) One model, where you stop here: is a bearer token. I think that this model is entirely doable, and makes sense for devices of a certain price/point. But, it might be that this has significant externalities which society would not want, such as DDoS if the devices can be trojaned and then new vouchers affixed. > 2) at some point, the device is sold to an entity that wants to take > ownership > of the device. > - this entity MUST have (within my soln.) previously obtained an owner > certificate from the manufacturer. > - this entity submits a "voucher signing request" (VSR?), signed by i= ts > private > key, to the manufacturer, along with its previously-signed owner > certificate, So, this is my model with a QR code. > - Instead of submitting its owner certificate, the entity might inste= ad > log into > the interface, from which the manufacturer could lookup the same info= as > in the owner certificate... Kent Watsen wrote: > Here=E2=80=99s the URL to the MCR=E2=80=99s email: > https://mailarchive.ietf.org/arch/msg/6tisch-security/2kObJLkLlhuI-HU= 9s5yqfRm0n00 > This is the ownership-voucher idea, but with the following distinctio= ns: > 1) uses X.509 certs > - this is compelling, as using an existing standard with lots of > available tooling sounds like a win. > 2) uses a delegation model > - that is, each owner generates a sub-cert when selling some of their= stock. > This I have mixed > feelings about. On one hand it seems natural/intuitive, and yet it do= es also > mean that the > delegates have to 1) setup PKI and 2) be trustworthy. > 3) this solution seems geared for consumer-oriented gear, stuff one m= ight get > a Best Buy. > I haven=E2=80=99t put much thought to a consumer-oriented solution, b= ut maybe > something like this would work: > 1) only the manufacturer can sign the vouchers > - no one else needs to setup signing infrastructure > - manufacturer can ensure a voucher is only created once per device > - manufacturer MAY be able to reassigned a voucher, but this might > entail needing to maintain something like a voucher-revocation-list > (VRL?), which would create further dependencies on clocks (ugh!) > 2) at some point, the device is sold to an entity that wants to take > ownership > of the device. > - this entity MUST have (within my soln.) previously obtained an owner > certificate from the manufacturer. > - this entity submits a =E2=80=9Cvoucher signing request=E2=80=9D (VS= R?), signed by its > private > key, to the manufacturer, along with its previously-signed owner cert= ificate, > - Instead of submitting its owner certificate, the entity might inste= ad log > into > the interface, from which the manufacturer could lookup the same info= as > in the owner certificate... > - The VSR is essentially just a list of device unique-ids and, for ea= ch, some > =E2=80=9Cproof of ownership=E2=80=9D. > - Proof of ownership could take on different flavors, but when owners= hip > can only be taken once, a simple code inside the packaging might suff= ice. > 3) the above assumes physical possession of the device at the time th= e VSR is > submitted, but that is not always desirable. For instance, the owner = may > have instead placed an order for devices to be dropped-shipped to some > specific locations. > - In this case, the owner would like to get the vouchers as soon as t= he > devices > are shipped, and before the boxes are opened, so that they can stage = the > network in preparation for the devices being powered on. > - In my view, this gets into a high-touch scenario where it is approp= riate > for > the manufacturer to proactively issue the vouchers. That is, instead = of > receiving a VSR, the manufacturer receives an *order*, which it can a= gain > correlate to the appropriate owner certificate. > - this is in essence what is documented in the current zerotouch draf= t. > What do you think? - especially regarding (2) above, as that is the n= ew > part... > Kent =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBWAkOC4CLcPvd0N1lAQLWcQf/ZIzTbsxRBkv4BPSBPe6U8QDy1m0o1LK6 1vESBjpkXM3KKNuNTBZT4xr0AvVFTlAmzKe+nlql/KoMLbL+43Ds3WoHZSD/2rNU +tiNMjwSwzpNcxWSYZhuhGkTy/dEMOHr08fVp9VJQ3DuVHFgl9B2ZnkGw5Qc9NbE xJhA4fbNRZxh2W2Lcj1y9yiNqwo1RtY6VkTxm6avhah0Jf3/IT2DcQO5p2v5qyPu 2gI1UDnUHkc9bCrnwNcGDi7bYB9nQv3kVKQaEr6161pAxRNe0kbAkQ1IA/FWHqhb CMUoRr9TsAKdKMM5vyFjPgq/wugEMRvoZmCXg8MIftVrSPPNKLNcxw== =yZlj -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Oct 21 16:21:34 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 101541294F2; Fri, 21 Oct 2016 16:21:06 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147709206606.28214.9681002868477661313.idtracker@ietfa.amsl.com> Date: Fri, 21 Oct 2016 16:21:06 -0700 Archived-At: Cc: netconf@ietf.org Subject: [Netconf] netconf - Requested session has been scheduled for IETF 97 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Oct 2016 23:21:06 -0000 Dear Mahesh Jethanandani, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. netconf Session 1 (2:00:00) Thursday, Afternoon Session II 1520-1750 Room Name: Park Ballroom 2 size: 125 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Network Configuration Area Name: Operations and Management Area Session Requester: Mahesh Jethanandani Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: First Priority: netmod opsarea opsawg Second Priority: core dime radext lmap supa nmrg i2rs sfc i2nsf nfvrg sdnrg Third Priority: anima saag v6ops 6tisch 6lo tls sacm Special Requests: Please avoid Monday and schedule the session on Tue, Wed or Thu. NETCONF Co-chair is arriving on Monday. Friday is NOT possible. (i2nsf supa lmap radext dime as a conflict per Benoit) Thanks. --------------------------------------------------------- From nobody Mon Oct 24 10:15:33 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D3051295B1 for ; Mon, 24 Oct 2016 10:15:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id obG-wdNqhHte for ; Mon, 24 Oct 2016 10:15:29 -0700 (PDT) Received: from mail-wm0-x22d.google.com (mail-wm0-x22d.google.com [IPv6:2a00:1450:400c:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0864612940A for ; Mon, 24 Oct 2016 10:15:29 -0700 (PDT) Received: by mail-wm0-x22d.google.com with SMTP id f193so134206104wmg.0 for ; Mon, 24 Oct 2016 10:15:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=Z4//tdJiiISA3LsjDQ/s6o7asuligmLcfLlxF4FEBXs=; b=CQqznuNBPAQvWstgoSkYRkZ278pdw5tmkQdKQ4+rfjMveyx6y5uagPUEc9tDs0IPZE Q1YYNrxHBSdJNsr15XENbONCOdRVyK10C31fPBgFneCqPcEPLitmjwt9+wVMNeFWSzW2 01Dpv8+OfekEAmiecqaBlpqIbw6XT3O5SFXqXsXxDGUnJXpa5p40W6VA+fW7gLLfvjJt pu01c3pPSmNJjEzcPn67M9QYPswLr+ZcyoWl5fdWF+4bVxahfwHISf7ERCIjOKf1wcET cqe4aKNdKOV69qEQ0W0eF0G6BMg7rZwcrR8cUvkSt0xpxZX8vxUxNtPiNv3eRvxBkrmg DWhQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Z4//tdJiiISA3LsjDQ/s6o7asuligmLcfLlxF4FEBXs=; b=Yem5IxJPTqzo/k5Q8W8b/0lYPy/ZDLS7ODeQ283JLIbzhUcqpFpq4tvfcotwdC0TQe HSrrqPKHIKxXre/id7NfLDPWlBgJdaX4l5l/cvfrmZv8tLW0cSW77gb5oGNBZ5B28Jsy bLouXxIEK/xpI0q2SWd0funZlPknrL2K2AfTgTkfv7P7e6e/61wXE1HSgW9LdFbqKiwg sSaYU3y7mW7ckChzb82yEiEdfsnVRxHFQJ91y0QcnLj0sK1YeyxFAa0N8BoI0H+eU3uH EB2AaTTLwPBUzwvn3bMYDekF5UsDDFBQhAtU5ve6wpJcKzJSrLNJAC2uNDovr08Eb+7h kdMA== X-Gm-Message-State: AA6/9RmRsCU55nBdyro70B4wkkiCiaMM8bfWxkl/SiZdQQVoszXWXYYGtmR+G0Mj10fsWrjDN3gmtxdsbl6Jfw== X-Received: by 10.28.150.20 with SMTP id y20mr22627807wmd.67.1477329327353; Mon, 24 Oct 2016 10:15:27 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.184.193 with HTTP; Mon, 24 Oct 2016 10:15:26 -0700 (PDT) From: Andy Bierman Date: Mon, 24 Oct 2016 10:15:26 -0700 Message-ID: To: Netconf Content-Type: multipart/alternative; boundary=001a114b3c94c62f67053f9f89fd Archived-At: Subject: [Netconf] YANG data media type file extensions X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Oct 2016 17:15:32 -0000 --001a114b3c94c62f67053f9f89fd Content-Type: text/plain; charset=UTF-8 Hi, An issue came up in the IESG review of draft-ietf-netconf-restconf-17. The media type templates are specified incorrectly. The file extensions specified now: application/yang-data+xml = .xml application/yang-data+json = .json Other foo+xml media type entries list 'None' for file extensions. The .xml (as a fallback) is implied by the +xml. The choices seem to be A) change the file extension fields to 'None' B) pick a new file extension for each of these media types I propose (A) -- that the file extension be changed to 'None' since there are no existing file extensions in use for YANG data. Send comments to the WG mailing list by Thursday, October 27, 2016. If there are no strong objections, then these edits will be made in the restconf-18 draft. Andy --001a114b3c94c62f67053f9f89fd Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

An issue came up in the IESG review= of draft-ietf-netconf-restconf-17.
The media type templates are = specified incorrectly.

The file extensions specifi= ed now:

=C2=A0 =C2=A0application/yang-data+xml =C2= =A0=3D .xml
=C2=A0 =C2=A0application/yang-data+json =3D .json

Other foo+xml media type entries list 'None' = for file extensions.
The .xml (as a fallback) is implied by the += xml.

The choices seem to be

=C2=A0 A) change the file extension fields to 'None'
= =C2=A0 B) pick a new file extension for each of these media types

I propose (A) -- that the file extension be changed to '= ;None' since there are
no existing file extensions in use for= YANG data. Send comments to the
WG mailing list by Thursday, Oct= ober 27, 2016.=C2=A0 If there are no strong
objections, then thes= e edits will be made in the restconf-18 draft.

