Subject: [radext] [Technical Errata Reported] RFC7542 (5462)

From: RFC Errata System <[email-masked]>
Date: Tue, 14 Aug 2018 06:16:50 -0700 (PDT)

The following errata report has been submitted for RFC7542,
"The Network Access Identifier".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata/eid5462

--------------------------------------
Type: Technical
Reported by: Alan DeKok <[email-masked]>

Section: 3

Original Text
-------------
The "utf8-realm" SHOULD be supplied by the "next hop" or "home"
system that also supplies the routing information necessary for
packets to reach the next hop.

Corrected Text
--------------
The "utf8-realm" SHOULD be supplied by the "next hop" or "home"
system that also supplies the routing information necessary for
packets to reach the next hop.

The final home system SHOULD validate the NAI in the received packet
against the list of Realms hosted by the home system.  If no match
is found, the request SHOULD be rejected.

Notes
-----
It doesn't explicitly say that home systems only authenticate users for their own realms.  It may help to have this stated explicitly.

Some text will also be added to draft-ietf-radext-coa-proxy in order to make this clearer.

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC7542 (draft-ietf-radext-nai-15)
--------------------------------------
Title               : The Network Access Identifier
Publication Date    : May 2015
Author(s)           : A. DeKok
Category            : PROPOSED STANDARD
Source              : RADIUS EXTensions
Area                : Operations and Management
Stream              : IETF
Verifying Party     : IESG