[members-discuss] whois mntner

Dear Richard

After the discussion on the DB WG mailing list it was agreed that all
"auth:" attributes will be hidden from public view in a 'normal' query
output. The only way now to see the full object is with Webupdates. For
any MNTNER object that has an MD5 password, authentication must be
supplied to see the full objects. This also applies if the MNTNER has
both MD5 password and PGP/X509. If the MNTNER has only PGP/X509 and no
passwords, you still need to use Webupdates to see the full object. But
in this latter case, no authentication is needed to see the object.

So in your case, if you just follow the steps outlined below you will
see the full MNTNER object including the "auth:" attributes, without
having to enter any authentication.

btw...I think the Lynx browser still works from a text only console.

Regards,

Denis Walker
Business Analyst
RIPE NCC Database Group


On 17/02/12:8 5:26 PM, Richard Kojedzinszky wrote:
> Dear Denis,
> 
> Thanks for your reply. As I am unix user, I have only text console, and
> using a browser on that is very uncomfortable. Ok, that was a joke only,
> but the question still stands: what if I dont have a password for my
> mntner, as the link you've sent mentions that the webupdates will only
> show the object after authentication.
> 
> Regards,
> 
> Kojedzinszky Richard
> Euronet Magyarorszag Informatikai Zrt.
> 
> On Fri, 17 Feb 2012, Denis Walker wrote:
> 
>> Date: Fri, 17 Feb 2012 17:20:48 +0100
>> From: Denis Walker <denis at ripe.net>
>> To: Richard Kojedzinszky <krichy at tvnetwork.hu>
>> Cc: members-discuss at ripe.net
>> Subject: Re: [members-discuss] whois mntner
>>
>> Dear Richard
>>
>> There is an easy way to do this with Webupdates. Starting with the
>> "Modify or Delete an object" page on the url you mentioned,
>> https://apps.db.ripe.net/webupdates/search.html, enter your MNTNER
>> object name in the search box then select the "modify object in single
>> text area" option. When you click on "Search" you will see the full
>> object, including the "auth:" attributes, in a text area. You can copy
>> and paste this data and use any update method you choose.
>>
>> Please note that this only has an impact on changes to the MNTNER object
>> itself, as requested by the community through the RIPE Database Working
>> Group (DB WG) to hide the MD5 hashes from public view. Changing any
>> other object type remains as it was. The change was discussed in detail
>> on the DB WG mailing list. If you have any suggestions on this
>> behaviour, you may wish to discuss them on that list.
>>
>> Full details of how the new process works can be seen here:
>> https://labs.ripe.net/Members/denis/securing-md5-hashes-in-the-ripe-database
>>
>>
>> Regards,
>>
>> Denis Walker
>> Business Analyst
>> RIPE NCC Database Group
>>
>>
>> On 17/02/12:8 4:19 PM, Richard Kojedzinszky wrote:
>>> Dear members,
>>>
>>> Maybe a stupid question, but I am used to update objects via signed
>>> emails. Now, a mntner object cannot be queried fully, I got a filtered
>>> result always, even with the maintainer not containing md5 passwords.
>>> So I
>>> am missing the auth: fields.
>>>
>>> $ whois -T mntner -B -r MNT-RK1387-RIPE
>>> % This is the RIPE Database query service.
>>> % The objects are in RPSL format.
>>> %
>>> % The RIPE Database is subject to Terms and Conditions.
>>> % See http://www.ripe.net/db/support/db-terms-conditions.pdf
>>>
>>> % Information related to 'MNT-RK1387-RIPE'
>>>
>>> mntner:         MNT-RK1387-RIPE
>>> descr:          Maintainer of RK1387-RIPE
>>> admin-c:        RK1387-RIPE
>>> upd-to:         richardk at tvnetwork.hu
>>> mnt-by:         MNT-RK1387-RIPE
>>> referral-by:    MNT-RK1387-RIPE
>>> changed:        richardk at tvnetwork.hu 20080417
>>> changed:        krichy at tvnetwork.hu 20090814
>>> changed:        krichy at tvnetwork.hu 20090814
>>> source:         RIPE # Filtered
>>>
>>>> From https://apps.db.ripe.net/webupdates/search.html altough I can
>>>> query
>>> the full object:
>>>
>>> mntner:      MNT-RK1387-RIPE
>>> descr:       Maintainer of RK1387-RIPE
>>> admin-c:     RK1387-RIPE
>>> upd-to:      richardk at tvnetwork.hu
>>> auth:        PGPKEY-8F59B1B7
>>> auth:        X509-2577
>>> mnt-by:      MNT-RK1387-RIPE
>>> referral-by: MNT-RK1387-RIPE
>>> changed:     richardk at tvnetwork.hu 20080417
>>> changed:     krichy at tvnetwork.hu 20090814
>>> changed:     krichy at tvnetwork.hu 20090814
>>> source:      RIPE
>>>
>>>
>>> And as I am used to copy-paste the result, change what I like, and then
>>> send it back, this does not work anymore.
>>>
>>> Any suggestions are welcome.
>>>
>>> Regards,
>>>
>>> Kojedzinszky Richard
>>> Euronet Magyarorszag Informatikai Zrt.
>>>
>>> ----
>>> If you don't want to receive emails from the RIPE NCC members-discuss
>>> mailing list, please log in to your LIR Portal account and go to the
>>> general page:
>>> https://lirportal.ripe.net/general/view
>>>
>>> Click on "Edit my LIR details", under "Subscribed Mailing Lists".
>>> From here, you can add or remove addresses.
>>>
>>
>