[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference azur::mcc

Title:DECmcc user notes file. Does not replace IPMT.
Notice:Use IPMT for problems. Newsletter location in note 6187
Moderator:TAEC::BEROUD
Created:Mon Aug 21 1989
Last Modified:Wed Jun 04 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:6497
Total number of notes:27359

883.0. "mcc_aes_match does not appear to work for Full names" by BYBLOS::TAMER () Mon Apr 08 1991 19:20

T.RTitleUserPersonal
Name
DateLines
883.1It's a bug (I guess)TOOK::GUERTINI do this for a living -- reallyMon Apr 08 1991 20:0312
    RE:.0
    
    This is a sticky point.  According to the SRM there are NO valid
    relational operations for a Fullname datatype.  THIS INCLUDE EQUALITY
    (see page 231).  As compared to Simplename, which does support checking
    for equality.  I believe we have decided that this is really a bug
    (both in the source code, and in the SRM), and plan to fix it for V1.2. 
    (In fact, the SRM says that Wildcarding IS supported, but equality
    ISN'T !?!?)  To make matters more confusing, this appeared to be
    working in V1.0.  Sorry about that.
    
    -Matt.
883.2Is this a commitment to fix it for V1.2 ?BYBLOS::TAMERTue Apr 09 1991 12:076
Thanks Matt for your quick reply,

Should this be submitted as a QAR or do I wait for further 
investigation/decision ? 

Phil
883.3There is a QAR on this problemTOOK::KWAKTue Apr 09 1991 13:1521
RE: .0 and .2

There is a QAR (#465) on a related problem in MCC_AES_MATCH().

As of today, the new MCC_AES_MATCH() routine (for V1.2) supports the matching 
of Partial instance wildcards of MCC_K_DT_FULL_NAME data type. 
The restriction is that the wildcard ("*" or "?") has to be the LAST character
of the fullname.

For example, .repository.memb* matches with .repository.member_2,
	     .memb* matches with .repository.member_2,
	     .repository.member_* matches with .repository.member_2,
	     .repository.member_? matches with .repository.member_2,
	But, .repository.*_2 does not match with .repository.member_2,
	     .repository.mem*_2 does not match with .repository.member_2.

If you absolutely need to have the support for partial wildcards at any place,
we could support the feature.

William
883.4I think wildcards should be consistentBYBLOS::TAMERTue Apr 09 1991 20:2713
re .3

Thanks Bill,

Since partial instance wildcard for MCC_K_DT_SIMPLE_NAME supports wildcard at 
any place, it would be inconsistent for MCC_K_DT_FULL_NAME to only support last
character wildcards.

Phil


NOTE: By the way the FCL PM does not seem to support the "?" wildcard, will
it in V1.2 ?
883.5mcc_dns routinesTOOK::CALLANDERThu Apr 11 1991 14:2111
FCL support of fullname and simplename is setup as follows.

	pick up the next token (space or comma delimiter) form the command line
	then send it to the mcc_dns routines for conversion....

I will see if anyone can tell us about support for the ? character. The reason
I point this out is that you should find that if you tried using the ?
with the DNS routines in MCC my guess is you will see the same problem.

I will check to make sure that the parser itself is not barfing on
the "?" imbedded in a string when tokenizing.
883.6Please do full fullname matchingMARVIN::COBBGraham R. Cobb (Wide Area Comms.), REO2-G/H9, 830-3917Fri Apr 12 1991 14:119
It isn't that difficult to do full fullname wildcard matching (as defined in
the  DNS  architecture).   I don't see any point in implementing a hack that
doesn't  save  that  much  effort.   If  we  can do it in our bounded router
systems you lot can do it in MCC!

If you can't get a suitable routine from the DNS group talk to me -- you can
have our BLISS routine.

Graham
883.7Complete fullname matching is implementedTOOK::KWAKFri Apr 12 1991 19:5913
    
    Re: .4 and .6
    
    MCC_AES_MATCH() routine has been fixed to match the Partial instance
    wildcard ("*", or "?") for MCC_K_DT_FULL_NAME data type.
    
