Network Working Group                                  V. Kalusivalingam
Request for Comments: 3898         Cisco Systems (India) Private Limited
Category: Standards Track                                   October 2004
        
Network Working Group                                  V. Kalusivalingam
Request for Comments: 3898         Cisco Systems (India) Private Limited
Category: Standards Track                                   October 2004
        

Network Information Service (NIS) Configuration Options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6)

IPv6动态主机配置协议(DHCPv6)的网络信息服务(NIS)配置选项

Status of this Memo

本备忘录的状况

This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited.

本文件规定了互联网社区的互联网标准跟踪协议,并要求进行讨论和提出改进建议。有关本协议的标准化状态和状态,请参考当前版本的“互联网官方协议标准”(STD 1)。本备忘录的分发不受限制。

Copyright Notice

版权公告

Copyright (C) The Internet Society (2004).

版权所有(C)互联网协会(2004年)。

Abstract

摘要

This document describes four options for Network Information Service (NIS) related configuration information in Dynamic Host Configuration Protocol for IPv6 (DHCPv6): NIS Servers, NIS+ Servers, NIS Client Domain Name, NIS+ Client Domain name.

本文档介绍了IPv6动态主机配置协议(DHCPv6)中与网络信息服务(NIS)相关的配置信息的四个选项:NIS服务器、NIS+服务器、NIS客户端域名、NIS+客户端域名。

1. Introduction
1. 介绍

This document describes four options for passing configuration information related to Network Information Service (NIS) [3] in DHCPv6 (RFC 3315 [1]).

本文档描述了在DHCPv6(RFC 3315[1])中传递与网络信息服务(NIS)[3]相关的配置信息的四个选项。

The options defined in this document can only be used to configure information about NIS servers that can be reached using IPv6. The DHCP option to configure information about IPv4 NIS servers can be found in RFC 2132 [4]. Mechanisms for configuring IPv4/IPv6 dual-stack applications are being considered, but are not specified in this document.

本文档中定义的选项只能用于配置有关使用IPv6可以访问的NIS服务器的信息。配置IPv4 NIS服务器信息的DHCP选项可在RFC 2132[4]中找到。正在考虑配置IPv4/IPv6双栈应用程序的机制,但本文档中未指定。

2. Terminology
2. 术语

The key words MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD, SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL in this document are to be interpreted as described in BCP 14, RFC 2119 [2].

本文件中的关键词必须、不得、要求、应、不应、应、不应、建议、可和可选应按照BCP 14、RFC 2119[2]中的描述进行解释。

Throughout this document, unless otherwise specified, the acronym DHCP refers to DHCP as specified in RFC 3315.

在本文件中,除非另有规定,否则首字母缩写DHCP指RFC 3315中规定的DHCP。

This document uses terminology specific to IPv6 and DHCP as defined in section "Terminology" of RFC 3315.

本文档使用RFC 3315“术语”一节中定义的IPv6和DHCP专用术语。

3. Network Information Service (NIS) Servers Option
3. 网络信息服务(NIS)服务器选项

The Network Information Service (NIS) Servers option provides a list of one or more IPv6 addresses of NIS servers available to the client. Clients MUST treat the list of NIS servers as an ordered list. The server MAY list the NIS servers in the order of preference.

网络信息服务(NIS)服务器选项提供客户端可用的NIS服务器的一个或多个IPv6地址列表。客户端必须将NIS服务器列表视为有序列表。服务器可以按照首选顺序列出NIS服务器。

The format of the Network Information Service Servers option is as shown below:

网络信息服务服务器选项的格式如下所示:

    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      OPTION_NIS_SERVERS       |         option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                   NIS server (IPv6 address)                   |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                   NIS server (IPv6 address)                   |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
        
    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      OPTION_NIS_SERVERS       |         option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                   NIS server (IPv6 address)                   |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                   NIS server (IPv6 address)                   |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
        

option-code: OPTION_NIS_SERVERS (27)

选项代码:选项NIS服务器(27)

option-len: Length of the 'NIS server' fields in octets; It must be a multiple of 16

选项len:“NIS服务器”字段的长度(以八位字节为单位);它必须是16的倍数

NIS server: IPv6 address of NIS server

NIS服务器:NIS服务器的IPv6地址

4. Network Information Service V2 (NIS+) Servers Option
4. 网络信息服务V2(NIS+)服务器选项

The Network Information Service V2 (NIS+) Servers option provides a list of one or more IPv6 addresses of NIS+ servers available to the client. Clients MUST treat the list of NIS+ servers as an ordered list. The server MAY list the NIS+ servers in the order of preference.

