- db-wg - mailman.ripe.net

RIPE Database Release 1.72 - including SSO Integration
by Denis Walker 07 Apr '14

07 Apr '14

Dear colleagues, We are pleased to announce RIPE Database release 1.72. For more information about the features, changes and how this release might affect your operations, please see these release notes: https://www.ripe.net/data-tools/db/release-notes/ripe-database-release-1.72 A major feature introduced in this release is the integration of RIPE Database services with RIPE NCC Access. This gives maintainers the option to use their RIPE NCC Access account for authorising updates to the RIPE Database. The first applications that utilise this feature are Webupdates and Syncupdates from a web form. Linking a RIPE NCC Access account to an organisation is a requirement for certifying PI address space. No change has been made to existing authorisation options. This release also fixes a number of issues, so please read the release notes. By fixing certain issues with the JSON output from the REST API, the structure of that output has changed slightly. This should not affect any users as it was broken in the first place. To ensure this is the case, please test your implementation in the Release Candidate environment. More information about the Release Candidate environment is described in this document: https://www.ripe.net/data-tools/db/release-notes/rc-release-candidate-envir… We look forward to hearing any questions or comments you might have. Regards, Denis Walker Business Analyst RIPE NCC Database Team

7 12

Status %s not allowed when more specific object has status %s
by Tim Garrison 27 Mar '14

27 Mar '14

Greetings, I was wondering if it would be possible for the "Status %s not allowed when more specific object has status %s" error to be expanded in such a way that it reports what that specific object is. As it stands, it is rather difficult to determine when there is any overlap, especially when the upper and lower bounds of my inetnum object don't return any results when searching by single IP. Thanks in advance for considering this! -- Tim Garrison Lead, Systems Development *SoftLayer, an IBM Company* 315 Capitol Street Suite 205, Houston, TX 77002 281.714.4213 direct | 713.540.4325 mobile | 281.714.4657 fax | tgarrison(a)softlayer.com

2 2

[training] RIPE NCC Webinars - new dates
by Training Services 25 Mar '14

25 Mar '14

Dear colleagues, We are pleased to announce the launch of new dates for our Webinars. The RIPE NCC Webinars are live and take only one hour. You can interact with our trainers without leaving your desk. We focus on the topics and issues most important for LIRs. Register now at https://www.ripe.net/lir-services/training/e-learning/webinars Participation is limited to 20 people, so don't hesitate if you want to take part! If you have questions, please email <training(a)ripe.net>. We look forward to seeing you online. Kind regards, RIPE NCC Training Services

1 0

Suggestion of change for inverse query of notify
by Fredrik Widell 19 Mar '14

19 Mar '14

Hello db-wg. I would like to change the behaviour of the whois-output for the following query whois -h whois.ripe.net -- "-r -T inetnum,route -i notify info(a)resilans.se" Via that question, I will see every object that has the notify info(a)resilans.se set, which right now is inetnum: 194.14.3.0 - 194.14.3.255 netname: RESILANS descr: Resilans AB remarks: VV org: ORG-ABUS1000-RIPE country: SE admin-c: RESI1-RIPE tech-c: RESI1-RIPE status: ASSIGNED PI mnt-by: RESILANS-MNT mnt-domains: RESILANS-MNT mnt-routes: RESILANS-MNT source: RIPE # Filtered However, my request is that the above query should give the exact same output as the below query whois -h whois.ripe.net -- "-r -T inetnum,route 194.14.3.0" which will also display the corresponding route-object, is there any real reason why this is not displayed with an inverse query? it looks like: inetnum: 194.14.3.0 - 194.14.3.255 netname: RESILANS descr: Resilans AB remarks: VV org: ORG-ABUS1000-RIPE country: SE admin-c: RESI1-RIPE tech-c: RESI1-RIPE status: ASSIGNED PI mnt-by: RESILANS-MNT mnt-domains: RESILANS-MNT mnt-routes: RESILANS-MNT source: RIPE # Filtered route: 194.14.3.0/24 descr: Resilans AB origin: AS12381 mnt-by: RESILANS-MNT source: RIPE # Filtered -- Best regards Fredrik Widell Resilans AB http://www.resilans.se/ mail: info(a)resilans.se , fredrik(a)resilans.se phone: +46 8 688 11 80

4 4

Prefix length for the "pingable" attribute
by Tore Anderson 16 Mar '14

16 Mar '14

Hi WG, The documentation unequivocally states the value of the "pingable" attribute in route[6] objects must include a prefix length: $ whois -h whois.ripe.net -- -v route [...] pingable Allows a network operator to advertise an IP address of a node that should be reachable from outside networks. This node can be used as a destination address for diagnostic tests. The IP address must be within the address range of the prefix containing this attribute. An address prefix is represented as an IPv4 address followed by the character slash "/" followed by an integer in the range from 0 to 32. The following are valid address prefixes: 128.9.128.5/32, 128.9.0.0/16, 0.0.0.0/0; and the following address prefixes are invalid: 0/0, 128.9/16 since 0 or 128.9 are not strings containing four integers. $ whois -h whois.ripe.net -- -v route6 [...] pingable Allows a network operator to advertise an IP address of a node that should be reachable from outside networks. This node can be used as a destination address for diagnostic tests. The IP address must be within the address range of the prefix containing this attribute. <ipv6-address>/<prefix> Therefore I added mine as /32 and /128. That ended up in me getting complaints that I broke some people's scripts, which were assuming that value of this attribute should be a "bare" IP address. (For example: http://ip.v6net.ru/archives/1764) Contradictory to what the documentation says, the e-mail robot happily accepted my update to remove the prefix length. So hopefully people's scripts are unbroken now. This sparked my curiosity, though: - What exactly is the purpose of the prefix length? - How should one interpret a value that has a prefix length other than /32 (in "route" objects) or /128 (in "route6" objects)? - Why does the documentation say it is mandatory when it clearly is not? - And finally, am I really the only LIR hostmaster in the RIPE that actually do RTFM? :-) $ curl -s ftp://ftp.ripe.net/ripe/dbase/split/ripe.db.route{,6}.gz | zgrep -c '^pingable:.*/' 0 Tore