Andy


--001a114b3c94c62f67053f9f89fd-- From nobody Tue Oct 25 09:08:02 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10375129766 for ; Tue, 25 Oct 2016 09:08:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KoUbO1OxdvKh for ; Tue, 25 Oct 2016 09:07:58 -0700 (PDT) Received: from mxout-07.mxes.net (mxout-07.mxes.net [216.86.168.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1222129722 for ; Tue, 25 Oct 2016 09:07:58 -0700 (PDT) Received: from [192.168.123.7] (unknown [76.90.60.238]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 15DED22E257 for ; Tue, 25 Oct 2016 12:07:39 -0400 (EDT) To: netconf@ietf.org References: From: Sean Leonard Message-ID: Date: Tue, 25 Oct 2016 09:07:53 -0700 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Netconf] YANG data media type file extensions X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Oct 2016 16:08:01 -0000 On 10/24/2016 10:15 AM, Andy Bierman wrote: > Hi, > > An issue came up in the IESG review of draft-ietf-netconf-restconf-17. > The media type templates are specified incorrectly. > > The file extensions specified now: > > application/yang-data+xml = .xml > application/yang-data+json = .json > > Other foo+xml media type entries list 'None' for file extensions. > The .xml (as a fallback) is implied by the +xml. > > The choices seem to be > > A) change the file extension fields to 'None' > B) pick a new file extension for each of these media types > > I propose (A) -- that the file extension be changed to 'None' since > there are > no existing file extensions in use for YANG data. Send comments to the > WG mailing list by Thursday, October 27, 2016. If there are no strong > objections, then these edits will be made in the restconf-18 draft. (A) is all right. Weakly in favor of (A). Sean From nobody Tue Oct 25 11:13:47 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5235129599 for ; Tue, 25 Oct 2016 11:13:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.019 X-Spam-Level: X-Spam-Status: No, score=-2.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outlook.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JqgAFfSWkLut for ; Tue, 25 Oct 2016 11:13:43 -0700 (PDT) Received: from COL004-OMC2S10.hotmail.com (col004-omc2s10.hotmail.com [65.55.34.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A68061294D3 for ; Tue, 25 Oct 2016 11:13:43 -0700 (PDT) Received: from APC01-PU1-obe.outbound.protection.outlook.com ([65.55.34.72]) by COL004-OMC2S10.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Tue, 25 Oct 2016 11:13:43 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Ated5ywjx0QSbwmLh/ukTVmiMpCR8mNEc9LRcrk04DI=; b=a5qPpviVy1X0JcYDyLV/L/XZkqRcwJFAvg7z5hLlHgvR+0hKGSTPkSGPyC8eRA/UV94HpMX8p9JDBL8xo+C70XZEKckDju5fqKZkE57a+KPYLQjY0oXkkG2k91O2qD25TdghQSO6TyYnVMNllbFO7eZgBFZpBNAmG/6A+U0UIGeZ1dhOE3xxTKdt/PHdERBn4ueLrRv3KmQkcWQHzEKXoG5knOwyTqep0fz4YvwcE9adQJiah8KU7HGTrtgPONTqd5Iswvt4AtUJX9RG36Zuuq1O2R+xRHlbHrx/K+fUM0DZdv5uyKRkgVI8Zq5Cm+xYnWi6QaQL1kqEMt1Ev95YMw== Received: from PU1APC01FT010.eop-APC01.prod.protection.outlook.com (10.152.252.60) by PU1APC01HT138.eop-APC01.prod.protection.outlook.com (10.152.253.158) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.629.5; Tue, 25 Oct 2016 18:13:40 +0000 Received: from HK2PR01MB0674.apcprd01.prod.exchangelabs.com (10.152.252.56) by PU1APC01FT010.mail.protection.outlook.com (10.152.252.83) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.629.5 via Frontend Transport; Tue, 25 Oct 2016 18:13:40 +0000 Received: from HK2PR01MB0674.apcprd01.prod.exchangelabs.com ([10.165.54.16]) by HK2PR01MB0674.apcprd01.prod.exchangelabs.com ([10.165.54.16]) with mapi id 15.01.0679.015; Tue, 25 Oct 2016 18:13:40 +0000 From: Rohit Ranade To: "netconf@ietf.org" Thread-Topic: RFC 5277 related queries Thread-Index: AQHSLuuDjOjA4vBLlUupZAVwxRESDQ== Date: Tue, 25 Oct 2016 18:13:40 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=outlook.com; x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [bvyEU0a/YkQisPYehguMu5+pg2zjzaVV] x-eopattributedmessage: 0 x-microsoft-exchange-diagnostics: 1; PU1APC01HT138; 6:4TjNih4hdopgPl/GbqlznVQU3xNrbeirSiXVMxjuE9NIdhkRQSeQfHvjKkOnl0GD+3qQ8bZkyUlU16gelqDLUWCYqG1FVpmbctOC/kQPF6oATO2KPaLLRkivhJWwx2OvmQ4NzZZNkeTmBFrSCBmAxzMncLdbNyzra01OFSR3w5ybeoz87/KD/hInazpFNww6ZvAicJiX04W3VXNQ424jIv6bdvcqMPcDQzE/arnjTsJuFSg/D+wtiNmXy0+QyYv/0pLzYtVwbVN9QPfLHYou56EAYNHtWV6yw2e+EsknlR4=; 5:kKfkDqJVaxx1snUEBOo+iqBnWac28axvjUUHffTlBZAeGEMShti59619ilKdVhQQ2Mvmglht0xRJuOzz2TwRBL72IXmxTQPlf8GlzY8vCihxffYfXPQDON8l/eVHMlO1O9gxlvf84QZ7vSQjHCEmVQ==; 24:iiEK6lCKAPhlqP/jgAPwdcgG3kkKuT+LEDb+eiCgErVkozLQ4QSd8q9b6O0S7LQ0Zx51QLZRNcHC2swpC7fUWORa8urHTyjWeDZJLTu39Ls=; 7:PKdKNehj20eFS2a3WZD71jiIoJuc/9KCoMCENAt8pWIcL8LtoBdc9Qle6xLokzr4jTSbpo74bIYxZJ0WsfwxOphLW3NaX3f3dbuIPDlt3BtcGDi7ngjrWIXfq2YtLVML9PXJ5QYkMWhkQAHNFr5pG6GseFVYrIZahddM4/vkcFCpgaUcrOmAhRblN6M1GAAk62zoIleCwn0mjO6PUNkrbsi+zkKn7NAyXxibpKo5XGslKtK5xH19rYt/nlKPjWYIU3ujHmrL/OzAP9qLNajQu54oE6MDIZJdnSCOb5fcN+1y74TXBy1qK39O2fylUE4Dv1zNotAvDyIVcC3UiX8Jfw== x-forefront-antispam-report: EFV:NLI; SFV:NSPM; SFS:(10019020)(98900003); DIR:OUT; SFP:1102; SCL:1; SRVR:PU1APC01HT138; H:HK2PR01MB0674.apcprd01.prod.exchangelabs.com; FPR:; SPF:None; LANG:en; x-ms-office365-filtering-correlation-id: 6e2380ec-0070-48cd-3ae8-08d3fd02a5d2 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(1601124038)(1603103081)(1601125047)(1603101340); SRVR:PU1APC01HT138; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(432015012)(82015046); SRVR:PU1APC01HT138; BCL:0; PCL:0; RULEID:; SRVR:PU1APC01HT138; x-forefront-prvs: 01068D0A20 spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_HK2PR01MB0674D64CBDA38E06A96DE316DBA80HK2PR01MB0674apcp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Oct 2016 18:13:40.2701 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU1APC01HT138 X-OriginalArrivalTime: 25 Oct 2016 18:13:43.0464 (UTC) FILETIME=[853BB280:01D22EEB] Archived-At: Subject: [Netconf] RFC 5277 related queries X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Oct 2016 18:13:45 -0000 --_000_HK2PR01MB0674D64CBDA38E06A96DE316DBA80HK2PR01MB0674apcp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UkZDIDUyNzc6IFNlY3Rpb24gMS4xDQoNCg0KDQpGaWx0ZXI6ICBBIHBhcmFtZXRlciB0aGF0IGlu ZGljYXRlcyB3aGljaCBzdWJzZXQgb2YgYWxsIHBvc3NpYmxlDQoNCiAgICAgIGV2ZW50cyBhcmUg b2YgaW50ZXJlc3QuICBBIGZpbHRlciBpcyBkZWZpbmVkIGFzIG9uZSBvciBtb3JlIGZpbHRlcg0K DQogICAgICBlbGVtZW50cyBbTkVUQ09ORl0sIGVhY2ggb2Ygd2hpY2ggaWRlbnRpZmllcyBhIHBv cnRpb24gb2YgdGhlDQoNCiAgICAgIG92ZXJhbGwgZmlsdGVyLg0KDQoNCg0KUkZDIDYyNDE6IFNl Y3Rpb24gNi42DQoNCg0KQ29uY2VwdHVhbGx5LCBhIHN1YnRyZWUgZmlsdGVyIGlzIGNvbXByaXNl ZCBvZiB6ZXJvIG9yIG1vcmUgZWxlbWVudA0KDQogICBzdWJ0cmVlcywgd2hpY2ggcmVwcmVzZW50 IHRoZSBmaWx0ZXIgc2VsZWN0aW9uIGNyaXRlcmlhLg0KDQoNClF1ZXJ5IDE6IFdoZXRoZXIgZW1w dHkgZmlsdGVyIGlzIHZhbGlkIGZvciA8Y3JlYXRlLXN1YnNjcmlwdGlvbj4gPyAg4oCcb25lIG9y IG1vcmXigJ0gLyDigJx6ZXJvIG9yIG1vcmXigJ0NCg0KDQpBYm91dCByZXBsYXkgaW4gNTI3NzoN ClF1ZXJ5IDI6IENhbiA8Y3JlYXRlLXN1YnNjcmlwdGlvbj4gYmUgZG9uZSBhZ2FpbiBhZnRlciB0 aW1lIGhhcyBjcm9zc2VkIDxzdG9wVGltZT4uDQoNCg0K4oCcVGhlIGV2ZW50IG5vdGlmaWNhdGlv bg0KDQogICBzdWJzY3JpcHRpb24gYWxsb3dzIGEgbnVtYmVyIG9mIG9wdGlvbnMgdG8gZW5hYmxl IHRoZSBORVRDT05GIGNsaWVudA0KDQogICB0byBzcGVjaWZ5IHdoaWNoIGV2ZW50cyBhcmUgb2Yg aW50ZXJlc3QuICBUaGVzZSBhcmUgc3BlY2lmaWVkIHdoZW4NCg0KICAgdGhlIHN1YnNjcmlwdGlv biBpcyBjcmVhdGVkLiAgTm90ZSB0aGF0IGEgc3Vic2NyaXB0aW9uIGNhbm5vdCBiZQ0KDQogICBt b2RpZmllZCBvbmNlIGNyZWF0ZWQu4oCdDQoNCsOwICBUaGlzIGluZGljYXRlcyBzdWJzY3JpcHRp b24gY2Fubm90IGJlIG1vZGlmaWVkIG9uY2UgY3JlYXRlZC4NCg0KDQoNCuKAnElmIGEgc3RvcCB0 aW1lIGlzIHByb3ZpZGVkDQoNCiAgIHdoZW4gdGhlIHN1YnNjcmlwdGlvbiBpcyBjcmVhdGVkLCB0 aGUgc3Vic2NyaXB0aW9uIHdpbGwgdGVybWluYXRlDQoNCiAgIGFmdGVyIHRoZSBzdG9wIHRpbWUg aXMgcmVhY2hlZC4gIEluIHRoaXMgY2FzZSwgdGhlIE5FVENPTkYgc2Vzc2lvbg0KDQogICB3aWxs IHN0aWxsIGJlIGFuIGFjdGl2ZSBzZXNzaW9uLg0K4oCdDQoNCiAgIOKAnElmIGEgc3Vic2NyaXB0 aW9uIGlzIGNyZWF0ZWQgd2l0aCBhIDxzdG9wVGltZT4sIHRoZSBORVRDT05GIHNlc3Npb24NCg0K ICAgd2lsbCByZXR1cm4gdG8gYmVpbmcgYSBub3JtYWwgY29tbWFuZC1yZXNwb25zZSBORVRDT05G IHNlc3Npb24gd2hlbg0KDQogICB0aGUgcmVwbGF5IGlzIGNvbXBsZXRlZC7igJ0NCg0Kw7AgIFRo aXMgaW5kaWNhdGVzIHRoYXQgYWZ0ZXIgdGVybWluYXRpb24sIG9wZXJhdGlvbnMgY2FuIGJlIHBl cmZvcm1lZCwgYnV0IG5vdCBzdXJlIGlmIDxjcmVhdGUtc3Vic2NyaXB0aW9uPiBjYW4gYmUgZG9u ZSBhZ2Fpbi4NCg0KDQoNCg0KICAg4oCcV2hlbiBhIDxjcmVhdGUtc3Vic2NyaXB0aW9uPiBpcyBz ZW50IHdoaWxlIGFub3RoZXIgc3Vic2NyaXB0aW9uIGlzDQoNCiAgIGFjdGl2ZSBvbiB0aGF0IHNl c3Npb24sIHRoZSBmb2xsb3dpbmcgZXJyb3Igd2lsbCBiZSByZXR1cm5lZDrigJ0NCg0Kw7AgIFRo aXMgaW5kaWNhdGVzIHRoYXQgaWYgdGhlcmUgaXMgbm8gYWN0aXZlIHN1YnNjcmlwdGlvbiwgY3Jl YXRlLXN1YnNjcmlwdGlvbiBjYW4gYmUgc2VudCBhZ2Fpbi4NCg0KDQoNCg0KDQoNClNlbnQgZnJv bSBNYWlsPGh0dHBzOi8vZ28ubWljcm9zb2Z0LmNvbS9md2xpbmsvP0xpbmtJZD01NTA5ODY+IGZv ciBXaW5kb3dzIDEwDQoNCg== --_000_HK2PR01MB0674D64CBDA38E06A96DE316DBA80HK2PR01MB0674apcp_ Content-Type: text/html; charset="utf-8" Content-ID: <0756E439009DF4438F35B3E83DC12BF0@sct-15-1-659-11-msonline-outlook-57275.templateTenant> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1hbmdhbDsNCglwYW5vc2UtMToyIDQgNSAz IDUgMiAzIDMgMiAyO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7 DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUg RGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwN Cgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBw dDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNv SHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxv d2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28t c3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBjbTsNCgltYXJn aW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiTWFu Z2FsIixzZXJpZjt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRp di5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9w OjBjbTsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1hcmdpbi1ib3R0b206MGNtOw0KCW1hcmdpbi1s ZWZ0OjM2LjBwdDsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0 ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsN Cglmb250LWZhbWlseToiTWFuZ2FsIixzZXJpZjt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5 bGUtdHlwZTpleHBvcnQtb25seTt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0 IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29y ZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8N CkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjExMjM4OTE0MzM7DQoJbXNvLWxpc3QtdHlwZTpoeWJy aWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjM1OTE3MzkzOCAtMSA2NzY5ODY5MSA2NzY5ODY5 MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9 DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0OlxGMEYwOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFt aWx5OldpbmdkaW5nczsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFu IjsNCgltc28tYmlkaS1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMDps ZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3 Ijt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0OlxGMEE3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQt ZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0OlxGMEI3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot MTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDps ZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 OlxGMEE3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5n czt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0OlxGMEI3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQt ZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0OlxGMEE3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJn aW4tYm90dG9tOjBjbTt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQotLT48L3N0eWxlPg0K PC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSIjOTU0RjcyIj4N CjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cHJlPlJGQyA1Mjc3OiBTZWN0aW9uIDEuMTwv cHJlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iY29s b3I6YmxhY2siPkZpbHRlcjombmJzcDsgQSBwYXJhbWV0ZXIgdGhhdCBpbmRpY2F0ZXMgd2hpY2gg c3Vic2V0IG9mIGFsbCBwb3NzaWJsZTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3Bh biBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBldmVu dHMgYXJlIG9mIGludGVyZXN0LiZuYnNwOyBBIGZpbHRlciBpcyBkZWZpbmVkIGFzIG9uZSBvciBt b3JlIGZpbHRlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iY29s b3I6YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBlbGVtZW50cyBbTkVUQ09O Rl0sIGVhY2ggb2Ygd2hpY2ggaWRlbnRpZmllcyBhIHBvcnRpb24gb2YgdGhlPG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IG92ZXJhbGwgZmlsdGVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UkZDIDYyNDE6IFNlY3Rp b24gNi42IDwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHByZT48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkNvbmNlcHR1YWxseSwgYSBzdWJ0cmVlIGZp bHRlciBpcyBjb21wcmlzZWQgb2YgemVybyBvciBtb3JlIGVsZW1lbnQ8bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgc3Vi dHJlZXMsIHdoaWNoIHJlcHJlc2VudCB0aGUgZmlsdGVyIHNlbGVjdGlvbiBjcml0ZXJpYS48bzpw PjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5RdWVyeSAxOiBXaGV0aGVyIGVtcHR5IGZpbHRlciBpcyB2YWxpZCBm b3IgJmx0O2NyZWF0ZS1zdWJzY3JpcHRpb24mZ3Q7ID8mbmJzcDsg4oCcb25lIG9yIG1vcmXigJ0g LyDigJx6ZXJvIG9yIG1vcmXigJ08c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtjb2xvcjpi bGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFib3V0IHJlcGxheSBpbiA1Mjc3OjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlF1ZXJ5IDI6IENhbiAmbHQ7Y3JlYXRlLXN1YnNjcmlwdGlvbiZndDsg YmUgZG9uZSBhZ2FpbiBhZnRlciB0aW1lIGhhcyBjcm9zc2VkICZsdDtzdG9wVGltZSZndDsuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj7igJw8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5UaGUgZXZlbnQg bm90aWZpY2F0aW9uPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJj b2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IHN1YnNjcmlwdGlvbiBhbGxvd3MgYSBudW1iZXIgb2Yg b3B0aW9ucyB0byBlbmFibGUgdGhlIE5FVENPTkYgY2xpZW50PG86cD48L286cD48L3NwYW4+PC9w cmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IHRvIHNwZWNp Znkgd2hpY2ggZXZlbnRzIGFyZSBvZiBpbnRlcmVzdC4mbmJzcDsgVGhlc2UgYXJlIHNwZWNpZmll ZCB3aGVuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+Jm5ic3A7Jm5ic3A7IHRoZSBzdWJzY3JpcHRpb24gaXMgY3JlYXRlZC4mbmJzcDsgTm90 ZSB0aGF0IGEgc3Vic2NyaXB0aW9uIGNhbm5vdCBiZTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHByZT48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyBtb2RpZmllZCBvbmNl IGNyZWF0ZWQuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+4oCdPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+ PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5 bGU9InRleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjwhW2lmICFz dXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3MiPjxzcGFuIHN0 eWxlPSJtc28tbGlzdDpJZ25vcmUiPsOwPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlm XT5UaGlzIGluZGljYXRlcyBzdWJzY3JpcHRpb24gY2Fubm90IGJlIG1vZGlmaWVkIG9uY2UgY3Jl YXRlZC48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHByZT48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPuKAnDwvc3Bhbj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPklmIGEgc3RvcCB0aW1lIGlzIHByb3ZpZGVkPG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7 IHdoZW4gdGhlIHN1YnNjcmlwdGlvbiBpcyBjcmVhdGVkLCB0aGUgc3Vic2NyaXB0aW9uIHdpbGwg dGVybWluYXRlPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xv cjpibGFjayI+Jm5ic3A7Jm5ic3A7IGFmdGVyIHRoZSBzdG9wIHRpbWUgaXMgcmVhY2hlZC4mbmJz cDsgSW4gdGhpcyBjYXNlLCB0aGUgTkVUQ09ORiBzZXNzaW9uPG86cD48L286cD48L3NwYW4+PC9w cmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IHdpbGwgc3Rp bGwgYmUgYW4gYWN0aXZlIHNlc3Npb24uPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj7igJ08L3A+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5i c3A7Jm5ic3A7IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6YmxhY2siPuKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2si PklmIGEgc3Vic2NyaXB0aW9uIGlzIGNyZWF0ZWQgd2l0aCBhICZsdDtzdG9wVGltZSZndDssIHRo ZSBORVRDT05GIHNlc3Npb248bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5 bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgd2lsbCByZXR1cm4gdG8gYmVpbmcgYSBub3Jt YWwgY29tbWFuZC1yZXNwb25zZSBORVRDT05GIHNlc3Npb24gd2hlbjxvOnA+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyB0aGUg cmVwbGF5IGlzIGNvbXBsZXRlZC48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj7igJ08L3NwYW4+PHNwYW4gc3R5bGU9ImNv bG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdDt0ZXh0LWluZGVudDotMTguMHB0O21zby1saXN0OmwwIGxldmVsMSBsZm8xIj48 IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzO2Nv bG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7DsDxzcGFuIHN0eWxlPSJm b250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7IDwvc3Bhbj48L3Nw YW4+PC9zcGFuPjwhW2VuZGlmXT5UaGlzIGluZGljYXRlcyB0aGF0IGFmdGVyIHRlcm1pbmF0aW9u LCBvcGVyYXRpb25zIGNhbiBiZSBwZXJmb3JtZWQsIGJ1dCBub3Qgc3VyZSBpZiAmbHQ7Y3JlYXRl LXN1YnNjcmlwdGlvbiZndDs8c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiBjYW4gYmUgZG9uZSBh Z2Fpbi48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHByZT48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZu YnNwOyZuYnNwOyA8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj7igJw8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNr Ij5XaGVuIGEgJmx0O2NyZWF0ZS1zdWJzY3JpcHRpb24mZ3Q7IGlzIHNlbnQgd2hpbGUgYW5vdGhl ciBzdWJzY3JpcHRpb24gaXM8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5 bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgYWN0aXZlIG9uIHRoYXQgc2Vzc2lvbiwgdGhl IGZvbGxvd2luZyBlcnJvciB3aWxsIGJlIHJldHVybmVkOjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPuKAnTwvc3Bhbj48 c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAg bGV2ZWwxIGxmbzEiPjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpXaW5nZGluZ3M7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsOw PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJz cDsgPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFj ayI+VGhpcyBpbmRpY2F0ZXMgdGhhdCBpZiB0aGVyZSBpcyBubyBhY3RpdmUgc3Vic2NyaXB0aW9u LCBjcmVhdGUtc3Vic2NyaXB0aW9uIGNhbiBiZSBzZW50IGFnYWluLjxvOnA+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+U2VudCBmcm9tIDxhIGhyZWY9Imh0dHBzOi8vZ28ubWljcm9zb2Z0LmNvbS9md2xp bmsvP0xpbmtJZD01NTA5ODYiPg0KTWFpbDwvYT4gZm9yIFdpbmRvd3MgMTA8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O01hbmdhbCZxdW90OyxzZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_HK2PR01MB0674D64CBDA38E06A96DE316DBA80HK2PR01MB0674apcp_-- From nobody Tue Oct 25 13:35:16 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 227641297A8 for ; Tue, 25 Oct 2016 13:35:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.951 X-Spam-Level: X-Spam-Status: No, score=-14.951 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FrW40PxCZ7TG for ; Tue, 25 Oct 2016 13:35:08 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C291A1295AC for ; Tue, 25 Oct 2016 13:35:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=22711; q=dns/txt; s=iport; t=1477427707; x=1478637307; h=from:to:subject:date:message-id:mime-version; bh=Qo+bsPArxrg4ldpCF3cJGNR1JXrgFvGPi+MD1t+wpAQ=; b=fz5WAprDovn9iZh7LEvo/016cSfinWHRIZzI7KHmP6DebnGUHxl7/2RC tU/RZkDI4PSwVzOxxWNA6hpkh/aUTBu0NG28vMyySEojwH8A/8R+hZBVA qH4XhgnsO42W+DogWfh8h+HDaNqFdBxGdH8ZppsexxiDbmiAs7nhTb43p 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CBAQBvwQ9Y/5FdJa1cGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgnM8AQEBAQEdWH0HjS6WfpQ/ggcnhXoCGoFZPxQBAgEBAQEBAQFiKIR?= =?us-ascii?q?iAQEFLV4BCBEDAQIOGgUEMBQDAQUKBAESiDkDFw6XSJ0uBoh7GINhAQEBAQEBA?= =?us-ascii?q?QECAQEBAQEBAQEBARgFixKBPIJuAQE7FoJIgmEFlDiFXgGGKYltkAONCIQAAR4?= =?us-ascii?q?2IjyDIYFhcoVxgSCBAAEBAQ?= X-IronPort-AV: E=Sophos;i="5.31,399,1473120000"; d="scan'208,217";a="163864053" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 25 Oct 2016 20:35:06 +0000 Received: from XCH-RTP-004.cisco.com (xch-rtp-004.cisco.com [64.101.220.144]) by rcdn-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id u9PKZ635031586 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 25 Oct 2016 20:35:06 GMT Received: from xch-rtp-003.cisco.com (64.101.220.143) by XCH-RTP-004.cisco.com (64.101.220.144) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 25 Oct 2016 16:35:05 -0400 Received: from xch-rtp-003.cisco.com ([64.101.220.143]) by XCH-RTP-003.cisco.com ([64.101.220.143]) with mapi id 15.00.1210.000; Tue, 25 Oct 2016 16:35:05 -0400 From: "Alberto Gonzalez Prieto (albertgo)" To: Rohit Ranade , "netconf@ietf.org" Thread-Topic: [Netconf] RFC 5277 related queries Thread-Index: AQHSLv9Fgux0vOq6hE2+XwNoZ2nT9w== Date: Tue, 25 Oct 2016 20:35:05 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.6.160626 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.155.28.12] Content-Type: multipart/alternative; boundary="_000_D4350D908F38Calbertgociscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Netconf] RFC 5277 related queries X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Oct 2016 20:35:12 -0000 --_000_D4350D908F38Calbertgociscocom_ Content-Type: text/plain; charset="euc-kr" Content-Transfer-Encoding: base64 SGksDQoNCg0KRnJvbTogTmV0Y29uZiA8bmV0Y29uZi1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpu ZXRjb25mLWJvdW5jZXNAaWV0Zi5vcmc+PiBvbiBiZWhhbGYgb2YgUm9oaXQgUmFuYWRlIDxyb2hp dHJyYW5hZGVAb3V0bG9vay5jb208bWFpbHRvOnJvaGl0cnJhbmFkZUBvdXRsb29rLmNvbT4+DQpE YXRlOiBUdWVzZGF5LCBPY3RvYmVyIDI1LCAyMDE2IGF0IDExOjEzIEFNDQpUbzogIm5ldGNvbmZA aWV0Zi5vcmc8bWFpbHRvOm5ldGNvbmZAaWV0Zi5vcmc+IiA8bmV0Y29uZkBpZXRmLm9yZzxtYWls dG86bmV0Y29uZkBpZXRmLm9yZz4+DQpTdWJqZWN0OiBbTmV0Y29uZl0gUkZDIDUyNzcgcmVsYXRl ZCBxdWVyaWVzDQoNCg0KUkZDIDUyNzc6IFNlY3Rpb24gMS4xDQoNCg0KDQpGaWx0ZXI6ICBBIHBh cmFtZXRlciB0aGF0IGluZGljYXRlcyB3aGljaCBzdWJzZXQgb2YgYWxsIHBvc3NpYmxlDQoNCiAg ICAgIGV2ZW50cyBhcmUgb2YgaW50ZXJlc3QuICBBIGZpbHRlciBpcyBkZWZpbmVkIGFzIG9uZSBv ciBtb3JlIGZpbHRlcg0KDQogICAgICBlbGVtZW50cyBbTkVUQ09ORl0sIGVhY2ggb2Ygd2hpY2gg aWRlbnRpZmllcyBhIHBvcnRpb24gb2YgdGhlDQoNCiAgICAgIG92ZXJhbGwgZmlsdGVyLg0KDQoN Cg0KUkZDIDYyNDE6IFNlY3Rpb24gNi42DQoNCg0KQ29uY2VwdHVhbGx5LCBhIHN1YnRyZWUgZmls dGVyIGlzIGNvbXByaXNlZCBvZiB6ZXJvIG9yIG1vcmUgZWxlbWVudA0KDQogICBzdWJ0cmVlcywg d2hpY2ggcmVwcmVzZW50IHRoZSBmaWx0ZXIgc2VsZWN0aW9uIGNyaXRlcmlhLg0KDQoNClF1ZXJ5 IDE6IFdoZXRoZXIgZW1wdHkgZmlsdGVyIGlzIHZhbGlkIGZvciA8Y3JlYXRlLXN1YnNjcmlwdGlv bj4gPyAgobBvbmUgb3IgbW9yZaGxIC8gobB6ZXJvIG9yIG1vcmWhsQ0KDQoNCk9uZSBvciBtb3Jl IGZpbHRlciBlbGVtZW50cy4NCk5vdGUgdGhhdCB0aGUgobB6ZXJvIG9yIG1vcmWhsSByZWZlcnMg dG8gc3VidHJlZXMuIFdoaWxlIHRoZSChsG9uZSBvciBtb3JlobEgcmVmZXJzIHRvIGZpbHRlcnMu DQpNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgeW91IGNhbiBoYXZlIG9uZSBmaWx0ZXIgd2l0aCB6 ZXJvIHN1YnRyZWVzLg0KDQoNCg0KQWJvdXQgcmVwbGF5IGluIDUyNzc6DQpRdWVyeSAyOiBDYW4g PGNyZWF0ZS1zdWJzY3JpcHRpb24+IGJlIGRvbmUgYWdhaW4gYWZ0ZXIgdGltZSBoYXMgY3Jvc3Nl ZCA8c3RvcFRpbWU+Lg0KDQpZZXMuDQoNCiJBIDxyZXBsYXlDb21wbGV0ZT4gbm90aWZpY2F0aW9u IGlzIHNlbnQgdG8gaW5kaWNhdGUgdGhhdCBhbGwgb2YgdGhlDQoNCiAgIHJlcGxheSBub3RpZmlj YXRpb25zIGhhdmUgYmVlbiBzZW50IGFuZCBtdXN0IG5vdCBiZSBzZW50IGZvciBhbnkNCiAgIG90 aGVyIHJlYXNvbi4gIElmIHRoaXMgc3Vic2NyaXB0aW9uIGhhcyBhIHN0b3AgdGltZSwgdGhlbiB0 aGlzDQogICBzZXNzaW9uIGJlY29tZXMgYSBub3JtYWwgTkVUQ09ORiBzZXNzaW9uIGFnYWluLiAi DQoNCkJlaW5nIGEgobBub3JtYWyhsSBzZXNzaW9uIGFnYWluLCB0aGVyZSBpcyBubyBsaW1pdGF0 aW9uIHRvIGNyZWF0ZSBzdWJzY3JpcHRpb25zLg0KDQoNCg0KDQqhsFRoZSBldmVudCBub3RpZmlj YXRpb24NCg0KICAgc3Vic2NyaXB0aW9uIGFsbG93cyBhIG51bWJlciBvZiBvcHRpb25zIHRvIGVu YWJsZSB0aGUgTkVUQ09ORiBjbGllbnQNCg0KICAgdG8gc3BlY2lmeSB3aGljaCBldmVudHMgYXJl IG9mIGludGVyZXN0LiAgVGhlc2UgYXJlIHNwZWNpZmllZCB3aGVuDQoNCiAgIHRoZSBzdWJzY3Jp cHRpb24gaXMgY3JlYXRlZC4gIE5vdGUgdGhhdCBhIHN1YnNjcmlwdGlvbiBjYW5ub3QgYmUNCg0K ICAgbW9kaWZpZWQgb25jZSBjcmVhdGVkLqGxDQoNCqmjICBUaGlzIGluZGljYXRlcyBzdWJzY3Jp cHRpb24gY2Fubm90IGJlIG1vZGlmaWVkIG9uY2UgY3JlYXRlZC4NCg0KDQoNCqGwSWYgYSBzdG9w IHRpbWUgaXMgcHJvdmlkZWQNCg0KICAgd2hlbiB0aGUgc3Vic2NyaXB0aW9uIGlzIGNyZWF0ZWQs IHRoZSBzdWJzY3JpcHRpb24gd2lsbCB0ZXJtaW5hdGUNCg0KICAgYWZ0ZXIgdGhlIHN0b3AgdGlt ZSBpcyByZWFjaGVkLiAgSW4gdGhpcyBjYXNlLCB0aGUgTkVUQ09ORiBzZXNzaW9uDQoNCiAgIHdp bGwgc3RpbGwgYmUgYW4gYWN0aXZlIHNlc3Npb24uDQqhsQ0KDQogICChsElmIGEgc3Vic2NyaXB0 aW9uIGlzIGNyZWF0ZWQgd2l0aCBhIDxzdG9wVGltZT4sIHRoZSBORVRDT05GIHNlc3Npb24NCg0K ICAgd2lsbCByZXR1cm4gdG8gYmVpbmcgYSBub3JtYWwgY29tbWFuZC1yZXNwb25zZSBORVRDT05G IHNlc3Npb24gd2hlbg0KDQogICB0aGUgcmVwbGF5IGlzIGNvbXBsZXRlZC6hsQ0KDQqpoyAgVGhp cyBpbmRpY2F0ZXMgdGhhdCBhZnRlciB0ZXJtaW5hdGlvbiwgb3BlcmF0aW9ucyBjYW4gYmUgcGVy Zm9ybWVkLCBidXQgbm90IHN1cmUgaWYgPGNyZWF0ZS1zdWJzY3JpcHRpb24+IGNhbiBiZSBkb25l IGFnYWluLg0KDQoNCg0KDQogICChsFdoZW4gYSA8Y3JlYXRlLXN1YnNjcmlwdGlvbj4gaXMgc2Vu dCB3aGlsZSBhbm90aGVyIHN1YnNjcmlwdGlvbiBpcw0KDQogICBhY3RpdmUgb24gdGhhdCBzZXNz aW9uLCB0aGUgZm9sbG93aW5nIGVycm9yIHdpbGwgYmUgcmV0dXJuZWQ6obENCg0KqaMgIFRoaXMg aW5kaWNhdGVzIHRoYXQgaWYgdGhlcmUgaXMgbm8gYWN0aXZlIHN1YnNjcmlwdGlvbiwgY3JlYXRl LXN1YnNjcmlwdGlvbiBjYW4gYmUgc2VudCBhZ2Fpbi4NCg0KDQoNCg0KDQoNClNlbnQgZnJvbSBN YWlsPGh0dHBzOi8vZ28ubWljcm9zb2Z0LmNvbS9md2xpbmsvP0xpbmtJZD01NTA5ODY+IGZvciBX aW5kb3dzIDEwDQoNCg== --_000_D4350D908F38Calbertgociscocom_ Content-Type: text/html; charset="euc-kr" Content-ID: <4C4CDD34EEA95648A0E025A00ED28D0F@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PWV1Yy1rciI+DQo8L2hlYWQ+DQo8Ym9keSBzdHlsZT0id29yZC13 cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1i cmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtc2l6ZTog MTRweDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxkaXY+SGksPC9kaXY+ DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxzcGFuIGlkPSJPTEtfU1JD X0JPRFlfU0VDVElPTiI+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpOyBmb250LXNp emU6MTFwdDsgdGV4dC1hbGlnbjpsZWZ0OyBjb2xvcjpibGFjazsgQk9SREVSLUJPVFRPTTogbWVk aXVtIG5vbmU7IEJPUkRFUi1MRUZUOiBtZWRpdW0gbm9uZTsgUEFERElORy1CT1RUT006IDBpbjsg UEFERElORy1MRUZUOiAwaW47IFBBRERJTkctUklHSFQ6IDBpbjsgQk9SREVSLVRPUDogI2I1YzRk ZiAxcHQgc29saWQ7IEJPUkRFUi1SSUdIVDogbWVkaXVtIG5vbmU7IFBBRERJTkctVE9QOiAzcHQi Pg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPkZyb206IDwvc3Bhbj5OZXRjb25mICZs dDs8YSBocmVmPSJtYWlsdG86bmV0Y29uZi1ib3VuY2VzQGlldGYub3JnIj5uZXRjb25mLWJvdW5j ZXNAaWV0Zi5vcmc8L2E+Jmd0OyBvbiBiZWhhbGYgb2YgUm9oaXQgUmFuYWRlICZsdDs8YSBocmVm PSJtYWlsdG86cm9oaXRycmFuYWRlQG91dGxvb2suY29tIj5yb2hpdHJyYW5hZGVAb3V0bG9vay5j b208L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRlOiA8L3Nw YW4+VHVlc2RheSwgT2N0b2JlciAyNSwgMjAxNiBhdCAxMToxMyBBTTxicj4NCjxzcGFuIHN0eWxl PSJmb250LXdlaWdodDpib2xkIj5UbzogPC9zcGFuPiZxdW90OzxhIGhyZWY9Im1haWx0bzpuZXRj b25mQGlldGYub3JnIj5uZXRjb25mQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFp bHRvOm5ldGNvbmZAaWV0Zi5vcmciPm5ldGNvbmZAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxzcGFu IHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5TdWJqZWN0OiA8L3NwYW4+W05ldGNvbmZdIFJGQyA1 Mjc3IHJlbGF0ZWQgcXVlcmllczxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxibG9j a3F1b3RlIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0iQk9S REVSLUxFRlQ6ICNiNWM0ZGYgNSBzb2xpZDsgUEFERElORzowIDAgMCA1OyBNQVJHSU46MCAwIDAg NTsiPg0KPGRpdiB4bWxuczpvPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZp Y2UiIHhtbG5zOnc9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOndvcmQiIHhtbG5z Om09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1s bnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg0KPG1ldGEgbmFtZT0iR2VuZXJh dG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8c3R5 bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9DQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5Ok1hbmdhbDsNCglwYW5vc2UtMToyIDQgNSAzIDUgMiAzIDMgMiAyO30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRN TCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAx cHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiTWFuZ2FsIixzZXJpZjt9DQpw Lk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdy YXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBjbTsNCgltYXJnaW4t cmlnaHQ6MGNtOw0KCW1hcmdpbi1ib3R0b206MGNtOw0KCW1hcmdpbi1sZWZ0OjM2LjBwdDsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1z dHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseToi TWFuZ2FsIixzZXJpZjt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFy Z2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21z by1saXN0LWlkOjExMjM4OTE0MzM7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3Qt dGVtcGxhdGUtaWRzOjM1OTE3MzkzOCAtMSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5 ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZl bDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0OlxG MEYwOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczsN Cgltc28tZmFyZWFzdC1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCgltc28tYmlkaS1m b250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDps ZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 OlxGMEE3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5n czt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0OlxGMEI3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQt ZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0OlxGMEE3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDps ZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 OlxGMEI3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0OlxGMEE3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBjbTt9 DQp1bA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQotLT48L3N0eWxlPg0KPGRpdiBsYW5nPSJFTi1V UyIgbGluaz0iYmx1ZSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24x Ij4NCjxwcmU+UkZDIDUyNzc6IFNlY3Rpb24gMS4xPC9wcmU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9v OnA+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RmlsdGVyOiZuYnNwOyBB IHBhcmFtZXRlciB0aGF0IGluZGljYXRlcyB3aGljaCBzdWJzZXQgb2YgYWxsIHBvc3NpYmxlPG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGV2ZW50cyBhcmUgb2YgaW50ZXJlc3QuJm5ic3A7 IEEgZmlsdGVyIGlzIGRlZmluZWQgYXMgb25lIG9yIG1vcmUgZmlsdGVyPG86cD48L286cD48L3Nw YW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IGVsZW1lbnRzIFtORVRDT05GXSwgZWFjaCBvZiB3aGljaCBpZGVudGlm aWVzIGEgcG9ydGlvbiBvZiB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4g c3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgb3ZlcmFs bCBmaWx0ZXIuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5SRkMgNjI0MTogU2VjdGlvbiA2LjYgPC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+Q29uY2VwdHVhbGx5LCBhIHN1YnRyZWUgZmlsdGVyIGlzIGNvbXByaXNlZCBvZiB6ZXJv IG9yIG1vcmUgZWxlbWVudDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHls ZT0iY29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyBzdWJ0cmVlcywgd2hpY2ggcmVwcmVzZW50IHRo ZSBmaWx0ZXIgc2VsZWN0aW9uIGNyaXRlcmlhLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlF1ZXJ5IDE6 IFdoZXRoZXIgZW1wdHkgZmlsdGVyIGlzIHZhbGlkIGZvciAmbHQ7Y3JlYXRlLXN1YnNjcmlwdGlv biZndDsgPyZuYnNwOyChsG9uZSBvciBtb3JlobEgLyChsHplcm8gb3IgbW9yZaGxPC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPGRpdj48YnI+DQo8 L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pk9uZSBvciBtb3JlIGZpbHRlciBlbGVtZW50 cy48L2Rpdj4NCjxkaXY+Tm90ZSB0aGF0IHRoZSChsHplcm8gb3IgbW9yZaGxIHJlZmVycyB0byBz dWJ0cmVlcy4gV2hpbGUgdGhlIKGwb25lIG9yIG1vcmWhsSByZWZlcnMgdG8gZmlsdGVycy48L2Rp dj4NCjxkaXY+TXkgdW5kZXJzdGFuZGluZyBpcyB0aGF0IHlvdSBjYW4gaGF2ZSBvbmUgZmlsdGVy IHdpdGggemVybyBzdWJ0cmVlcy4mbmJzcDs8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8c3Bh biBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0KPGJsb2NrcXVvdGUgaWQ9Ik1BQ19PVVRMT09L X0FUVFJJQlVUSU9OX0JMT0NLUVVPVEUiIHN0eWxlPSJCT1JERVItTEVGVDogI2I1YzRkZiA1IHNv bGlkOyBQQURESU5HOjAgMCAwIDU7IE1BUkdJTjowIDAgMCA1OyI+DQo8ZGl2IHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8ZGl2IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0iIzk1 NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Y29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5BYm91dCByZXBsYXkgaW4gNTI3Nzo8L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5RdWVy eSAyOiBDYW4gJmx0O2NyZWF0ZS1zdWJzY3JpcHRpb24mZ3Q7IGJlIGRvbmUgYWdhaW4gYWZ0ZXIg dGltZSBoYXMgY3Jvc3NlZCAmbHQ7c3RvcFRpbWUmZ3Q7LjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvc3Bhbj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Plll cy48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PiZxdW90OzxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTogTWFuZ2FsLCBzZXJpZjsgZm9udC1zaXplOiAxM3B4OyI+QSAmbHQ7cmVwbGF5Q29t cGxldGUmZ3Q7IG5vdGlmaWNhdGlvbiBpcyBzZW50IHRvIGluZGljYXRlIHRoYXQgYWxsIG9mIHRo ZTwvc3Bhbj48L2Rpdj4NCjxwcmUgY2xhc3M9Im5ld3BhZ2UiIHN0eWxlPSJmb250LXNpemU6IDEz cHg7IG1hcmdpbi10b3A6IDBweDsgbWFyZ2luLWJvdHRvbTogMHB4OyBwYWdlLWJyZWFrLWJlZm9y ZTogYWx3YXlzOyI+ICAgcmVwbGF5IG5vdGlmaWNhdGlvbnMgaGF2ZSBiZWVuIHNlbnQgYW5kIG11 c3Qgbm90IGJlIHNlbnQgZm9yIGFueQ0KICAgb3RoZXIgcmVhc29uLiAgPGI+SWYgdGhpcyBzdWJz Y3JpcHRpb24gaGFzIGEgc3RvcCB0aW1lLCB0aGVuIHRoaXMNCiAgIHNlc3Npb24gYmVjb21lcyBh IG5vcm1hbCBORVRDT05GIHNlc3Npb24gYWdhaW4uPC9iPiAmcXVvdDs8L3ByZT4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2PkJlaW5nIGEgobBub3JtYWyhsSBzZXNzaW9uIGFnYWluLCB0aGVyZSBp cyBubyBsaW1pdGF0aW9uIHRvIGNyZWF0ZSBzdWJzY3JpcHRpb25zLjwvZGl2Pg0KPGRpdj48YnI+ DQo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJ T04iPg0KPGJsb2NrcXVvdGUgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NLUVVPVEUi IHN0eWxlPSJCT1JERVItTEVGVDogI2I1YzRkZiA1IHNvbGlkOyBQQURESU5HOjAgMCAwIDU7IE1B UkdJTjowIDAgMCA1OyI+DQo8ZGl2IHhtbG5zOm89InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206 b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6 d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8x Mi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvVFIvUkVDLWh0bWw0MCI+DQo8ZGl2IGxh bmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwcmU+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj6hsDwvc3Bhbj48 c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPlRoZSBldmVudCBub3RpZmljYXRpb248bzpwPjwvbzpw Pjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJz cDsgc3Vic2NyaXB0aW9uIGFsbG93cyBhIG51bWJlciBvZiBvcHRpb25zIHRvIGVuYWJsZSB0aGUg TkVUQ09ORiBjbGllbnQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9 ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgdG8gc3BlY2lmeSB3aGljaCBldmVudHMgYXJlIG9m IGludGVyZXN0LiZuYnNwOyBUaGVzZSBhcmUgc3BlY2lmaWVkIHdoZW48bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgdGhl IHN1YnNjcmlwdGlvbiBpcyBjcmVhdGVkLiZuYnNwOyBOb3RlIHRoYXQgYSBzdWJzY3JpcHRpb24g Y2Fubm90IGJlPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xv cjpibGFjayI+Jm5ic3A7Jm5ic3A7IG1vZGlmaWVkIG9uY2UgY3JlYXRlZC48L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj6h sTwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotMTguMHB0 O21zby1saXN0OmwwIGxldmVsMSBsZm8xIj48IS0tW2lmICFzdXBwb3J0TGlzdHNdLS0+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9y ZSI+qaM8c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6 IG5vcm1hbDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyI+Jm5ic3A7DQo8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48IS0tW2VuZGlmXS0tPlRoaXMgaW5kaWNhdGVzIHN1YnNjcmlwdGlvbiBj YW5ub3QgYmUgbW9kaWZpZWQgb25jZSBjcmVhdGVkLjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+obA8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5JZiBhIHN0b3AgdGlt ZSBpcyBwcm92aWRlZDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyB3aGVuIHRoZSBzdWJzY3JpcHRpb24gaXMgY3JlYXRl ZCwgdGhlIHN1YnNjcmlwdGlvbiB3aWxsIHRlcm1pbmF0ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyBhZnRlciB0aGUg c3RvcCB0aW1lIGlzIHJlYWNoZWQuJm5ic3A7IEluIHRoaXMgY2FzZSwgdGhlIE5FVENPTkYgc2Vz c2lvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPiZuYnNwOyZuYnNwOyB3aWxsIHN0aWxsIGJlIGFuIGFjdGl2ZSBzZXNzaW9uLjxvOnA+PC9v OnA+PC9zcGFuPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+obE8L3A+DQo8cHJlPjxzcGFu IHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPqGwPC9zcGFuPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+SWYgYSBzdWJzY3JpcHRpb24gaXMgY3JlYXRlZCB3aXRo IGEgJmx0O3N0b3BUaW1lJmd0OywgdGhlIE5FVENPTkYgc2Vzc2lvbjxvOnA+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyB3aWxs IHJldHVybiB0byBiZWluZyBhIG5vcm1hbCBjb21tYW5kLXJlc3BvbnNlIE5FVENPTkYgc2Vzc2lv biB3aGVuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+Jm5ic3A7Jm5ic3A7IHRoZSByZXBsYXkgaXMgY29tcGxldGVkLjwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPqGx PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBwdDttc28t bGlzdDpsMCBsZXZlbDEgbGZvMSI+PCEtLVtpZiAhc3VwcG9ydExpc3RzXS0tPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTpXaW5nZGluZ3M7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxlPSJtc28tbGlz dDpJZ25vcmUiPqmjPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1zaXplOiA3cHQ7IGxpbmUt aGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJzsiPiZuYnNwOyA8 L3NwYW4+PC9zcGFuPjwvc3Bhbj48IS0tW2VuZGlmXS0tPlRoaXMgaW5kaWNhdGVzIHRoYXQgYWZ0 ZXIgdGVybWluYXRpb24sIG9wZXJhdGlvbnMgY2FuIGJlIHBlcmZvcm1lZCwgYnV0IG5vdCBzdXJl IGlmICZsdDtjcmVhdGUtc3Vic2NyaXB0aW9uJmd0OzxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+ IGNhbiBiZSBkb25lIGFnYWluLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cHJlPjxzcGFuIHN0eWxlPSJj b2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPqGwPC9zcGFuPjxzcGFuIHN0eWxl PSJjb2xvcjpibGFjayI+V2hlbiBhICZsdDtjcmVhdGUtc3Vic2NyaXB0aW9uJmd0OyBpcyBzZW50 IHdoaWxlIGFub3RoZXIgc3Vic2NyaXB0aW9uIGlzPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IGFjdGl2ZSBvbiB0aGF0 IHNlc3Npb24sIHRoZSBmb2xsb3dpbmcgZXJyb3Igd2lsbCBiZSByZXR1cm5lZDo8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij6hsTwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7 bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjwhLS1baWYgIXN1cHBvcnRMaXN0c10tLT48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzO2NvbG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNv LWxpc3Q6SWdub3JlIj6pozxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBs aW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7Ij4mbmJz cDsgPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCEtLVtlbmRpZl0tLT48c3BhbiBzdHlsZT0iY29sb3I6 YmxhY2siPlRoaXMgaW5kaWNhdGVzIHRoYXQgaWYgdGhlcmUgaXMgbm8gYWN0aXZlIHN1YnNjcmlw dGlvbiwgY3JlYXRlLXN1YnNjcmlwdGlvbiBjYW4gYmUgc2VudCBhZ2Fpbi48bzpwPjwvbzpwPjwv c3Bhbj48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPlNlbnQgZnJvbSA8YSBocmVmPSJodHRwczovL2dvLm1pY3Jvc29mdC5jb20v ZndsaW5rLz9MaW5rSWQ9NTUwOTg2Ij4NCk1haWw8L2E+IGZvciBXaW5kb3dzIDEwPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtNYW5nYWwmcXVvdDssc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvc3Bh bj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D4350D908F38Calbertgociscocom_-- From nobody Wed Oct 26 13:43:13 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DA01129589 for ; Wed, 26 Oct 2016 13:43:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.951 X-Spam-Level: X-Spam-Status: No, score=-14.951 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UiT2x_iwsD99 for ; Wed, 26 Oct 2016 13:43:10 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4480D129409 for ; Wed, 26 Oct 2016 13:43:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=37698; q=dns/txt; s=iport; t=1477514590; x=1478724190; h=from:to:subject:date:message-id:mime-version; bh=zkA0ffekUbQJx3pVLbO0Uz27GUcglveOkIWVLJW2/+Q=; b=gShR0ZLBuFg+NR8SDSkWiIqNHKkfsF83ZqLGZ4h1B2ssnAfn3IGH0bJJ nGooTlrQewS0kH8lmQHypOUzqWmtHATzKS6DR4SkcOLZLrjFZwpU5LrB5 lne9MwP04fjwxSpo6xgGD1HzrCrRBfg+9g2hULSdoXM862pjbO13C9Qy/ Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BsAQDMFBFY/51dJa1DGhoBAQEBAgEBA?= =?us-ascii?q?QEIAQEBAYJzNwEBAQEBHVh9B40umg2PIIIPggkpiAU/FAECAQEBAQEBAWIohGk?= =?us-ascii?q?OHzgJHQEtCwgBAzwmAQQBGohMDi23fodjAQEBAQEBAQMBAQEBAQEBARoFhj2CY?= =?us-ascii?q?4MugnVkgX6DEwV3mR8BhiuDB4ZmgXWOFocbhW+EAAEeNl6DGRyBUnIBBIdSgQk?= =?us-ascii?q?BAQE?= X-IronPort-AV: E=Sophos;i="5.31,551,1473120000"; d="scan'208,217";a="339164097" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 26 Oct 2016 20:43:09 +0000 Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id u9QKh8wp012710 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 26 Oct 2016 20:43:08 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 26 Oct 2016 16:43:07 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1210.000; Wed, 26 Oct 2016 16:43:07 -0400 From: "Eric Voit (evoit)" To: "'netconf-subscriptions-dt@voit.org'" , "netconf@ietf.org" Thread-Topic: Minutes 26-Oct: NETCONF/RESTCONF/HTTP2 Subscription & Event drafts Thread-Index: AdIvyYytwqR54wwFTCq6m7Ao0JxBHg== Date: Wed, 26 Oct 2016 20:43:07 +0000 Message-ID: <6bd093024f6d4e3299035556b25053b0@XCH-RTP-013.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.229] Content-Type: multipart/alternative; boundary="_000_6bd093024f6d4e3299035556b25053b0XCHRTP013ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [Netconf] Minutes 26-Oct: NETCONF/RESTCONF/HTTP2 Subscription & Event drafts X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Oct 2016 20:43:12 -0000 --_000_6bd093024f6d4e3299035556b25053b0XCHRTP013ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable https://github.com/netconf-wg/yang-push/wiki/Minutes-2016-10-26 Meeting Materials Attending WebEx Recording password: qAb6KumY Andy Bierman, Alexander Clemm, Ambika Tripathy, Einar Nilsen-Nygaard, Eric = Voit, Tim Jenkins, Balazs Lengyel, Kent Watsen, Ambika Tripathy Modifications to Latest 5277bis * Alex, Eric, Alberto have updated model and draft. Look for latest sho= rtly posted to IETF * Definitions updated throughout from 5277 for Publisher (from Event= Server) and Subscriber (from Client) * Text simplifications/reductions * Discussed on the call to still be mixed into the text. (upcoming upda= te will include) * Notifications: Remove added-to-subscription, and removed-from-subs= cription notifications. * Dynamic Subscriptions: don't allow modification to streams or enco= ding for modify-subscription RPC. Filters and Streams * Reviewed Andy's proposal for a new filter type based on hierarchical = event type metadata * Seems like a good idea. The hard part will be defining the event h= ierarchy. That will play out in the IETF somewhat decoupled from subscripti= ons as it could be used for GET filter as well. * Need for a new Draft including Metadata filtering * There is not an existing YANG filter for Metadata. Nor is there a = filter for metadata + subtree filtering. This needs to be solved for GET op= erations (i.e., this is not just about subscriptions). * For populating the metadata: Subtrees will inherit the event-types of= their parents, unless otherwise indicated via a deviations file. * For metadata filters, there needs to be some mechanism that the on-ch= ange notification for metadata pushed data in the sequential order of opera= tions on a device. For example, you want to push object metadata changes fo= r before you see the same object's corresponding changes for datastore. * Open question on filters: Are the capabilities in a filter type allow= ed to be mixed/matched to make a more complex union or intersection filter = within a subscription? * Eric recommendation: We don't allow application of multiple filter= s concurrently. Building a filter syntax for unions and intersections acros= s filter types is interesting, but hard. Problematically it puts us in the = business where we have to define what is possible (or not) via the combinat= ion of any two filter types. It would be simpler to leave the valid combina= tions of filter capabilities to any particular normative reference. * We should advocate for a new IETF draft (above) which defines this= . * Streams * Streams are optional, and will include NETCONF and custom-stream e= ntries. We will not try to standardize any new IETF streams at this point. * Metadata would allow filtering on OpState info (upcoming draft fro= m the datastore design team). This would accomplish the same business objec= tives as what we were talking about previously with IETF standardized strea= ms. Anyone who wants to meet those objectives prior to having a filter on O= pState metadata can define their own custom-stream. Partial/incremental push of periodic data * Einar believes real world examples necessitate that a Publisher be ab= le to partition and sequence the push updates. * This means no need to aggregate a single push from different linec= ards * Then able to load balance pushed for different objects with a diff= erent push timestamp. * Belief that Anchor-time is not the right object to use for determinin= g whether partial push updates are acceptable to be sent. Instead a new per= iodic type subscription object should be created. Perhaps "partial-push-acc= epted"? * Proposal to be brought to mailing list (by Einar?) as people are worr= ied about the extra complexity this will introduce. Topics to address inclu= de: * A push update for a subscription with the partial-push-accepted fl= ag =3D yes is not assumed to be a complete representation of the datastore,= it just contains that set of objects/values at that particular time of a p= ush update. * Integrity across the datastore extract cannot be assumed. * Can be used during negotiation if an internally consistent set of = objects should not be assumed by the receiver. * Push updates are accumulated across a known period established acr= oss a subscription, with the last value received being current. Object whic= h is older than the period is assumed to be stale or deleted. * Establish proper meaning of updates-not-sent flag. --_000_6bd093024f6d4e3299035556b25053b0XCHRTP013ciscocom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

https://github.com/netconf-wg/yang-push/wiki/Minute= s-2016-10-26

 

WebEx Recording

password: qAb6KumY

Andy Bierman, Alexande= r Clemm, Ambika Tripathy, Einar Nilsen-Nygaard, Eric Voit, Tim Jenkins, Bal= azs Lengyel, Kent Watsen, Ambika Tripathy

M= odifications to Latest 5277bis

  • Alex, Eric, Alb= erto have updated model and draft. Look for latest shortly posted to IETF
    • Discussed on th= e call to still be mixed into the text. (upcoming update will include)=
      • Notifications: = Remove added-to-subscription, and removed-from-subscription notifications.<= o:p>
      • Dynamic Subscri= ptions: don't allow modification to streams or encoding for modify-subscrip= tion RPC.