网络信息服务V2(NIS+)服务器选项提供了客户端可用的NIS+服务器的一个或多个IPv6地址列表。客户端必须将NIS+服务器列表视为有序列表。服务器可以按照首选顺序列出NIS+服务器。

The format of the Network Information Service V2 (NIS+) Servers option is as shown below:

网络信息服务V2(NIS+)服务器选项的格式如下所示:

    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      OPTION_NISP_SERVERS      |         option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                   NIS+ server (IPv6 address)                  |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                   NIS+ server (IPv6 address)                  |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
        
    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      OPTION_NISP_SERVERS      |         option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                   NIS+ server (IPv6 address)                  |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                   NIS+ server (IPv6 address)                  |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
        

option-code: OPTION_NISP_SERVERS (28)

选项代码:选项NISP服务器(28)

option-len: Length of the 'NIS+ server' fields in octets; It must be a multiple of 16

选项len:“NIS+服务器”字段的长度(以八位字节为单位);它必须是16的倍数

   NIS+ server: IPv6 address of NIS+ server
        
   NIS+ server: IPv6 address of NIS+ server
        
5. Network Information Service (NIS) Domain Name Option
5. 网络信息服务(NIS)域名选项

The Network Information Service (NIS) Domain Name option is used by the server to convey client's NIS Domain Name info to the client.

服务器使用网络信息服务(NIS)域名选项将客户端的NIS域名信息传递给客户端。

The format of the NIS Domain Name option is as shown below:

NIS域名选项的格式如下所示:

    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |    OPTION_NIS_DOMAIN_NAME     |         option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                       nis-domain-name                         |
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
        
    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |    OPTION_NIS_DOMAIN_NAME     |         option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                       nis-domain-name                         |
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
        

option-code: OPTION_NIS_DOMAIN_NAME (29)

选项代码:选项名称(29)

option-len: Length of the 'nis-domain-name' field in octets

选项len:“nis域名”字段的长度(以八位字节为单位)

nis-domain-name: NIS Domain name for client

nis域名:客户端的nis域名

The 'nis-domain-name' MUST be encoded as specified in section "Representation and Use of domain names" of the DHCPv6 specification [1].

“nis域名”必须按照DHCPv6规范[1]中“域名的表示和使用”部分的规定进行编码。

6. Network Information Service V2 (NIS+) Domain Name Option
6. 网络信息服务V2(NIS+)域名选项

The Network Information Service V2 (NIS+) Domain Name option is used by the server to convey client's NIS+ Domain Name info to the client.

服务器使用网络信息服务V2(NIS+)域名选项将客户端的NIS+域名信息传送给客户端。

The format of the NIS+ Domain Name option is as shown below:

NIS+域名选项的格式如下所示:

    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |    OPTION_NISP_DOMAIN_NAME    |         option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                       nisp-domain-name                        |
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
        
    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |    OPTION_NISP_DOMAIN_NAME    |         option-len            |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                       nisp-domain-name                        |
   |                              ...                              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
        

option-code: OPTION_NISP_DOMAIN_NAME (30)

选项代码:选项NISP域名(30)

option-len: Length of the 'nisp-domain-name' field in octets

选项len:“nisp域名”字段的长度(以八位字节为单位)

nisp-domain-name: NIS+ Domain name for client

nisp域名:NIS+客户端域名

The 'nisp-domain-name' MUST be encoded as specified in section "Representation and Use of domain names" of the DHCPv6 specification [1].

“nisp域名”必须按照DHCPv6规范[1]中“域名的表示和使用”一节的规定进行编码。

7. Appearance of these Options
7. 这些选项的外观

The NIS servers, NIS+ servers, NIS domain name and NIS+ domain name options MUST NOT appear in other than the following messages: Solicit, Advertise, Request, Renew, Rebind, Information-Request and Reply.

除以下消息外,NIS服务器、NIS+服务器、NIS域名和NIS+域名选项不得出现在其他消息中:请求、播发、请求、续订、重新绑定、信息请求和回复。

The option number for these options MAY appear in the Option Request Option [1] in the following messages: Solicit, Request, Renew, Rebind, Information-Request and Reconfigure.

这些选项的选项号可能出现在以下消息的选项请求选项[1]中:请求、请求、续订、重新绑定、信息请求和重新配置。

8. Security Considerations
8. 安全考虑

The NIS servers, NIS+ servers, NIS domain name and NIS+ domain name options may be used by an intruder DHCPv6 server to assign invalid NIS parameters, resulting in clients unable to use NIS service.

入侵者DHCPv6服务器可能会使用NIS服务器、NIS+服务器、NIS域名和NIS+域名选项来分配无效的NIS参数,从而导致客户端无法使用NIS服务。

The NIS servers and NIS+ servers options may be used by an intruder DHCPv6 server to cause the DHCPv6 clients to send their queries to an intruder NIS/NIS+ server. This misdirected searches may be used to spoof NIS/NIS+ names.

入侵者DHCPv6服务器可能会使用NIS服务器和NIS+服务器选项,使DHCPv6客户端将其查询发送到入侵者NIS/NIS+服务器。这种定向错误的搜索可能用于欺骗NIS/NIS+名称。

The NIS domain name and NIS+ domain name options may be used by an intruder DHCPv6 server to cause the DHCPv6 clients to search through invalid domains for incompletely specified domain names. The results of these misdirected searches may be used to spoof NIS/NIS+ names.

