Re: I-D Action: draft-ietf-krb-wg-kdc-model-12.txt

On Sun, 2012-06-03 at 12:23 +0200, Leif Johansson wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 05/30/2012 07:13 PM, Simo Sorce wrote:
> > On Wed, 2012-05-30 at 13:00 -0400, Sam Hartman wrote:
> >> I'd like to call the working group's attention to the new text 
> >> surrounding RFc 2119 language.  In particular in this draft,
> >> MUST features in the information model MUST be representable in
> >> schema *and* MUST be supported by all implementations of the
> >> information model.  That last was intended by Leif but was new to
> >> me.
> > 
> > Thanks for bringing this up Sam.
> > 
> > 
> > I am reading the doc now and I have a question as to why we have a
> > MUST on the syntax of attributes like principalNotUsedBefore.
> > 
> > It says it MUST use "Internet Date/Time Format from [RFC3339]"
> > 
> > This is problematic as LDAP uses generalizedTime defined in
> > RFC4517. It is a representation of ISO8061 just like RFC3339, but a
> > *different* representation.
> > 
> > Trying to force all implementations to use the RFC3339 definition
> > seem wrong. What implementation, today, uses RFC3339 ?
> > 
> > I would rather suggest that the document does not mandate the
> > specific representation discussed in RFC3339 but allow any ISO8601
> > based representation.
> > 
> > If it is felt that one representation really needs to be chosen
> > then I'd ask to use the generalizedTime representation as defined
> > by RFC4517 instead of the one in RFC3339.
> 
> 
> So this was a WG decision at the time. Maybe we should say "Internet
> Date/Time format MUST be based on ISO8601 and SHOULD be based on either
> RFC4517 or RFC3339".

That would probably work.

>  In practice the or doesn't result in interop issues
> since it is unlikely that an LDAP client be used to talk to a SOAP
> server :-)

Indeed.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg