FreeRadius 2.2.1 + 3.0 and the updated dictionary.ukerna?
Sorry to bring this up, but it doesn't look like the JANET dictionary (dictionary.ukerna) has been updated with the updated GSS-* attribute Ids: ATTRIBUTE GSS-Acceptor-Service-Name 164 string ATTRIBUTE GSS-Acceptor-Host-Name 165 string ATTRIBUTE GSS-Acceptor-Service-Specific 166 string ATTRIBUTE GSS-Acceptor-Realm-Name 167 string Both in the master and the 2.x.x branch, the numbers are still all 128-131. AFAIK SAML-AAA-Assertion remains 132? I've cc:ed Sam Hartman in in case I'm horribly wrong. Is that intentional or... did someone just forget? :-) Just checking. Stefan Paetow Software Engineer +44 1235 778812 Diamond Light Source Ltd. Diamond House, Harwell Science and Innovation Campus Didcot, Oxfordshire, OX11 0DE -- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
On 18 Jul 2013, at 17:22, <stefan.paetow@diamond.ac.uk> wrote:
Sorry to bring this up, but it doesn't look like the JANET dictionary (dictionary.ukerna) has been updated with the updated GSS-* attribute Ids:
ATTRIBUTE GSS-Acceptor-Service-Name 164 string ATTRIBUTE GSS-Acceptor-Host-Name 165 string ATTRIBUTE GSS-Acceptor-Service-Specific 166 string ATTRIBUTE GSS-Acceptor-Realm-Name 167 string
Both in the master and the 2.x.x branch, the numbers are still all 128-131. AFAIK SAML-AAA-Assertion remains 132? I've cc:ed Sam Hartman in in case I'm horribly wrong.
Is that intentional or... did someone just forget? :-)
Did someone provide a pull request with the updated attribute numbers? Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
I think that says it all then. :-) I'll go and create one for you for both lines. S.
-----Original Message----- From: freeradius-devel- bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org [mailto:freeradius-devel- bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent: 18 July 2013 17:26 To: FreeRadius developers mailing list Cc: hartmans@painless-security.com Subject: Re: FreeRadius 2.2.1 + 3.0 and the updated dictionary.ukerna?
On 18 Jul 2013, at 17:22, <stefan.paetow@diamond.ac.uk> wrote:
Sorry to bring this up, but it doesn't look like the JANET dictionary (dictionary.ukerna) has been updated with the updated GSS-* attribute Ids:
ATTRIBUTE GSS-Acceptor-Service-Name 164 string ATTRIBUTE GSS-Acceptor-Host-Name 165 string ATTRIBUTE GSS-Acceptor-Service-Specific 166 string ATTRIBUTE GSS-Acceptor-Realm-Name 167 string
Both in the master and the 2.x.x branch, the numbers are still all 128-131. AFAIK SAML-AAA-Assertion remains 132? I've cc:ed Sam Hartman in in case I'm horribly wrong.
Is that intentional or... did someone just forget? :-)
Did someone provide a pull request with the updated attribute numbers?
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
IIRC, the GS attributes have been published in an RFC. They should therefore be in dictionary.rfc####, instead of the Janet dictionary. Sent from my iPhone On 2013-07-18, at 6:30 PM, <stefan.paetow@diamond.ac.uk> wrote:
I think that says it all then. :-)
I'll go and create one for you for both lines.
S.
-----Original Message----- From: freeradius-devel- bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org [mailto:freeradius-devel- bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent: 18 July 2013 17:26 To: FreeRadius developers mailing list Cc: hartmans@painless-security.com Subject: Re: FreeRadius 2.2.1 + 3.0 and the updated dictionary.ukerna?
On 18 Jul 2013, at 17:22, <stefan.paetow@diamond.ac.uk> wrote:
Sorry to bring this up, but it doesn't look like the JANET dictionary (dictionary.ukerna) has been updated with the updated GSS-* attribute Ids:
ATTRIBUTE GSS-Acceptor-Service-Name 164 string ATTRIBUTE GSS-Acceptor-Host-Name 165 string ATTRIBUTE GSS-Acceptor-Service-Specific 166 string ATTRIBUTE GSS-Acceptor-Realm-Name 167 string
Both in the master and the 2.x.x branch, the numbers are still all 128-131. AFAIK SAML-AAA-Assertion remains 132? I've cc:ed Sam Hartman in in case I'm horribly wrong.
Is that intentional or... did someone just forget? :-)
Did someone provide a pull request with the updated attribute numbers?
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Correct, which is why the pull request for 2.2.x contains the dictionary.iana file (as per the one in the master branch). The RFC does not have a number yet, so as per your previous work, I've stuck the updated attributes into dictionary.iana in the master branch. Feel free to roast me, I'm happy to correct what's not correct. Stefan > -----Original Message----- > From: freeradius-devel- > bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org > [mailto:freeradius-devel- > bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org] On Behalf Of > Alan DeKok > Sent: 18 July 2013 17:56 > To: FreeRadius developers mailing list > Subject: Re: FreeRadius 2.2.1 + 3.0 and the updated dictionary.ukerna? > > IIRC, the GS attributes have been published in an RFC. They should > therefore be in dictionary.rfc####, instead of the Janet dictionary. > > Sent from my iPhone > > On 2013-07-18, at 6:30 PM, <stefan.paetow@diamond.ac.uk> wrote: > > > I think that says it all then. :-) > > > > I'll go and create one for you for both lines. > > > > S. > > > > > >> -----Original Message----- > >> From: freeradius-devel- > >> bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org > >> [mailto:freeradius-devel- > >> bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org] On Behalf > >> bounces+Of > >> Arran Cudbard-Bell > >> Sent: 18 July 2013 17:26 > >> To: FreeRadius developers mailing list > >> Cc: hartmans@painless-security.com > >> Subject: Re: FreeRadius 2.2.1 + 3.0 and the updated > dictionary.ukerna? > >> > >> > >> On 18 Jul 2013, at 17:22, <stefan.paetow@diamond.ac.uk> wrote: > >> > >>> Sorry to bring this up, but it doesn't look like the JANET > >>> dictionary > >> (dictionary.ukerna) has been updated with the updated GSS-* > attribute > >> Ids: > >>> > >>> ATTRIBUTE GSS-Acceptor-Service-Name 164 string > >>> ATTRIBUTE GSS-Acceptor-Host-Name 165 string > >>> ATTRIBUTE GSS-Acceptor-Service-Specific 166 string > >>> ATTRIBUTE GSS-Acceptor-Realm-Name 167 string > >>> > >>> Both in the master and the 2.x.x branch, the numbers are still all > >> 128-131. AFAIK SAML-AAA-Assertion remains 132? I've cc:ed Sam > Hartman > >> in in case I'm horribly wrong. > >>> > >>> Is that intentional or... did someone just forget? :-) > >>> > >> > >> Did someone provide a pull request with the updated attribute > numbers? > >> > >> Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS > Development > >> Team > >> > >> - > >> List info/subscribe/unsubscribe? See > >> http://www.freeradius.org/list/devel.html > > > > -- > > This e-mail and any attachments may contain confidential, copyright > and or privileged material, and are for the use of the intended > addressee only. If you are not the intended addressee or an authorised > recipient of the addressee please notify us of receipt by returning the > e-mail and do not use, copy, retain, distribute or disclose the > information in or attached to the e-mail. > > Any opinions expressed within this e-mail are those of the individual > and not necessarily of Diamond Light Source Ltd. > > Diamond Light Source Ltd. cannot guarantee that this e-mail or any > attachments are free from viruses and we cannot accept liability for > any damage which you may sustain as a result of software viruses which > may be transmitted in or with the message. > > Diamond Light Source Limited (company no. 4375679). Registered in > > England and Wales with its registered office at Diamond House, > Harwell > > Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United > > Kingdom > > > > > > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/devel.html > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html -- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
stefan.paetow@diamond.ac.uk wrote:
Correct, which is why the pull request for 2.2.x contains the dictionary.iana file (as per the one in the master branch).
