RE: PCELS draft

[email protected] Sun, 15 Feb 2004 18:51:37 -0600
Newsgroups gmane.ietf.policy
Message-ID <[email protected]>
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C3F427.0808936C
Content-Type: text/plain;
	charset="iso-8859-1"

Kurt,

Agreed. The next revision of PCELS will include changes to address all the
issues that you have identified. Thank you for taking the time to explain
these issues in detail.

Mircea.

> -----Original Message-----
> From: Kurt D. Zeilenga [mailto:[email protected]]
> Sent: Tuesday, February 10, 2004 6:57 PM
> To: [email protected]
> Cc: [email protected]
> Subject: RE: PCELS draft
> 
> 
> My point with 1) is that the I-D seems to be overly reliant on
> formal language (RFC2252) description of the LDAP semantics.
> That is, for an attribute type such as 'pcelsIsMirrored',
> you should, in addition to providing the formal language
> description, you should describe the LDAP semantics.  For
> instance:
>         The 'pcelsIsMirrored' attribute type is of syntax
>         BOOLEAN [X.680] and has an equality matching rule
>         of booleanMatch [ref].  Attributes of this type can
>         only have a single value.
> 
> That is, you should include supporting prose.
> 
> My point with 2) is that, it appears to me, that you were relying
> on comments within the formal language description to detail
> an implementation requirement.  I suggest you replace all DESC
> comments with something descriptive of the element (as oppose
> to describing a restriction upon the element).
> For instance, for pcelsIPHdrVersion,
>         DESC 'HdrIpVersion property'
> With 3), I think your suggested (in your second follow-up) is
> better than the current text.
> 
> With 4), note that 'pcelsPriority' is only one of many attribute
> types which are described as having defaults.  The issue (and
> resolution) is applicable to each.   I think a general statement,
> combined with removing any mention of defaults in DESC fields
> (or replacing the field as suggested in 2), likely can adequately
> resolve this issue.
> 
> With 5), I think you may also need to consider (if you haven't
> so already) whether the set/list is represented in a single value
> of the attribute or in multiple, if the latter, how implementations
> are to compose/decompose the PCIM_EXT value from/to its LDAP
> representation.
> 
> With 6, I am particular concerned that LDAP's matching semantics
> may not be compatible with the application needs.  For instance,
> pcelsIntegerList could contain multiple values each containing
> different representations of the same integer (because these 3
> and 03 are different directory strings).  Also, I'm concerned
> that the LDAP ordering matching rule may not meet the applications
> needs (as the ordering will be applied to their representations,
> not their abstract value).  As I am PCIM ignorant, I leave it
> you and others to determine if the application needs are met
> or not. However, you might want to make a general note to
> deployers of this that they cannot rely on LDAP syntaxes and
> rules being consistent with PCIM syntaxes and rules.
> 
> With 7, okay.
> 
> 
> 
> At 01:07 PM 2/9/2004, [email protected] wrote:
> >Kurt, 
> >
> >> -----Original Message----- 
> >> From: Kurt D. Zeilenga 
> [<mailto:[email protected]>mailto:[email protected]] 
> >[...] 
> >> 
> >> 1) I noticed a number of RFC 2252 schema definitions 
> >> (e.g., pcelsIsMirrored) not accompanied by prose which detailed 
> >> the schema element.  While an RFC 2252 schema definition should 
> >> be provided for each schema element, providing such should not 
> >> be viewed by itself to provide a complete technical 
> >> specification of the schema element.  The prose needs to detail 
> >> all aspects of the schema element, such as application syntax 
> >> and semantics, not covered in the RFC 2252 schema definition. 
> >> It is also good to echo aspects of the RFC 2252 schema definition 
> >> in the prose. 
> >
> >In the opening remarks for Section 5. we indicate that: 
> >"   The semantics for the policy information classes that are to be 
> >   mapped directly from the information model to an LDAP 
> representation 
> >   are detailed in [PCIM_EXT]. Consequently, this document 
> presents only 
> >   a brief reference to those semantics." 
> >In your opinion, is this not sufficient? Are you suggesting 
> that the we should duplicate some of the text from rfc3460? 
> >
> >> 
> >> 2) I noticed a number of places where the only description 