    F= ilters and Streams

    • Reviewed Andy's= proposal for a new filter type based on hierarchical event type metadata
      • Seems like a go= od idea. The hard part will be defining the event hierarchy. That will play= out in the IETF somewhat decoupled from subscriptions as it could be used = for GET filter as well.
    • Need fo= r a new Draft including Metadata filtering
      • There is not an= existing YANG filter for Metadata. Nor is there a filter for metadata += ; subtree filtering. This needs to be solved for GET operations (i.e., this= is not just about subscriptions).
    • For populating = the metadata: Subtrees will inherit the event-types of their parents, unles= s otherwise indicated via a deviations file.
    • For metadata fi= lters, there needs to be some mechanism that the on-change notification for= metadata pushed data in the sequential order of operations on a device. Fo= r example, you want to push object metadata changes for before you see the same object's corresponding changes for dat= astore.
    • Open question o= n filters: Are the capabilities in a filter type allowed to be mixed/matche= d to make a more complex union or intersection filter within a subscription= ?
      • Eric recommenda= tion: We don't allow application of multiple filters concurrently. Building= a filter syntax for unions and intersections across filter types is intere= sting, but hard. Problematically it puts us in the business where we have to define what is possible (or not) via the = combination of any two filter types. It would be simpler to leave the valid= combinations of filter capabilities to any particular normative reference.=
      • We should advoc= ate for a new IETF draft (above) which defines this.
        • =
    • Streams
      • Streams are opt= ional, and will include NETCONF and custom-stream entries. We will not try = to standardize any new IETF streams at this point.
        • Metadata would = allow filtering on OpState info (upcoming draft from the datastore design t= eam). This would accomplish the same business objectives as what we were ta= lking about previously with IETF standardized streams. Anyone who wants to meet those objectives prior to having a filte= r on OpState metadata can define their own custom-stream.=

    P= artial/incremental push of periodic data

    • Einar believes = real world examples necessitate that a Publisher be able to partition and s= equence the push updates.
      • This means no n= eed to aggregate a single push from different linecards
      • Then able to lo= ad balance pushed for different objects with a different push timestamp.
    • Belief that Anc= hor-time is not the right object to use for determining whether partial pus= h updates are acceptable to be sent. Instead a new periodic type subscripti= on object should be created. Perhaps "partial-push-accepted"?
    • Proposal to be = brought to mailing list (by Einar?) as people are worried about the extra c= omplexity this will introduce. Topics to address include:
      • A push update f= or a subscription with the partial-push-accepted flag =3D yes is not assume= d to be a complete representation of the datastore, it just contains that s= et of objects/values at that particular time of a push update.
      • Integrity acros= s the datastore extract cannot be assumed.
      • Can be used dur= ing negotiation if an internally consistent set of objects should not be as= sumed by the receiver.
      • Push updates ar= e accumulated across a known period established across a subscription, with= the last value received being current. Object which is older than the peri= od is assumed to be stale or deleted.
      • Establish prope= r meaning of updates-not-sent flag.

     

--_000_6bd093024f6d4e3299035556b25053b0XCHRTP013ciscocom_-- From nobody Wed Oct 26 19:14:38 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A53F129887 for ; Wed, 26 Oct 2016 19:14:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1QzqiOmIkNTm for ; Wed, 26 Oct 2016 19:14:36 -0700 (PDT) Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9525A129873 for ; Wed, 26 Oct 2016 19:14:35 -0700 (PDT) Received: by mail-wm0-x232.google.com with SMTP id 140so711893wmv.1 for ; Wed, 26 Oct 2016 19:14:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=ueXI2eULlAZTQ/sTcD9+A3uBYZKeLd/ofJXgXhVq81Y=; b=2Rl0Jmb+blFCYUwaSKE0WA17WykHdKR6PzMe/Wd0WJBnpP4i2Dm1Y0/x3AbwXY2QEK 7S0PMFh9QmGY+IMkZs6KrqPUcmNW5yQMpAzNoq+Ad6aVXYVY6DoLZrpGeqKTOUtsiF3p OPFwhV0CwxYgVgGr4kByUcf+HjxOBg06bGgcBDiG9xJAzgR45+LebvuoxjeP/YCD0ZJW SEU5bt8ekZ34KynyN7msmPwkNdRzxs7jfiwfcj3s/0Hll+ZaGjI2pcg9x3AF2WPFAp/9 jqPG0Pe3HoKJ76ekJCRWyJT1S5Mn3gTFByNDpd6uJ/ckWX7PRX69cGeJElSC2HguGzEh Yg6w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=ueXI2eULlAZTQ/sTcD9+A3uBYZKeLd/ofJXgXhVq81Y=; b=bqun1bWc2LDrcxeo+/yIIL/B7i2ZgHZ3uEpKLqfWj7Rrsp5FB0Dk+smPahKum7JtfY ks90cUAGr14eo7rS8fzW2yw1A7pTrIA8K0TvcVzDGrTRMekNho9WocUozqi9I7+AeHQF btG5SxREiOwQwtRMvWAmFokF+eC9MsRr2PVvvPOfp2qviaR9SKSDfucyP2zOhahMkpHS RdzpBB2fYuYjKnTGGwgviVY4kRnZgGvbzYeO5QCSTTvlo8DK/1iSMsxuwLwXp7hRNHGC A3ZV+XDAson6+B49z08Vvqd28JwQ+1bYca/S0Yct3kubkhP8ep8bz2yDD1FFwYcD/EjL +j7g== X-Gm-Message-State: ABUngvfhTUwAwKChlK/6QviwpK98ODMLodWRF6Xj0WTSeKIrMZEVgK6i2gONgiB+uvS0FWv8OTgooRCsqF/Yyw== X-Received: by 10.28.74.193 with SMTP id n62mr5027083wmi.67.1477534473904; Wed, 26 Oct 2016 19:14:33 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.184.193 with HTTP; Wed, 26 Oct 2016 19:14:33 -0700 (PDT) In-Reply-To: <147753409934.2882.11640253890646215173.idtracker@ietfa.amsl.com> References: <147753409934.2882.11640253890646215173.idtracker@ietfa.amsl.com> From: Andy Bierman Date: Wed, 26 Oct 2016 19:14:33 -0700 Message-ID: To: Netconf Content-Type: multipart/alternative; boundary=94eb2c073d8c75fc05053fcf4d24 Archived-At: Subject: [Netconf] Fwd: I-D Action: draft-bierman-netconf-rfc6536bis-00.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2016 02:14:37 -0000 --94eb2c073d8c75fc05053fcf4d24 Content-Type: text/plain; charset=UTF-8 Hi, Martin and I updated NACM so it supports YANG 1.1 and RESTCONF. We would like this document to be considered as a starting point for a new NETCONF WG draft to address item #5 in the current charter. We also request a 10 min. slot at IETF #97 to discuss this draft to determine if the scope and content is correct. thanks, Andy ---------- Forwarded message ---------- From: Date: Wed, Oct 26, 2016 at 7:08 PM Subject: I-D Action: draft-bierman-netconf-rfc6536bis-00.txt To: i-d-announce@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Network Configuration Protocol (NETCONF) Access Control Model Authors : Andy Bierman Martin Bjorklund Filename : draft-bierman-netconf-rfc6536bis-00.txt Pages : 51 Date : 2016-10-26 Abstract: The standardization of network configuration interfaces for use with the Network Configuration Protocol (NETCONF) or RESTCONF protocol requires a structured and secure operating environment that promotes human usability and multi-vendor interoperability. There is a need for standard mechanisms to restrict NETCONF or RESTCONF protocol access for particular users to a pre-configured subset of all available NETCONF or RESTCONF protocol operations and content. This document defines such an access control model. This document obsoletes RFC 6536. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-bierman-netconf-rfc6536bis/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-bierman-netconf-rfc6536bis-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ I-D-Announce mailing list I-D-Announce@ietf.org https://www.ietf.org/mailman/listinfo/i-d-announce Internet-Draft directories: http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt --94eb2c073d8c75fc05053fcf4d24 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

Martin and I updated NACM so it sup= ports YANG 1.1 and RESTCONF.
We would like this document to be co= nsidered as a starting point for a
new NETCONF WG draft to addres= s item #5 in the current charter.

We also request = a 10 min. slot at IETF #97 to discuss this
draft to determine if = the scope and content is correct.


t= hanks,
Andy

-= --------- Forwarded message ----------
From: <i= nternet-drafts@ietf.org>
Date: Wed, Oct 26, 2016 at 7:08 P= M
Subject: I-D Action: draft-bierman-netconf-rfc6536bis-00.txt
To: i-d-announce@ietf.org


A New Internet-Draft is available from the on-line Internet-Drafts director= ies.


=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= Network Configuration Protocol (NETCONF) Access Control Model
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Authors=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0: Andy= Bierman
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 Martin Bjorklund
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-bie= rman-netconf-rfc6536bis-00.txt
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= 51
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 := 2016-10-26

Abstract:
=C2=A0 =C2=A0The standardization of network configuration interfaces for us= e with
=C2=A0 =C2=A0the Network Configuration Protocol (NETCONF) or RESTCONF proto= col
=C2=A0 =C2=A0requires a structured and secure operating environment that pr= omotes
=C2=A0 =C2=A0human usability and multi-vendor interoperability.=C2=A0 There= is a need
=C2=A0 =C2=A0for standard mechanisms to restrict NETCONF or RESTCONF protoc= ol
=C2=A0 =C2=A0access for particular users to a pre-configured subset of all<= br> =C2=A0 =C2=A0available NETCONF or RESTCONF protocol operations and content.= =C2=A0 This
=C2=A0 =C2=A0document defines such an access control model.

=C2=A0 =C2=A0This document obsoletes RFC 6536.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/= doc/draft-bierman-netconf-rfc6536bis/

There's also a htmlized version available at:
https://tools.ietf.org/html/draf= t-bierman-netconf-rfc6536bis-00


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/m= ailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html<= /a>
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

