From: netmod <[email protected]> on behalf of Ladislav Lhotka <[email protected]> Sent: 23 September 2020 15:28
Italo Busi <[email protected]> writes: > I have a follow-up question about this topic > > Considering the same identities defined below, what would be the valid values > the following references? > > leaf reference-1 { > type identityref { > base base-1; > } > description > "Reference to an identity #1."; > } > > leaf reference-2 { > type identityref { > base base-2; > } > description > "Reference to an identity #2."; > } > > My understanding, is that: > - valid values for the reference-1 would be 'a' and 'b' > - valid values for the reference-2 would be 'b' and 'c' > > Is my understanding correct? Yes, this should be pretty clear from sec. 9.10.2 of RFC 7950. <tp> Well, may be. I saw this come up some time ago and read RFC7950 and was unsure. It is 'derived from all' that gave me pause. With aa and bb as base, does that mean derived from aa and bb or derived from aa or bb? Should that be 'derived from any'? Tom Petch Lada > > Thanks, Italo > >> -----Original Message----- >> From: Ladislav Lhotka [mailto:[email protected]] >> Sent: lunedì 3 agosto 2020 10:45 >> To: Joey Boyd <[email protected]>; [email protected] >> Subject: Re: [netmod] identityref with multiple base statements >> >> Joey Boyd <[email protected]> writes: >> >> > Hi, >> > >> > I am looking for some clarification regarding RFC 7950 section 9.10.2, >> specifically this statement. >> > >> > Valid values for an identityref are any identities derived from all the >> identityref's base identities. >> > >> > Example: >> > >> > identity base-1 { >> > description >> > "Base identity #1."; >> > } >> > >> > identity base-2 { >> > description >> > "Base identity #2."; >> > } >> > >> > identity a { >> > base base-1; >> > description >> > "Identity A."; >> > } >> > >> > identity b { >> > base base-1; >> > base base-2; >> > description >> > "Identity B."; >> > } >> > >> > identity c { >> > base base-2; >> > description >> > "Identity C."; >> > } >> > >> > leaf reference { >> > type identityref { >> > base base-1; >> > base base-2; >> > } >> > description >> > "Reference to an identity."; >> > } >> > >> > The question is how to determine the value space for this identityref. >> > >> > Option #1: >> > The value space is any identity which is derived from both base identities. >> This means the only valid value in the example would be 'b'. >> > >> > Option #2: >> > The value space is any identity which is derived from either base identity. >> This means the valid values are 'a', 'b' and 'c'. >> > >> > The phrasing "...derived from all the identityref's base identities." >> > tends to >> point to Option #1 but I would like clarification on the intent. >> >> Yes, #1 is correct. >> >> Lada >> >> > >> > Best regards, >> > Joey >> > >> > _______________________________________________ >> > netmod mailing list >> > [email protected] >> > https://www.ietf.org/mailman/listinfo/netmod >> >> -- >> Ladislav Lhotka >> Head, CZ.NIC Labs >> PGP Key ID: 0xB8F92B08A9F76C67 >> > -- Ladislav Lhotka Head, CZ.NIC Labs PGP Key ID: 0xB8F92B08A9F76C67 _______________________________________________ netmod mailing list [email protected] https://www.ietf.org/mailman/listinfo/netmod _______________________________________________ netmod mailing list [email protected] https://www.ietf.org/mailman/listinfo/netmod