> >> of an application restriction upon the element (e.g., 
> >> pcelsIPHdrVersion) was in a comment field (e.g., DESC) in the 
> >> formal language (RFC2252) description of the element.  These 
> >> restrictions should be stated in prose. 
> >
> >The restrictions are fully documented by the information 
> model (rfc3460). Are you suggesting that we should re-state 
> their applicability to the LDAP Schema?
> >
> >> 
> >> 3) As application restrictions upon values are not enforced 
> >> by the directory, the specification should state how 
> >> applications are to behave if they find values in the 
> >> directory which, per the application restrictions, are 
> >> invalid.  For instance, how are applications to deal with 
> >> negative pcelsPriority values? 
> >
> >The last of the opening remarks for Section 5. (Note 5) 
> indicates that: 
> >" if a constraint is violated, then the 
> >   policy rule(s) /group(s) SHOULD be treated as being 
> disabled, meaning 
> >   that execution of the policy rule(s) /group(s) SHOULD be 
> stopped." 
> >Do you find this insufficient? 
> >
> >> 
> >> 4) I don't understand the meaning of pcelsPriority 
> >> DESC note that says: "Default value: 0".  Does this mean that 
> >> if pcelsPriority is not present in the entry, then the 
> >> application is to assume a 0 priority?   Also, since 
> >> pcelsPolicySetAssociation MUSTs pcelsPriority, when would 
> >> pcelsPriority need a default value? 
> >
> >Indeed, we have overlooked this detail. In the next revision 
> we will remove "Default value: 0" from the DESC if the 
> pcelsPriority attribute definition.
> >
> >>  I suggest you remove 
> >> these defaults from the DESC field and instead detail how 
> >> applications are to behave when an optional (MAY) attribute 
> >> is not present in the object. 
> >
> >All the default values defined in PCELS for LDAP attributes, 
> they are directly mapped from information model (rfc3460) 
> property defaults. I'm thinking of adding a general note on 
> default values for optional attributes to the opening remarks 
> in Section 5. Would that be acceptable?
> >
> >> 
> >> 5) I note that a number of attribute types are described as 
> >> holding "lists" while some are described as "unordered sets". 
> >> The term list implies an ordering of its members.  And, in 
> >> LDAP, all sets are unordered.  I suggest you always use the 
> >> term "set" or always use the term "unordered set" when 
> >> referring to values of a attribute type. 
> >
> >This was indeed poorly worded. The intention was to refer to 
> *sets* of values. (Unordered obviously.) We will fix this in 
> the next revision. However, PCELS defines several items with 
> "List" in the name. This is because of the names of the 
> corresponding information model items. I don't think that we 
> can change the names without creating confusion.
> >
> >> 
> >> 6) I note that a number of attributes of syntaxes/matching 
> >> rules which behave properly (ensure same value (in different 
> >> representations) is not stored twice, ensure matching of 
> >> different representations match) for the kinds of 
> >> application-restricted values placed in them.  For instance, 
> >> it seems a bit odd to use case ignore directory string 
> >> matching for IPv6 addresses. 
> >
> >I am not sure I understand what this issue is. For instance 
> the attribute pcelsIPv6AddrList is a DirectoryString and it 
> is mapped from a property defined by rfc3460 in section 
> 6.14.2. Among other things, this property can be a hostname 
> hence case insensitive. Is there anything wrong with that?
> >
> >> 
> >> 7) The I-D should detail delegations it makes under the OID 
> >> to be assigned by IANA.  That is, the x in IANA-ASSIGNED-OID.2.x 
> >> should be specified so that the RFC-Editor can simply replace 
> >> IANA-ASSIGNED-OID with the assigned OID throughout the I-D 
> >> to produce the RFC-to-be. 
> >
> >Since we might still see some minor changes to the set of 
> classes and attributes, the plan was to fill-in the numbers 
> after locking down the content but before advancing the 
> document to the next stage. 
> >
> >And last but not least, thanks a lot for revising this document 
> >
> >Thank you, 
> >Mircea. 
> >
> >> 
> >> -- Kurt 
> >> 
> 

------_=_NextPart_001_01C3F427.0808936C
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2657.73">
<TITLE>RE: PCELS draft</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>Kurt,</FONT>
</P>