--94eb2c073d8c75fc05053fcf4d24-- From nobody Wed Oct 26 21:29:12 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6D641295CC for ; Wed, 26 Oct 2016 21:29:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SnDJHbI9zc14 for ; Wed, 26 Oct 2016 21:29:09 -0700 (PDT) Received: from mail-yb0-x232.google.com (mail-yb0-x232.google.com [IPv6:2607:f8b0:4002:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 702D9129405 for ; Wed, 26 Oct 2016 21:29:09 -0700 (PDT) Received: by mail-yb0-x232.google.com with SMTP id f97so10817560ybi.1 for ; Wed, 26 Oct 2016 21:29:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-transfer-encoding:subject:message-id:date:to :mime-version; bh=CfrM/HDqXsBlA0w0AsUaaKNmSyZN7HJjVSjgeC6WIJQ=; b=aTN2ngpu5UyYe7gx6EpABak/g/Jt4bAjdSUMBbfl3Lz/TsMHT2TXCyzlVNcIYbwkLN 2LksrtM92xibaabqM8HZVCHBpnHBFbyQch8epvGHF+eApkuWprdRw7Ac3/ygcfWwwcrV +ox9lf8Cu1Xhv5xd7pcoyukxQjfolUkSPiAeG9eVHlTY+bz7YELXRXv0sOS0pyVi8Hvl EPlQgVTUesjCFHvgY/fHPjpaHNNbbB0fNNTX1uyp1lvDe7PRG+M4R6+jQttjTXDzi2NI CycTPG56KfmmTohfvqEzN+G9qVrm5SE2qRcIQ6O9WrByGIbbOAN9+Ut3P4d8V3JvYOcM EgBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-transfer-encoding:subject :message-id:date:to:mime-version; bh=CfrM/HDqXsBlA0w0AsUaaKNmSyZN7HJjVSjgeC6WIJQ=; b=H1x1lpK908u5zmrCS3/hFf2GjWIivQ+qqN8/Gg6Ot4PLTT0w4IePQSa0sFw79F/Kvb 5AVuKfSAUkeWmCbowQRlqyPhxImCUup7B241tdcV99BYCLOhEv+TRjl9ErpX6WKAw/BG /kKzRiANi/N8toq14Vlfcekgs1L1wGcgNmGIMvqtHiP9zm88ZGUdTJkpyL40c5t7TGDr t8NwaIk9b4b5OYkeFzeJXIx0t64DpWq928eGSiTOvRQRiJmfUgfuULtSmUcSQerFzonS Y6upgo91HdG0Tb5l4fzouRhCmTFKPsdrhjicZFu7go23GAT1nmSZreCdUOIApH5UCRsG D2zw== X-Gm-Message-State: ABUngveKZk3B4FZRCXqS8W/JbzMS3Y9elJOm+7q5G6quXZSufHrYitoDHY5LR2cKa8STaw== X-Received: by 10.37.196.197 with SMTP id u188mr5166058ybf.19.1477542548592; Wed, 26 Oct 2016 21:29:08 -0700 (PDT) Received: from ?IPv6:2602:306:cf77:df90:dc3e:f0ee:63ea:5be? ([2602:306:cf77:df90:dc3e:f0ee:63ea:5be]) by smtp.gmail.com with ESMTPSA id c203sm499428ywa.42.2016.10.26.21.29.06 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 26 Oct 2016 21:29:07 -0700 (PDT) From: Mahesh Jethanandani Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <6F4B487D-C4B5-4FF7-ACE9-4008532824B9@gmail.com> Date: Wed, 26 Oct 2016 21:29:12 -0700 To: Netconf Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [Netconf] Agenda Requests X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2016 04:29:11 -0000 This is that time of the year that we ask if you want to present = something in the NETCONF session at IETF 97. Please indicate - The topic - How much time you would need - Name of the presenter(s) - What draft is this associated with in your request for a slot. This assumes that you have published or updated a draft, posted it on = the mailing list and garnered some discussion around it. There is still = time for that before the meeting. Cheers Mahesh & Mehmet. From nobody Thu Oct 27 07:29:02 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1434C129549 for ; Thu, 27 Oct 2016 07:28:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Eh5JFSkmLT7e for ; Thu, 27 Oct 2016 07:28:53 -0700 (PDT) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0125.outbound.protection.outlook.com [104.47.38.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 390D7129533 for ; Thu, 27 Oct 2016 07:28:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=5IbRyTkRTFjPRd6qcRFR6ow/4aFF3yvQbpitMwoXTTg=; b=a5GMoLzRqdZ0UigkvKb/EWGYPeWByUUVhnau+bGFKS5S10b9UiifL+24Mgybc3H2WDQssaKuOnDeEQ9YB3QliRL4rG8JBU8jyfFqxsIP72ClTOKoY78m/yp5RGSIfpabJJEYGhnI56xE2Zjk/6L4Q/GqnZCQu/z4Q6Ijz3STajg= Received: from BN3PR0501MB1442.namprd05.prod.outlook.com (10.160.117.151) by BN3PR0501MB1442.namprd05.prod.outlook.com (10.160.117.151) with Microsoft SMTP Server (TLS) id 15.1.539.6; Thu, 27 Oct 2016 14:28:48 +0000 Received: from BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) by BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) with mapi id 15.01.0539.025; Thu, 27 Oct 2016 14:28:48 +0000 From: Kent Watsen To: Juergen Schoenwaelder Thread-Topic: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? Thread-Index: AQHSFC6Sd+kC7yrCuUylSmlyZFKQHKCEXacA///dtICAAHa6gIAAyriAgABOuwCANoXngA== Date: Thu, 27 Oct 2016 14:28:48 +0000 Message-ID: <7380A192-381B-4739-9552-BF0C8495D83B@juniper.net> References: <9D06C5DA-26A3-4296-868D-D0356A41983E@juniper.net> <20160921200156.GA15745@elstar.local> <0745330D-8BA5-4288-BE57-FF18F2E5C22D@gmail.com> <20160922175130.GB18445@elstar.local> In-Reply-To: <20160922175130.GB18445@elstar.local> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.12] x-ms-office365-filtering-correlation-id: 1f409fa1-ac65-46f1-6cfc-08d3fe7590d9 x-microsoft-exchange-diagnostics: 1; BN3PR0501MB1442; 6:e2EzdQjiGhsrEiT81rkVMKRcb9ebDzhJNHGvgMB7lgljUTdxzSszWY+sU9vnsdsVmZ5OGi3E5OYXqmhUpsBsf48n01uQF0V+ulzLwBiquuVyiNNDspwX6xCVMCFeC3fbthGRp9ZdWk8uYV/Kfy+YF+xdeo353ID4ih4XwpAdVYa6MG3v+VJtDVj7fG0Hqrq9znIk0+9P+fPvaioqEhCU+n+ec3Yc5QzLU6Y9USV7Ksk1B0WHrk6C4GwSHijtZ9WQxPcefmYMrYOvIAeZIq+lv4dV26mkHO9PkWc/f7F151xgj43LGf3RPbu8arkqm62VwcfG+iyCuYI5q0xpLTiwbA==; 5:h/K51ne8q+4ovzOMVPBj/PiaouzMu3FVGgSCOXytNLp9kDixIYB1sys5BYaiG7JLiIEgJbWG7YE5Ps33XwcM2OYS7ga8fsYe3DdXnAO+IBd5eHQ7lySt5kt4bnaHCMrcmyQ0Uqrl7N2M0WEtC/ZQFw==; 24:P0F/nqdFrLWw1POL3wubmfFpQDVyA5Nk3DP3wOhtNoSMJ2dIOt9q7dbNl4MO34X8J2DciBzSK7y6Mc781Qr4zHAUjEaoIBBrnVbrmkjciHY=; 7:Sf8TsdXPVkKNZvW7fWVBSlJ2GMKlNsw8Jkqv1fc6+u+Kf2yfPLUzwkoYv0AQOhuB+MNDtq1BII3bbgfTFfifEJH6Tf0dW299AQmlD1ECkDHBzy4Aa7Hz+/fBTbfa6fP1/7+UEfmNo0zlP+It4wB7xhGR31WIbGgeOqwU7964YQm4A0szrv9R7Y/arq0lBsviMLh0C9ErlCi3ZgU/Xisti/BSUlO+xLAN9HYTgrPVIoKg5SptBQ5UUPPQsg4iYVcwlTM9SWbYtfjA0lXZt2uM3sEnIv91XeDYqYiNRxVDALKCMwlP7IH0Rsb+1NSMnhxWNd7qhrgt3ArF1ikdh82pDw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0501MB1442; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(138986009662008); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:BN3PR0501MB1442; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0501MB1442; x-forefront-prvs: 0108A997B2 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(377454003)(189002)(15594002)(24454002)(199003)(5002640100001)(3280700002)(87936001)(76176999)(36756003)(33656002)(8936002)(2906002)(106356001)(99286002)(101416001)(105586002)(19580395003)(50986999)(19580405001)(106116001)(54356999)(2950100002)(230783001)(83716003)(10400500002)(92566002)(586003)(3846002)(81166006)(97736004)(11100500001)(4001350100001)(3660700001)(68736007)(81156014)(5660300001)(4326007)(122556002)(6116002)(7846002)(86362001)(551544002)(102836003)(93886004)(8676002)(66066001)(189998001)(15975445007)(77096005)(305945005)(7736002)(82746002)(110136003)(83506001)(6916009)(2900100001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0501MB1442; H:BN3PR0501MB1442.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <4AB3F1CB9C564C49BFF2E28849AE656D@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2016 14:28:48.1847 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0501MB1442 Archived-At: Cc: "netconf@ietf.org" Subject: Re: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2016 14:28:58 -0000 W3BpY2tpbmcgdXAgb24gYW4gb2xkIHRocmVhZF0NCg0KDQpIaSBKdWVyZ2VuLA0KDQpZb3UgYnJp bmcgdXAgYSBnb29kIHBvaW50LiAgVGhlIGludHJvZHVjdGlvbiBvZiB0aGUgY2xpZW50IGF1dGgg bWVjaGFuaXNtcyBhZGRlZCBsYXN0IHRpbWUgZGVmaW5pdGVseSBzZWVtIFNTSC9UTFMgb3IgTkMv UkMgc3BlY2lmaWMgaW4gcGxhY2VzLiAgVGhlIHJlc3Qgb2YgaXQgSSB0aGluayBpcyBwcmV0dHkg aW5kZXBlbmRlbnQgb2YgYW55IHNwZWNpZmljIHByb3RvY29sLCBidXQgd2UgY2FuIGRvdWJsZS1j aGVjayB0aGF0Lg0KDQpJbiB0aGUgbWVhbndoaWxlLCBJ4oCZZCBsaWtlIHRvIG1vdmUgZm9yd2Fy ZCB3aXRoIHJlbmFtaW5nIHRoZSBkcmFmdCB0byBkcmFmdC1pZXRmLW5ldGNvbmYta2V5c3RvcmUg YW5kIGNoYW5naW5nIHRoZSBtb2R1bGUgbmFtZSB0byBpZXRmLWtleXN0b3JlIHNvIGFzIHRvIGNs ZWFyIHVwIHRoZSBuYW1lLWNvbmZ1c2lvbiBpc3N1ZSwgd2l0aCB0aGUgdW5kZXJzdGFuZGluZyB0 aGF0IHdl4oCZbGwgd29yayB0b3dhcmRzIGZhY3RvcmluZy1vdXQvYXVnbWVudGluZy1pbiBwcm90 b2NvbC1zcGVjaWZpYyBleHRlbnNpb25zLiAgQW55IG9iamVjdGlvbnMgdG8gdGhpcyBmcm9tIGFu eW9uZT8NCg0KVGhhbmtzLA0KS2VudA0KDQoNCg0KT24gOS8yMi8xNiwgMTo1MSBQTSwgIkp1ZXJn ZW4gU2Nob2Vud2FlbGRlciIgPGouc2Nob2Vud2FlbGRlckBqYWNvYnMtdW5pdmVyc2l0eS5kZT4g d3JvdGU6DQoNCkkgcmVhbGx5IHNlZSBvbmx5IHR3byBnb29kIGFwcHJvYWNoZXM6DQoNCmEpIEEg c2luZ2xlIHdlbGwgdGhvdWdodC1vdXQga2V5c3RvcmUgZm9yIGFsbCBuZWVkcyB0byBzdG9yZSBh bmQNCiAgIG1hbmFnZSBrZXlzLiBUaGlzIG1heSB0YWtlIHRpbWUgdG8gZ2V0IHJpZ2h0IGFuZCBJ IHdvdWxkIGV4cGVjdA0KICAgdGhhdCB0aGUgbmF0dXJhbCBob21lIGZvciB0aGlzIHdvdWxkIGFj dHVhbGx5IGJlIHRoZSBzZWN1cml0eSBhcmVhDQogICBhbmQgbm90IE9QUyBvciBSVEcuDQoNCmIp IFRoZSBhbHRlcm5hdGl2ZSBpcyB0byBkZXNpZ24gTiBkaWZmZXJlbnQga2V5c3RvcmVzIHRoYXQg YXJlIGFsbA0KICAgZGVzaWduZWQgZm9yIHNwZWNpZmljIHNlY3VyaXR5IHByb3RvY29scy9tZWNo YW5pc21zLiBBIGtleXN0b3JlIGZvcg0KICAgU1NIIGtleXMsIGEga2V5c3RvcmUgZm9yIFguNTA5 IGNlcnRpZmljYXRlcywgYSBrZXlzdG9yZSBmb3IgcGxhaW4NCiAgIHN5bW1ldHJpYyBrZXlzLCBh IGtleXN0b3JlIGZvciBTQVNMIG1lY2hhbmlzbXMsIC4uLg0KDQpJIHRoaW5rIHdoYXQgd2UgYXJl IGRvaW5nIHJpZ2h0IG5vdyBpcyBhIHNvbWV3aGF0IGFyYml0cmFyeSBtaXggaW4gdGhlDQptaWRk bGUgYmV0d2VlbiB0aGVzZSB0d28gYWx0ZXJuYXRpdmVzLiBQZXJoYXBzIGFuIGFwcHJvYWNoIHdv cnRoDQpleHBsb3JpbmcgaXMgdG8gZGVmaW5lIGEgY29yZSBrZXlzdG9yZSBtb2RlbCB0aGF0IGRl ZmluZXMgYSBjb3JlDQpzdHJ1Y3R1cmUgYW5kIG5hbWluZyBzeXN0ZW0gYW5kIHRoYXQgY2FuIGJl IGF1Z21lbnRlZCB3aXRoIG1vZGVscw0KcHJvdmlkaW5nIGV4dGVuc2lvbnMgdGhhdCBhcmUgc2Vj dXJpdHkgcHJvdG9jb2wvbWVjaGFuaXNtIHNwZWNpZmljLg0KWWVzLCB0aGlzIHdpbGwgdGFrZSBt b3JlIHRpbWUgdG8gd29yayBvdXQgYnV0IHRoZW4gaXQgcHJvdmlkZXMNCihpZGVhbGx5KSBhIG1v cmUgZ2VuZXJhbCBzb2x1dGlvbiwgaS5lLiwgb25lIHdoZXJlIGF0IGxlYXN0IHRoZQ0KbmFtaW5n IGFuZCB0aGUgb3ZlcmFsbCBzdHJ1Y3R1cmUgaXMgY29uc2lzdGVudC4NCg0KV2VsbCwgZ2l2ZW4g dGhhdCB0aGUgSUVURiBpcyB1c3VhbGx5IGJldHRlciBpbiBkb2luZyBzbWFsbGVyIHRoaW5ncywN CnBlcmhhcHMgYSBnZW5lcmljIGtleXN0b3JlIGlzIGp1c3QgYSBkcmVhbSBvZiBhbiBpZGVhbGlz dCBhbmQgc21hbGxlcg0Kc3BlY2lmaWMgc2VjdXJpdHkgcHJvdG9jb2xzL21lY2hhbmlzbXMgc3Bl Y2lmaWMga2V5c3RvcmVzIGFyZSB0aGUNCnNob3J0LXRpbWUgbW9zdCBlZmZlY3RpdmUgZGlyZWN0 aW9uLiBJZiBzbywgd2Ugc2hvdWxkIHNwbGl0IHRoZQ0Kc3lzdGVtLWtleWNoYWluIGludG8gZXZl biBzbWFsbGVyIHVuaXRzLg0KDQovanMNCg0KT24gVGh1LCBTZXAgMjIsIDIwMTYgYXQgMDU6MDk6 NDRQTSArMDAwMCwgS2VudCBXYXRzZW4gd3JvdGU6DQo+IA0KPiBJIHByZWZlciDigJxpZXRmLWtl eXN0b3Jl4oCdLCBhcyBJ4oCZbSBub3QgMTAwJSBzdXJlIHRoZSBtb2R1bGUgd29u4oCZdCBldmVy IGNvbnRhaW4gc3ltbWV0cmljIGtleXMuICBDYXNlIGluIHBvaW50LCB0aGUgY3VycmVudCBkcmFm dCBoYXMgYSBwYXNzd29yZCBmaWVsZCBpbiBpdCwgZm9yIHBhc3N3b3JkLWJhc2VkIFNTSCBhdXRo ZW50aWNhdGlvbnMuICAgR2FyeSBhZGRlZCB0aGUgcGFzc3dvcmQgZmllbGQgbGFzdCB0aW1lIHRv IHN1cHBvcnQgdGhlIGlldGYtc3NoLWNsaWVudCBhbmQgaWV0Zi1uZXRjb25mLWNsaWVudCBtb2R1 bGVzLiAgVGhhdCBzYWlkLCBJIGRvbuKAmXQgdGhpbmsgaXTigJlzIHJlY2VpdmVkIHNpZ25pZmlj YW50IHJldmlldyB5ZXQuICAgU3RpbGwsIGEgcGFzc3dvcmQgaXMgYSBmb3JtIG9mIGEgc3ltbWV0 cmljIGtleSwgc28gY2FsbGluZyB0aGUgbW9kdWxlIGFuIOKAnGFzeW1tZXRyaWMga2V5c3RvcmXi gJ0gd291bGRu4oCZdCBiZSBxdWl0ZSByaWdodCBpbiB0aGlzIGNhc2UuDQo+IA0KPiBLZW50DQo+ IA0KPiANCj4gT24gOS8yMS8xNiwgOTowNCBQTSwgIk1haGVzaCBKZXRoYW5hbmRhbmkiIDxtamV0 aGFuYW5kYW5pQGdtYWlsLmNvbT4gd3JvdGU6DQo+IA0KPiAgICAgSSBhZ3JlZSB3aXRoIEp1ZXJn ZW4uIEl0IHdvdWxkIG1ha2UgbW9yZSBzZW5zZSB0byBuYW1lIGl0IGFzIGlldGYtYXN5bW1ldHJp Yy1rZXlzdG9yZS4NCj4gICAgIA0KPiAgICAgDQo+ICAgICA+IE9uIFNlcCAyMSwgMjAxNiwgYXQg Mjo1OSBQTSwgS2VudCBXYXRzZW4gPGt3YXRzZW5AanVuaXBlci5uZXQ+IHdyb3RlOg0KPiAgICAg PiANCj4gICAgID4gSGkgSnVlcmdlbiwNCj4gICAgID4gDQo+ICAgICA+IFNvIGFyZSB5b3UgYWR2 b2NhdGluZyBpZXRmLWtleXN0b3JlIG9yIGlldGYtYXN5bW1ldHJpYy1rZXlzdG9yZT8NCj4gICAg ID4gDQo+ICAgICA+IEZXSVc6DQo+ICAgICA+IC0gQW5kcmlvZCBhbmQgSmF2YSBjYWxsIGl0ICJr ZXlzdG9yZSIuDQo+ICAgICA+IC0gTWFjT1MgYW5kIGlPUyBjYWxsIGl0ICJrZXljaGFpbiIuDQo+ ICAgICA+IC0gV2luZG93cyBkb2VzbuKAmXQgc2VlbSB0byBoYXZlIGFuIGVxdWl2YWxlbnQuDQo+ ICAgICA+IA0KPiAgICAgPiBUaGFua3MsDQo+ICAgICA+IEtlbnQNCj4gICAgID4gDQo+ICAgICA+ IA0KPiAgICAgPiBPbiA5LzIxLzE2LCA0OjAxIFBNLCAiSnVlcmdlbiBTY2hvZW53YWVsZGVyIiA8 ai5zY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPiB3cm90ZToNCj4gICAgID4gDQo+ ICAgICA+ICAgIEFzIEkgc2FpZCBzZXZlcmFsIHRpbWVzLCBjaG9vc2UgbmFtZXMgdGhhdCBpbmRp Y2F0ZSB3aGF0IHRoZSBtb2RlbHMNCj4gICAgID4gICAgcmVhbGx5IGRvLiBBcyBmYXIgYXMgSSBj YW4gdGVsbCwgb25lIGRlYWxzIHdpdGggc3ltbWV0cmljIGtleXMsIHRoZQ0KPiAgICAgPiAgICBv dGhlciBkZWFscyB3aXRoIGFzeW1tZXRyaWMga2V5cy4NCj4gICAgID4gDQo+ICAgICA+ICAgIEkg dGhpbmsgd2UgZG8gbm90IHdhbnQgZm9yIGRpZmZlcmVudCBjbGFzc2VzIG9mIHByb3RvY29scyBv cg0KPiAgICAgPiAgICBzdWJzeXN0ZW1zIHRvIGRlZmluZSBkaWZmZXJlbnQga2V5c3RvcmVzIG9y IGtleWNoYWlucy4gSGVuY2UsIG5hbWVzDQo+ICAgICA+ICAgIGxpa2UgaWV0Zi1fcm91dGluZ18t a2V5c3RvcmUgb3IgaWV0Zi1fc3lzdGVtXy1rZXlzdG9yZSBhcmUgc2VuZGluZyB0aGUNCj4gICAg ID4gICAgd3Jvbmcgc2lnbmFsLg0KPiAgICAgPiANCj4gICAgID4gICAgL2pzDQo+ICAgICA+IA0K PiAgICAgPiAgICBPbiBXZWQsIFNlcCAyMSwgMjAxNiBhdCAwNTozNTo0MFBNICswMDAwLCBLZW50 IFdhdHNlbiB3cm90ZToNCj4gICAgID4+IEFsbCwNCj4gICAgID4+IA0KPiAgICAgPj4gWW91IG1h eSByZWNhbGwgdGhhdCB3ZSBwcmV2aW91c2x5IHJlbmFtZWQgdGhlIFlBTkcgbW9kdWxlIGZyb20g 4oCcaWV0Zi1rZXljaGFpbuKAnSB0byDigJxpZXRmLXN5c3RlbS1rZXljaGFpbuKAnSB0byBkaXNh bWJpZ3VhdGUgaXQgZnJvbSB0aGUgcm91dGluZyBhcmVh4oCZcyDigJxpZXRmLWtleS1jaGFpbuKA nSBtb2R1bGUgKGluIEFjZWXigJlzIGRyYWZ0KS4gIEFjZWUgd2FzIGdvaW5nIHRvIHJlbmFtZSBo aXMgbW9kdWxlIHRvIOKAnGlldGYtcm91dGluZy1rZXljaGFpbuKAnSwgYnV0IHRoZW4gZGlkbuKA mXQuICAgIEJ1dCB0aGUgY3VycmVudCB0d28gbmFtZXMgYXJlIHN0aWxsIHRvbyBjbG9zZSBmb3Ig Y29tZm9ydCBhbmQgc28gSeKAmXZlIGJlZW4gdGhpbmtpbmcgdG8gcmVuYW1lIG91cnMgdG8g4oCc aWV0Zi1rZXlzdG9yZeKAnSBvciDigJxpZXRmLXN5c3RlbS1rZXlzdG9yZeKAnS4gIEZXSVcsIOKA nGtleXN0b3Jl4oCdIGlzIHBlcmhhcHMgZXZlbiBhIG1vcmUgYXB0IG5hbWUgdGhhbiDigJxrZXlj aGFpbuKAnSBmb3IgdGhpcyBwdXJwb3NlLiAgSW4gZGlzY3Vzc2luZyB0aGlzIHdpdGggdGhlIFdH IGNoYWlycywgd2UgY2FuIHVwZGF0ZSB0aGUgZHJhZnTigJlzIG5hbWUgdG8gYmUgaW5saW5lIHdp dGggd2hhdGV2ZXIgd2UgY2hvb3NlLg0KPiAgICAgPj4gDQo+ICAgICA+PiBXaGF0IGRvIHBlb3Bs ZSB0aGluaz8gIElzIHRoZXJlIGEgcHJlZmVyZW5jZSBiZXR3ZWVuIGlldGYta2V5c3RvcmUgYW5k IGlldGYtc3lzdGVtLWtleXN0b3JlPw0KPiAgICAgPj4gDQo+ICAgICA+PiBJZiBubyBvYmplY3Rp b25zIGFyZSByZWNlaXZlZCB3aXRoaW4gYSB3ZWVr4oCZcyB0aW1lLCBJ4oCZbGwgYXNzdW1lIHRv IHVzZSDigJxpZXRmLWtleXN0b3Jl4oCdIGFuZCB1cGRhdGUgdGhlIGRyYWZ04oCZcyBuYW1lIGFj Y29yZGluZ2x5IChpLmUuLCBkcmFmdC1pZXRmLW5ldGNvbmYta2V5c3RvcmUtMDApLg0KPiAgICAg Pj4gDQo+ICAgICA+PiBUaGFua3MsDQo+ICAgICA+PiBLZW50DQo+ICAgICA+PiANCj4gICAgID4g DQo+ICAgICA+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KPiAgICAgPj4gTmV0Y29uZiBtYWlsaW5nIGxpc3QNCj4gICAgID4+IE5ldGNvbmZAaWV0Zi5v cmcNCj4gICAgID4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV0Y29u Zg0KPiAgICAgPiANCj4gICAgID4gDQo+ICAgICA+ICAgIC0tIA0KPiAgICAgPiAgICBKdWVyZ2Vu IFNjaG9lbndhZWxkZXIgICAgICAgICAgIEphY29icyBVbml2ZXJzaXR5IEJyZW1lbiBnR21iSA0K PiAgICAgPiAgICBQaG9uZTogKzQ5IDQyMSAyMDAgMzU4NyAgICAgICAgIENhbXB1cyBSaW5nIDEg fCAyODc1OSBCcmVtZW4gfCBHZXJtYW55DQo+ICAgICA+ICAgIEZheDogICArNDkgNDIxIDIwMCAz MTAzICAgICAgICAgPGh0dHA6Ly93d3cuamFjb2JzLXVuaXZlcnNpdHkuZGUvPg0KPiAgICAgPiAN Cj4gICAgID4gDQo+ICAgICA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQo+ICAgICA+IE5ldGNvbmYgbWFpbGluZyBsaXN0DQo+ICAgICA+IE5ldGNvbmZA aWV0Zi5vcmcNCj4gICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9u ZXRjb25mDQo+ICAgICANCj4gICAgIE1haGVzaCBKZXRoYW5hbmRhbmkNCj4gICAgIG1qZXRoYW5h bmRhbmlAZ21haWwuY29tDQo+ICAgICANCj4gICAgIA0KPiAgICAgDQo+ICAgICANCj4gDQoNCi0t IA0KSnVlcmdlbiBTY2hvZW53YWVsZGVyICAgICAgICAgICBKYWNvYnMgVW5pdmVyc2l0eSBCcmVt ZW4gZ0dtYkgNClBob25lOiArNDkgNDIxIDIwMCAzNTg3ICAgICAgICAgQ2FtcHVzIFJpbmcgMSB8 IDI4NzU5IEJyZW1lbiB8IEdlcm1hbnkNCkZheDogICArNDkgNDIxIDIwMCAzMTAzICAgICAgICAg PGh0dHA6Ly93d3cuamFjb2JzLXVuaXZlcnNpdHkuZGUvPg0KDQoNCg== From nobody Thu Oct 27 12:24:03 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DBB9C129810; Thu, 27 Oct 2016 12:23:58 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147759623889.24698.6400536730346987817.idtracker@ietfa.amsl.com> Date: Thu, 27 Oct 2016 12:23:58 -0700 Archived-At: Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-restconf-18.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2016 19:23:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration of the IETF. Title : RESTCONF Protocol Authors : Andy Bierman Martin Bjorklund Kent Watsen Filename : draft-ietf-netconf-restconf-18.txt Pages : 133 Date : 2016-10-27 Abstract: This document describes an HTTP-based protocol that provides a programmatic interface for accessing data defined in YANG, using the datastore concepts defined in NETCONF. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-netconf-restconf-18 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-restconf-18 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Oct 27 14:33:38 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 82E6912948C; Thu, 27 Oct 2016 14:33:37 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147760401753.24658.16802690513081845578.idtracker@ietfa.amsl.com> Date: Thu, 27 Oct 2016 14:33:37 -0700 Archived-At: Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-rfc5277bis-01.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2016 21:33:37 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration of the IETF. Title : Subscribing to Event Notifications Authors : Alexander Clemm Alberto Gonzalez Prieto Eric Voit Einar Nilsen-Nygaard Ambika Prasad Tripathy Sharon Chisholm Hector Trevino Filename : draft-ietf-netconf-rfc5277bis-01.txt Pages : 46 Date : 2016-10-27 Abstract: This document defines capabilities and operations for subscribing to content and providing asynchronous notification message delivery on that content. Notification delivery can occur over a variety of protocols used commonly in conjunction with YANG, such as NETCONF and RESTCONF. The capabilities and operations defined in this document when using in conjunction with draft-ietf-netconf-netconf-event- notifications are intended to replace RFC 5277. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-rfc5277bis/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-netconf-rfc5277bis-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-rfc5277bis-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Oct 27 19:38:17 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E93B812947B for ; Thu, 27 Oct 2016 19:38:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.952 X-Spam-Level: X-Spam-Status: No, score=-14.952 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9A3hgc0KjKoZ for ; Thu, 27 Oct 2016 19:38:15 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEC691293FC for ; Thu, 27 Oct 2016 19:38:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1155; q=dns/txt; s=iport; t=1477622294; x=1478831894; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=kDzPu2j0+66U3ziF4ezlkv+cty7HgcBZdyMAvSNq7bg=; b=MzFKgHVLrDqMtJ6htp3tLT/XQhoH0/OCBiZGaAaLbMo4FqGNgygWuSGY JvzsBwbBkhwHkLWycib3HsldB9XWKsZzh6D7I32e3Arh1Sn5b491VvbgE ZmKzgu+1Q56KapsfxvbfQ0sUCPzHT7SNTCoga6OloZojk1wFQmO25tE4D Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ByAQByuRJY/5tdJa1dGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgyoBAQEBAR2BXI0vqzyCB4YjAoIAPxQBAgEBAQEBAQFiKIRjAQEEOjQ?= =?us-ascii?q?LEAIBCA4XERAyJQIEDg2ITL5DAQEBAQEBAQEBAQEBAQEBAQEBAQEBHIY9hFWKJ?= =?us-ascii?q?gWOSoVuhV4BkBuBdYRtiSmRCwEeNl+FCYgDgQkBAQE?= X-IronPort-AV: E=Sophos;i="5.31,407,1473120000"; d="scan'208";a="341287512" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Oct 2016 02:38:14 +0000 Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by rcdn-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id u9S2cDkv021638 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 28 Oct 2016 02:38:13 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 27 Oct 2016 22:38:13 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1210.000; Thu, 27 Oct 2016 22:38:12 -0400 From: "Eric Voit (evoit)" To: Mahesh Jethanandani , "Ersue, Mehmet (Nokia - DE/Munich) (mehmet.ersue@nokia.com)" Thread-Topic: [Netconf] Agenda Requests Thread-Index: AQHSMAqzFQ0cxwy4n02i2Z9ISI5dhKC9JF7w Date: Fri, 28 Oct 2016 02:38:12 +0000 Message-ID: References: <6F4B487D-C4B5-4FF7-ACE9-4008532824B9@gmail.com> In-Reply-To: <6F4B487D-C4B5-4FF7-ACE9-4008532824B9@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.229] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: Netconf Subject: Re: [Netconf] Agenda Requests X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Oct 2016 02:38:16 -0000 This is that time of the year that we ask if you want to present something = in the NETCONF session at IETF 97. Please indicate - The topic: Evolution of the Subscription & event notification drafts. Plan to includ= e:=20 - General progress across the drafts, and issues being worked - focus on filters, including the need for a general metadata filter capabi= lity.=20 - detecting loss and duplication, proposal for review - call home: applications or transport? - evolution of streams, and relevance to OpState - whatever else we can fit into 25 minutes. - How much time you would need 25 minutes - Name of the presenter(s) Eric Voit & others (perhaps Andy, Balazs, others?) - What draft is this associated with draft-ietf-netconf-5277bis draft-ietf-netconf-yang-push draft-ietf-netconf-netconf-event-notifications-00 draft-ietf-netconf-event-restconf in your request for a slot. This assumes that you have published or updated a draft, posted it on the m= ailing list and garnered some discussion around it. There is still time for= that before the meeting. Cheers Mahesh & Mehmet. From nobody Fri Oct 28 02:09:33 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CD8A129965; Fri, 28 Oct 2016 02:09:29 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Alexey Melnikov" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147764576924.25006.17612069643256575790.idtracker@ietfa.amsl.com> Date: Fri, 28 Oct 2016 02:09:29 -0700 Archived-At: Cc: netconf@ietf.org, draft-ietf-netconf-restconf@ietf.org, netconf-chairs@ietf.org Subject: [Netconf] Alexey Melnikov's Yes on draft-ietf-netconf-restconf-18: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Oct 2016 09:09:29 -0000 Alexey Melnikov has entered the following ballot position for draft-ietf-netconf-restconf-18: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for addressing my DISCUSS and comments. From nobody Fri Oct 28 04:10:54 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07278129A9B for ; Fri, 28 Oct 2016 04:10:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.922 X-Spam-Level: X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7_ydXAbDCawV for ; Fri, 28 Oct 2016 04:10:50 -0700 (PDT) Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-eopbgr00128.outbound.protection.outlook.com [40.107.0.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C94D7129A45 for ; Fri, 28 Oct 2016 04:10:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector1-btconnect-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=58sWOxYiZopRBRmgFoLt8IzCJCi7UXHurb+SWNv7/D4=; b=YCA0/O+58TRR5mxrEjzoQvAPqzIrp49R4qIH+RXcS9N54XivOdpjFK/F9qcT0lZ5sufY9/rvcz6+sRyeU3N+vMETeg9hNHANMNSKiJ/7g3rMw3P1C0tMmgweAqIUZpDf+q23XenqAAQpaxsc+eBQf60VRwZMA9DT+6ExywzHanc= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=ietfc@btconnect.com; Received: from pc6 (81.135.210.62) by AM5PR0701MB2996.eurprd07.prod.outlook.com (10.168.156.