Re: [kitten] RFC 2744 Appendix A erratum

mrex@sap.com (Martin Rex) Thu, 21 November 2013 16:08 UTC

Return-Path: <mrex@sap.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6E711AE00A for <kitten@ietfa.amsl.com>; Thu, 21 Nov 2013 08:08:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.552
X-Spam-Level:
X-Spam-Status: No, score=-6.552 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sMjeGY_sJ38d for <kitten@ietfa.amsl.com>; Thu, 21 Nov 2013 08:08:39 -0800 (PST)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id C93D11ADFF6 for <kitten@ietf.org>; Thu, 21 Nov 2013 08:08:38 -0800 (PST)
Received: from mail05.wdf.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id rALG8VNR025820 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 21 Nov 2013 17:08:31 +0100 (MET)
In-Reply-To: <alpine.GSO.1.10.1311211058100.23560@multics.mit.edu>
To: Benjamin Kaduk <kaduk@MIT.EDU>
Date: Thu, 21 Nov 2013 17:08:31 +0100
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20131121160831.13D751AACB@ld9781.wdf.sap.corp>
From: mrex@sap.com
X-SAP: out
Cc: kitten@ietf.org
Subject: Re: [kitten] RFC 2744 Appendix A erratum
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: mrex@sap.com
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2013 16:08:41 -0000

Benjamin Kaduk wrote:
> 
> On Thu, 21 Nov 2013, Martin Rex wrote:
> >
> > The "*" on the output parameters in the Appendix A sample header file
> > seem to have disappeared during I-D revision 05->06 of the C-bindings
> > draft, they were present during -00 through -05:
> >
> >  http://tools.ietf.org/rfcdiff?url2=rfc2744.txt&url1=draft-ietf-cat-gssv2-cbind-05.txt#diff0410
> 
> Thanks for tracking down the version with the change (and the diff).
> 
> > A "fix" of that size appears somewhat huge for the errata process.
> 
> I agree.
> However, it seems that replacing " ," with " *," (all 68 occurrences) 
> suffices to fix almost all of the problem.  gss_export_name()'s 
> minor_status parameter would not be caught by this replacement, but could 
> be mentioned separately.
> 
> > Filing an errata that describes the nature of the problem--maybe including
> > a suitable URL to rfcdiff like the one above for visualizing the problem,
> > might be preferable.
> 
> I'll probably file an erratum with the old/new text I mentioned above and 
> your rfcdiff URL at some point, maybe later today.
> 
> > Btw. there is another problem with the gssapi.h sample header file
> > in rfc2744:  for 64-bit, there exists a binary-incompatibility
> > between the X/Open defined GSS-API C-bindings and the IETF-defined
> > rfc2744 C-Bindings for "count" member of the gss_OID_set type:
> >
> > rfc2744:  http://tools.ietf.org/html/rfc2744#page-84
> >
> >     typedef struct gss_OID_set_desc_struct  {
> >         size_t     count;
> >         gss_OID    elements;
> >     } gss_OID_set_desc, *gss_OID_set;
> >
> >
> > X/Open: http://archive.opengroup.org/publications/archive/CDROM/c441.pdf
> > Page 45:
> >
> >     typedef struct gss_OID_set_desc_struct{
> >         int count;
> >         gss_OID elements;
> >     } gss_OID_set_desc, *gss_OID_set;
> 
> Ugh.  Thanks for mentioning it.

I forgot:

MIT Kerberos, HP-UX Kerberos, Solaris Kerberos, AIX Kerberos and
our own ABI uses the gss_OID_set definition from rfc2744 
(or the cbind-00 draft).

In the /usr/include/xom.h header file on HP-UX 11.31 I no longer see
any OID_set definition, and the /usr/include/gssapi/gssapi.h header
file contains the rfc2744 variant with "size_t count".

-Martin