<P><FONT SIZE=3D2>Agreed. The next revision of PCELS will include =
changes to address all the issues that you have identified. Thank you =
for taking the time to explain these issues in detail.</FONT></P>

<P><FONT SIZE=3D2>Mircea.</FONT>
</P>

<P><FONT SIZE=3D2>&gt; -----Original Message-----</FONT>
<BR><FONT SIZE=3D2>&gt; From: Kurt D. Zeilenga [<A =
HREF=3D"mailto:[email protected]">mailto:[email protected]</A>]</FONT>
<BR><FONT SIZE=3D2>&gt; Sent: Tuesday, February 10, 2004 6:57 PM</FONT>
<BR><FONT SIZE=3D2>&gt; To: [email protected]</FONT>
<BR><FONT SIZE=3D2>&gt; Cc: [email protected]</FONT>
<BR><FONT SIZE=3D2>&gt; Subject: RE: PCELS draft</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; My point with 1) is that the I-D seems to be =
overly reliant on</FONT>
<BR><FONT SIZE=3D2>&gt; formal language (RFC2252) description of the =
LDAP semantics.</FONT>
<BR><FONT SIZE=3D2>&gt; That is, for an attribute type such as =
'pcelsIsMirrored',</FONT>
<BR><FONT SIZE=3D2>&gt; you should, in addition to providing the formal =
language</FONT>
<BR><FONT SIZE=3D2>&gt; description, you should describe the LDAP =
semantics.&nbsp; For</FONT>
<BR><FONT SIZE=3D2>&gt; instance:</FONT>
<BR><FONT SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
The 'pcelsIsMirrored' attribute type is of syntax</FONT>
<BR><FONT SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
BOOLEAN [X.680] and has an equality matching rule</FONT>
<BR><FONT SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
of booleanMatch [ref].&nbsp; Attributes of this type can</FONT>
<BR><FONT SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
only have a single value.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; That is, you should include supporting =
prose.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; My point with 2) is that, it appears to me, =
that you were relying</FONT>
<BR><FONT SIZE=3D2>&gt; on comments within the formal language =
description to detail</FONT>
<BR><FONT SIZE=3D2>&gt; an implementation requirement.&nbsp; I suggest =
you replace all DESC</FONT>
<BR><FONT SIZE=3D2>&gt; comments with something descriptive of the =
element (as oppose</FONT>
<BR><FONT SIZE=3D2>&gt; to describing a restriction upon the =
element).</FONT>
<BR><FONT SIZE=3D2>&gt; For instance, for pcelsIPHdrVersion,</FONT>
<BR><FONT SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
DESC 'HdrIpVersion property'</FONT>
<BR><FONT SIZE=3D2>&gt; With 3), I think your suggested (in your second =
follow-up) is</FONT>
<BR><FONT SIZE=3D2>&gt; better than the current text.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; With 4), note that 'pcelsPriority' is only one =
of many attribute</FONT>
<BR><FONT SIZE=3D2>&gt; types which are described as having =
defaults.&nbsp; The issue (and</FONT>
<BR><FONT SIZE=3D2>&gt; resolution) is applicable to each.&nbsp;&nbsp; =
I think a general statement,</FONT>
<BR><FONT SIZE=3D2>&gt; combined with removing any mention of defaults =
in DESC fields</FONT>
<BR><FONT SIZE=3D2>&gt; (or replacing the field as suggested in 2), =
likely can adequately</FONT>
<BR><FONT SIZE=3D2>&gt; resolve this issue.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; With 5), I think you may also need to consider =
(if you haven't</FONT>
<BR><FONT SIZE=3D2>&gt; so already) whether the set/list is represented =
in a single value</FONT>
<BR><FONT SIZE=3D2>&gt; of the attribute or in multiple, if the latter, =
how implementations</FONT>
<BR><FONT SIZE=3D2>&gt; are to compose/decompose the PCIM_EXT value =
from/to its LDAP</FONT>
<BR><FONT SIZE=3D2>&gt; representation.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; With 6, I am particular concerned that LDAP's =
matching semantics</FONT>
<BR><FONT SIZE=3D2>&gt; may not be compatible with the application =
needs.&nbsp; For instance,</FONT>
<BR><FONT SIZE=3D2>&gt; pcelsIntegerList could contain multiple values =
each containing</FONT>
<BR><FONT SIZE=3D2>&gt; different representations of the same integer =
(because these 3</FONT>
<BR><FONT SIZE=3D2>&gt; and 03 are different directory strings).&nbsp; =
Also, I'm concerned</FONT>
<BR><FONT SIZE=3D2>&gt; that the LDAP ordering matching rule may not =
meet the applications</FONT>
<BR><FONT SIZE=3D2>&gt; needs (as the ordering will be applied to their =
representations,</FONT>
<BR><FONT SIZE=3D2>&gt; not their abstract value).&nbsp; As I am PCIM =
ignorant, I leave it</FONT>
<BR><FONT SIZE=3D2>&gt; you and others to determine if the application =
needs are met</FONT>
<BR><FONT SIZE=3D2>&gt; or not. However, you might want to make a =
general note to</FONT>
<BR><FONT SIZE=3D2>&gt; deployers of this that they cannot rely on LDAP =
syntaxes and</FONT>
<BR><FONT SIZE=3D2>&gt; rules being consistent with PCIM syntaxes and =
rules.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; With 7, okay.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; At 01:07 PM 2/9/2004, [email protected] =
wrote:</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;Kurt, </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; -----Original Message----- </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; From: Kurt D. Zeilenga </FONT>