    Now, the wildcard(s) can be placed in any where in the name.
    
    The changes will be available in V1.2.
    
    Thanks for your comment.
    
    William
883.8Clarification...MARVIN::COBBGraham R. Cobb (Wide Area Comms.), REO2-G/H9, 830-3917Mon Apr 15 1991 18:028
Re: .7.   Thanks.   One  question  of  clarification:  you did implement the
wildcarding  as  described in the DNS architecture, didn't you, not just "*"
and "?" ?

For example,  ABC.DEF.GHI  is matched by ABC..., ABC.*F*.*, ABC.*..., ABC...*,
ABC...GHI etc. but not by ABC.DE*HI

Graham
883.9The supported wildcards are "*" and "?".TOOK::KWAKWed Apr 17 1991 12:5321
    RE: .8
    
    The wildcards that I implemented do NOT include the Ellipsis ("...").
    The MCC SRM does not mention (I think) the Ellipsis as wildcard characters.
    
    The DNS Document says the Ellipsis is used ONLY to match names in access
    control sets.
    
    The algorithm that I used is as follows:
    	- convert the two fullnames specified in AESs into strings
    	- perform wildcard string matching (wildcards characters are
    	  any number and combination of "*" and "?").
    
    	NOTE: The dots (".") in the strings do not have special meanings.
    	      A dot is treated as a single normal character.
    
    For example,  ABC.DEF.GHI  is matched by ABC*, ABC.*F*.*, ABC*F*,
    ABC.*HI, ABC.*.?HI, *C.*, AB?.D*, etc.
    
                                                  
    William
883.10Thank you for your effort.BYBLOS::TAMERThu Apr 18 1991 20:521
Thanks William.
883.11Please implement the DNS rulesMARVIN::COBBGraham R. Cobb (Wide Area Comms.), REO2-G/H9, 830-3917Fri Apr 19 1991 16:1531
I believe  that  MCC  must match DNS-defined datatypes in the way defined in
the  DNS  architecture.   Just as if I defined the FOOBAR type with matching
rules  and  MCC  implemented it I would expect MCC to implement the matching
rules as well.  If the SRM says otherwise, it is wrong and needs fixing.

Otherwise, the following commands will give different results:

SHOW SOME-ENTITY-WITH-FULLNAME-IDENTIFIER *... ALL CHAR

SHOW SOME-ENTITY-WITH-FULLNAME-IDENTIFIER * ALL CHAR WITH NAME=*...

The first  passes  the  wildcard  to  the  entity  (via  the AM) which will,
presumably,  implement  the  DNS rules correctly (it certainly will if it is
our  implementation).   The second passes "Known" to the entity and does the
filter comparison in MCC, incorrectly.

If the  DNS  architecture  limits  ellipsis  to  access control then I could
understand  you  not  implementing  that.   However, I wouldn't recommend it
because  when I close this notesfile I am going over to the DNS architecture
one  to  get  that bug fixed (we have managable entities which use fullnames
which require ellipsis support to be usable)!

You must  implement the simplename bound correctly (so ABC* does not match
ABC.DEF).

I repeat  the  offer  in  an  earlier  note  to send you our (internal form)
fullname  comparison routine.  It isn't directly usable because it makes use
of  others  of  our  routines  to  match simplenames but the logic should be
usable.  It really isn't that hard to do it right!

Graham
883.12No restriction in DNS architectureMARVIN::COBBGraham R. Cobb (Wide Area Comms.), REO2-G/H9, 830-3917Thu Apr 25 1991 19:0410
I have  checked in the DNS architecture notesfile (note 246 in DNS_ARCH) and
Dave  Oran  says  that  there  is no architectural restriction that ellipsis
matching  is restricted to access control.  The only restriction is that DNS
itself  only  uses  ellipsis  matching  for  access  control:  there  are no
constraints on other users of the datatype.

Please confirm that this has been QAR'd.

Thanks,
Graham