The RFC does not have a number yet, so as per your previous work, I've stuck the updated attributes into dictionary.iana in the master branch.
Then we should wait until the RFC is published. There's no sense in moving the attributes from the janet file to a temporary "iana" file.
Alrighty! I shall withdraw both pull requests until such time then. :-/ Stefan
-----Original Message----- From: freeradius-devel- bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org [mailto:freeradius-devel- bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 19 July 2013 07:19 To: FreeRadius developers mailing list Subject: Re: FreeRadius 2.2.1 + 3.0 and the updated dictionary.ukerna?
stefan.paetow@diamond.ac.uk wrote:
Correct, which is why the pull request for 2.2.x contains the dictionary.iana file (as per the one in the master branch).
The RFC does not have a number yet, so as per your previous work, I've stuck the updated attributes into dictionary.iana in the master branch.
Then we should wait until the RFC is published. There's no sense in moving the attributes from the janet file to a temporary "iana" file. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
Hi,
I think that says it all then. :-)
I'll go and create one for you for both lines.
I thought that the GSS values are now properly registered IANA values and therefore shouldnt be in dictionary.ukerna? ah yes, 164 GSS-Acceptor-Service-Name [RFC-ietf-abfab-gss-eap-09] 165 GSS-Acceptor-Host-Name [RFC-ietf-abfab-gss-eap-09] 166 GSS-Acceptor-Service-Specifics [RFC-ietf-abfab-gss-eap-09] 167 GSS-Acceptor-Realm-Name [RFC-ietf-abfab-gss-eap-09] http://www.iana.org/assignments/radius-types/radius-types.xhtml ...so that draft expires and is expected to be a number at some point...i think thats why I didnt do a pull request ...i didnt another dictionary RFC pull some time recently alan
You should have two pull requests. As per Alan Buxey's suggestion in https://www.jiscmail.ac.uk/cgi-bin/webadmin?A2=MOONSHOT-COMMUNITY;221a28ef.1... - I've added the updated attributes into dictionary.iana because the spec (draft-ietf-abfab-gss-eap-09) doesn't have a number yet. Looks like SAML-AAA-Assertion will need to remain in the .ukerna dictionary. Stefan
-----Original Message----- From: freeradius-devel- bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org [mailto:freeradius-devel- bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent: 18 July 2013 17:26 To: FreeRadius developers mailing list Cc: hartmans@painless-security.com Subject: Re: FreeRadius 2.2.1 + 3.0 and the updated dictionary.ukerna?
On 18 Jul 2013, at 17:22, <stefan.paetow@diamond.ac.uk> wrote:
Sorry to bring this up, but it doesn't look like the JANET dictionary (dictionary.ukerna) has been updated with the updated GSS-* attribute Ids:
ATTRIBUTE GSS-Acceptor-Service-Name 164 string ATTRIBUTE GSS-Acceptor-Host-Name 165 string ATTRIBUTE GSS-Acceptor-Service-Specific 166 string ATTRIBUTE GSS-Acceptor-Realm-Name 167 string
Both in the master and the 2.x.x branch, the numbers are still all 128-131. AFAIK SAML-AAA-Assertion remains 132? I've cc:ed Sam Hartman in in case I'm horribly wrong.
Is that intentional or... did someone just forget? :-)
Did someone provide a pull request with the updated attribute numbers?
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
Looks like SAML-AAA-Assertion will need to remain in the .ukerna dictionary.
Correct. Not for too much longer, hopefully. Josh. Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Arran Cudbard-Bell -
Josh Howlett -
stefan.paetow＠diamond.ac.uk