Re: I-D Action: draft-ietf-krb-wg-kdc-model-12.txt

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/30/2012 07:13 PM, Simo Sorce wrote:
> On Wed, 2012-05-30 at 13:00 -0400, Sam Hartman wrote:
>> I'd like to call the working group's attention to the new text 
>> surrounding RFc 2119 language.  In particular in this draft,
>> MUST features in the information model MUST be representable in
>> schema *and* MUST be supported by all implementations of the
>> information model.  That last was intended by Leif but was new to
>> me.
> 
> Thanks for bringing this up Sam.
> 
> 
> I am reading the doc now and I have a question as to why we have a
> MUST on the syntax of attributes like principalNotUsedBefore.
> 
> It says it MUST use "Internet Date/Time Format from [RFC3339]"
> 
> This is problematic as LDAP uses generalizedTime defined in
> RFC4517. It is a representation of ISO8061 just like RFC3339, but a
> *different* representation.
> 
> Trying to force all implementations to use the RFC3339 definition
> seem wrong. What implementation, today, uses RFC3339 ?
> 
> I would rather suggest that the document does not mandate the
> specific representation discussed in RFC3339 but allow any ISO8601
> based representation.
> 
> If it is felt that one representation really needs to be chosen
> then I'd ask to use the generalizedTime representation as defined
> by RFC4517 instead of the one in RFC3339.


So this was a WG decision at the time. Maybe we should say "Internet
Date/Time format MUST be based on ISO8601 and SHOULD be based on either
RFC4517 or RFC3339". In practice the or doesn't result in interop issues
since it is unlikely that an LDAP client be used to talk to a SOAP
server :-)

	Cheers Leif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/LOyMACgkQ8Jx8FtbMZndMNQCgo39lJyoQRrkWweSEvRJBx/qb
l7QAnA5baef8RznhVoAV63QHRn+Aejkw
=PVjV
-----END PGP SIGNATURE-----
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg