Re: dropping gss_name_to_any ?

Luke Howard <lukeh@padl.com> Tue, 17 November 2009 17:17 UTC

Return-Path: <lukeh@padl.com>
X-Original-To: kitten@core3.amsl.com
Delivered-To: kitten@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3D5783A69A8 for <kitten@core3.amsl.com>; Tue, 17 Nov 2009 09:17:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KM4JLBuqij5P for <kitten@core3.amsl.com>; Tue, 17 Nov 2009 09:17:31 -0800 (PST)
Received: from us.padl.com (us.padl.com [216.154.215.154]) by core3.amsl.com (Postfix) with ESMTP id 72CF83A6962 for <kitten@ietf.org>; Tue, 17 Nov 2009 09:17:31 -0800 (PST)
Received: by us.padl.com with ESMTP id nAHHHBt3005368; Tue, 17 Nov 2009 12:17:19 -0500
Subject: Re: dropping gss_name_to_any ?
Mime-Version: 1.0 (Apple Message framework v1076)
Content-Type: text/plain; charset="us-ascii"; format="flowed"; delsp="yes"
From: Luke Howard <lukeh@padl.com>
In-Reply-To: <20091117164631.GM773@Sun.COM>
Date: Tue, 17 Nov 2009 18:17:09 +0100
Content-Transfer-Encoding: 7bit
Message-Id: <E9348CB0-4D26-4082-A129-2699C8B150CF@padl.com>
References: <200909141004.39686.leifj@mnt.se> <4B02B173.5070003@mnt.se> <20091117164631.GM773@Sun.COM>
To: Nicolas Williams <Nicolas.Williams@sun.com>
X-Mailer: Apple Mail (2.1076)
X-SMTP-Vilter-Version: 1.3.6
X-Spamd-Symbols: AWL,BAYES_00,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RDNS_DYNAMIC
X-SMTP-Vilter-Spam-Backend: spamd
X-Spam-Threshold: 5.0
X-Spam-Probability: -0.1
Cc: kitten@ietf.org
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Nov 2009 17:17:32 -0000

On 17/11/2009, at 5:46 PM, Nicolas Williams wrote:

> On Tue, Nov 17, 2009 at 03:21:39PM +0100, Leif Johansson wrote:
>>> I've never been comfortable with this API - it feels difficult to  
>>> specify
>>> property. I'd be in favor of dropping it.
>>
>> I'd like to confirm that we have consensus on dropping  
>> gss_name_to_any
>> (or consensus that I misunderstood that thread)
>
> I'm for dropping it, but Luke seems to think it's useful, and he did
> implement it, including a plug-in interface.  Luke?


I only really implemented it because it's in the spec. But there are  
cases where it may be useful -- but those all defeat the purpose of a  
general-purpose, mechanism-agnostic API. For example, the SAML  
provider surfaces the assertion object via this interface, but then it  
requires the caller be using the same SAML implementation.

-- Luke