[Freeipa-devel] Internationalized domain names in freeIPA

[John Dennis]

On 11/05/2013 12:04 PM, Petr Viktorin wrote:
> On 11/05/2013 05:53 PM, John Dennis wrote:
>> On 11/05/2013 11:13 AM, Martin Basti wrote:
>>> Hi list,
>>>
>>> I'm working on ticket: https://fedorahosted.org/freeipa/ticket/3169
>>> UTF-8 DNS names will be converted to punycode ASCII string and stored
>>>
>>> But there is a question, how to show DNS names to user (in UI or
>>> dnsrecord-show/find):
>>> * show them in punycode
>>> * convert them to UTF-8 and show
>>> * both ways
>>> * add options to show them in UTF-8
>>>
>>> I'll be thankful for your opinion.
>>>
>>
>> We have a rule that all strings use UCS and that UCS be interchanged by
>> encoding UCS text in UTF-8. Therefore it seems to me the only time
>> punycode should ever exist is when it's necessary to encode/decode
>> punycode for dns operations. Since punycode is a standard Python codec
>> this should be trivial, you just need to determine where you do the
>> encode/decode (perhaps also validating user input can be successfully
>> encoded).
> 
> In LDAP the values need to be in punycode, so bind-dyndb-ldap can 
> process them.

This suggests the LDAP type conversion is the right location for
encode/decode.

> 
> IMO all layers above that -- API, CLI, WebUI -- should use Unicode, 
> except with the `--raw` flag.
> 


-- 
John