4 4

[training] RIPE NCC Courses in Sofia, Bulgaria 16-17 April 2014
by Training Services 14 Mar '14

14 Mar '14

Dear Colleagues, The RIPE NCC Training Services Department invites you to register for our upcoming Training Courses in Sofia, Bulgaria: Course type: RIPE Database Training Course Date: Wednesday, 16 April 2014 Time: 09:00-17:30 Course type: IPv6 for LIRs Training Course Date: Thursday, 17 April 2014 Time: 09:00-17:30 How to register: ---------------- You can register up to two people from your LIR for each course by using the LIR Portal at: https://lirportal.ripe.net/training/courses Registration will close when maximum capacity is reached, so please register soon to ensure your attendance. The course is free of charge. We provide lunch and printed training materials. We do not cover any of your travel expenses or accommodation. We give all of our training courses in English. RIPE Database Training Course: ------------------------------ You should attend this training course if you are part of the staff of a Local Internet Registry (LIR) in the RIPE NCC Service Region. You can find more information about the course at: https://www.ripe.net/lir-services/training/courses/rdb IPv6 for LIRs Training Course: ------------------------------ You should attend this training course if you are part of the staff of a Local Internet Registry (LIR) in the RIPE NCC Service Region and if you: * Are thinking about deploying IPv6 in your organisation * Have been told you need to deploy IPv6 * Need to convince your manager that IPv6 needs to be deployed * Looked at an IPv6 address and thought it was too complicated to deploy in your network You can find more information about the course at: http://www.ripe.net/lir-services/training/courses/ipv6 If you have any questions, send an e-mail to <training(a)ripe.net>. Kind regards, RIPE NCC Training Services

1 0

Implementation plan for 2012-07, "RIPE NCC Services to Legacy Internet Resource Holders"
by Nikolas Pediaditis 12 Mar '14

12 Mar '14

Dear colleagues, The RIPE NCC has published the proposed implementation plan for ripe-605 "RIPE NCC Services to Legacy Internet Resource Holders" (accepted policy proposal 2012-07): The overall implementation: https://labs.ripe.net/Members/nikolas_pediaditis/policy-proposal-2012-07-ri… The implementation that specifically relates to the RIPE Database: https://labs.ripe.net/Members/xavier/policy-proposal-2012-07-db-proposed-im… We are sending this email to three working groups because the implementation is related to anyone holding AUT-NUM or legacy INETNUM objects in the RIPE Database but we ask that comments be made on the RIPE NCC Services Working Group mailing list only. We aim to begin implementation the week of 25 March. Please do not hesitate to contact us if you have any comments or questions. Kind regards, Nikolas Pediaditis IP Resource Analyst RIPE NCC

1 0

[training] RIPE NCC Webinars - new dates
by Training Services 11 Mar '14

11 Mar '14

Dear colleagues, We are pleased to announce the launch of new dates for our Webinars. The RIPE NCC Webinars are live and take only one hour. You can interact with our trainers without leaving your desk. We focus on the topics and issues most important for LIRs. Register now at https://www.ripe.net/lir-services/training/e-learning/webinars Participation is limited to 20 people, so don't hesitate if you want to take part! If you have questions, please email <training(a)ripe.net>. We look forward to seeing you online. Kind regards, RIPE NCC Training Services

1 0

[training] RIPE NCC Webinars - new dates
by Training Services 25 Feb '14

25 Feb '14

Dear colleagues, We are pleased to announce the launch of new dates for our Webinars. The RIPE NCC Webinars are live and take only one hour. You can interact with our trainers without leaving your desk. We focus on the topics and issues most important for LIRs. Register now at https://www.ripe.net/lir-services/training/e-learning/webinars Participation is limited to 20 people, so don't hesitate if you want to take part! If you have questions, please email <training(a)ripe.net>. We look forward to seeing you online. Kind regards, RIPE NCC Training Services

1 0

[training] RIPE NCC Training Courses April-June 2014
by Training Services 18 Feb '14

18 Feb '14

Dear Colleagues, Our training team travels the RIPE NCC service region to deliver training courses to our members without any additional cost. Over the next few months, we'll be in St. Julian's, Zagreb, Sofia, Brussels, Edinburgh, Tehran, Helsinki, Moscow, Kiel, Almaty, Reykjavik, Geneva. Visit the following page to register and to check which training courses we are giving in your area: https://lirportal.ripe.net/training/courses The RIPE NCC delivers the following training courses: - LIR Training Course - Database Training Course - IPv6 for LIRs Training Course - Routing Security Training Course - 3 day Deploying IPv6 Training Course (New) - DNSSec Training Course (New) For more information visit: https://www.ripe.net/lir-services/training/courses With kind regards, Rumy Spratley-Kanis Training Services Manager

1 0