<BR><FONT SIZE=3D2>&gt; [&lt;<A =
HREF=3D"mailto:[email protected]">mailto:[email protected]</A>&gt;<A =
HREF=3D"mailto:[email protected]">mailto:[email protected]</A>] </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;[...] </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; 1) I noticed a number of RFC 2252 =
schema definitions </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; (e.g., pcelsIsMirrored) not =
accompanied by prose which detailed </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; the schema element.&nbsp; While an RFC =
2252 schema definition should </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; be provided for each schema element, =
providing such should not </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; be viewed by itself to provide a =
complete technical </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; specification of the schema =
element.&nbsp; The prose needs to detail </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; all aspects of the schema element, =
such as application syntax </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; and semantics, not covered in the RFC =
2252 schema definition. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; It is also good to echo aspects of the =
RFC 2252 schema definition </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; in the prose. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;In the opening remarks for Section 5. we =
indicate that: </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&quot;&nbsp;&nbsp; The semantics for the =
policy information classes that are to be </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&nbsp;&nbsp; mapped directly from the =
information model to an LDAP </FONT>
<BR><FONT SIZE=3D2>&gt; representation </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&nbsp;&nbsp; are detailed in [PCIM_EXT]. =
Consequently, this document </FONT>
<BR><FONT SIZE=3D2>&gt; presents only </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&nbsp;&nbsp; a brief reference to those =
semantics.&quot; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;In your opinion, is this not sufficient? =
Are you suggesting </FONT>
<BR><FONT SIZE=3D2>&gt; that the we should duplicate some of the text =
from rfc3460? </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; 2) I noticed a number of places where =
the only description </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; of an application restriction upon the =
element (e.g., </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; pcelsIPHdrVersion) was in a comment =
field (e.g., DESC) in the </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; formal language (RFC2252) description =
of the element.&nbsp; These </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; restrictions should be stated in =
prose. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;The restrictions are fully documented by =
the information </FONT>
<BR><FONT SIZE=3D2>&gt; model (rfc3460). Are you suggesting that we =
should re-state </FONT>
<BR><FONT SIZE=3D2>&gt; their applicability to the LDAP Schema?</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; 3) As application restrictions upon =
values are not enforced </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; by the directory, the specification =
should state how </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; applications are to behave if they =
find values in the </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; directory which, per the application =
restrictions, are </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; invalid.&nbsp; For instance, how are =
applications to deal with </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; negative pcelsPriority values? </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;The last of the opening remarks for Section =
5. (Note 5) </FONT>
<BR><FONT SIZE=3D2>&gt; indicates that: </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&quot; if a constraint is violated, then =
the </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&nbsp;&nbsp; policy rule(s) /group(s) =
SHOULD be treated as being </FONT>
<BR><FONT SIZE=3D2>&gt; disabled, meaning </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&nbsp;&nbsp; that execution of the policy =
rule(s) /group(s) SHOULD be </FONT>
<BR><FONT SIZE=3D2>&gt; stopped.&quot; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;Do you find this insufficient? </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; 4) I don't understand the meaning of =
pcelsPriority </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; DESC note that says: &quot;Default =
value: 0&quot;.&nbsp; Does this mean that </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; if pcelsPriority is not present in the =
entry, then the </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; application is to assume a 0 =
priority?&nbsp;&nbsp; Also, since </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; pcelsPolicySetAssociation MUSTs =
