RE: : digest issue 11 closure (fwd)

"Nelson, David" <[email protected]>
Newsgroups gmane.ietf.aaa
Message-ID <2A5E4540D4D5934D9A1E7E0B0FDB2D690103229D@MAANDMBX2.ets.enterasys.com>
Miguel Garcia writes...

> So the point I want to make is that, due to the lack of grouped
> attributes in RADIUS, you do need translation rules in RADIUS in order
> to generate the appropriate HTTP/SIP digest header.

Why in RADIUS?  IMHO, the RADIUS protocol engine should not have to
understand the SIP server functions.  It would seem to me that this
function belongs in the "glue layer" code between the SIP server and the
RADIUS client.

While I agree that grouped AVPs are a nice feature of Diameter, they
don't in and of themselves obviate the need for "glue code" between the
RADIUS client and another layer that is using its services.  I suppose
that statement makes some assumptions on where you draw component
boundaries in your implementation, but my assumption is that a RADIUS
client implements the RADIUS protocol, and that various interface layers
marshal the attributes in and out of other protocol formats.

I think the *goal* of having "exception-less" RADIUS/Diameter gateways
is a good one.  If the gateway is always part of the Diameter [home]
server implementation, then it doesn't matter so much.  On the other
hand, if the gateway is a standalone function, or part of a RADIUS proxy
or Diameter proxy, then it may be significant issue.  The issue, of
course, is version synchronization.  If you add a new feature in your
RADIUS client and Diameter server, it might be nice to not need to also
version upgrade all of the gateways that exist somewhere in the proxy
server chain.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.