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.707.1; Fri, 28 Oct 2016 11:10:45 +0000 Message-ID: <012801d2310b$8fcace80$4001a8c0@gateway.2wire.net> From: t.petch To: Kent Watsen , Juergen Schoenwaelder References: <9D06C5DA-26A3-4296-868D-D0356A41983E@juniper.net> <20160921200156.GA15745@elstar.local> <0745330D-8BA5-4288-BE57-FF18F2E5C22D@gmail.com> <20160922175130.GB18445@elstar.local> <7380A192-381B-4739-9552-BF0C8495D83B@juniper.net> Date: Fri, 28 Oct 2016 12:07:58 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Originating-IP: [81.135.210.62] X-ClientProxiedBy: DB5PR0101CA0023.eurprd01.prod.exchangelabs.com (10.165.200.161) To AM5PR0701MB2996.eurprd07.prod.outlook.com (10.168.156.146) X-MS-Office365-Filtering-Correlation-Id: 12ac1860-571f-4bb0-cb24-08d3ff231108 X-Microsoft-Exchange-Diagnostics: 1; AM5PR0701MB2996; 2:Ne3ErhkYa2Dl44qt7HpG3v8mzH64wOpdQy44OwkAw8Glsul4xW4n80MuzKBssfsinUGR4N+2qhUm9Zu5+oHygII4PNONvsdLQ9y2ncg7dX9hmRo9Jnd2qKyaKSTMejl0WfmalB6dHGuq4mTJtAdzqrmaeXU/5GKBEtMXefpZzcYL8lw4jZmIoZccgrBr2Dvseq3DeqC7559Wp9SLmPtmOw==; 3:RcfW2uhwpnX6Fy8d2mUsV8iK7CQhblPDlvgga2RQu/RykFUmrY58yqDFtvrjhsUJPeAmliG9omyMg3ev5L43xE5QxpRp5M2eSS8XWTUSDgzeH4GoICIXeGaRlv3tIv6EGOHsqvCeLRSgMAp3gRrtQg==; 25:3W077HSmTA82NbM4P6RreGJDCVVrcuOZDCp/YTrd730oEQMyao3pAyvplrgMGW4PIPueG9UG7kSP1jY9CSeWlKpwAnyhpsLCy04bFzfGEUuFQvWXp96MguAQA8NjPV7BaRueL3Jiw9ypRcCTSsYPR05Z1dAaG6ps0oq5cNO+EfyblOFBo/UngaPvQr+9TMyy5EL2Tlzd4gwmGdAJgOech3KeJD2f3CIn4GrJ6/05oL2bt3iAE46X71LTyilTBLMwt611mrngeRbYxM2apV1m2auqSPYEi29pxUXsR1az1hdR5ZpWCANbi1RZui1EzGxWUdQN20Z4opukm9zFUvfWjir7NyOHkeUgKyG08u/ZneYuqMKVN/IW0adWMkxBNzy16ZbZnFRAPYdopsxokklUHhvXar1uk7ySJPyMgqI89o3cpt7Umy7IvSygR+dCEJbs X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AM5PR0701MB2996; X-Microsoft-Exchange-Diagnostics: 1; AM5PR0701MB2996; 31:lpig9zZKtOC8zIH+WOAa4AfFV8QKqKK7n/vo6G7j/M+Am5NMt0bTXxRdXi/5KFyStROiPk81C81GNxhrcQXzIa773F31Lf4yesgYJBufUWI3r6ggJdqbKbEq4duIwG8g0H8iS3l9GkuWKcfEkgmMF4mevgMYPcGQZS1XmYcoyoTypNnVZ9blXtwUOAlO3g5L5LCeI9s9eBA6Mcpeaj9dhZWq3WBivtYx75gkti0A1RLraZJ5yTpAbnM4MSoBns9YldHkDrLbdhSCvb/r8iBrDY7pG/GnFRoYhQ6Lt51Tqv8=; 4:71t8An/V8rQsIOeV689a1Y1Pz2YElCFXYNerEqmhslP2ys3Sp1kx6GsrlgMOnDoS4U37cILIlHOHISCKkWgkhH8M/jTql01htszThoAZhMR93Z8Xa2v1zBhu+lVl+/pXqv/mYHLo1eiI03FT6mJsrdcOpJN3DBlo5FvU3Lfefm4dQ+G9UBMDyw/OnbVbgOt5lhGHeoVvAz2+xoH97d5NChLx5R8bJ+Ybsinv18kxa05/XjyW5Vig+lQ7VKs2W6tdR3oalqt7H03x++GkinDG6vlEKXYPp8p77HqeZ9hBya7SjLbdOCpoXRCvGB+43Vd8HpIv2OpCmWLnqVtZ50CeNfEazNMBXNp8aOp3l3FkHmdV5BRuV+u9lqUopFAFj7gg5kkAYeR2gpbRW3cxcNcvXuY4CtGboIBX3F6vlusAUE9dBlLEmRf0nq5J/ofR/dDfc76VzsHzLLsjf6yUZ7iyAVOEyLugaqMqiUShkGPJF9E= X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(192374486261705)(138986009662008); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001); SRVR:AM5PR0701MB2996; BCL:0; PCL:0; RULEID:; SRVR:AM5PR0701MB2996; X-Forefront-PRVS: 0109D382B0 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(7916002)(24454002)(189002)(13464003)(199003)(377454003)(15594002)(81166006)(81156014)(2870700001)(586003)(81686999)(81816999)(50226002)(3846002)(9686002)(6116002)(47776003)(68736007)(76176999)(62236002)(44716002)(50986999)(551544002)(66066001)(105586002)(84392002)(4326007)(106356001)(101416001)(2906002)(61296003)(5660300001)(42186005)(77096005)(97736004)(5001770100001)(23676002)(14496001)(15975445007)(19580395003)(19580405001)(1941001)(1456003)(44736004)(189998001)(33646002)(305945005)(4720700003)(230783001)(6666003)(92566002)(116806002)(93886004)(7736002)(7846002)(8676002)(86362001)(1556002)(50466002)(8666005)(74416001)(7059030)(7726001); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB2996; H:pc6; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:0; LANG:en; Received-SPF: None (protection.outlook.com: btconnect.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtBTTVQUjA3MDFNQjI5OTY7MjM6MnlsRFpLNXNtUlFMcHZwbjBmVittRGp4?= =?utf-8?B?SjFISllmeGlFM2FwSXVTOGtOdE9lUFRIZWZ2MVhvQTdWSm1tZEZINmlJd0pS?= =?utf-8?B?Wm94aE43bDFmV3MvdzlzditKR25FSi9hQklERUFhejMwaTZ0RXJ4YU1QZ0xm?= =?utf-8?B?TFdWdUxLdXhPT21rZm9zbHp3NlV1ZnlEcmVObEpnWXVVdUNEUkJmMzQycjFk?= =?utf-8?B?cXJudTNjck1CdnlRVFVXMCtqZEUrTzBVeXBrNFJXdlROeWUwRUk1a0JSelo3?= =?utf-8?B?SHZNN09waHJRNXZvZjNZallkdHRaWVQ0YUU4YmdkQWVSU09jeXhHLzdXVkJh?= =?utf-8?B?NTZNdUtrZytOb0poVnZVb2JrSEJrRmNFSURKa2pZQmJ4K1htNnc4N1JXanM2?= =?utf-8?B?RzQ4RW5EUkVtMGM0cjl6R0xSWjkwMFl4bGJFeGtsNWZTQUUySVliNUF1eHBL?= =?utf-8?B?QkRSeisza2VFTzQ1djVZalVSc3prMXIzYnl0TDdIUWFKM3lKMDVkT2VSMUMx?= =?utf-8?B?KzFGUVBSeGlXMnhWSmplaEFndnlpSHZEVWJ1S2h0bGd1dTFXTW1xT0lRQVNZ?= =?utf-8?B?bk5pejY2aHBCNUVMWnJNZm5rR3NHYjZYaVYzeWwwZ0duYjhDYzNNK2g0a3dX?= =?utf-8?B?TWwvNk9YeXJkNlloTTVWdUY0SHp5MVpwYi9nME91Uy82Tkk2NWE3L0xaK2RK?= =?utf-8?B?d0ZmR2QzQzI3VmdHcXFwRXNNMGNQTEJmdFB4TGh2Q0VUQ2hSMHlWVTJWWTVh?= =?utf-8?B?RndLaGs4cHhaclpRVDJtbUxSelAwTmg1VUMwZ3NYa25Rc05LWmQ3cDFVeDZE?= =?utf-8?B?N0xOa010akNCN2k0NzJhL1RBc0p1VW1XODdBZDhvcnRPbVZaajExbHcxMm90?= =?utf-8?B?ZzI4ZlhteVhNMFZKL1dYVU8yS1dKZ0Q5U1BjNmhqZ1VwdUllUS9pdHk1aFBt?= =?utf-8?B?emg5cldQTm5OUzFZMVlsbFZ6Y3NVdWRyZHNmT3p5YlNNQTFWT3ViUEhHM3l1?= =?utf-8?B?RkxoOWxQR0pkOTdBa0dhTVBWcVBuZHZXVkVZenNJbDV2enIwSUppZUZGQlNm?= =?utf-8?B?WW5VY1F5RFpTcFN0Wmc2bExzeEdxZEprdmNHSW5nSVYydEhSeGRQam4yQmlo?= =?utf-8?B?LzJZSU1XcVk2b0ZzQ2ROZjVzeDZ1WDV1ZGQ5Rk9ZWGlLU01ueHRubk94UGVF?= =?utf-8?B?Z0F4SGU2c2thWlVYNVNYZ09UQUdNQk02alVYUkdmamthNFF5d2Y3V1piMnhE?= =?utf-8?B?ZS8zcG9kL2FKdWJTV2FDeXg2Q0Fpd2hkb0EzbDU2RXExemtaODVmOHhqV1BG?= =?utf-8?B?OG45S1Ywd1k0ZGRsb2M1Q1lOMDBiYUpQcC9rdXpma2pYYWM4TzhRK1VLTW1i?= =?utf-8?B?amdkNWhPZjRpYy8rVlhMK0dtYXAwOGdrOHRJNmZPU3JRbll4ZnpuWC9rcTB0?= =?utf-8?B?V1BnVXhCNEdlL1YyV2FsSGx5aVp4QndPVGhKYWlpbHpQT3J0OXZrQjhGL3Nh?= =?utf-8?B?RGMwMS9zSEJaMnduYWV4ZDBFbitjbHN1bUE2QURIbEQreUNrSGxsOGszS25K?= =?utf-8?B?aURFbFNRbkZLQmwzWHluM2hqZHFXVGdINDJnclFoanBqeUJYQXU2UnhRdkZu?= =?utf-8?B?V1dnb3VpN3diVkw2UU9RNVY2WlR3THNURXJCVHE1NlJKMWI4ZDZJOURlaFZ3?= =?utf-8?B?QU9qYld4OEZiSEZuNkpFN2pXMFlrMWs1cEREWlFyT05WSlgyN25qbDBtTDlM?= =?utf-8?B?bmY1aUcwcmhRMWdTdnJFMUllQnBXa3VEd1BPRThyb1RnaWV2ZXd1SHQ1Nm5y?= =?utf-8?B?VWVmRVpUWTk5VGJqU3F5RStQbU8rdVl5SWpoQUZpYms2aVd1U1kyRi9sS0R6?= =?utf-8?B?RXFyajlSNy82RXNhUm9UMm5aa0YxRDc4MmtoaE1tTm80dEFuWkR5VExja25P?= =?utf-8?B?K1R0RE9OdjQ3NDhOMWtBZjdpVkZzSTNRZ2lOem80VGxoMGJGMWlDdVNCUlAy?= =?utf-8?B?NytlTXpIWUhaUUFWRk5STjl1NWV5c2c1cU16Y21HNmNVcThycVdDV2wvcmZy?= =?utf-8?B?Q2xUUk5wQnBqV1NuMDh2Q0xIMHFWaHZqRTFVRWpEdG8vTmY4V0owTDBHa2RD?= =?utf-8?Q?JmezhwbHB+c4cyPq45OI8Tu6s=3D?= X-Microsoft-Exchange-Diagnostics: 1; AM5PR0701MB2996; 6:3ADYb20hjkouoFJ6nAqM8AYRlhyomAOaa72n/1CUyKKxmVTJqtWgmnSRJVRdOhxXjon8X+mNpPmoRg7MSotT2QLlKRURPk7BZGr+SaGpDUn/fk9HspPF2hZKlNXC8RSIsf6RXNZbwF4xCMhDrxNx1mvq5P+zKQhbjIrdQ9qp/n3FQ7L0AemYlhAq2fSbsqlyaNntZh8jVhjwS4V5zoN1+UcREczcf0N2pHBbR5qs0N84ja0D86hVmdNy17Ut4PE65/McGZJXDyr/kTDPeywY5sHJFCj77qc6z+QmB78v/KmGq/lz//TgnGoIfaNXgzG4; 5:R7cATxICE7cL59o22xO2Y1vgAtg1PiLC2UWQaxsFfaRaaAVGJllp2+lldyuR1WSALrl+skqcjlfVBqwuJqem/C5krG17N1Pvj2i+VOpBGwUF/TF6BlQxg0tQSDAr75KocfueuAXVniRZOkbdAUW96A==; 24:3A8Wv4kuWIzFG14tlJ1nZ4RMAnwo56mW0Hi3R+3IZqMozpDyUIPwn8z489PqmP95zYEfHzXJggLSSOiWr1iBK3lnr4BGFsV83MIeXoF37zc= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; AM5PR0701MB2996; 7:3aRHzc0nuaBlWlfymsUEGsU8x5tdqnSzOxj3Cw8wASB/vsjLpvFE4mKe/zLOTb94FDzfoQj+fm17QUkWmtCeYocr8wlLB3SrHPk9UVl/dFWHDcsdeGU3uQz6ByvDUal8tay8ZlJ2GWieDxCChX1E7pt1fgQ5mYqBG8qu3HVDZo+4rpo4zaV1aq6JXmY6trYFJrstG/HKVEsR9OsJz5MGRyBnl587XZrtNUtxeqCwlVdq0RgzYy7n1kn2C9PfMw9oEcAz4FZFF8eX2YWVBQNR4/EAofYcvlAhtAl1SiksjWL/Ario8F7EzhCgvjeB3uJaHilWSYwV9Iv6DnB2PNw4s2dKKFemecQs1U5UHMd48tg= X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Oct 2016 11:10:45.9055 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2996 Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Oct 2016 11:10:53 -0000 Kent I dislike changes to a document identifier. Identifiers should be stable so that the history and revisions can readily be tracked. Imbuing the identifier with excessive semantic meaning makes identifiers unstable and hard to use at least during the life of the I-D. Module names are a bit different; there I do see a case for getting the semantics right although again there is a tendency to overload identifiers with meaning. An identifer should be unique within what namespace it occurs, easy to use for whatever uses it has - and stable. So module name yes, I-D no, for me. Tom Petch ----- Original Message ----- From: "Kent Watsen" To: "Juergen Schoenwaelder" Cc: Sent: Thursday, October 27, 2016 3:28 PM Subject: Re: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? > [picking up on an old thread] > > > Hi Juergen, > > You bring up a good point. The introduction of the client auth mechanisms added last time definitely seem SSH/TLS or NC/RC specific in places. The rest of it I think is pretty independent of any specific protocol, but we can double-check that. > > In the meanwhile, I’d like to move forward with renaming the draft to draft-ietf-netconf-keystore and changing the module name to ietf-keystore so as to clear up the name-confusion issue, with the understanding that we’ll work towards factoring-out/augmenting-in protocol-specific extensions. Any objections to this from anyone? > > Thanks, > Kent > > > > On 9/22/16, 1:51 PM, "Juergen Schoenwaelder" wrote: > > I really see only two good approaches: > > a) A single well thought-out keystore for all needs to store and > manage keys. This may take time to get right and I would expect > that the natural home for this would actually be the security area > and not OPS or RTG. > > b) The alternative is to design N different keystores that are all > designed for specific security protocols/mechanisms. A keystore for > SSH keys, a keystore for X.509 certificates, a keystore for plain > symmetric keys, a keystore for SASL mechanisms, ... > > I think what we are doing right now is a somewhat arbitrary mix in the > middle between these two alternatives. Perhaps an approach worth > exploring is to define a core keystore model that defines a core > structure and naming system and that can be augmented with models > providing extensions that are security protocol/mechanism specific. > Yes, this will take more time to work out but then it provides > (ideally) a more general solution, i.e., one where at least the > naming and the overall structure is consistent. > > Well, given that the IETF is usually better in doing smaller things, > perhaps a generic keystore is just a dream of an idealist and smaller > specific security protocols/mechanisms specific keystores are the > short-time most effective direction. If so, we should split the > system-keychain into even smaller units. > > /js > > On Thu, Sep 22, 2016 at 05:09:44PM +0000, Kent Watsen wrote: > > > > I prefer “ietf-keystore”, as I’m not 100% sure the module won’t ever contain symmetric keys. Case in point, the current draft has a password field in it, for password-based SSH authentications. Gary added the password field last time to support the ietf-ssh-client and ietf-netconf-client modules. That said, I don’t think it’s received significant review yet. Still, a password is a form of a symmetric key, so calling the module an “asymmetric keystore” wouldn’t be quite right in this case. > > > > Kent > > > > > > On 9/21/16, 9:04 PM, "Mahesh Jethanandani" wrote: > > > > I agree with Juergen. It would make more sense to name it as ietf-asymmetric-keystore. > > > > > > > On Sep 21, 2016, at 2:59 PM, Kent Watsen wrote: > > > > > > Hi Juergen, > > > > > > So are you advocating ietf-keystore or ietf-asymmetric-keystore? > > > > > > FWIW: > > > - Andriod and Java call it "keystore". > > > - MacOS and iOS call it "keychain". > > > - Windows doesn’t seem to have an equivalent. > > > > > > Thanks, > > > Kent > > > > > > > > > On 9/21/16, 4:01 PM, "Juergen Schoenwaelder" wrote: > > > > > > As I said several times, choose names that indicate what the models > > > really do. As far as I can tell, one deals with symmetric keys, the > > > other deals with asymmetric keys. > > > > > > I think we do not want for different classes of protocols or > > > subsystems to define different keystores or keychains. Hence, names > > > like ietf-_routing_-keystore or ietf-_system_-keystore are sending the > > > wrong signal. > > > > > > /js > > > > > > On Wed, Sep 21, 2016 at 05:35:40PM +0000, Kent Watsen wrote: > > >> All, > > >> > > >> You may recall that we previously renamed the YANG module from “ietf-keychain” to “ietf-system-keychain” to disambiguate it from the routing area’s “ietf-key-chain” module (in Acee’s draft). Acee was going to rename his module to “ietf-routing-keychain”, but then didn’t. But the current two names are still too close for comfort and so I’ve been thinking to rename ours to “ietf-keystore” or “ietf-system-keystore”. FWIW, “keystore” is perhaps even a more apt name than “keychain” for this purpose. In discussing this with the WG chairs, we can update the draft’s name to be inline with whatever we choose. > > >> > > >> What do people think? Is there a preference between ietf-keystore and ietf-system-keystore? > > >> > > >> If no objections are received within a week’s time, I’ll assume to use “ietf-keystore” and update the draft’s name accordingly (i.e., draft-ietf-netconf-keystore-00). > > >> > > >> Thanks, > > >> Kent > > >> > > > > > >> _______________________________________________ > > >> Netconf mailing list > > >> Netconf@ietf.org > > >> https://www.ietf.org/mailman/listinfo/netconf > > > > > > > > > -- > > > Juergen Schoenwaelder Jacobs University Bremen gGmbH > > > Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany > > > Fax: +49 421 200 3103 > > > > > > > > > _______________________________________________ > > > Netconf mailing list > > > Netconf@ietf.org > > > https://www.ietf.org/mailman/listinfo/netconf > > > > Mahesh Jethanandani > > mjethanandani@gmail.com > > > > > > > > > > > > -- > Juergen Schoenwaelder Jacobs University Bremen gGmbH > Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany > Fax: +49 421 200 3103 > > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > From nobody Sat Oct 29 05:47:25 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C6C812940F for ; Sat, 29 Oct 2016 05:47:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jK-QPkpyG3mw for ; Sat, 29 Oct 2016 05:47:21 -0700 (PDT) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0091.outbound.protection.outlook.com [104.47.36.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE7081200DF for ; Sat, 29 Oct 2016 05:47:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=oCCFzUwBxJa0/sO5+rwwo9XbpjFf6lq5Ks8nt5foak0=; b=W4ftEl3MhG5udQs3Od2M0wbLxfjDgU2eZOOFSZ58OWGBs2GFWscHDp2YmINUm8JdMUrMY4cMJEOo7crsyGQkKrHxLhJuO08ka8iviXEblQj7be2MRTxoeRwShGbfPfDu1Y/ISYiHlXiouvMMe+QfHV8+WaubjuromN4IJAB0ZbE= Received: from BN3PR0501MB1442.namprd05.prod.outlook.com (10.160.117.151) by BN3PR0501MB1441.namprd05.prod.outlook.com (10.160.117.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.7; Sat, 29 Oct 2016 12:47:20 +0000 Received: from BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) by BN3PR0501MB1442.namprd05.prod.outlook.com ([10.160.117.151]) with mapi id 15.01.0539.025; Sat, 29 Oct 2016 12:47:20 +0000 From: Kent Watsen To: t.petch , Juergen Schoenwaelder Thread-Topic: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? Thread-Index: AQHSFC6Sd+kC7yrCuUylSmlyZFKQHKCEXacA///dtICAAHa6gIAAyriAgABOuwCANoXngIABnhcpgAFqOwA= Date: Sat, 29 Oct 2016 12:47:19 +0000 Message-ID: References: <9D06C5DA-26A3-4296-868D-D0356A41983E@juniper.net> <20160921200156.GA15745@elstar.local> <0745330D-8BA5-4288-BE57-FF18F2E5C22D@gmail.com> <20160922175130.GB18445@elstar.local> <7380A192-381B-4739-9552-BF0C8495D83B@juniper.net> <012801d2310b$8fcace80$4001a8c0@gateway.2wire.net> In-Reply-To: <012801d2310b$8fcace80$4001a8c0@gateway.2wire.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.11] x-ms-office365-filtering-correlation-id: d72b7cfe-a354-4d2f-2637-08d3fff9b8c0 x-microsoft-exchange-diagnostics: 1; BN3PR0501MB1441; 7:tsez3FrEBvuBWXMQ6/Pt/PutgrlRIiFsc6wutiD9YNcoQSoBAhuifpIANOq+G8FJuOdN+82Rwy/LTKfzegkFXF8TljfYmN1TkD0d5IAsEG2doKDEFrOvu2PF6NJM3FeUSzMIsrZZvDHdrNYo2+HjmFJHbuf7STZGeK5LIblnh+BmsuoDVEw+pVr5VmUfYqsHHiiEjGTj1e77qLuj/KMhfmDTqdY+5xcOY/2bnXGUNXhtuvjnqt8IGMahuLCf8T1fnAK50mPfpIDiIB3GjxmDbcfUMPx9lGUwRlWLpFlGqoSZeG7qm7Bvuhly5WUmMDeNXi1oXki4QiAVNQ2TEcdHek2dNXdRGzDvWhgpS97T+N4= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0501MB1441; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(178726229863574)(192374486261705)(138986009662008)(17755550239193); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:BN3PR0501MB1441; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0501MB1441; x-forefront-prvs: 01106E96F6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(377454003)(13464003)(24454002)(199003)(15594002)(2906002)(99286002)(92566002)(93886004)(87936001)(36756003)(81166006)(2950100002)(2900100001)(4326007)(122556002)(82746002)(66066001)(15975445007)(83506001)(77096005)(86362001)(10400500002)(83716003)(19580405001)(8936002)(19580395003)(189998001)(3280700002)(33656002)(586003)(102836003)(5001770100001)(97736004)(3846002)(6116002)(4001350100001)(8666005)(3660700001)(76176999)(54356999)(5002640100001)(101416001)(551544002)(106116001)(230783001)(7846002)(68736007)(305945005)(106356001)(81156014)(7736002)(8676002)(105586002)(11100500001)(5660300001)(50986999)(7059030)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0501MB1441; H:BN3PR0501MB1442.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Oct 2016 12:47:19.8910 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0501MB1441 Archived-At: Cc: "netconf@ietf.org" Subject: Re: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 29 Oct 2016 12:47:24 -0000 DQpIaSBUb20sDQoNCkkgY29tcGxldGVseSBhZ3JlZSBmb3IgdGhlIHJlYXNvbnMgeW91IG1lbnRp b25lZCwgYnV0IEnigJlkIGxpa2UgdG8gc3VnZ2VzdCBhbiBleGNlcHRpb24gaW4gdGhpcyBjYXNl LiAgU2luY2UgdGhlIGN1cnJlbnQgZHJhZnQgaXMgYSAtMDAsIGl0IGhhcyBubyBoaXN0b3J5LiAg U28gSSBjb3VsZCBqdXN0IHN1Ym1pdCBpdCBhZ2Fpbiwgd2l0aCBubyBjaGFuZ2VzIG90aGVyIHRo YW4gdGhlIG5hbWUgY2hhbmdlLiAgTm8gaGlzdG9yeSB3b3VsZCBiZSBsb3N0IHRoZW4sIHJpZ2h0 Pw0KDQpCVFcsIEnigJltIHZlcnkgbXVjaCBmZWVsIGJhZCBmb3Igbm90IHBpY2tpbmcgdGhlIGJl dHRlciBuYW1lIGluIHRoZSBmaXJzdCBwbGFjZS4gIEkgaGF0ZSBoYXZpbmcgdG8gbWFrZSB0aGlz IHJlcXVlc3QuICBPZiBjb3Vyc2Ugd2UgY2FuIGtlZXAgdGhlIGRyYWZ0IG5hbWUgYXMgaXMsIGV2 ZW4gdGhvdWdoIHRoZSBtb2RlbCBuYW1lIGluc2lkZSBpdCBjaGFuZ2VzLCBpZiB0aGF04oCZcyB3 aGF0IHBlb3BsZSB3YW50Lg0KDQpLZW50DQoNCg0KT24gMTAvMjgvMTYsIDc6MDcgQU0sICJ0LnBl dGNoIiA8aWV0ZmNAYnRjb25uZWN0LmNvbT4gd3JvdGU6DQoNCktlbnQNCg0KSSBkaXNsaWtlIGNo YW5nZXMgdG8gYSBkb2N1bWVudCBpZGVudGlmaWVyLiAgSWRlbnRpZmllcnMgc2hvdWxkIGJlDQpz dGFibGUgc28gdGhhdCB0aGUgaGlzdG9yeSBhbmQgcmV2aXNpb25zIGNhbiByZWFkaWx5IGJlIHRy YWNrZWQuDQpJbWJ1aW5nIHRoZSBpZGVudGlmaWVyIHdpdGggZXhjZXNzaXZlIHNlbWFudGljIG1l YW5pbmcgbWFrZXMgaWRlbnRpZmllcnMNCnVuc3RhYmxlIGFuZCBoYXJkIHRvIHVzZSBhdCBsZWFz dCBkdXJpbmcgdGhlIGxpZmUgb2YgdGhlIEktRC4NCg0KTW9kdWxlIG5hbWVzIGFyZSBhIGJpdCBk aWZmZXJlbnQ7IHRoZXJlIEkgZG8gc2VlIGEgY2FzZSBmb3IgZ2V0dGluZyB0aGUNCnNlbWFudGlj cyByaWdodCBhbHRob3VnaCBhZ2FpbiB0aGVyZSBpcyBhIHRlbmRlbmN5IHRvIG92ZXJsb2FkDQpp ZGVudGlmaWVycyB3aXRoIG1lYW5pbmcuICBBbiBpZGVudGlmZXIgc2hvdWxkIGJlIHVuaXF1ZSB3 aXRoaW4gd2hhdA0KbmFtZXNwYWNlIGl0IG9jY3VycywgZWFzeSB0byB1c2UgZm9yIHdoYXRldmVy IHVzZXMgaXQgaGFzIC0gYW5kIHN0YWJsZS4NCg0KU28gbW9kdWxlIG5hbWUgeWVzLCBJLUQgbm8s IGZvciBtZS4NCg0KVG9tIFBldGNoDQoNCg0KLS0tLS0gT3JpZ2luYWwgTWVzc2FnZSAtLS0tLQ0K RnJvbTogIktlbnQgV2F0c2VuIiA8a3dhdHNlbkBqdW5pcGVyLm5ldD4NClRvOiAiSnVlcmdlbiBT Y2hvZW53YWVsZGVyIiA8ai5zY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPg0KQ2M6 IDxuZXRjb25mQGlldGYub3JnPg0KU2VudDogVGh1cnNkYXksIE9jdG9iZXIgMjcsIDIwMTYgMzoy OCBQTQ0KU3ViamVjdDogUmU6IFtOZXRjb25mXSByZW5hbWUgaWV0Zi1zeXN0ZW0ta2V5Y2hhaW4g dG8gaWV0Zi1rZXlzdG9yZSBvcg0KaWV0Zi1zeXN0ZW0ta2V5c3RvcmU/DQoNCg0KPiBbcGlja2lu ZyB1cCBvbiBhbiBvbGQgdGhyZWFkXQ0KPg0KPg0KPiBIaSBKdWVyZ2VuLA0KPg0KPiBZb3UgYnJp bmcgdXAgYSBnb29kIHBvaW50LiAgVGhlIGludHJvZHVjdGlvbiBvZiB0aGUgY2xpZW50IGF1dGgN Cm1lY2hhbmlzbXMgYWRkZWQgbGFzdCB0aW1lIGRlZmluaXRlbHkgc2VlbSBTU0gvVExTIG9yIE5D L1JDIHNwZWNpZmljIGluDQpwbGFjZXMuICBUaGUgcmVzdCBvZiBpdCBJIHRoaW5rIGlzIHByZXR0 eSBpbmRlcGVuZGVudCBvZiBhbnkgc3BlY2lmaWMNCnByb3RvY29sLCBidXQgd2UgY2FuIGRvdWJs ZS1jaGVjayB0aGF0Lg0KPg0KPiBJbiB0aGUgbWVhbndoaWxlLCBJ4oCZZCBsaWtlIHRvIG1vdmUg Zm9yd2FyZCB3aXRoIHJlbmFtaW5nIHRoZSBkcmFmdCB0bw0KZHJhZnQtaWV0Zi1uZXRjb25mLWtl eXN0b3JlIGFuZCBjaGFuZ2luZyB0aGUgbW9kdWxlIG5hbWUgdG8NCmlldGYta2V5c3RvcmUgc28g YXMgdG8gY2xlYXIgdXAgdGhlIG5hbWUtY29uZnVzaW9uIGlzc3VlLCB3aXRoIHRoZQ0KdW5kZXJz dGFuZGluZyB0aGF0IHdl4oCZbGwgd29yayB0b3dhcmRzIGZhY3RvcmluZy1vdXQvYXVnbWVudGlu Zy1pbg0KcHJvdG9jb2wtc3BlY2lmaWMgZXh0ZW5zaW9ucy4gIEFueSBvYmplY3Rpb25zIHRvIHRo aXMgZnJvbSBhbnlvbmU/DQo+DQo+IFRoYW5rcywNCj4gS2VudA0KPg0KPg0KPg0KPiBPbiA5LzIy LzE2LCAxOjUxIFBNLCAiSnVlcmdlbiBTY2hvZW53YWVsZGVyIg0KPGouc2Nob2Vud2FlbGRlckBq YWNvYnMtdW5pdmVyc2l0eS5kZT4gd3JvdGU6DQo+DQo+IEkgcmVhbGx5IHNlZSBvbmx5IHR3byBn b29kIGFwcHJvYWNoZXM6DQo+DQo+IGEpIEEgc2luZ2xlIHdlbGwgdGhvdWdodC1vdXQga2V5c3Rv cmUgZm9yIGFsbCBuZWVkcyB0byBzdG9yZSBhbmQNCj4gICAgbWFuYWdlIGtleXMuIFRoaXMgbWF5 IHRha2UgdGltZSB0byBnZXQgcmlnaHQgYW5kIEkgd291bGQgZXhwZWN0DQo+ICAgIHRoYXQgdGhl IG5hdHVyYWwgaG9tZSBmb3IgdGhpcyB3b3VsZCBhY3R1YWxseSBiZSB0aGUgc2VjdXJpdHkgYXJl YQ0KPiAgICBhbmQgbm90IE9QUyBvciBSVEcuDQo+DQo+IGIpIFRoZSBhbHRlcm5hdGl2ZSBpcyB0 byBkZXNpZ24gTiBkaWZmZXJlbnQga2V5c3RvcmVzIHRoYXQgYXJlIGFsbA0KPiAgICBkZXNpZ25l ZCBmb3Igc3BlY2lmaWMgc2VjdXJpdHkgcHJvdG9jb2xzL21lY2hhbmlzbXMuIEEga2V5c3RvcmUg Zm9yDQo+ICAgIFNTSCBrZXlzLCBhIGtleXN0b3JlIGZvciBYLjUwOSBjZXJ0aWZpY2F0ZXMsIGEg a2V5c3RvcmUgZm9yIHBsYWluDQo+ICAgIHN5bW1ldHJpYyBrZXlzLCBhIGtleXN0b3JlIGZvciBT QVNMIG1lY2hhbmlzbXMsIC4uLg0KPg0KPiBJIHRoaW5rIHdoYXQgd2UgYXJlIGRvaW5nIHJpZ2h0 IG5vdyBpcyBhIHNvbWV3aGF0IGFyYml0cmFyeSBtaXggaW4gdGhlDQo+IG1pZGRsZSBiZXR3ZWVu IHRoZXNlIHR3byBhbHRlcm5hdGl2ZXMuIFBlcmhhcHMgYW4gYXBwcm9hY2ggd29ydGgNCj4gZXhw bG9yaW5nIGlzIHRvIGRlZmluZSBhIGNvcmUga2V5c3RvcmUgbW9kZWwgdGhhdCBkZWZpbmVzIGEg Y29yZQ0KPiBzdHJ1Y3R1cmUgYW5kIG5hbWluZyBzeXN0ZW0gYW5kIHRoYXQgY2FuIGJlIGF1Z21l bnRlZCB3aXRoIG1vZGVscw0KPiBwcm92aWRpbmcgZXh0ZW5zaW9ucyB0aGF0IGFyZSBzZWN1cml0 eSBwcm90b2NvbC9tZWNoYW5pc20gc3BlY2lmaWMuDQo+IFllcywgdGhpcyB3aWxsIHRha2UgbW9y ZSB0aW1lIHRvIHdvcmsgb3V0IGJ1dCB0aGVuIGl0IHByb3ZpZGVzDQo+IChpZGVhbGx5KSBhIG1v cmUgZ2VuZXJhbCBzb2x1dGlvbiwgaS5lLiwgb25lIHdoZXJlIGF0IGxlYXN0IHRoZQ0KPiBuYW1p bmcgYW5kIHRoZSBvdmVyYWxsIHN0cnVjdHVyZSBpcyBjb25zaXN0ZW50Lg0KPg0KPiBXZWxsLCBn aXZlbiB0aGF0IHRoZSBJRVRGIGlzIHVzdWFsbHkgYmV0dGVyIGluIGRvaW5nIHNtYWxsZXIgdGhp bmdzLA0KPiBwZXJoYXBzIGEgZ2VuZXJpYyBrZXlzdG9yZSBpcyBqdXN0IGEgZHJlYW0gb2YgYW4g aWRlYWxpc3QgYW5kIHNtYWxsZXINCj4gc3BlY2lmaWMgc2VjdXJpdHkgcHJvdG9jb2xzL21lY2hh bmlzbXMgc3BlY2lmaWMga2V5c3RvcmVzIGFyZSB0aGUNCj4gc2hvcnQtdGltZSBtb3N0IGVmZmVj dGl2ZSBkaXJlY3Rpb24uIElmIHNvLCB3ZSBzaG91bGQgc3BsaXQgdGhlDQo+IHN5c3RlbS1rZXlj aGFpbiBpbnRvIGV2ZW4gc21hbGxlciB1bml0cy4NCj4NCj4gL2pzDQo+DQo+IE9uIFRodSwgU2Vw IDIyLCAyMDE2IGF0IDA1OjA5OjQ0UE0gKzAwMDAsIEtlbnQgV2F0c2VuIHdyb3RlOg0KPiA+DQo+ ID4gSSBwcmVmZXIg4oCcaWV0Zi1rZXlzdG9yZeKAnSwgYXMgSeKAmW0gbm90IDEwMCUgc3VyZSB0 aGUgbW9kdWxlIHdvbuKAmXQgZXZlcg0KY29udGFpbiBzeW1tZXRyaWMga2V5cy4gIENhc2UgaW4g cG9pbnQsIHRoZSBjdXJyZW50IGRyYWZ0IGhhcyBhIHBhc3N3b3JkDQpmaWVsZCBpbiBpdCwgZm9y IHBhc3N3b3JkLWJhc2VkIFNTSCBhdXRoZW50aWNhdGlvbnMuICAgR2FyeSBhZGRlZCB0aGUNCnBh c3N3b3JkIGZpZWxkIGxhc3QgdGltZSB0byBzdXBwb3J0IHRoZSBpZXRmLXNzaC1jbGllbnQgYW5k DQppZXRmLW5ldGNvbmYtY2xpZW50IG1vZHVsZXMuICBUaGF0IHNhaWQsIEkgZG9u4oCZdCB0aGlu ayBpdOKAmXMgcmVjZWl2ZWQNCnNpZ25pZmljYW50IHJldmlldyB5ZXQuICAgU3RpbGwsIGEgcGFz c3dvcmQgaXMgYSBmb3JtIG9mIGEgc3ltbWV0cmljDQprZXksIHNvIGNhbGxpbmcgdGhlIG1vZHVs