入侵者DHCPv6服务器可能会使用NIS域名和NIS+域名选项,使DHCPv6客户端在无效域中搜索未完全指定的域名。这些定向错误的搜索结果可能被用来伪造NIS/NIS+名称。

To avoid attacks through these options, the DHCPv6 client SHOULD use authenticated DHCP (see section "Authentication of DHCP messages" in the DHCPv6 specification [1]).

为了避免通过这些选项进行攻击,DHCPv6客户端应使用经过身份验证的DHCP(请参阅DHCPv6规范[1]中的“DHCP消息的身份验证”一节)。

9. IANA Considerations
9. IANA考虑

The IANA has assigned option codes to the following options from the option-code space defined in "DHCPv6 Options" section of the DHCPv6 specification [1].

IANA已从DHCPv6规范[1]的“DHCPv6选项”部分中定义的选项代码空间将选项代码分配给以下选项。

Option Name Value Described in OPTION_NIS_SERVERS 27 Section 3 OPTION_NISP_SERVERS 28 Section 4 OPTION_NIS_DOMAIN_NAME 29 Section 5 OPTION_NISP_DOMAIN_NAME 30 Section 6

选项名称值见选项名称服务器27第3节选项名称服务器28第4节选项名称域名29第5节选项名称域名30第6节

10. References
10. 工具书类
10.1. Normative References
10.1. 规范性引用文件

[1] Droms, R., Ed., Bound, J., Volz, B., Lemon, T., Perkins, C., and M. Carney, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)", RFC 3315, July 2003.

[1] Droms,R.,Ed.,Bound,J.,Volz,B.,Lemon,T.,Perkins,C.,和M.Carney,“IPv6的动态主机配置协议(DHCPv6)”,RFC3315,2003年7月。

[2] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.

[2] Bradner,S.,“RFC中用于表示需求水平的关键词”,BCP 14,RFC 2119,1997年3月。

10.2. Informative References
10.2. 资料性引用

[3] Sun Microsystems, "System and Network Administration", March 1990.

[3] Sun Microsystems,“系统和网络管理”,1990年3月。

[4] Alexander, S. and R. Droms, "DHCP Options and BOOTP Vendor Extensions", RFC 2132, March 1997.

[4] Alexander,S.和R.Droms,“DHCP选项和BOOTP供应商扩展”,RFC 21321997年3月。

Acknowledgements

致谢

Thanks to the DHC Working Group for their time and input into the specification. In particular, thanks to (in alphabetical order) Bernie Volz, Jim Bound, Margaret Wasserman, Pekka Savola, Ralph Droms, and Thomas Narten for their thorough review.

感谢DHC工作组的时间和对规范的投入。特别要感谢(按字母顺序排列)伯尼·沃尔兹、吉姆·邦德、玛格丽特·沃瑟曼、佩卡·萨沃拉、拉尔夫·德罗姆斯和托马斯·纳滕的全面审查。

Author's Address

作者地址

Vijayabhaskar A Kalusivalingam Cisco Systems (India) Private Limited, No: 9, Brunton Road, Bangalore - 560025 India

Vijayabhaskar A Kalusialingam思科系统(印度)私人有限公司,地址:印度班加罗尔布伦顿路9号-560025

   Phone: +91-80-51036615
   EMail: vibhaska@cisco.com
        
   Phone: +91-80-51036615
   EMail: vibhaska@cisco.com
        

Full Copyright Statement

完整版权声明

Copyright (C) The Internet Society (2004).

版权所有(C)互联网协会(2004年)。

This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights.

本文件受BCP 78中包含的权利、许可和限制的约束,除其中规定外,作者保留其所有权利。

This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

本文件及其包含的信息是按“原样”提供的,贡献者、他/她所代表或赞助的组织(如有)、互联网协会和互联网工程任务组不承担任何明示或暗示的担保,包括但不限于任何保证,即使用本文中的信息不会侵犯任何权利,或对适销性或特定用途适用性的任何默示保证。

Intellectual Property

知识产权

The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the IETF's procedures with respect to rights in IETF Documents can be found in BCP 78 and BCP 79.

IETF对可能声称与本文件所述技术的实施或使用有关的任何知识产权或其他权利的有效性或范围,或此类权利下的任何许可可能或可能不可用的程度,不采取任何立场;它也不表示它已作出任何独立努力来确定任何此类权利。有关IETF文件中权利的IETF程序信息,请参见BCP 78和BCP 79。

Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr.

向IETF秘书处披露的知识产权副本和任何许可证保证,或本规范实施者或用户试图获得使用此类专有权利的一般许可证或许可的结果,可从IETF在线知识产权存储库获取,网址为http://www.ietf.org/ipr.

The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org.

IETF邀请任何相关方提请其注意任何版权、专利或专利申请,或其他可能涵盖实施本标准所需技术的专有权利。请将信息发送至IETF的IETF-ipr@ietf.org.

Acknowledgement

确认

Funding for the RFC Editor function is currently provided by the Internet Society.

RFC编辑功能的资金目前由互联网协会提供。