RFC 7317, "A YANG Data Model for System Management", August 2014

Errata ID: 6245
Status: Held for Document Update
Type: Technical
Publication Format(s) : TEXT
Reported By: Maurizio Brigandi'
Date Reported: 2020-07-29
Held for Document Update by: Rob Wilton
Date Held: 2023-10-02

Section 6 says:

         leaf-list user-authentication-order {
           type identityref {
             base authentication-method;
           }
           must '(. != "sys:radius" or ../../radius/server)' 

It should say:

         leaf-list user-authentication-order {
           type identityref {
             base authentication-method;
           }
           must '(not(. = "sys:radius") or ../../radius/server)'
 

Notes:

As indicated in https://www.w3.org/TR/1999/REC-xpath-19991116/#booleans

the following expression comparing a node-set with a string

. != "sys:radius"

is true if at least one node in the node-set satisfies the boolean expression.

This is not the intention of the "must" condition.

It is necessary to use not(. = "sys:radius") to achieve the right intention of the check.

This errata has been marked as "Held for Document Update" because it requires a new revision of the YANG module to be published, and hence a new RFC.

Report New Errata