ZSBhbiDigJxhc3ltbWV0cmljIGtleXN0b3Jl4oCdIHdvdWxkbuKAmXQgYmUgcXVpdGUNCnJpZ2h0 IGluIHRoaXMgY2FzZS4NCj4gPg0KPiA+IEtlbnQNCj4gPg0KPiA+DQo+ID4gT24gOS8yMS8xNiwg OTowNCBQTSwgIk1haGVzaCBKZXRoYW5hbmRhbmkiIDxtamV0aGFuYW5kYW5pQGdtYWlsLmNvbT4N Cndyb3RlOg0KPiA+DQo+ID4gICAgIEkgYWdyZWUgd2l0aCBKdWVyZ2VuLiBJdCB3b3VsZCBtYWtl IG1vcmUgc2Vuc2UgdG8gbmFtZSBpdCBhcw0KaWV0Zi1hc3ltbWV0cmljLWtleXN0b3JlLg0KPiA+ DQo+ID4NCj4gPiAgICAgPiBPbiBTZXAgMjEsIDIwMTYsIGF0IDI6NTkgUE0sIEtlbnQgV2F0c2Vu IDxrd2F0c2VuQGp1bmlwZXIubmV0Pg0Kd3JvdGU6DQo+ID4gICAgID4NCj4gPiAgICAgPiBIaSBK dWVyZ2VuLA0KPiA+ICAgICA+DQo+ID4gICAgID4gU28gYXJlIHlvdSBhZHZvY2F0aW5nIGlldGYt a2V5c3RvcmUgb3INCmlldGYtYXN5bW1ldHJpYy1rZXlzdG9yZT8NCj4gPiAgICAgPg0KPiA+ICAg ICA+IEZXSVc6DQo+ID4gICAgID4gLSBBbmRyaW9kIGFuZCBKYXZhIGNhbGwgaXQgImtleXN0b3Jl Ii4NCj4gPiAgICAgPiAtIE1hY09TIGFuZCBpT1MgY2FsbCBpdCAia2V5Y2hhaW4iLg0KPiA+ICAg ICA+IC0gV2luZG93cyBkb2VzbuKAmXQgc2VlbSB0byBoYXZlIGFuIGVxdWl2YWxlbnQuDQo+ID4g ICAgID4NCj4gPiAgICAgPiBUaGFua3MsDQo+ID4gICAgID4gS2VudA0KPiA+ICAgICA+DQo+ID4g ICAgID4NCj4gPiAgICAgPiBPbiA5LzIxLzE2LCA0OjAxIFBNLCAiSnVlcmdlbiBTY2hvZW53YWVs ZGVyIg0KPGouc2Nob2Vud2FlbGRlckBqYWNvYnMtdW5pdmVyc2l0eS5kZT4gd3JvdGU6DQo+ID4g ICAgID4NCj4gPiAgICAgPiAgICBBcyBJIHNhaWQgc2V2ZXJhbCB0aW1lcywgY2hvb3NlIG5hbWVz IHRoYXQgaW5kaWNhdGUgd2hhdA0KdGhlIG1vZGVscw0KPiA+ICAgICA+ICAgIHJlYWxseSBkby4g QXMgZmFyIGFzIEkgY2FuIHRlbGwsIG9uZSBkZWFscyB3aXRoIHN5bW1ldHJpYw0Ka2V5cywgdGhl DQo+ID4gICAgID4gICAgb3RoZXIgZGVhbHMgd2l0aCBhc3ltbWV0cmljIGtleXMuDQo+ID4gICAg ID4NCj4gPiAgICAgPiAgICBJIHRoaW5rIHdlIGRvIG5vdCB3YW50IGZvciBkaWZmZXJlbnQgY2xh c3NlcyBvZiBwcm90b2NvbHMNCm9yDQo+ID4gICAgID4gICAgc3Vic3lzdGVtcyB0byBkZWZpbmUg ZGlmZmVyZW50IGtleXN0b3JlcyBvciBrZXljaGFpbnMuDQpIZW5jZSwgbmFtZXMNCj4gPiAgICAg PiAgICBsaWtlIGlldGYtX3JvdXRpbmdfLWtleXN0b3JlIG9yIGlldGYtX3N5c3RlbV8ta2V5c3Rv cmUgYXJlDQpzZW5kaW5nIHRoZQ0KPiA+ICAgICA+ICAgIHdyb25nIHNpZ25hbC4NCj4gPiAgICAg Pg0KPiA+ICAgICA+ICAgIC9qcw0KPiA+ICAgICA+DQo+ID4gICAgID4gICAgT24gV2VkLCBTZXAg MjEsIDIwMTYgYXQgMDU6MzU6NDBQTSArMDAwMCwgS2VudCBXYXRzZW4NCndyb3RlOg0KPiA+ICAg ICA+PiBBbGwsDQo+ID4gICAgID4+DQo+ID4gICAgID4+IFlvdSBtYXkgcmVjYWxsIHRoYXQgd2Ug cHJldmlvdXNseSByZW5hbWVkIHRoZSBZQU5HIG1vZHVsZQ0KZnJvbSDigJxpZXRmLWtleWNoYWlu 4oCdIHRvIOKAnGlldGYtc3lzdGVtLWtleWNoYWlu4oCdIHRvIGRpc2FtYmlndWF0ZSBpdCBmcm9t DQp0aGUgcm91dGluZyBhcmVh4oCZcyDigJxpZXRmLWtleS1jaGFpbuKAnSBtb2R1bGUgKGluIEFj ZWXigJlzIGRyYWZ0KS4gIEFjZWUgd2FzDQpnb2luZyB0byByZW5hbWUgaGlzIG1vZHVsZSB0byDi gJxpZXRmLXJvdXRpbmcta2V5Y2hhaW7igJ0sIGJ1dCB0aGVuIGRpZG7igJl0Lg0KQnV0IHRoZSBj dXJyZW50IHR3byBuYW1lcyBhcmUgc3RpbGwgdG9vIGNsb3NlIGZvciBjb21mb3J0IGFuZCBzbyBJ 4oCZdmUNCmJlZW4gdGhpbmtpbmcgdG8gcmVuYW1lIG91cnMgdG8g4oCcaWV0Zi1rZXlzdG9yZeKA nSBvcg0KIOKAnGlldGYtc3lzdGVtLWtleXN0b3Jl4oCdLiAgRldJVywg4oCca2V5c3RvcmXigJ0g aXMgcGVyaGFwcyBldmVuIGEgbW9yZSBhcHQNCm5hbWUgdGhhbiDigJxrZXljaGFpbuKAnSBmb3Ig dGhpcyBwdXJwb3NlLiAgSW4gZGlzY3Vzc2luZyB0aGlzIHdpdGggdGhlIFdHDQpjaGFpcnMsIHdl IGNhbiB1cGRhdGUgdGhlIGRyYWZ04oCZcyBuYW1lIHRvIGJlIGlubGluZSB3aXRoIHdoYXRldmVy IHdlDQpjaG9vc2UuDQo+ID4gICAgID4+DQo+ID4gICAgID4+IFdoYXQgZG8gcGVvcGxlIHRoaW5r PyAgSXMgdGhlcmUgYSBwcmVmZXJlbmNlIGJldHdlZW4NCmlldGYta2V5c3RvcmUgYW5kIGlldGYt c3lzdGVtLWtleXN0b3JlPw0KPiA+ICAgICA+Pg0KPiA+ICAgICA+PiBJZiBubyBvYmplY3Rpb25z IGFyZSByZWNlaXZlZCB3aXRoaW4gYSB3ZWVr4oCZcyB0aW1lLCBJ4oCZbGwNCmFzc3VtZSB0byB1 c2Ug4oCcaWV0Zi1rZXlzdG9yZeKAnSBhbmQgdXBkYXRlIHRoZSBkcmFmdOKAmXMgbmFtZSBhY2Nv cmRpbmdseQ0KKGkuZS4sIGRyYWZ0LWlldGYtbmV0Y29uZi1rZXlzdG9yZS0wMCkuDQo+ID4gICAg ID4+DQo+ID4gICAgID4+IFRoYW5rcywNCj4gPiAgICAgPj4gS2VudA0KPiA+ICAgICA+Pg0KPiA+ ICAgICA+DQo+ID4gICAgID4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQo+ID4gICAgID4+IE5ldGNvbmYgbWFpbGluZyBsaXN0DQo+ID4gICAgID4+IE5l dGNvbmZAaWV0Zi5vcmcNCj4gPiAgICAgPj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9uZXRjb25mDQo+ID4gICAgID4NCj4gPiAgICAgPg0KPiA+ICAgICA+ICAgIC0tDQo+ ID4gICAgID4gICAgSnVlcmdlbiBTY2hvZW53YWVsZGVyICAgICAgICAgICBKYWNvYnMgVW5pdmVy c2l0eSBCcmVtZW4NCmdHbWJIDQo+ID4gICAgID4gICAgUGhvbmU6ICs0OSA0MjEgMjAwIDM1ODcg ICAgICAgICBDYW1wdXMgUmluZyAxIHwgMjg3NTkNCkJyZW1lbiB8IEdlcm1hbnkNCj4gPiAgICAg PiAgICBGYXg6ICAgKzQ5IDQyMSAyMDAgMzEwMw0KPGh0dHA6Ly93d3cuamFjb2JzLXVuaXZlcnNp dHkuZGUvPg0KPiA+ICAgICA+DQo+ID4gICAgID4NCj4gPiAgICAgPiBfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ICAgICA+IE5ldGNvbmYgbWFpbGlu ZyBsaXN0DQo+ID4gICAgID4gTmV0Y29uZkBpZXRmLm9yZw0KPiA+ICAgICA+IGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV0Y29uZg0KPiA+DQo+ID4gICAgIE1haGVzaCBK ZXRoYW5hbmRhbmkNCj4gPiAgICAgbWpldGhhbmFuZGFuaUBnbWFpbC5jb20NCj4gPg0KPiA+DQo+ ID4NCj4gPg0KPiA+DQo+DQo+IC0tDQo+IEp1ZXJnZW4gU2Nob2Vud2FlbGRlciAgICAgICAgICAg SmFjb2JzIFVuaXZlcnNpdHkgQnJlbWVuIGdHbWJIDQo+IFBob25lOiArNDkgNDIxIDIwMCAzNTg3 ICAgICAgICAgQ2FtcHVzIFJpbmcgMSB8IDI4NzU5IEJyZW1lbiB8IEdlcm1hbnkNCj4gRmF4OiAg ICs0OSA0MjEgMjAwIDMxMDMgICAgICAgICA8aHR0cDovL3d3dy5qYWNvYnMtdW5pdmVyc2l0eS5k ZS8+DQo+DQo+DQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQo+IE5ldGNvbmYgbWFpbGluZyBsaXN0DQo+IE5ldGNvbmZAaWV0Zi5vcmcNCj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZXRjb25mDQo+DQoNCg0KDQo= From nobody Sat Oct 29 12:53:34 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D2A291294B3; Sat, 29 Oct 2016 12:53:32 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Alexey Melnikov" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147777081285.30626.11496029872270655919.idtracker@ietfa.amsl.com> Date: Sat, 29 Oct 2016 12:53:32 -0700 Archived-At: Cc: draft-ietf-netconf-yang-patch@ietf.org, netconf-chairs@ietf.org, netconf@ietf.org Subject: [Netconf] Alexey Melnikov's Yes on draft-ietf-netconf-yang-patch-12: (with COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 29 Oct 2016 19:53:33 -0000 Alexey Melnikov has entered the following ballot position for draft-ietf-netconf-yang-patch-12: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-yang-patch/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for a well written document. A couple of small nits in your media type registration: 4.2.1. Media Type application/yang-patch+xml Subtype name: yang-patch Should be "yang-patch+xml" Encoding considerations: 8-bit Each conceptual YANG data node is encoded according to the XML Encoding Rules and Canonical Format for the specific YANG data node type defined in [RFC7950]. In addition, the "yang-patch" YANG Patch template found in [RFCXXXX] defines the structure of a YANG Patch request. If you are allowing any of UTF-16 encodings, then the above is not correct and should say "Binary". Fragment identifier considerations: Fragment identifiers for this type are not defined. I suggest you just say "The same as for application/xml". It would be good if you register a new file extension for this media type. From nobody Sun Oct 30 03:31:23 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 288D41294C5 for ; Sun, 30 Oct 2016 03:31:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.003 X-Spam-Level: X-Spam-Status: No, score=-0.003 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EdwD4DhAx_tr for ; Sun, 30 Oct 2016 03:31:18 -0700 (PDT) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0126.outbound.protection.outlook.com [104.47.1.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C97B12945C for ; Sun, 30 Oct 2016 03:31:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector1-btconnect-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=cyx3D5jeLrB0S/svRv/FGBE7JKMkvwbtdwCuI/eDrcY=; b=RYxhWKkc0ojAcMy3CkcCYJd/z2S6T6eVzmJn2Rpbxc2ilCKbRGtN/JihPQJn4iBB66WbY7jOCimvH0WZlxKZj+EQkBESKtzpQOXN3Z85kGEbr9LsBIrSwNgTXeJVcTmEuuaBp+Lqu9G9A15uce4hG+ZmFZPkbYtZEJdfnDGqoQI= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=ietfc@btconnect.com; Received: from pc6 (81.135.210.62) by DB6PR0701MB2997.eurprd07.prod.outlook.com (10.168.84.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.707.1; Sun, 30 Oct 2016 10:31:12 +0000 Message-ID: <007a01d23298$5c158e20$4001a8c0@gateway.2wire.net> From: t.petch To: Kent Watsen , Juergen Schoenwaelder References: <9D06C5DA-26A3-4296-868D-D0356A41983E@juniper.net> <20160921200156.GA15745@elstar.local> <0745330D-8BA5-4288-BE57-FF18F2E5C22D@gmail.com> <20160922175130.GB18445@elstar.local> <7380A192-381B-4739-9552-BF0C8495D83B@juniper.net> <012801d2310b$8fcace80$4001a8c0@gateway.2wire.net> Date: Sun, 30 Oct 2016 10:28:13 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Originating-IP: [81.135.210.62] X-ClientProxiedBy: VI1PR05CA0018.eurprd05.prod.outlook.com (10.162.33.156) To DB6PR0701MB2997.eurprd07.prod.outlook.com (10.168.84.135) X-MS-Office365-Filtering-Correlation-Id: 1f2a347c-dce0-4b77-08f5-08d400afdf7c X-Microsoft-Exchange-Diagnostics: 1; DB6PR0701MB2997; 2:66BoxZOXAnhbXX+xg8+Frmv0fHQfh1YikgVMHGac0EF+H0IM6pBL5TbKLNf46u3PlqT//0rsosEZ2H3xPfGBxRYMr8ZMEQT6ZUQm3pNdGOD8jRjJBXvvz6HA0K58G+JAyH2JOIqbjK57VRAC2EOn4aUbEOt8GXvjoPXMMtER8hA2E4uYQeEODyqoZFOBNrC29P6TwCZOdcGgd/5pLdMeiA==; 3:7lDxILNZ80S1s9cVG2KI2xihCV38masGeDjWxqGdnBbPsKIGKyIeAdURWOIFkmtspc2/bUP38KenmKwz3OhlDhtOiXWp/dXwKVCavQm5/13fA2H1uPokVj1dIOuMcy0T+HBcDGgAK8BJ9lcGvPWXgg==; 25:NGsMy2hif/B++jLOwC0zojdFD5PWQ0wMk6Dr7s1syfAnxHo8stMfVmKQnFZXkqw2MxvwQQPZOQWAf5E2iVtAfX3KcqT6Z6z10t3l1hwFTmwLXyq1+InROyX5I1WFQy2IEIUEvn/YIb2HCOv1d1sFgRVKS1ykW7PC0qtD5kVsxUuLkxy4UdbUqPxmTxKI6EMIqICVuXjSpA3jmpEEfmmANR9P0NhVVZlHWobU4tF0srTfueIbo6/vph+7peRewOCaevP9oYTZ5jf3oqUWKB9siFY1Dm+xoKveBNrWUHaf6UBabQ0d0wIoYpTjkk7AsnhFkGjeLWpsEEHOc/OV7RpoO8ekN+wdLG4jeCI0ZbnDnbJ+soOVf/RFRJxjfve/Vwn2ELZdn6N/TxwPcTmNdKU6CwNdB6dnG7pO/aTD05OkTm8cOpwIpxkyFpma+yDieO/o X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB6PR0701MB2997; X-Microsoft-Exchange-Diagnostics: 1; DB6PR0701MB2997; 31:0ZZ/VOWO2xrSnWQC7rT/XM2Zp90blLABVsOQpZCrg59Mw/1vTzMdgmicOuGqUhZdg4yCkeoTyIQMFEfcfJ36mT1jz78JoioB3Ht0lSUTKEvuHANOhvH2yp1sUTYZ/Ehw2W4ZsZsZHm3kty+JTLgpp1cv1LtA16rkkpng7lUHtcXr3fRt6FX/JXtcawSC/c+KItz3NG9wYc9MpVk4uCO8nU1g45Pwx4f+4J9Mzzuyh+PY70Cw7HpIDOcS7J8fqGGjdFrVWTaK8vXa3ifxISQhpA==; 4:E6a+kOkVwVxoeUkbxXVxHcT6lVpuv72BJRe6fgFOK7/cX+IuLbECKtW9rJmqX8sxs6Lw4OPAUDy/lgHRmnC/PzeyAAxf5Gn/rFjl3VsDkV9Ahbjvas4FbQSFz7EkmGUgv+AupK1XQtdqhq4UF1rjxKAoe+OdIaHMvdsiF1eR4QBWN5cFuQVIOGMGjuO+2kQQ3htmdTVOuyFJDmFCpnkQ1Qvg55ljowGvFZwgQChKDUDC8pPCAczc6o0WT6TEggM5+bHdGGzElliOG5y77nHZFObKLAqRTNQI7P+aUqBtodQEyG0wUEZ7LdjwG0GwFxphh61FomGUZf8BcQX2CUI1qQLWzoBMfFtDxybpg+/I3k3N2c58IFg3f2vsATIAMVxPxVzbHjxIAyiN6afUrMafglgu11okeO5sVFJmeRBRk5pw1hhEKtfpYJEStXV6hsjO6cBL6i7ozsBh5Kdgq2GIF3zPdirYHixFOBJb6Wih96b0if359Xm6gDgaFtEXA+EF4mFijx09Zm2CjPAmEunW+XrhkAhoaH+gyrNsyPeKUO4= X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(178726229863574)(192374486261705)(138986009662008)(17755550239193); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001); SRVR:DB6PR0701MB2997; BCL:0; PCL:0; RULEID:; SRVR:DB6PR0701MB2997; X-Forefront-PRVS: 01110342A5 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(7916002)(54534003)(13464003)(189002)(24454002)(377454003)(199003)(15594002)(586003)(5001770100001)(3846002)(15975445007)(189998001)(1556002)(5660300001)(97736004)(1456003)(77096005)(551544002)(92566002)(50466002)(68736007)(6116002)(23676002)(66066001)(47776003)(86362001)(62236002)(44716002)(81166006)(8676002)(8666005)(61296003)(116806002)(230783001)(84392002)(1941001)(44736004)(81156014)(50226002)(9686002)(4326007)(106356001)(33646002)(105586002)(93886004)(2870700001)(19580405001)(19580395003)(7846002)(14496001)(81816999)(2906002)(81686999)(76176999)(7736002)(101416001)(305945005)(50986999)(42186005)(4720700003)(74416001)(7059030)(7726001); DIR:OUT; SFP:1102; SCL:1; SRVR:DB6PR0701MB2997; H:pc6; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:0; LANG:en; Received-SPF: None (protection.outlook.com: btconnect.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtEQjZQUjA3MDFNQjI5OTc7MjM6NEZEM3NpVWh5SjRxa1dXL2VCcnowSXZB?= =?utf-8?B?U0RVMFYrdDJpTjA5VSsrZW16NnFjSUkwVFVsTkg3OWtxU05UQnRDT1AxNW1n?= =?utf-8?B?ejc1QlpPNkx3NlZmeEpDcTNHbDlSU2lsMDRQY0V1dXRWdno2RDkxV3BlTHVO?= =?utf-8?B?V0JVWWVqV3l0SXJpVk9PUm1aMkUvMWtFNm1ENTd5WFRzV3Q3WG9hOU51dzdQ?= =?utf-8?B?V09EdU9IWUgyZUFNUzFWZVU3RERXQ3AwcUgvbXZ6RlBVemdZYVlHV3hzWHJq?= =?utf-8?B?L0ZrSWhDVTN4bGhRY2pTc09VVFh3UlROMFQ0VGVoT3IvZ0g2ZVRmaDJhNWJ3?= =?utf-8?B?L21kQ2ZRMmp0ZXkySThEV2tDVUJRTUtZejlpbnRHL20xZ29mR3Y1UXhjN2Zw?= =?utf-8?B?Q2ZvRFVWRUVPdW1EYXJMeVlWR015dlBxMWRvM2xsNDZESVdaY0dIdUxTN2Z3?= =?utf-8?B?YWxEYytTeHNOVnM5aXlxRWZ2b1ZSMGpNeUN6WHhzMXlwcW5iQjkrNkNvVTVD?= =?utf-8?B?bUk3QnZXQVZubEduakZFZ2M2dWEvZ3c2RXNtTWpkc2dmV0Z1Um02ZXc1TjQz?= =?utf-8?B?bytCSG9DY0p5aVFtd21rbmo4enlUdEREQ1lGTWMrNU1zQWx1UUhMY1BVMERz?= =?utf-8?B?KytyemxkMDI1Z3R1NGdPSGZNQW1iSE4rSnNpZWZhNEhHSjJmMzVyTnFPTFha?= =?utf-8?B?SVhzdm5QaDNjUjZXZVJJbEpJZ29wcmpaZDVHUkF4NjhBMk9VNkN0OHB3WHRL?= =?utf-8?B?RFVsWFkxUWQ1Zml6QVRGLy8wT3ZmaUdkbkVEWTN5RUJ6cHpaK0haL01iR2RO?= =?utf-8?B?ZG1ZckdETll1djI1R2M5ajRpRnJkK1p2RThMZFVCSTVWTU1yNlBpbnpzaGJh?= =?utf-8?B?ZWI4UzZId2ZtSm9Oay9uRkg3ZWRlU0lFM2luaDRIK2ZtUXd1T0tJVzlQN2gv?= =?utf-8?B?Z0pDdnFHKzVteS83RDNSTjNsOUN3TTdLQW50V2FoOFdRY1UyTFpNMWtPMjBh?= =?utf-8?B?cWxzS1NvT2xuR0xZQmVTS1grTzhKQlRhdXB2NmJicGtld2tlQmF2SFBhbTY1?= =?utf-8?B?L0tzR0N0eER1eUhBdUNpZGdWS1duOHFSNzZCRDIxaWF1MHlZaEQ2aVA5cjQr?= =?utf-8?B?UHFGNHg3VmxkTE9SaDNXSWoxejdFSFB1RnE3aEdjQW1xUUVOb2VFMTJTelhI?= =?utf-8?B?ZmlLbkllc2RzVTJJdTQwbnlCbWRVWVRqK1d5Ny9rT3JMTnRFNWhhM2g4dm91?= =?utf-8?B?TWZLNDR3Skdsb2FUR05yaHk0YjhoaU8veW12SlNyVzIzM3BaVXlsU3lSY3ZT?= =?utf-8?B?SmVZRlRoWkhBaFBrMnlUMVBQRS9TZmtZV2U1ZGhjS2RRSXQ4NjRpdGZqSVk4?= =?utf-8?B?WWQ5eC9LZkI0N3Y2OU9Hc251bUk3aVpGaWZYaE9wemxsOURabzdOTElVaitS?= =?utf-8?B?VDFPQk1OcXI0TnpnekF3UkEzSmg4MXJZUzBibHJ6bXVpZk9xVnNjYVJLRGxk?= =?utf-8?B?bENFRVpZRFU5R09MNEIwZ2NZeFllTHZwdllGUVhWdDZmY0R3Z1RlSVdOYUNn?= =?utf-8?B?NVFXMzJ5YTFnNEhJYUo0dDdlSG1XR2xoSFdzMzdZSzFUdmRJZVZVVGsyYlF0?= =?utf-8?B?cVQ2R3Z0ZjRQbk9DN0h5ckQ4RHVvUi96T1pGN2FoNU9VZVFXY1VaT1dxUXhW?= =?utf-8?B?YXJ4TWZKWWJURTJYYmtMNHJnOEJLcTdoMTlGdFVOZkliSjhCYXlVWFpEZE9s?= =?utf-8?B?cCs5KzBTWjZDVmpodzdZNmdMZmtwdmR0ckpSS0h1MVNQQlRBU2wxbnp5c3dD?= =?utf-8?B?T3BXeXBXNEZLNzZzeUJyK00yMWpUaGdHVjRmN3pDT052MWRnK2o1RzdZbjgr?= =?utf-8?B?bTRhM1J2elhwNTJNdE9FN3BVMkMvQ3YrS3lhMjlqME93eG5iaW5VekE0cjJS?= =?utf-8?B?Qnpkek9KZDJaSWRwSDR6blhYWEdrT1BKRTlvMzhFUldNV2JqK05CeWluVnR4?= =?utf-8?B?bXZjNWlZK2ZhK0YrYUY4aWJ6aThWYm10UmpNMWsyd213UnFVVDZiOTFwSks1?= =?utf-8?B?eDk0eWVMWFNjekdxVy96a0tIejZKRFU4bHFKbFV1MThRNVVjdGxNZHYyV0Y1?= =?utf-8?Q?YR0RYOrQ70SwLKy8+wt4A6vhE=3D?= X-Microsoft-Exchange-Diagnostics: 1; DB6PR0701MB2997; 6:+fDilMg9FWbHJIcnuz09fwYkLBWELT+QF05g59lV4TXARmJYVuPP/+A/3BicTGdC+ruWfT0zyGiJejr0NFZbLZnPqyShmmzkgxN5Hoq+lhfmOakYqypv2rXp+WuNjjgsFzuePEd4/gB8sQ8J2WsEDxbf9PyLx03H2uLzthvAFxGEnRPMqyQiNkHMyq/J/nqVNka3uKQk+excv9zXapZXbQ6db2E74Tar7d9CKP78bJ8tfAMW1CZ6WHEX9P7vNuyYpU/GMvi93UcQnBTbutRFY1BoALB961Ywhj/iWW4/6VCy4uI9qBLKxOsLmAqR9UFR; 5:UlzcVRRIL5Na9HWOQJYfqoqKRSw5RxrnroqfcAWNjc2nSLmO9wQJn3J7BnZLfpzDZnM0JOszxLrjEMyQJkCG8HhBsoc5rVZJHBFPoyctUv0tEWCmlt6+xuQIC9ZCSnRdASaoFkz6xMMLNyibq4GHrA==; 24:7niwKuhjWKwGEVyOyiajPDB0nwTJ6svGyXA0T2c6CFdxf/O0/WD9xJ8waX3hGlPguveYSW1R3dkmqxiUF2wDqpNTW463FkS61EmH9ioAIww= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; DB6PR0701MB2997; 7:6wdIdxWXj7zBwMV9qva8pVglOOYY8Sml8YbJEvBdUVzkx1OYJWTeeToaf3CpJwp0duvL3gMqd2N+usxQ0Kt0Rct0/4eHhQ96t8nCI66AwyRif+4M+QY8i+/TZR0vDh6nv4A1I9/sDik0CyvKFh7NUVH6E+9wQ4Q6J0f1unvGlfw7DvzIN5W3IHVb0gZ6I/6Q647MpohtJe/eUpPCPbuk/mHD9Eyjgi/vydQyPMbR0Axq37m4/TbTnNvHHPubv7PbcP42J1Tv2FXnD9+yMuu1WbBhiAUF8V2QIS7XMoPR0DsmvNMzk/yEWNkLUm4Tejk1l0qP5/fjmz5GHAV1RbYAJydId309ud0N29V5inIKeZw= X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Oct 2016 10:31:12.8421 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0701MB2997 Archived-At: Cc: netconf@ietf.org Subject: Re: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Oct 2016 10:31:21 -0000 ----- Original Message ----- From: "Kent Watsen" Sent: Saturday, October 29, 2016 12:47 > Hi Tom, > > I completely agree for the reasons you mentioned, but I’d like to suggest an exception in this case. Since the current draft is a -00, it has no history. So I could just submit it again, with no changes other than the name change. No history would be lost then, right? Kent mmmm, yes, I had not noticed it was -00. But it would be wrong to say it has no history; normally that would be a non-WG I-D but in this case it is draft-ietf-netconf-server-model-09 Tools looks after the change from non-WG I-D to WG I-D; I do not know what it has done in this case. It is possible to override the tools view and I would like that in this case, that if you go with a renamed I-D, then tools shows the renamed I-D as having a predecessor of server-model. That might make the forward chain of references somewhat odd, but it is only ever the backward chain that I use (and see a use for). Bear in mind too that the e-mail archive will show the initial split of server-model into the current name, which might be something that the IESG look at come review time so there could be confusion there. Given the history, I do think that this, name change or no, should appear in the text of the RFC itself, i.e. not the current change log which the RFC Editor may excise. Tom Petch > > BTW, I’m very much feel bad for not picking the better name in the first place. I hate having to make this request. Of course we can keep the draft name as is, even though the model name inside it changes, if that’s what people want. > > Kent > > > On 10/28/16, 7:07 AM, "t.petch" wrote: > > Kent > > I dislike changes to a document identifier. Identifiers should be > stable so that the history and revisions can readily be tracked. > Imbuing the identifier with excessive semantic meaning makes identifiers > unstable and hard to use at least during the life of the I-D. > > Module names are a bit different; there I do see a case for getting the > semantics right although again there is a tendency to overload > identifiers with meaning. An identifer should be unique within what > namespace it occurs, easy to use for whatever uses it has - and stable. > > So module name yes, I-D no, for me. > > Tom Petch > > > ----- Original Message ----- > From: "Kent Watsen" > To: "Juergen Schoenwaelder" > Cc: > Sent: Thursday, October 27, 2016 3:28 PM > Subject: Re: [Netconf] rename ietf-system-keychain to ietf-keystore or > ietf-system-keystore? > > > > [picking up on an old thread] > > > > > > Hi Juergen, > > > > You bring up a good point. The introduction of the client auth > mechanisms added last time definitely seem SSH/TLS or NC/RC specific in > places. The rest of it I think is pretty independent of any specific > protocol, but we can double-check that. > > > > In the meanwhile, I’d like to move forward with renaming the draft to > draft-ietf-netconf-keystore and changing the module name to > ietf-keystore so as to clear up the name-confusion issue, with the > understanding that we’ll work towards factoring-out/augmenting-in > protocol-specific extensions. Any objections to this from anyone? > > > > Thanks, > > Kent > > > > > > > > On 9/22/16, 1:51 PM, "Juergen Schoenwaelder" > wrote: > > > > I really see only two good approaches: > > > > a) A single well thought-out keystore for all needs to store and > > manage keys. This may take time to get right and I would expect > > that the natural home for this would actually be the security area > > and not OPS or RTG. > > > > b) The alternative is to design N different keystores that are all > > designed for specific security protocols/mechanisms. A keystore for > > SSH keys, a keystore for X.509 certificates, a keystore for plain > > symmetric keys, a keystore for SASL mechanisms, ... > > > > I think what we are doing right now is a somewhat arbitrary mix in the > > middle between these two alternatives. Perhaps an approach worth > > exploring is to define a core keystore model that defines a core > > structure and naming system and that can be augmented with models > > providing extensions that are security protocol/mechanism specific. > > Yes, this will take more time to work out but then it provides > > (ideally) a more general solution, i.e., one where at least the > > naming and the overall structure is consistent. > > > > Well, given that the IETF is usually better in doing smaller things, > > perhaps a generic keystore is just a dream of an idealist and smaller > > specific security protocols/mechanisms specific keystores are the > > short-time most effective direction. If so, we should split the > > system-keychain into even smaller units. > > > > /js > > > > On Thu, Sep 22, 2016 at 05:09:44PM +0000, Kent Watsen wrote: > > > > > > I prefer “ietf-keystore”, as I’m not 100% sure the module won’t ever > contain symmetric keys. Case in point, the current draft has a password > field in it, for password-based SSH authentications. Gary added the > password field last time to support the ietf-ssh-client and > ietf-netconf-client modules. That said, I don’t think it’s received > significant review yet. Still, a password is a form of a symmetric > key, so calling the module an “asymmetric keystore” wouldn’t be quite > right in this case. > > > > > > Kent > > > > > > > > > On 9/21/16, 9:04 PM, "Mahesh Jethanandani" > wrote: > > > > > > I agree with Juergen. It would make more sense to name it as > ietf-asymmetric-keystore. > > > > > > > > > > On Sep 21, 2016, at 2:59 PM, Kent Watsen > wrote: > > > > > > > > Hi Juergen, > > > > > > > > So are you advocating ietf-keystore or > ietf-asymmetric-keystore? > > > > > > > > FWIW: > > > > - Andriod and Java call it "keystore". > > > > - MacOS and iOS call it "keychain". > > > > - Windows doesn’t seem to have an equivalent. > > > > > > > > Thanks, > > > > Kent > > > > > > > > > > > > On 9/21/16, 4:01 PM, "Juergen Schoenwaelder" > wrote: > > > > > > > > As I said several times, choose names that indicate what > the models > > > > really do. As far as I can tell, one deals with symmetric > keys, the > > > > other deals with asymmetric keys. > > > > > > > > I think we do not want for different classes of protocols > or > > > > subsystems to define different keystores or keychains. > Hence, names > > > > like ietf-_routing_-keystore or ietf-_system_-keystore are > sending the > > > > wrong signal. > > > > > > > > /js > > > > > > > > On Wed, Sep 21, 2016 at 05:35:40PM +0000, Kent Watsen > wrote: > > > >> All, > > > >> > > > >> You may recall that we previously renamed the YANG module > from “ietf-keychain” to “ietf-system-keychain” to disambiguate it from > the routing area’s “ietf-key-chain” module (in Acee’s draft). Acee was > going to rename his module to “ietf-routing-keychain”, but then didn’ t. > But the current two names are still too close for comfort and so I’ve > been thinking to rename ours to “ietf-keystore” or > “ietf-system-keystore”. FWIW, “keystore” is perhaps even a more apt > name than “keychain” for this purpose. In discussing this with the WG > chairs, we can update the draft’s name to be inline with whatever we > choose. > > > >> > > > >> What do people think? Is there a preference between > ietf-keystore and ietf-system-keystore? > > > >> > > > >> If no objections are received within a week’s time, I’ll > assume to use “ietf-keystore” and update the draft’s name accordingly > (i.e., draft-ietf-netconf-keystore-00). > > > >> > > > >> Thanks, > > > >> Kent > > > >> > > > > > > > >> _______________________________________________ > > > >> Netconf mailing list > > > >> Netconf@ietf.org > > > >> https://www.ietf.org/mailman/listinfo/netconf > > > > > > > > > > > > -- > > > > Juergen Schoenwaelder Jacobs University Bremen > gGmbH > > > > Phone: +49 421 200 3587 Campus Ring 1 | 28759 > Bremen | Germany > > > > Fax: +49 421 200 3103 > > > > > > > > > > > > > _______________________________________________ > > > > Netconf mailing list > > > > Netconf@ietf.org > > > > https://www.ietf.org/mailman/listinfo/netconf > > > > > > Mahesh Jethanandani > > > mjethanandani@gmail.com > > > > > > > > > > > > > > > > > > > -- > > Juergen Schoenwaelder Jacobs University Bremen gGmbH > > Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany > > Fax: +49 421 200 3103 > > > > > > _______________________________________________ > > Netconf mailing list > > Netconf@ietf.org > > https://www.ietf.org/mailman/listinfo/netconf > > > > > > From nobody Sun Oct 30 07:22:36 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E917C1294CE for ; Sun, 30 Oct 2016 07:22:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id auE0BDFWwiF5 for ; Sun, 30 Oct 2016 07:22:32 -0700 (PDT) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0096.outbound.protection.outlook.com [104.47.41.