Dear Richard After the discussion on the DB WG mailing list it was agreed that all "auth:" attributes will be hidden from public view in a 'normal' query output. The only way now to see the full object is with Webupdates. For any MNTNER object that has an MD5 password, authentication must be supplied to see the full objects. This also applies if the MNTNER has both MD5 password and PGP/X509. If the MNTNER has only PGP/X509 and no passwords, you still need to use Webupdates to see the full object. But in this latter case, no authentication is needed to see the object. So in your case, if you just follow the steps outlined below you will see the full MNTNER object including the "auth:" attributes, without having to enter any authentication. btw...I think the Lynx browser still works from a text only console. Regards, Denis Walker Business Analyst RIPE NCC Database Group On 17/02/12:8 5:26 PM, Richard Kojedzinszky wrote:
Dear Denis,
Thanks for your reply. As I am unix user, I have only text console, and using a browser on that is very uncomfortable. Ok, that was a joke only, but the question still stands: what if I dont have a password for my mntner, as the link you've sent mentions that the webupdates will only show the object after authentication.
Regards,
Kojedzinszky Richard Euronet Magyarorszag Informatikai Zrt.
On Fri, 17 Feb 2012, Denis Walker wrote:
Date: Fri, 17 Feb 2012 17:20:48 +0100 From: Denis Walker <denis@ripe.net> To: Richard Kojedzinszky <krichy@tvnetwork.hu> Cc: members-discuss@ripe.net Subject: Re: [members-discuss] whois mntner
Dear Richard
There is an easy way to do this with Webupdates. Starting with the "Modify or Delete an object" page on the url you mentioned, https://apps.db.ripe.net/webupdates/search.html, enter your MNTNER object name in the search box then select the "modify object in single text area" option. When you click on "Search" you will see the full object, including the "auth:" attributes, in a text area. You can copy and paste this data and use any update method you choose.
Please note that this only has an impact on changes to the MNTNER object itself, as requested by the community through the RIPE Database Working Group (DB WG) to hide the MD5 hashes from public view. Changing any other object type remains as it was. The change was discussed in detail on the DB WG mailing list. If you have any suggestions on this behaviour, you may wish to discuss them on that list.
Full details of how the new process works can be seen here: https://labs.ripe.net/Members/denis/securing-md5-hashes-in-the-ripe-database
Regards,
Denis Walker Business Analyst RIPE NCC Database Group
On 17/02/12:8 4:19 PM, Richard Kojedzinszky wrote:
Dear members,
Maybe a stupid question, but I am used to update objects via signed emails. Now, a mntner object cannot be queried fully, I got a filtered result always, even with the maintainer not containing md5 passwords. So I am missing the auth: fields.
$ whois -T mntner -B -r MNT-RK1387-RIPE % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Information related to 'MNT-RK1387-RIPE'
mntner: MNT-RK1387-RIPE descr: Maintainer of RK1387-RIPE admin-c: RK1387-RIPE upd-to: richardk@tvnetwork.hu mnt-by: MNT-RK1387-RIPE referral-by: MNT-RK1387-RIPE changed: richardk@tvnetwork.hu 20080417 changed: krichy@tvnetwork.hu 20090814 changed: krichy@tvnetwork.hu 20090814 source: RIPE # Filtered
From https://apps.db.ripe.net/webupdates/search.html altough I can query the full object:
mntner: MNT-RK1387-RIPE descr: Maintainer of RK1387-RIPE admin-c: RK1387-RIPE upd-to: richardk@tvnetwork.hu auth: PGPKEY-8F59B1B7 auth: X509-2577 mnt-by: MNT-RK1387-RIPE referral-by: MNT-RK1387-RIPE changed: richardk@tvnetwork.hu 20080417 changed: krichy@tvnetwork.hu 20090814 changed: krichy@tvnetwork.hu 20090814 source: RIPE
And as I am used to copy-paste the result, change what I like, and then send it back, this does not work anymore.
Any suggestions are welcome.
Regards,
Kojedzinszky Richard Euronet Magyarorszag Informatikai Zrt.
---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/view
Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses.