[kitten] GSS pre-authentication draft

Luke Howard <lukeh@padl.com> Thu, 23 September 2021 09:14 UTC

Return-Path: <lukeh@padl.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68EAC3A27B8 for <kitten@ietfa.amsl.com>; Thu, 23 Sep 2021 02:14:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=padl.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GKIpkm8xdyj1 for <kitten@ietfa.amsl.com>; Thu, 23 Sep 2021 02:14:38 -0700 (PDT)
Received: from us.padl.com (us.padl.com [216.154.215.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0123C3A27B1 for <kitten@ietf.org>; Thu, 23 Sep 2021 02:14:37 -0700 (PDT)
Received: by us.padl.com with ESMTP id 18N9EUXc032535; Thu, 23 Sep 2021 10:14:33 +0100
DKIM-Filter: OpenDKIM Filter v2.11.0 us.padl.com 18N9EUXc032535
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=padl.com; s=default; t=1632388473; bh=ItQoKBQwv2fDuzVb+1slWeT/W6vmJ15/YSmmZs7aGeQ=; h=From:Subject:Date:To:From; b=hmpF48t+/Z3BM/JN2/eO1KlIUfS/vBIZj3YhIz0Caz02cstw2guFg/D6OU8Z0Kkm+ J50vllL3c2S427GYdyI6X+3knERJmR+jGlTbN+5wuGEkX3UIn3SELataPPGJOeS0la 2QVGcBia5mgbAWkb3VCamO4i3pA3renKlOf7XqEL5Na4mjKZamd2TxafTGnB324QgX hvW5t8HzrVjy/6MHWRAm2gvqcX/Zm9u2AYLRaAVV0QDlYD7NbN4n4WJ1Cm95j7Q40D tFuCDQ+/KYbKPzF7rf5hPlRlnUhnYMXfI8C6eyhANY9KFIch43VQSNaHnvBF2Blf1t DdF45AhKWvmyQ==
From: Luke Howard <lukeh@padl.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_C7309FAA-C7F8-49D6-9CDC-8A3634745F25"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.13\))
Message-Id: <9B657325-C3F9-496A-BC62-DD277FF63965@padl.com>
Date: Thu, 23 Sep 2021 19:14:29 +1000
To: "kitten@ietf.org" <kitten@ietf.org>
X-Mailer: Apple Mail (2.3654.120.0.1.13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/7x5Q4f2AT2a0XKgV61W_LZqGJOA>
Subject: [kitten] GSS pre-authentication draft
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Sep 2021 09:14:43 -0000

Hi everyone,

There is a new version available of the GSS-API pre-authentication for Kerberos draft:

https://datatracker.ietf.org/doc/html/draft-perez-krb-wg-gss-preauth-03 <https://datatracker.ietf.org/doc/html/draft-perez-krb-wg-gss-preauth-03>

There is an implementation of an earlier draft for MIT Kerberos, and we have an implementation for Heimdal that works on both Unix and Windows (the latter using SSPI natively).

Thanks to Alejandro et al for letting me contribute to this.

Cheers,
Luke