Diameter Network Access Server Application
draft-ietf-aaa-diameter-nasreq-17
Yes
(Randy Bush)
No Objection
(Alex Zinin)
(Bert Wijnen)
(Bill Fenner)
(Jon Peterson)
(Margaret Cullen)
(Russ Housley)
(Steven Bellovin)
(Thomas Narten)
Note: This ballot was opened for revision 17 and is now closed.
Allison Mankin Former IESG member
Yes
Yes
(2003-11-20)
Unknown
Just a comment: the mandatory to implement security provided by Diameter base could be more clearly stated.
Randy Bush Former IESG member
Yes
Yes
()
Unknown
Alex Zinin Former IESG member
No Objection
No Objection
()
Unknown
Bert Wijnen Former IESG member
No Objection
No Objection
()
Unknown
Bill Fenner Former IESG member
No Objection
No Objection
()
Unknown
Harald Alvestrand Former IESG member
No Objection
No Objection
(2003-11-19)
Unknown
Nit: LAT is defined, and heavily referred in the definition of attributes, but has no reference in the References. Should be fixed (informative reference). Nit: [UTF-8] is in the References, but is not referred to. UTF8String is used, however, so it's reasonable to have this as a reference. Doesn't need fixing. Does not show much thought about working in a multilingual environment, but this seems to be attempting to fit within existing practice rather than starting from scratch, so this is probably reasonable to let pass.
Jon Peterson Former IESG member
No Objection
No Objection
()
Unknown
Margaret Cullen Former IESG member
(was No Record, No Objection, No Record, No Objection)
No Objection
No Objection
()
Unknown
Ned Freed Former IESG member
No Objection
No Objection
(2003-11-19)
Unknown
Russ Housley Former IESG member
No Objection
No Objection
()
Unknown
Steven Bellovin Former IESG member
No Objection
No Objection
()
Unknown
Ted Hardie Former IESG member
No Objection
No Objection
(2003-10-28)
Unknown
Nit:
In section 7:
by a encapsulation method to a gateway---> by an encapsulation method
In section 7.5
The Tunnel-Server-Endpoint AVP (AVP Code 67) is of UTF8String--> of type UTF8String
In 9.1
If the RADIUS User-Password attribute is present, the password
must be unencrypted using the link's RADIUS shared secret. And
forwarded using Diameter security.
This could be read either as (unencrypt and forward encrypted password)
or (unencrypt, then forward unencrypted password). I'd suggest rephrasing
it so the second sentence reads: The unencrypted password should then
be forwarded using Diameter security.
IANA Considerations:
This document defines values in the namespaces that have created and
--->have been created and
Thomas Narten Former IESG member
No Objection
No Objection
()
Unknown