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62C69129577 for ; Sun, 30 Oct 2016 07:22:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=U8y8o1sbHDpeQu57PnboJ2ZVZe3+G6SX8ZiIjES/H8A=; b=ZDx8yjaPMqoZPzRXTYs4X7davbaeUznXBDyNwcVxTqbXEQvLR8rSjNKo6ey8VuvGVdIXyc12/z6Vu4FJEeEiE5yUSMP8OnQfsGsasrVlQT21auNn+JnGJh3CWCuNjA4yA9GgDAim0b2VYpWLaazhS06+sUfEMaqupgVtXz8KYxw= Received: from CY1PR0501MB1450.namprd05.prod.outlook.com (10.160.149.11) by CY1PR0501MB1449.namprd05.prod.outlook.com (10.160.148.155) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.7; Sun, 30 Oct 2016 14:22:30 +0000 Received: from CY1PR0501MB1450.namprd05.prod.outlook.com ([10.160.149.11]) by CY1PR0501MB1450.namprd05.prod.outlook.com ([10.160.149.11]) with mapi id 15.01.0707.004; Sun, 30 Oct 2016 14:22:30 +0000 From: Kent Watsen To: t.petch , Juergen Schoenwaelder Thread-Topic: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? Thread-Index: AQHSFC6Sd+kC7yrCuUylSmlyZFKQHKCEXacA///dtICAAHa6gIAAyriAgABOuwCANoXngIABnhcpgAFqOwCAAa9jaf///YgA Date: Sun, 30 Oct 2016 14:22:30 +0000 Message-ID: References: <9D06C5DA-26A3-4296-868D-D0356A41983E@juniper.net> <20160921200156.GA15745@elstar.local> <0745330D-8BA5-4288-BE57-FF18F2E5C22D@gmail.com> <20160922175130.GB18445@elstar.local> <7380A192-381B-4739-9552-BF0C8495D83B@juniper.net> <012801d2310b$8fcace80$4001a8c0@gateway.2wire.net> <007a01d23298$5c158e20$4001a8c0@gateway.2wire.net> In-Reply-To: <007a01d23298$5c158e20$4001a8c0@gateway.2wire.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.241.11] x-ms-office365-filtering-correlation-id: 57dc7871-6ceb-4793-a715-08d400d02eec x-microsoft-exchange-diagnostics: 1; CY1PR0501MB1449; 7:KN9zemePrMn8t22cRtp7UPh3P8gsba45mFYSuUndFtO58+DG4kTW97Nq6DSrxGeB9NEeIF2ekVVr6CaDWWd2a8mlzqOMqNsPLwR3b5uffkNEdrr0mQ+m14abyIPhLcRLbpu7QUWjSvmRrXb+o5T3kcwFCKcHvt9JFvszmh1YZz29C3WNzX3Kjd9SMXbLcjVLuBZZYpS/JTzJH75ucWpmLsuG12JD8FZuNkx1vI3RKPKTHC7Wy9sa2bTI2ABkwXwqO7mGsuC/Si0zqkvaNIR0FtAaGRzoraeWlMYz++7MFpBOJmo0Poty1R3zDEHXcdirdbdBAMg/2A6pKsG4R3yMdpGCvEfwfIz/C6rU/pcbhXw= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR0501MB1449; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(178726229863574)(192374486261705)(138986009662008)(17755550239193); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:CY1PR0501MB1449; BCL:0; PCL:0; RULEID:; SRVR:CY1PR0501MB1449; x-forefront-prvs: 01110342A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(51914003)(189002)(54534003)(13464003)(24454002)(199003)(15594002)(377454003)(106116001)(586003)(189998001)(5002640100001)(4001350100001)(97736004)(5001770100001)(106356001)(8676002)(83716003)(2906002)(92566002)(81156014)(4326007)(77096005)(54356999)(83506001)(82746002)(81166006)(76176999)(2900100001)(15975445007)(50986999)(3846002)(6116002)(87936001)(102836003)(101416001)(122556002)(93886004)(8666005)(3660700001)(10400500002)(305945005)(11100500001)(3280700002)(68736007)(8936002)(551544002)(2950100002)(66066001)(230783001)(36756003)(19580405001)(105586002)(19580395003)(99286002)(7736002)(5660300001)(7846002)(33656002)(86362001)(7059030)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR0501MB1449; H:CY1PR0501MB1450.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2016 14:22:30.5370 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR0501MB1449 Archived-At: Cc: "netconf@ietf.org" Subject: Re: [Netconf] rename ietf-system-keychain to ietf-keystore or ietf-system-keystore? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Oct 2016 14:22:35 -0000 DQpUaGUgY2hhaXJzIGNhbiBjb25maWd1cmUgZGF0YXRyYWNrZXIgdG8ga25vdyB3aGF0IG90aGVy IGRyYWZ0IGEgZ2l2ZW4gZHJhZnQgcmVwbGFjZXMuICBJbiB0aGlzIGNhc2UsIHRoZSBvbmUgc2Vy dmVyLW1vZGVsIGRyYWZ0IGdvdCBzcGxpdCBpbnRvIDUgZHJhZnRzLiAgSSBkb27igJl0IGFjdHVh bGx5IGtub3cgaWYgdGhlIHRvb2xzIGNhbiBoYW5kbGUgbXVsdGlwbGUgZHJhZnRzIHJlcGxhY2lu ZyBvbmUgZHJhZnQuICBUaGF0IHNhaWQsIEkgbGlrZSB5b3VyIGlkZWEgb2YgYWRkaW5nIHRleHQg dG8gZXhwbGFpbiBzb21lIG9mIHRoZSBkcmFmdOKAmXMgaGlzdG9yeS4gIEkgY2FuIGFkZCBzaW1p bGFyIHRleHQgaW50byBhbGwgNSBkcmFmdHMuICBUaGFua3MgZm9yIHRoZSBzdWdnZXN0aW9uLg0K DQpLZW50DQoNCg0KT24gMTAvMzAvMTYsIDY6MjggQU0sICJ0LnBldGNoIiA8aWV0ZmNAYnRjb25u ZWN0LmNvbT4gd3JvdGU6DQoNCi0tLS0tIE9yaWdpbmFsIE1lc3NhZ2UgLS0tLS0NCkZyb206ICJL ZW50IFdhdHNlbiIgPGt3YXRzZW5AanVuaXBlci5uZXQ+DQpTZW50OiBTYXR1cmRheSwgT2N0b2Jl ciAyOSwgMjAxNiAxMjo0Nw0KDQoNCj4gSGkgVG9tLA0KPg0KPiBJIGNvbXBsZXRlbHkgYWdyZWUg Zm9yIHRoZSByZWFzb25zIHlvdSBtZW50aW9uZWQsIGJ1dCBJ4oCZZCBsaWtlIHRvDQpzdWdnZXN0 IGFuIGV4Y2VwdGlvbiBpbiB0aGlzIGNhc2UuICBTaW5jZSB0aGUgY3VycmVudCBkcmFmdCBpcyBh IC0wMCwgaXQNCmhhcyBubyBoaXN0b3J5LiAgU28gSSBjb3VsZCBqdXN0IHN1Ym1pdCBpdCBhZ2Fp biwgd2l0aCBubyBjaGFuZ2VzIG90aGVyDQp0aGFuIHRoZSBuYW1lIGNoYW5nZS4gIE5vIGhpc3Rv cnkgd291bGQgYmUgbG9zdCB0aGVuLCByaWdodD8NCg0KS2VudA0KDQptbW1tLCB5ZXMsIEkgaGFk IG5vdCBub3RpY2VkIGl0IHdhcyAtMDAuICBCdXQgaXQgd291bGQgYmUgd3JvbmcgdG8gc2F5DQpp dCBoYXMgbm8gaGlzdG9yeTsgbm9ybWFsbHkgdGhhdCB3b3VsZCBiZSBhIG5vbi1XRyBJLUQgYnV0 IGluIHRoaXMgY2FzZQ0KaXQgaXMNCmRyYWZ0LWlldGYtbmV0Y29uZi1zZXJ2ZXItbW9kZWwtMDkN Cg0KVG9vbHMgbG9va3MgYWZ0ZXIgdGhlIGNoYW5nZSBmcm9tIG5vbi1XRyBJLUQgdG8gV0cgSS1E OyBJIGRvIG5vdCBrbm93DQp3aGF0IGl0IGhhcyBkb25lIGluIHRoaXMgY2FzZS4gIEl0IGlzIHBv c3NpYmxlIHRvIG92ZXJyaWRlIHRoZSB0b29scw0KdmlldyBhbmQgSSB3b3VsZCBsaWtlIHRoYXQg aW4gdGhpcyBjYXNlLCB0aGF0IGlmIHlvdSBnbyB3aXRoIGEgcmVuYW1lZA0KSS1ELCB0aGVuIHRv b2xzIHNob3dzIHRoZSByZW5hbWVkIEktRCBhcyBoYXZpbmcgYSBwcmVkZWNlc3NvciBvZg0Kc2Vy dmVyLW1vZGVsLiAgVGhhdCBtaWdodCBtYWtlIHRoZSBmb3J3YXJkIGNoYWluIG9mIHJlZmVyZW5j ZXMgc29tZXdoYXQNCm9kZCwgYnV0IGl0IGlzIG9ubHkgZXZlciB0aGUgYmFja3dhcmQgY2hhaW4g dGhhdCBJIHVzZSAoYW5kIHNlZSBhIHVzZQ0KZm9yKS4NCg0KQmVhciBpbiBtaW5kIHRvbyB0aGF0 IHRoZSBlLW1haWwgYXJjaGl2ZSB3aWxsIHNob3cgdGhlIGluaXRpYWwgc3BsaXQgb2YNCnNlcnZl ci1tb2RlbCBpbnRvIHRoZSBjdXJyZW50IG5hbWUsIHdoaWNoIG1pZ2h0IGJlIHNvbWV0aGluZyB0 aGF0IHRoZQ0KSUVTRyBsb29rIGF0IGNvbWUgcmV2aWV3IHRpbWUgc28gdGhlcmUgY291bGQgYmUg Y29uZnVzaW9uIHRoZXJlLg0KDQpHaXZlbiB0aGUgaGlzdG9yeSwgSSBkbyB0aGluayB0aGF0IHRo aXMsIG5hbWUgY2hhbmdlIG9yIG5vLCBzaG91bGQNCmFwcGVhciBpbiB0aGUgdGV4dCBvZiB0aGUg UkZDIGl0c2VsZiwgaS5lLiBub3QgdGhlIGN1cnJlbnQgY2hhbmdlIGxvZw0Kd2hpY2ggdGhlIFJG QyBFZGl0b3IgbWF5IGV4Y2lzZS4NCg0KVG9tIFBldGNoDQoNCj4NCj4gQlRXLCBJ4oCZbSB2ZXJ5 IG11Y2ggZmVlbCBiYWQgZm9yIG5vdCBwaWNraW5nIHRoZSBiZXR0ZXIgbmFtZSBpbiB0aGUNCmZp cnN0IHBsYWNlLiAgSSBoYXRlIGhhdmluZyB0byBtYWtlIHRoaXMgcmVxdWVzdC4gIE9mIGNvdXJz ZSB3ZSBjYW4ga2VlcA0KdGhlIGRyYWZ0IG5hbWUgYXMgaXMsIGV2ZW4gdGhvdWdoIHRoZSBtb2Rl bCBuYW1lIGluc2lkZSBpdCBjaGFuZ2VzLCBpZg0KdGhhdOKAmXMgd2hhdCBwZW9wbGUgd2FudC4N Cj4NCj4gS2VudA0KPg0KPg0KPiBPbiAxMC8yOC8xNiwgNzowNyBBTSwgInQucGV0Y2giIDxpZXRm Y0BidGNvbm5lY3QuY29tPiB3cm90ZToNCj4NCj4gS2VudA0KPg0KPiBJIGRpc2xpa2UgY2hhbmdl cyB0byBhIGRvY3VtZW50IGlkZW50aWZpZXIuICBJZGVudGlmaWVycyBzaG91bGQgYmUNCj4gc3Rh YmxlIHNvIHRoYXQgdGhlIGhpc3RvcnkgYW5kIHJldmlzaW9ucyBjYW4gcmVhZGlseSBiZSB0cmFj a2VkLg0KPiBJbWJ1aW5nIHRoZSBpZGVudGlmaWVyIHdpdGggZXhjZXNzaXZlIHNlbWFudGljIG1l YW5pbmcgbWFrZXMNCmlkZW50aWZpZXJzDQo+IHVuc3RhYmxlIGFuZCBoYXJkIHRvIHVzZSBhdCBs ZWFzdCBkdXJpbmcgdGhlIGxpZmUgb2YgdGhlIEktRC4NCj4NCj4gTW9kdWxlIG5hbWVzIGFyZSBh IGJpdCBkaWZmZXJlbnQ7IHRoZXJlIEkgZG8gc2VlIGEgY2FzZSBmb3IgZ2V0dGluZw0KdGhlDQo+ IHNlbWFudGljcyByaWdodCBhbHRob3VnaCBhZ2FpbiB0aGVyZSBpcyBhIHRlbmRlbmN5IHRvIG92 ZXJsb2FkDQo+IGlkZW50aWZpZXJzIHdpdGggbWVhbmluZy4gIEFuIGlkZW50aWZlciBzaG91bGQg YmUgdW5pcXVlIHdpdGhpbiB3aGF0DQo+IG5hbWVzcGFjZSBpdCBvY2N1cnMsIGVhc3kgdG8gdXNl IGZvciB3aGF0ZXZlciB1c2VzIGl0IGhhcyAtIGFuZA0Kc3RhYmxlLg0KPg0KPiBTbyBtb2R1bGUg bmFtZSB5ZXMsIEktRCBubywgZm9yIG1lLg0KPg0KPiBUb20gUGV0Y2gNCj4NCj4NCj4gLS0tLS0g T3JpZ2luYWwgTWVzc2FnZSAtLS0tLQ0KPiBGcm9tOiAiS2VudCBXYXRzZW4iIDxrd2F0c2VuQGp1 bmlwZXIubmV0Pg0KPiBUbzogIkp1ZXJnZW4gU2Nob2Vud2FlbGRlciIgPGouc2Nob2Vud2FlbGRl ckBqYWNvYnMtdW5pdmVyc2l0eS5kZT4NCj4gQ2M6IDxuZXRjb25mQGlldGYub3JnPg0KPiBTZW50 OiBUaHVyc2RheSwgT2N0b2JlciAyNywgMjAxNiAzOjI4IFBNDQo+IFN1YmplY3Q6IFJlOiBbTmV0 Y29uZl0gcmVuYW1lIGlldGYtc3lzdGVtLWtleWNoYWluIHRvIGlldGYta2V5c3RvcmUgb3INCj4g aWV0Zi1zeXN0ZW0ta2V5c3RvcmU/DQo+DQo+DQo+ID4gW3BpY2tpbmcgdXAgb24gYW4gb2xkIHRo cmVhZF0NCj4gPg0KPiA+DQo+ID4gSGkgSnVlcmdlbiwNCj4gPg0KPiA+IFlvdSBicmluZyB1cCBh IGdvb2QgcG9pbnQuICBUaGUgaW50cm9kdWN0aW9uIG9mIHRoZSBjbGllbnQgYXV0aA0KPiBtZWNo YW5pc21zIGFkZGVkIGxhc3QgdGltZSBkZWZpbml0ZWx5IHNlZW0gU1NIL1RMUyBvciBOQy9SQyBz cGVjaWZpYw0KaW4NCj4gcGxhY2VzLiAgVGhlIHJlc3Qgb2YgaXQgSSB0aGluayBpcyBwcmV0dHkg aW5kZXBlbmRlbnQgb2YgYW55IHNwZWNpZmljDQo+IHByb3RvY29sLCBidXQgd2UgY2FuIGRvdWJs ZS1jaGVjayB0aGF0Lg0KPiA+DQo+ID4gSW4gdGhlIG1lYW53aGlsZSwgSeKAmWQgbGlrZSB0byBt b3ZlIGZvcndhcmQgd2l0aCByZW5hbWluZyB0aGUgZHJhZnQNCnRvDQo+IGRyYWZ0LWlldGYtbmV0 Y29uZi1rZXlzdG9yZSBhbmQgY2hhbmdpbmcgdGhlIG1vZHVsZSBuYW1lIHRvDQo+IGlldGYta2V5 c3RvcmUgc28gYXMgdG8gY2xlYXIgdXAgdGhlIG5hbWUtY29uZnVzaW9uIGlzc3VlLCB3aXRoIHRo ZQ0KPiB1bmRlcnN0YW5kaW5nIHRoYXQgd2XigJlsbCB3b3JrIHRvd2FyZHMgZmFjdG9yaW5nLW91 dC9hdWdtZW50aW5nLWluDQo+IHByb3RvY29sLXNwZWNpZmljIGV4dGVuc2lvbnMuICBBbnkgb2Jq ZWN0aW9ucyB0byB0aGlzIGZyb20gYW55b25lPw0KPiA+DQo+ID4gVGhhbmtzLA0KPiA+IEtlbnQN Cj4gPg0KPiA+DQo+ID4NCj4gPiBPbiA5LzIyLzE2LCAxOjUxIFBNLCAiSnVlcmdlbiBTY2hvZW53 YWVsZGVyIg0KPiA8ai5zY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPiB3cm90ZToN Cj4gPg0KPiA+IEkgcmVhbGx5IHNlZSBvbmx5IHR3byBnb29kIGFwcHJvYWNoZXM6DQo+ID4NCj4g PiBhKSBBIHNpbmdsZSB3ZWxsIHRob3VnaHQtb3V0IGtleXN0b3JlIGZvciBhbGwgbmVlZHMgdG8g c3RvcmUgYW5kDQo+ID4gICAgbWFuYWdlIGtleXMuIFRoaXMgbWF5IHRha2UgdGltZSB0byBnZXQg cmlnaHQgYW5kIEkgd291bGQgZXhwZWN0DQo+ID4gICAgdGhhdCB0aGUgbmF0dXJhbCBob21lIGZv ciB0aGlzIHdvdWxkIGFjdHVhbGx5IGJlIHRoZSBzZWN1cml0eQ0KYXJlYQ0KPiA+ICAgIGFuZCBu b3QgT1BTIG9yIFJURy4NCj4gPg0KPiA+IGIpIFRoZSBhbHRlcm5hdGl2ZSBpcyB0byBkZXNpZ24g TiBkaWZmZXJlbnQga2V5c3RvcmVzIHRoYXQgYXJlIGFsbA0KPiA+ICAgIGRlc2lnbmVkIGZvciBz cGVjaWZpYyBzZWN1cml0eSBwcm90b2NvbHMvbWVjaGFuaXNtcy4gQSBrZXlzdG9yZQ0KZm9yDQo+ ID4gICAgU1NIIGtleXMsIGEga2V5c3RvcmUgZm9yIFguNTA5IGNlcnRpZmljYXRlcywgYSBrZXlz dG9yZSBmb3IgcGxhaW4NCj4gPiAgICBzeW1tZXRyaWMga2V5cywgYSBrZXlzdG9yZSBmb3IgU0FT TCBtZWNoYW5pc21zLCAuLi4NCj4gPg0KPiA+IEkgdGhpbmsgd2hhdCB3ZSBhcmUgZG9pbmcgcmln aHQgbm93IGlzIGEgc29tZXdoYXQgYXJiaXRyYXJ5IG1peCBpbg0KdGhlDQo+ID4gbWlkZGxlIGJl dHdlZW4gdGhlc2UgdHdvIGFsdGVybmF0aXZlcy4gUGVyaGFwcyBhbiBhcHByb2FjaCB3b3J0aA0K PiA+IGV4cGxvcmluZyBpcyB0byBkZWZpbmUgYSBjb3JlIGtleXN0b3JlIG1vZGVsIHRoYXQgZGVm aW5lcyBhIGNvcmUNCj4gPiBzdHJ1Y3R1cmUgYW5kIG5hbWluZyBzeXN0ZW0gYW5kIHRoYXQgY2Fu IGJlIGF1Z21lbnRlZCB3aXRoIG1vZGVscw0KPiA+IHByb3ZpZGluZyBleHRlbnNpb25zIHRoYXQg YXJlIHNlY3VyaXR5IHByb3RvY29sL21lY2hhbmlzbSBzcGVjaWZpYy4NCj4gPiBZZXMsIHRoaXMg d2lsbCB0YWtlIG1vcmUgdGltZSB0byB3b3JrIG91dCBidXQgdGhlbiBpdCBwcm92aWRlcw0KPiA+ IChpZGVhbGx5KSBhIG1vcmUgZ2VuZXJhbCBzb2x1dGlvbiwgaS5lLiwgb25lIHdoZXJlIGF0IGxl YXN0IHRoZQ0KPiA+IG5hbWluZyBhbmQgdGhlIG92ZXJhbGwgc3RydWN0dXJlIGlzIGNvbnNpc3Rl bnQuDQo+ID4NCj4gPiBXZWxsLCBnaXZlbiB0aGF0IHRoZSBJRVRGIGlzIHVzdWFsbHkgYmV0dGVy IGluIGRvaW5nIHNtYWxsZXIgdGhpbmdzLA0KPiA+IHBlcmhhcHMgYSBnZW5lcmljIGtleXN0b3Jl IGlzIGp1c3QgYSBkcmVhbSBvZiBhbiBpZGVhbGlzdCBhbmQNCnNtYWxsZXINCj4gPiBzcGVjaWZp YyBzZWN1cml0eSBwcm90b2NvbHMvbWVjaGFuaXNtcyBzcGVjaWZpYyBrZXlzdG9yZXMgYXJlIHRo ZQ0KPiA+IHNob3J0LXRpbWUgbW9zdCBlZmZlY3RpdmUgZGlyZWN0aW9uLiBJZiBzbywgd2Ugc2hv dWxkIHNwbGl0IHRoZQ0KPiA+IHN5c3RlbS1rZXljaGFpbiBpbnRvIGV2ZW4gc21hbGxlciB1bml0 cy4NCj4gPg0KPiA+IC9qcw0KPiA+DQo+ID4gT24gVGh1LCBTZXAgMjIsIDIwMTYgYXQgMDU6MDk6 NDRQTSArMDAwMCwgS2VudCBXYXRzZW4gd3JvdGU6DQo+ID4gPg0KPiA+ID4gSSBwcmVmZXIg4oCc aWV0Zi1rZXlzdG9yZeKAnSwgYXMgSeKAmW0gbm90IDEwMCUgc3VyZSB0aGUgbW9kdWxlIHdvbuKA mXQNCmV2ZXINCj4gY29udGFpbiBzeW1tZXRyaWMga2V5cy4gIENhc2UgaW4gcG9pbnQsIHRoZSBj dXJyZW50IGRyYWZ0IGhhcyBhDQpwYXNzd29yZA0KPiBmaWVsZCBpbiBpdCwgZm9yIHBhc3N3b3Jk LWJhc2VkIFNTSCBhdXRoZW50aWNhdGlvbnMuICAgR2FyeSBhZGRlZCB0aGUNCj4gcGFzc3dvcmQg ZmllbGQgbGFzdCB0aW1lIHRvIHN1cHBvcnQgdGhlIGlldGYtc3NoLWNsaWVudCBhbmQNCj4gaWV0 Zi1uZXRjb25mLWNsaWVudCBtb2R1bGVzLiAgVGhhdCBzYWlkLCBJIGRvbuKAmXQgdGhpbmsgaXTi gJlzIHJlY2VpdmVkDQo+IHNpZ25pZmljYW50IHJldmlldyB5ZXQuICAgU3RpbGwsIGEgcGFzc3dv cmQgaXMgYSBmb3JtIG9mIGEgc3ltbWV0cmljDQo+IGtleSwgc28gY2FsbGluZyB0aGUgbW9kdWxl IGFuIOKAnGFzeW1tZXRyaWMga2V5c3RvcmXigJ0gd291bGRu4oCZdCBiZSBxdWl0ZQ0KPiByaWdo dCBpbiB0aGlzIGNhc2UuDQo+ID4gPg0KPiA+ID4gS2VudA0KPiA+ID4NCj4gPiA+DQo+ID4gPiBP biA5LzIxLzE2LCA5OjA0IFBNLCAiTWFoZXNoIEpldGhhbmFuZGFuaSINCjxtamV0aGFuYW5kYW5p QGdtYWlsLmNvbT4NCj4gd3JvdGU6DQo+ID4gPg0KPiA+ID4gICAgIEkgYWdyZWUgd2l0aCBKdWVy Z2VuLiBJdCB3b3VsZCBtYWtlIG1vcmUgc2Vuc2UgdG8gbmFtZSBpdCBhcw0KPiBpZXRmLWFzeW1t ZXRyaWMta2V5c3RvcmUuDQo+ID4gPg0KPiA+ID4NCj4gPiA+ICAgICA+IE9uIFNlcCAyMSwgMjAx NiwgYXQgMjo1OSBQTSwgS2VudCBXYXRzZW4NCjxrd2F0c2VuQGp1bmlwZXIubmV0Pg0KPiB3cm90 ZToNCj4gPiA+ICAgICA+DQo+ID4gPiAgICAgPiBIaSBKdWVyZ2VuLA0KPiA+ID4gICAgID4NCj4g PiA+ICAgICA+IFNvIGFyZSB5b3UgYWR2b2NhdGluZyBpZXRmLWtleXN0b3JlIG9yDQo+IGlldGYt YXN5bW1ldHJpYy1rZXlzdG9yZT8NCj4gPiA+ICAgICA+DQo+ID4gPiAgICAgPiBGV0lXOg0KPiA+ ID4gICAgID4gLSBBbmRyaW9kIGFuZCBKYXZhIGNhbGwgaXQgImtleXN0b3JlIi4NCj4gPiA+ICAg ICA+IC0gTWFjT1MgYW5kIGlPUyBjYWxsIGl0ICJrZXljaGFpbiIuDQo+ID4gPiAgICAgPiAtIFdp bmRvd3MgZG9lc27igJl0IHNlZW0gdG8gaGF2ZSBhbiBlcXVpdmFsZW50Lg0KPiA+ID4gICAgID4N Cj4gPiA+ICAgICA+IFRoYW5rcywNCj4gPiA+ICAgICA+IEtlbnQNCj4gPiA+ICAgICA+DQo+ID4g PiAgICAgPg0KPiA+ID4gICAgID4gT24gOS8yMS8xNiwgNDowMSBQTSwgIkp1ZXJnZW4gU2Nob2Vu d2FlbGRlciINCj4gPGouc2Nob2Vud2FlbGRlckBqYWNvYnMtdW5pdmVyc2l0eS5kZT4gd3JvdGU6 DQo+ID4gPiAgICAgPg0KPiA+ID4gICAgID4gICAgQXMgSSBzYWlkIHNldmVyYWwgdGltZXMsIGNo b29zZSBuYW1lcyB0aGF0IGluZGljYXRlIHdoYXQNCj4gdGhlIG1vZGVscw0KPiA+ID4gICAgID4g ICAgcmVhbGx5IGRvLiBBcyBmYXIgYXMgSSBjYW4gdGVsbCwgb25lIGRlYWxzIHdpdGggc3ltbWV0 cmljDQo+IGtleXMsIHRoZQ0KPiA+ID4gICAgID4gICAgb3RoZXIgZGVhbHMgd2l0aCBhc3ltbWV0 cmljIGtleXMuDQo+ID4gPiAgICAgPg0KPiA+ID4gICAgID4gICAgSSB0aGluayB3ZSBkbyBub3Qg d2FudCBmb3IgZGlmZmVyZW50IGNsYXNzZXMgb2YgcHJvdG9jb2xzDQo+IG9yDQo+ID4gPiAgICAg PiAgICBzdWJzeXN0ZW1zIHRvIGRlZmluZSBkaWZmZXJlbnQga2V5c3RvcmVzIG9yIGtleWNoYWlu cy4NCj4gSGVuY2UsIG5hbWVzDQo+ID4gPiAgICAgPiAgICBsaWtlIGlldGYtX3JvdXRpbmdfLWtl eXN0b3JlIG9yIGlldGYtX3N5c3RlbV8ta2V5c3RvcmUNCmFyZQ0KPiBzZW5kaW5nIHRoZQ0KPiA+ ID4gICAgID4gICAgd3Jvbmcgc2lnbmFsLg0KPiA+ID4gICAgID4NCj4gPiA+ICAgICA+ICAgIC9q cw0KPiA+ID4gICAgID4NCj4gPiA+ICAgICA+ICAgIE9uIFdlZCwgU2VwIDIxLCAyMDE2IGF0IDA1 OjM1OjQwUE0gKzAwMDAsIEtlbnQgV2F0c2VuDQo+IHdyb3RlOg0KPiA+ID4gICAgID4+IEFsbCwN Cj4gPiA+ICAgICA+Pg0KPiA+ID4gICAgID4+IFlvdSBtYXkgcmVjYWxsIHRoYXQgd2UgcHJldmlv dXNseSByZW5hbWVkIHRoZSBZQU5HIG1vZHVsZQ0KPiBmcm9tIOKAnGlldGYta2V5Y2hhaW7igJ0g dG8g4oCcaWV0Zi1zeXN0ZW0ta2V5Y2hhaW7igJ0gdG8gZGlzYW1iaWd1YXRlIGl0IGZyb20NCj4g dGhlIHJvdXRpbmcgYXJlYeKAmXMg4oCcaWV0Zi1rZXktY2hhaW7igJ0gbW9kdWxlIChpbiBBY2Vl 4oCZcyBkcmFmdCkuICBBY2VlDQp3YXMNCj4gZ29pbmcgdG8gcmVuYW1lIGhpcyBtb2R1bGUgdG8g 4oCcaWV0Zi1yb3V0aW5nLWtleWNoYWlu4oCdLCBidXQgdGhlbiBkaWRu4oCZDQp0Lg0KPiBCdXQg dGhlIGN1cnJlbnQgdHdvIG5hbWVzIGFyZSBzdGlsbCB0b28gY2xvc2UgZm9yIGNvbWZvcnQgYW5k IHNvIEnigJl2ZQ0KPiBiZWVuIHRoaW5raW5nIHRvIHJlbmFtZSBvdXJzIHRvIOKAnGlldGYta2V5 c3RvcmXigJ0gb3INCj4gIOKAnGlldGYtc3lzdGVtLWtleXN0b3Jl4oCdLiAgRldJVywg4oCca2V5 c3RvcmXigJ0gaXMgcGVyaGFwcyBldmVuIGEgbW9yZSBhcHQNCj4gbmFtZSB0aGFuIOKAnGtleWNo YWlu4oCdIGZvciB0aGlzIHB1cnBvc2UuICBJbiBkaXNjdXNzaW5nIHRoaXMgd2l0aCB0aGUgV0cN Cj4gY2hhaXJzLCB3ZSBjYW4gdXBkYXRlIHRoZSBkcmFmdOKAmXMgbmFtZSB0byBiZSBpbmxpbmUg d2l0aCB3aGF0ZXZlciB3ZQ0KPiBjaG9vc2UuDQo+ID4gPiAgICAgPj4NCj4gPiA+ICAgICA+PiBX aGF0IGRvIHBlb3BsZSB0aGluaz8gIElzIHRoZXJlIGEgcHJlZmVyZW5jZSBiZXR3ZWVuDQo+IGll dGYta2V5c3RvcmUgYW5kIGlldGYtc3lzdGVtLWtleXN0b3JlPw0KPiA+ID4gICAgID4+DQo+ID4g PiAgICAgPj4gSWYgbm8gb2JqZWN0aW9ucyBhcmUgcmVjZWl2ZWQgd2l0aGluIGEgd2Vla+KAmXMg dGltZSwgSeKAmWxsDQo+IGFzc3VtZSB0byB1c2Ug4oCcaWV0Zi1rZXlzdG9yZeKAnSBhbmQgdXBk YXRlIHRoZSBkcmFmdOKAmXMgbmFtZSBhY2NvcmRpbmdseQ0KPiAoaS5lLiwgZHJhZnQtaWV0Zi1u ZXRjb25mLWtleXN0b3JlLTAwKS4NCj4gPiA+ICAgICA+Pg0KPiA+ID4gICAgID4+IFRoYW5rcywN Cj4gPiA+ICAgICA+PiBLZW50DQo+ID4gPiAgICAgPj4NCj4gPiA+ICAgICA+DQo+ID4gPiAgICAg Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+ ICAgICA+PiBOZXRjb25mIG1haWxpbmcgbGlzdA0KPiA+ID4gICAgID4+IE5ldGNvbmZAaWV0Zi5v cmcNCj4gPiA+ICAgICA+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25l dGNvbmYNCj4gPiA+ICAgICA+DQo+ID4gPiAgICAgPg0KPiA+ID4gICAgID4gICAgLS0NCj4gPiA+ ICAgICA+ICAgIEp1ZXJnZW4gU2Nob2Vud2FlbGRlciAgICAgICAgICAgSmFjb2JzIFVuaXZlcnNp dHkgQnJlbWVuDQo+IGdHbWJIDQo+ID4gPiAgICAgPiAgICBQaG9uZTogKzQ5IDQyMSAyMDAgMzU4 NyAgICAgICAgIENhbXB1cyBSaW5nIDEgfCAyODc1OQ0KPiBCcmVtZW4gfCBHZXJtYW55DQo+ID4g PiAgICAgPiAgICBGYXg6ICAgKzQ5IDQyMSAyMDAgMzEwMw0KPiA8aHR0cDovL3d3dy5qYWNvYnMt dW5pdmVyc2l0eS5kZS8+DQo+ID4gPiAgICAgPg0KPiA+ID4gICAgID4NCj4gPiA+ICAgICA+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiAgICAg PiBOZXRjb25mIG1haWxpbmcgbGlzdA0KPiA+ID4gICAgID4gTmV0Y29uZkBpZXRmLm9yZw0KPiA+ ID4gICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9uZXRjb25mDQo+ ID4gPg0KPiA+ID4gICAgIE1haGVzaCBKZXRoYW5hbmRhbmkNCj4gPiA+ICAgICBtamV0aGFuYW5k YW5pQGdtYWlsLmNvbQ0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4NCj4g PiAtLQ0KPiA+IEp1ZXJnZW4gU2Nob2Vud2FlbGRlciAgICAgICAgICAgSmFjb2JzIFVuaXZlcnNp dHkgQnJlbWVuIGdHbWJIDQo+ID4gUGhvbmU6ICs0OSA0MjEgMjAwIDM1ODcgICAgICAgICBDYW1w dXMgUmluZyAxIHwgMjg3NTkgQnJlbWVuIHwNCkdlcm1hbnkNCj4gPiBGYXg6ICAgKzQ5IDQyMSAy MDAgMzEwMyAgICAgICAgIDxodHRwOi8vd3d3LmphY29icy11bml2ZXJzaXR5LmRlLz4NCj4gPg0K PiA+DQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N Cj4gPiBOZXRjb25mIG1haWxpbmcgbGlzdA0KPiA+IE5ldGNvbmZAaWV0Zi5vcmcNCj4gPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNvbmYNCj4gPg0KPg0KPg0KPg0K Pg0KDQoNCg0K From nobody Sun Oct 30 17:46:05 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6192712007C; Sun, 30 Oct 2016 17:46:01 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147787476139.20720.9871545453493957063.idtracker@ietfa.amsl.com> Date: Sun, 30 Oct 2016 17:46:01 -0700 Archived-At: Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-yang-push-04.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 00:46:01 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration of the IETF. Title : Subscribing to YANG datastore push updates Authors : Alexander Clemm Eric Voit Alberto Gonzalez Prieto Ambika Prasad Tripathy Einar Nilsen-Nygaard Andy Bierman Balazs Lengyel Filename : draft-ietf-netconf-yang-push-04.txt Pages : 51 Date : 2016-10-30 Abstract: This document defines a subscription and push mechanism for YANG datastores. This mechanism allows subscriber applications to request updates from a YANG datastore, which are then pushed by the publisher to a receiver per a subscription policy, without requiring additional subscriber requests. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-yang-push/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-netconf-yang-push-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-yang-push-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 31 06:26:20 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EFB7B129410; Mon, 31 Oct 2016 06:26:18 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147792037897.32429.6218218223346730646.idtracker@ietfa.amsl.com> Date: Mon, 31 Oct 2016 06:26:18 -0700 Archived-At: Cc: netconf-chairs@ietf.org, The IESG , draft-ietf-netconf-restconf@ietf.org, rfc-editor@rfc-editor.org, netconf@ietf.org Subject: [Netconf] Protocol Action: 'RESTCONF Protocol' to Proposed Standard (draft-ietf-netconf-restconf-18.txt) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 13:26:19 -0000 The IESG has approved the following document: - 'RESTCONF Protocol' (draft-ietf-netconf-restconf-18.txt) as Proposed Standard This document is the product of the Network Configuration Working Group. The IESG contact persons are Benoit Claise and Joel Jaeggli. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-restconf/ Technical Summary This draft specifies an HTTP-based protocol that provides a programmatic interface for accessing data defined in YANG, using the datastores defined in NETCONF. RESTCONF is a major protocol for the HTTP-based management of devices. It is already well-accepted and in used in diverse industry projects. Working Group Summary NETCONF WG discussed the document (first as draft-bierman-netconf-restconf) since September 2013 and issued 2 WG last calls each for 3 weeks. Diverse related WGs including Core, 6tisch, 6lo, i2rs, netmod have been invited to review. There was detailed discussion on RESTCONF issues and some of the discussion points led to controversy. So far all comments and issues have been addressed and closed on Netconf Github. Document Quality This document was extensively reviewed and comments were provided both in IETF meetings and on the mailing list. The protocol RESTCONF has been implemented by diverse WG members and vendors which brought in their comments and suggestions for improvement. Personnel The document shepherd is Mehmet Ersue. The responsible AD is Benoit Claise. If the document requires IANA experts(s), insert 'The IANA Expert(s) for the registries in this document: http://www.iana.org/assignments/link-relations/link-relations.xhtml#link-relations-1 Mark Nottingham, Julian Reschke, Jan Algermissen http://www.iana.org/assignments/xml-registry/xml-registry.xhtml Tim Bray, Martin Thomson From nobody Mon Oct 31 08:28:45 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F2C921294F0; Mon, 31 Oct 2016 08:28:43 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Kathleen Moriarty" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.36.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147792772371.32484.10246456033559418730.idtracker@ietfa.amsl.com> Date: Mon, 31 Oct 2016 08:28:43 -0700 Archived-At: Cc: draft-ietf-netconf-yang-patch@ietf.org, netconf-chairs@ietf.org, netconf@ietf.org Subject: [Netconf] Kathleen Moriarty's Discuss on draft-ietf-netconf-yang-patch-12: (with DISCUSS and COMMENT) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 15:28:44 -0000 Kathleen Moriarty has entered the following ballot position for draft-ietf-netconf-yang-patch-12: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-netconf-yang-patch/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- This should be easy to resolve through discussion or some text tweaks. In the security considerations section, I see some text that hints at my questions below, but isn't clear enough, so I'd like to discuss it to see if these things are covered, or why they are not, and to see if we can tweak the text a bit. The following text is helpful, is PATCH described in [I-D.ietf-netconf-restconf]? This document defines edit processing instructions for a variant of the PATCH method, as used within the RESTCONF protocol. I see section 2.7 discusses error handling and validating the YANG module, but is there a way that the hash (or some other mechanism) of the patch could be validated to ensure the patch was not altered. Is that already described for PATCH? I also see this text in the security considerations section: It is important for RESTCONF server implementations to carefully validate all the edit request parameters in some manner. Is the source of the patch authenticated? Can the client receiving the patch be authenticated? Is this handled through RESTCONF? Since YANG modules could add in write capabilities, unauthenticated patches could result in opening backdoors or revealing information that was not intended. You are covering it with that statement, but it's not clear if both ends can be authenticated and there are attacks if they are not authenticated. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Nit: In section 2.2 YANG Patch does not provide any access to specific datastores. It is am implementation detail s/am/an/ From nobody Mon Oct 31 12:22:25 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 89CC5129A67; Mon, 31 Oct 2016 12:22:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.37.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147794174155.23181.3401905038297464371.idtracker@ietfa.amsl.com> Date: Mon, 31 Oct 2016 12:22:21 -0700 Archived-At: Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-netconf-event-notifications-01.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 19:22:21 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration of the IETF. Title : NETCONF Support for Event Notifications Authors : Alberto Gonzalez Prieto Alexander Clemm Eric Voit Einar Nilsen-Nygaard Ambika Prasad Tripathy Sharon Chisholm Hector Trevino Filename : draft-ietf-netconf-netconf-event-notifications-01.txt Pages : 48 Date : 2016-10-31 Abstract: This document defines the support of [event-notifications] by the Network Configuration protocol (NETCONF). [event-notifications] describes capabilities and operations for providing asynchronous message notification delivery. This document discusses how to provide them on top of NETCONF. The capabilities and operations defined between this document and [event-notifications] are intended to obsolete RFC 5277. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-netconf-event-notifications/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-netconf-netconf-event-notifications-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-netconf-event-notifications-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 31 12:46:11 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 94792129992; Mon, 31 Oct 2016 12:46:10 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.37.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147794317060.23317.11443683560081039430.idtracker@ietfa.amsl.com> Date: Mon, 31 Oct 2016 12:46:10 -0700 Archived-At: Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-10.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 19:46:11 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration of the IETF. Title : Zero Touch Provisioning for NETCONF or RESTCONF based Management Authors : Kent Watsen Mikael Abrahamsson Filename : draft-ietf-netconf-zerotouch-10.txt Pages : 73 Date : 2016-10-31 Abstract: This draft presents a secure technique for establishing a NETCONF or RESTCONF connection between a newly deployed device, configured with just its factory default settings, and its deployment specific network management system (NMS). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-zerotouch/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-netconf-zerotouch-10 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-zerotouch-10 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 31 12:53:24 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED45D129A94 for ; Mon, 31 Oct 2016 12:53:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BfM0DvVJLeBw for ; Mon, 31 Oct 2016 12:53:09 -0700 (PDT) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0093.outbound.protection.outlook.com [104.47.41.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19583129AA2 for ; Mon, 31 Oct 2016 12:53:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=UJKg5C1XoGJgNSc8mobxc3JdXxtL5B1iHmaG306txg4=; b=j7ZogZZySCv2h5JWzUHmPe2843juc3OUcQpE29n/dNeEufNXqJRpgKAxKXQPTH6UQ/5zn5fWoP+mz8kHv1O9FgHEuA9MycECkTyOqE/ig32+v8CAkbaVvJid+IRQTjYe+134wbWkKsbsvGrGLks6vFMBBYdT24WDamWZXrDdScc= Received: from SN1PR0501CA0020.namprd05.prod.outlook.com (10.163.126.158) by BY1PR0501MB1336.namprd05.prod.outlook.com (10.160.200.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.7; Mon, 31 Oct 2016 19:53:06 +0000 Received: from BN1BFFO11FD002.protection.gbl (2a01:111:f400:7c10::1:115) by SN1PR0501CA0020.outlook.office365.com (2a01:111:e400:52fe::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.707.1 via Frontend Transport; Mon, 31 Oct 2016 19:53:05 +0000 Authentication-Results: spf=softfail (sender IP is 66.129.239.19) smtp.mailfrom=juniper.net; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.19 as permitted sender) Received: from P-EMFE01C-SAC.jnpr.net (66.129.239.19) by BN1BFFO11FD002.mail.protection.outlook.com (10.58.144.65) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.693.6 via Frontend Transport; Mon, 31 Oct 2016 19:53:04 +0000 Received: from p-mailhub01.juniper.net (10.160.2.17) by P-EMFE01C-SAC.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Mon, 31 Oct 2016 12:53:03 -0700 Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by p-mailhub01.juniper.net (8.14.4/8.11.3) with ESMTP id u9VJr2jj014713 for ; Mon, 31 Oct 2016 12:53:03 -0700 (envelope-from phil@juniper.net) Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.14.4/8.14.3) with ESMTP id u9VJmx7n002524 for ; Mon, 31 Oct 2016 15:48:59 -0400 (EDT) (envelope-from phil@idle.juniper.net) Message-ID: <201610311948.u9VJmx7n002524@idle.juniper.net> To: In-Reply-To: <147794174155.23181.3401905038297464371.idtracker@ietfa.amsl.com> Date: Mon, 31 Oct 2016 15:48:59 -0400 From: Phil Shafer MIME-Version: 1.0 Content-Type: text/plain X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-Forefront-Antispam-Report: CIP:66.129.239.19; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(7916002)(2980300002)(189002)(199003)(189998001)(230783001)(5660300001)(92566002)(2810700001)(110136003)(7696004)(50466002)(48376002)(558084003)(77096005)(5003940100001)(105596002)(2950100002)(106466001)(107886002)(7126002)(87936001)(450100001)(15650500001)(6916009)(626004)(53416004)(76506005)(54356999)(50986999)(8276002)(8676002)(586003)(1076002)(2351001)(47776003)(81166006)(81156014)(68736007)(11100500001)(19580395003)(8936002)(69596002)(7846002)(356003)(97736004)(86362001)(19580405001)(305945005)(2906002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1336; H:P-EMFE01C-SAC.jnpr.net; FPR:; SPF:SoftFail; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BN1BFFO11FD002; 1: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 X-MS-Office365-Filtering-Correlation-Id: c120ff63-fd3d-458e-3155-08d401c787b5 X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1336; 2:LiT0glRA/d3VdujGdNYvw9k0yBJhBiB3YKcjsLH+9toohKSE2rvXO1OR3gMrkxTgE7a/lGhdVIYKEpUwRFK7mGxWhrPpGderCnTXkXtNkC0veVx2B/v8xf8z1HYAkEtZn0f96/G3qyVD/JcMUfqaI6KC9LSloFrvutT0iMFMjHd9HyHaoItJOZpXHITBUslYdkvgceNgeU9Hd15zVwGE8w==; 3:UMVCSKO2ZQUA7CkPBlWw6VTmVo4ac5ehFaKSV7VNuQkhH4XCcLxMEzb+sb2bBed4ETBVqor/GFfYElHpausppi7TzBueSJ9SdRDCW/zWFh3SWliCE7FfFknQACWM7CvJd+54rQMICBnW3cuGQIuiJ2Hl6lVO2IN9VLY42yb27pxzWt9/sMzWiqnkUm43ybv/NV3v/ImqLCbVYlFzgBagaQ7TRiuoP54S+/it4jgHAU23NGtH9N0z47+AcIYbTjJb; 25:FlkpSPiaald73w3aAqlMAz/Szn1af4AGiY4CnDmirr/58vaothWJ4YIlV38hvozA14+T/AcO6DDJAnirDHpVP0obeCmf0UI02zeK8Lp0sZ71uHM2rv5epkv7oeP4LtOjwglJMdG+q+y3MTUQGwWjLDi2Ze5KZdaUSgeiOl4s+WOo+Qt4KfRWknQ7DlP2Vsg4QWUaNNbjFOC2Urif5RIZMzIhFVu+UO+9CpKTx1m+Mtt6fIGF+aOmaeEHuEgSiV9cMs5YSgTxSgNGU7CNHcE/oGrYeIJfIJSFU8Y9T9eyJWSj8FW4qR+kaHWWZ2aO2egas1Qwm6FCGSdlA9peLaljtfWh3BkMA/x7BTwLcytpnAYUEDUyOfhieLJVoRGO8nfbHRom6XSF5gp+Y4DqTMFYKY54rFcgn/hYu2qSDGL6VDy1zSs6G8hxZtOtUIU/NQAS X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1336; X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1336; 31:I7jhD6Qtvks/oaV6977d1ibbmKdNzwZ+hW4yuaixvksceMTXNi2L4ZT4gFMRSmY+8ZT6ExbvQ8/LSAVKtVNM054skT/6STEwqhZlzVr3vpYQ/KSbNkA0vZ5QtgiHUn12aLPP5ZMot4TiyO5L/q/hNwZwdL5BfN1lPIMwCxgSVunyyz2+btjcUwdppySG6JS4CIySOW9X4JX26rtJ+E0NryPw65eoFPr305dmAAKTVhcMB14UxYZul1NJm8I16ygc; 20:/Mo4oxUoTSXaFxFFF9RC77XWqGkgV9mE2NPbPb320PNjQbzvcNkj7M3wf2a4wflj/oMW5AyLyA/FZEGu0mF7eLCvUB3VB5EFJob3UrcWsRrho0fZJtTCrJpqNTiHTwCPj2tNJNY6O5dtDx2SV0nXgKs9kQIcUx/jy3xUfFfUG6apcTkFB539bxaRnoaQjbboSOJmyBJJgcaRTqriEHxsGDi3y1/DzY7zsvSYldTcKryWDiNC1JpUZv9HMPkqZD/6VnY38n/p4N8MNDZ5+l3KLXx9Imce6tE0n2dGiospsjWKuEnA4LV86BBi0YI9JlmfYdbI/WHJnlDfnBNfR2SbbMXNkRFFGxS2E0/tOknK0+EU934uujbqD/hO4wp1bHDXlSDbPI3ou1uCu69hfzRWGvcvaznQitM2B+f3Zjk4WrIyhz0mtLymclqFamYHHRwoHq+D+QZgbAP7Rc8gnKbeeVShnhysC8dNLLWZAjHTtXfyZq3LZu6Os7q1s+C3eo/b X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(13015025)(13023025)(13018025)(5005006)(13017025)(8121501046)(13024025)(10201501046)(3002001)(6055026); SRVR:BY1PR0501MB1336; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1336; X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1336; 4: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 X-Forefront-PRVS: 01128BA907 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BY1PR0501MB1336; 23:inTXabKWoMxQUd7vVp284yg2+eQV2Ax7Z0ScERf?= =?us-ascii?Q?mE50zEpvEjX7HhAiN7Gls1Jx+mHAxyGdUXxs5rRTnHZ9T02gn0GGp938uxqj?= =?us-ascii?Q?02ff1TdL2+B/EYaaE1uZejRIK0KTmqr0hYuHD6gndKEkq3oykhskL2Ih4MOP?= =?us-ascii?Q?ZCCBlsr0s8obPr4BZVwvO7hRDq7MpsIeyQMaANtl+MWTQlApcmIQGM8CkQHU?= =?us-ascii?Q?SjZb+WiunajXMgu2ZYG2hFnItSoYwdAP50riJbla995h86LhL1PSlkcBqx9T?= =?us-ascii?Q?p+mEcVipXKLkIY7vHu735E9Z6CmYeHCkLBFj/R9h04xmZoF+XiVZ6d1ke3It?= =?us-ascii?Q?bsGnPXp4ChaOBmRTdGmdIOOIhdiXgYJoqQIOXSLy68BzPj4HxQ9VWmpYQ1EP?= =?us-ascii?Q?WaVvsafqnF505+vTJicGO5QcXnpzLfTxlycObuMxFy2mGpJVCc7J+WkdFlBK?= =?us-ascii?Q?45fDw1phmp7m0vTTkLWX8Pfa3zBM2Qq05rS1k4lw/YDFrs6HJXCvcskefhCC?= =?us-ascii?Q?sMoPL2kZotiTkQlTcIqvLx4HPTYn5Z4HZvS7sOhAvBEFD0hwSe9//UdW921e?= =?us-ascii?Q?xqaHc9JhI+7OYqfEI2hj3AbNaCc6rGvnVarDx5L7KPeLGxPk4VMOReFruACf?= =?us-ascii?Q?EeVtyk6Si+C0l92ST89ATBemZfVeJj5P0ngbxA+mIYMuoHWHUQBIhMh4a9uO?= =?us-ascii?Q?gn/Ala2624EzyhkIwRXOw/0swOUzaPunwFa2+qwOFDbxKP0Gq2vNMo9F1eiE?= =?us-ascii?Q?WwPyD2jbC/+bp9Cw70KQvkYgphdeculhygk6lqIZ/vA1zsd8k86Mqgtw5PEu?= =?us-ascii?Q?gC9wfpMejf6i96OvQpHywijLw4NscBGqs4MPbCKxfEuE7cS6XiGrpH9P5akU?= =?us-ascii?Q?5+P9XmzoT0IznVUP495JWt/NQ6kJ0V27MrrmSPnNrCnP7hsMe3K8vDDXJ9+M?= =?us-ascii?Q?aeKc+kl9+HB8PJ490M9C3WXFYc/QM9rlXYCUAfz09ekE8BZHsBx/vqeB8DM9?= =?us-ascii?Q?USLH/3VzR2T1bQog2jWX29EjG7pJdFl1vK/OH6lrJycoEd6Ik3K3WTQ76vqX?= =?us-ascii?Q?TxJxVBMycfEEHRew9prgEJxHkoaNqfhOWaT3UYDMC4tZpkL5FnXtkJWHgyvx?= =?us-ascii?Q?/lzCV/EqAoS/pzYK+cK9jUlAXY4dlLd8lRL0Rtwt66KQzQ4EfaQ/DgFKFn7T?= =?us-ascii?Q?i2YBnUqTDNX6ucli+VtYGErmueT//zb/Pt7D/n1MxFy8PM9UDCAASX0/swQ?= =?us-ascii?Q?=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1336; 6:SydQ2FTc7DwKlMxPxVCmBtPeREfohwIJujHqdBf0anewKKrByUKYgVPSzP3S93gAa0FggQdbac8SyNPqfft2x4sElzCMXVhs+uzfBM1BQatWwECczrOflAqkQMLU+mIgH2WBvTIoRXujRjfsPtuFvcjNkbjS3ydHCiZABGZfduvqrFDF+T9HCmCtW+rGdD8NMqzKN+E82dS9DuRzhGAwjRRCE6N/K+OOAx/WnFsDuAh7YkTs+1IDJEXUxyNVkPYH/o2/zCQBDQ4oL8zytmLeY+zTFMNArYWHVwql9/L3IgGgZTkneqifxm8pVo7C3o8dJ27gbzcWogjmOFBIc8J5pRdCkX/CJwmTeHc41+YhsL0=; 5:lLB+bgRFPnQeMvSaYe1dojhXVAkKxrTmFBdVyyuzCFwim16ACGee3npxknfThwaVCMeh1P2amSch8u3DHPtRdShItTrM5RD93nlb8fpyylCl/5YaYoJsZ58xHT5e5Jo2NXv0H2+3NYUCsmqPkGzD2+MHOxKWzZ2Tniyp1Su7V1E=; 24:eDn4T9+6k30OzzxV5O2lq4lRUZxFM/kuIvr6avuwQ3DZ2+Fc9uRTFDST9xzB5i7iM8ydkJB4k50KLkyXI4NkbmZZDVDsvH0FJiFTlQf9xxE= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1336; 7:6cqHriJZU5w4jaRpymacloVQOxks9Lc3Zi7atIjg7L8GmFA9Py/CssfNKe0l8crPEG5ljxNb1zQx/q1KDzOHwqENaf9HTIMJE7DW3BM3GH3SmIpB3jMeO6ksUoqtSqoS4VRkHMgtDKb3tXM2LsxlfiTmcJcEAXvrywtf5BEtmnRuvksdJbePrvRUHcEE8jftaqTpMDk4wKVmLK/BrcuuR5CLCupw7OJSg+H9I+678hCFkDTna/Nnq77pmuhnl3bjhgmyqGrS8sKReCJlAskVd3Ex7wLwNxdy/eL8urMmh5Wusjek4sYQXk3Yuq1W3qq+mlaj8oQBds6DNUeIjmYWs8qYJm2BD24bn1VwFhkHoDY= X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Oct 2016 19:53:04.6762 (UTC) X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.19]; Helo=[P-EMFE01C-SAC.jnpr.net] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1336 Archived-At: Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-netconf-event-notifications-01.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 19:53:11 -0000 internet-drafts@ietf.org writes: > Title : NETCONF Support for Event Notifications Should we stop saying "BEEP" WRT NETCONF? It's dead. As dead as a doornail. Thanks, Phil From nobody Mon Oct 31 15:16:11 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 746B41294A1; Mon, 31 Oct 2016 15:16:05 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.37.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147795216547.23253.14022509599094904144.idtracker@ietfa.amsl.com> Date: Mon, 31 Oct 2016 15:16:05 -0700 Archived-At: Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-11.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 22:16:05 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration of the IETF. Title : Zero Touch Provisioning for NETCONF or RESTCONF based Management Authors : Kent Watsen Mikael Abrahamsson Filename : draft-ietf-netconf-zerotouch-11.txt Pages : 73 Date : 2016-10-31 Abstract: This draft presents a secure technique for establishing a NETCONF or RESTCONF connection between a newly deployed device, configured with just its factory default settings, and its deployment specific network management system (NMS). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-zerotouch/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-netconf-zerotouch-11 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-zerotouch-11 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 31 15:23:37 2016 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 674DE129BA3 for ; Mon, 31 Oct 2016 15:23:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.922 X-Spam-Level: X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wZXv1MAyyrSw for ; Mon, 31 Oct 2016 15:23:25 -0700 (PDT) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0127.outbound.protection.outlook.com [104.47.40.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EAF5129B9C for ; Mon, 31 Oct 2016 15:23:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=wBwqMiXYZM3fGn0kpwzeawW3cLQB3d+JxN/vF5JIzt4=; b=WDso1ksz4Lq08Rf0uqm5gPrt2vl5MKrDuOCNwzIwL75Ji7jCxz/5YJiT4ktEzvcYSjLMsaivIM1j9X0AQ+tEpYQgz12nk/sU3E1lgZZT7fbB92ByhqnLI4u3JM3dW34MWKOX+XdlEVZxLcQt0X3T11DwK+J3CeU4HPUJImPkOnA= Received: from CY1PR0501MB1450.namprd05.prod.outlook.com (10.160.149.11) by CY1PR0501MB1450.namprd05.prod.outlook.com (10.160.149.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.707.1; Mon, 31 Oct 2016 22:23:24 +0000 Received: from CY1PR0501MB1450.namprd05.prod.outlook.com ([10.160.149.11]) by CY1PR0501MB1450.namprd05.prod.outlook.com ([10.160.149.11]) with mapi id 15.01.0707.004; Mon, 31 Oct 2016 22:23:24 +0000 From: Kent Watsen To: "netconf@ietf.org" Thread-Topic: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-11.txt Thread-Index: AQHSM8RpnuIx+b8XnUOxYi1/raF2Q6DC4DGA Date: Mon, 31 Oct 2016 22:23:24 +0000 Message-ID: <6D9BB892-62B7-4D9A-A846-B75712CFA2B4@juniper.net> References: <147795216547.23253.14022509599094904144.idtracker@ietfa.amsl.com> In-Reply-To: <147795216547.23253.14022509599094904144.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1b.0.161010 authentication-results: spf=none (sender IP is ) smtp.mailfrom=kwatsen@juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [96.231.191.4] x-ms-office365-filtering-correlation-id: 1859d5ed-4679-4858-ce71-08d401dc8797 x-microsoft-exchange-diagnostics: 1; CY1PR0501MB1450; 7:BfOnw8HuRkMehybEbSDV5eI3RufHsLLoOt844/nCVFyQpFmWvoSXBPT/ldH7E8y6gOlllhzA4WREBCoj9f1Nl8FSy+wFG0X4qRujgEyLFP4WCImBmNpKnwGmCIuJSCPDCwDt5KT1Nxejwvr0bcEpQpDxoEywkjVCmRYlCyOzYs43S1tFVKxQNHGEGD6qgDchaP50VCTYHzSYM0ECMDHaQ+Z3X2cLd2js+GMl11uvmjiCb1xay7YLDdEPL7fVbvQrbw5m2pi0N06Ex/TAyF8zjI36cpSjq8NqEvc0kiCkLdx46x+fY2twA1cKCdiIU7ECUTiqGbUXm7kktwg4Jnm4yYwiJfE79dchXejZUo9P1H4= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR0501MB1450; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(60795455431006)(158342451672863)(120809045254105)(17755550239193); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:CY1PR0501MB1450; BCL:0; PCL:0; RULEID:; SRVR:CY1PR0501MB1450; x-forefront-prvs: 01128BA907 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(189002)(377424004)(24454002)(377454003)(54534003)(101416001)(87936001)(105586002)(83716003)(99286002)(5640700001)(66066001)(8936002)(122556002)(5660300001)(68736007)(2351001)(230783001)(15975445007)(77096005)(106356001)(5002640100001)(106116001)(2950100002)(86362001)(2900100001)(92566002)(2501003)(33656002)(189998001)(6916009)(7846002)(10400500002)(3280700002)(11100500001)(8676002)(3660700001)(81156014)(81166006)(110136003)(36756003)(97736004)(7736002)(4001350100001)(3846002)(6116002)(102836003)(19580395003)(19580405001)(4001150100001)(450100001)(54356999)(76176999)(50986999)(107886002)(82746002)(305945005)(586003)(2906002)(1730700003)(83506001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR0501MB1450; H:CY1PR0501MB1450.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <8486734BF92C5D4EB052BBB7140145A4@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2016 22:23:24.3727 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR0501MB1450 Archived-At: Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-11.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 22:23:30 -0000 QWxsLA0KDQpTb3JyeSBhYm91dCByZXZ2aW5nIGl0IHR3aWNlLCBidXQgQmVub2l04oCZcyB2YWxp ZGF0aW9uIHRvb2wgbmFiYmVkIG15IGV2ZW4gYWZ0ZXIgaXQgd2FzIGNsZWFuIHBlciBgcHlhbmcg LS1pZXRmYCBhbmQgdGhlIGRhdGF0cmFja2VyIHN1Ym1pc3Npb24gdG9vbHMuDQoNClJlZ2FyZGxl c3MsIGhlcmXigJlzIHRoZSByZWxldmFudCBjaGFuZ2UgbG9nOg0KDQogICBvICBGYWN0b3JlZCBv d25lcnNoaXAgdm9jaGVyIGFuZCB2b3VjaGVyIHJldm9jYXRpb24gdG8gYSBzZXBhcmF0ZQ0KICAg ICAgZG9jdW1lbnQ6IGRyYWZ0LWt3YXRzZW4tbmV0Y29uZi12b3VjaGVyLiAoaXNzdWUgIzExKQ0K DQogICBvICBSZW1vdmVkIDxjb25maWd1cmF0aW9uLWhhbmRsaW5nPiBvcHRpb25zICdlZGl0LWNv bmZpZycgYW5kIHlhbmctDQogICAgICBwYXRjaCcuIChpc3N1ZSAjMTIpDQoNCiAgIG8gIERlZmlu ZWQgaG93IGEgc2lnbmF0dXJlIG92ZXIgc2lnbmVkLWRhdGEgcmV0dXJuZWQgZnJvbSBhIGJvb3Rz dHJhcA0KICAgICAgc2VydmVyIGlzIHByb2Nlc3NlZC4gKGlzc3VlICMxMykNCg0KICAgbyAgQWRk ZWQgcmVjb21tZW5kYXRpb24gZm9yIHJlbW92YWJsZSBzdG9yYWdlIGRldmljZXMgdG8gdXNlIG9w ZW4vDQogICAgICBzdGFuZGFyZCBmaWxlIHN5c3RlbXMgd2hlbiBwb3NzaWJsZS4gIChpc3N1ZSAj MTQpDQoNCiAgIG8gIFJlcGxhY2VkIG5vdGlmaWNhdGlvbnMgInNjcmlwdC1bd2FybmluZy9lcnJv cl0iIHdpdGggIltwcmUvcG9zdF0tDQogICAgICBzY3JpcHQtW3dhcm5pbmcvZXJyb3JdIi4gKGdv ZXMgd2l0aCBpc3N1ZSAjMTUpDQoNCiAgIG8gIHN3aXRjaGVkIG93bmVyLWNlcnRpZmljYXRlIHRv IGJlIGVuY29kZWQgdXNpbmcgdGhlIHBrY3MjNyBmb3JtYXQuDQogICAgICAoaXNzdWUgIzE2KQ0K DQogICBvICBSZXBsYWNlZCBtZDUvc2hhMSB3aXRoIHNoYTI1NiBpbnNpZGUgYSBjaG9pY2Ugc3Rh dGVtZW50LCBmb3INCiAgICAgIGZ1dHVyZSBleHRlbnNpYmlsaXR5LiAoaXNzdWUgIzE3KQ0KDQog ICBvICBBIHRvbiBvZiBlZGl0b3JpYWwgY2hhbmdlcywgYXMgSSB3ZW50IHRocnUgdGhlIGVudGly ZSBkcmFmdCB3aXRoIGENCiAgICAgIGZpbmUtdG9vdGhlZCBjb21iLg0KDQoNCkFuZCBoZXJl4oCZ cyBhIGxpbmsgdG8gdGhlIHJlZmVyZW5jZWQgdm91Y2hlciBkcmFmdCwgYWxzbyBqdXN0IHN1Ym1p dHRlZA0KdG9kYXk6IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rd2F0c2VuLW5l dGNvbmYtdm91Y2hlci0wMA0KDQoNClRoYW5rcywNCktlbnQNCg0KDQoNCk9uIDEwLzMxLzE2LCA2 OjE2IFBNLCAiTmV0Y29uZiBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiA8 bmV0Y29uZi1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0 Zi5vcmc+IHdyb3RlOg0KDQoNCkEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9t IHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0cyBkaXJlY3Rvcmllcy4NClRoaXMgZHJhZnQgaXMg YSB3b3JrIGl0ZW0gb2YgdGhlIE5ldHdvcmsgQ29uZmlndXJhdGlvbiBvZiB0aGUgSUVURi4NCg0K ICAgICAgICBUaXRsZSAgICAgICAgICAgOiBaZXJvIFRvdWNoIFByb3Zpc2lvbmluZyBmb3IgTkVU Q09ORiBvciBSRVNUQ09ORiBiYXNlZCBNYW5hZ2VtZW50DQogICAgICAgIEF1dGhvcnMgICAgICAg ICA6IEtlbnQgV2F0c2VuDQogICAgICAgICAgICAgICAgICAgICAgICAgIE1pa2FlbCBBYnJhaGFt c3Nvbg0KCUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtbmV0Y29uZi16ZXJvdG91Y2gtMTEu dHh0DQoJUGFnZXMgICAgICAgICAgIDogNzMNCglEYXRlICAgICAgICAgICAgOiAyMDE2LTEwLTMx DQoNCkFic3RyYWN0Og0KICAgVGhpcyBkcmFmdCBwcmVzZW50cyBhIHNlY3VyZSB0ZWNobmlxdWUg Zm9yIGVzdGFibGlzaGluZyBhIE5FVENPTkYgb3INCiAgIFJFU1RDT05GIGNvbm5lY3Rpb24gYmV0 d2VlbiBhIG5ld2x5IGRlcGxveWVkIGRldmljZSwgY29uZmlndXJlZCB3aXRoDQogICBqdXN0IGl0 cyBmYWN0b3J5IGRlZmF1bHQgc2V0dGluZ3MsIGFuZCBpdHMgZGVwbG95bWVudCBzcGVjaWZpYw0K ICAgbmV0d29yayBtYW5hZ2VtZW50IHN5c3RlbSAoTk1TKS4NCg0KDQpUaGUgSUVURiBkYXRhdHJh Y2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCmh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtbmV0Y29uZi16ZXJvdG91Y2gvDQoNClRoZXJlJ3MgYWxz byBhIGh0bWxpemVkIHZlcnNpb24gYXZhaWxhYmxlIGF0Og0KaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL2RyYWZ0LWlldGYtbmV0Y29uZi16ZXJvdG91Y2gtMTENCg0KQSBkaWZmIGZyb20gdGhl IHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Og0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcv cmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtbmV0Y29uZi16ZXJvdG91Y2gtMTENCg0KDQpQbGVhc2Ug bm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBv ZiBzdWJtaXNzaW9uDQp1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZh aWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KDQpJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZh aWxhYmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQpmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQt ZHJhZnRzLw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KTmV0Y29uZiBtYWlsaW5nIGxpc3QNCk5ldGNvbmZAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV0Y29uZg0KDQoNCg== From nobody Mon Oct 31 15:41:47 2016 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4829B127735; Mon, 31 Oct 2016 15:41:42 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.37.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147795370229.23169.6125095547586543590.idtracker@ietfa.amsl.com> Date: Mon, 31 Oct 2016 15:41:42 -0700 Archived-At: Cc: netconf@ietf.org Subject: [Netconf] I-D Action: draft-ietf-netconf-keystore-00.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.17 List-Id: Network Configuration WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Oct 2016 22:41:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration of the IETF. Title : Keystore Model Authors : Kent Watsen Gary Wu Filename : draft-ietf-netconf-keystore-00.txt Pages : 33 Date : 2016-10-31 Abstract: This document defines a YANG data module for a system-level keystore mechanism, that might be used to hold onto private keys and certificates that are trusted by the system advertising support for this module. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-keystore/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-netconf-keystore-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/