pcelsPriority, when would </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; pcelsPriority need a default value? =
</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;Indeed, we have overlooked this detail. In =
the next revision </FONT>
<BR><FONT SIZE=3D2>&gt; we will remove &quot;Default value: 0&quot; =
from the DESC if the </FONT>
<BR><FONT SIZE=3D2>&gt; pcelsPriority attribute definition.</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt;&nbsp; I suggest you remove </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; these defaults from the DESC field and =
instead detail how </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; applications are to behave when an =
optional (MAY) attribute </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; is not present in the object. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;All the default values defined in PCELS for =
LDAP attributes, </FONT>
<BR><FONT SIZE=3D2>&gt; they are directly mapped from information model =
(rfc3460) </FONT>
<BR><FONT SIZE=3D2>&gt; property defaults. I'm thinking of adding a =
general note on </FONT>
<BR><FONT SIZE=3D2>&gt; default values for optional attributes to the =
opening remarks </FONT>
<BR><FONT SIZE=3D2>&gt; in Section 5. Would that be acceptable?</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; 5) I note that a number of attribute =
types are described as </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; holding &quot;lists&quot; while some =
are described as &quot;unordered sets&quot;. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; The term list implies an ordering of =
its members.&nbsp; And, in </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; LDAP, all sets are unordered.&nbsp; I =
suggest you always use the </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; term &quot;set&quot; or always use the =
term &quot;unordered set&quot; when </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; referring to values of a attribute =
type. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;This was indeed poorly worded. The =
intention was to refer to </FONT>
<BR><FONT SIZE=3D2>&gt; *sets* of values. (Unordered obviously.) We =
will fix this in </FONT>
<BR><FONT SIZE=3D2>&gt; the next revision. However, PCELS defines =
several items with </FONT>
<BR><FONT SIZE=3D2>&gt; &quot;List&quot; in the name. This is because =
of the names of the </FONT>
<BR><FONT SIZE=3D2>&gt; corresponding information model items. I don't =
think that we </FONT>
<BR><FONT SIZE=3D2>&gt; can change the names without creating =
confusion.</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; 6) I note that a number of attributes =
of syntaxes/matching </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; rules which behave properly (ensure =
same value (in different </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; representations) is not stored twice, =
ensure matching of </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; different representations match) for =
the kinds of </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; application-restricted values placed =
in them.&nbsp; For instance, </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; it seems a bit odd to use case ignore =
directory string </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; matching for IPv6 addresses. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;I am not sure I understand what this issue =
is. For instance </FONT>
<BR><FONT SIZE=3D2>&gt; the attribute pcelsIPv6AddrList is a =
DirectoryString and it </FONT>
<BR><FONT SIZE=3D2>&gt; is mapped from a property defined by rfc3460 in =
section </FONT>
<BR><FONT SIZE=3D2>&gt; 6.14.2. Among other things, this property can =
be a hostname </FONT>
<BR><FONT SIZE=3D2>&gt; hence case insensitive. Is there anything wrong =
with that?</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; 7) The I-D should detail delegations =
it makes under the OID </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; to be assigned by IANA.&nbsp; That is, =
the x in IANA-ASSIGNED-OID.2.x </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; should be specified so that the =
RFC-Editor can simply replace </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; IANA-ASSIGNED-OID with the assigned =
OID throughout the I-D </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; to produce the RFC-to-be. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;Since we might still see some minor changes =
to the set of </FONT>
<BR><FONT SIZE=3D2>&gt; classes and attributes, the plan was to fill-in =
the numbers </FONT>
<BR><FONT SIZE=3D2>&gt; after locking down the content but before =
advancing the </FONT>
<BR><FONT SIZE=3D2>&gt; document to the next stage. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;And last but not least, thanks a lot for =
revising this document </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;Thank you, </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;Mircea. </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; -- Kurt </FONT>
<BR><FONT SIZE=3D2>&gt; &gt;&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C3F427.0808936C--