Re: [kitten] [nfsv4] draft-ietf-nfsv4-rpcsec-gssv3: request for review

["J. Bruce Fields" <[e-mail]>]

On Fri, Aug 01, 2014 at 05:15:36PM -0500, Nico Williams wrote:
> On Fri, Aug 01, 2014 at 08:28:25PM +0000, Adamson, Andy wrote:
> > On Aug 1, 2014, at 1:54 AM, Nico Williams <[e-mail]> wrote:
> > > On Thu, Jul 31, 2014 at 06:38:09PM -0400, Benjamin Kaduk wrote:
> > >> Hmm, this seems to have gotten rather long.  
> > 
> > Well, it’s two pages shorter than draft-williams-rpcsecgssv3-02.txt (!)
> 
> :)
> 
> > >> Multi-principal authentication
> > >> 
> > >> This draft proposes a multi-principal authentication scheme,
> > >> restricted to just the case of a privileged client process on a
> > > 
> > > No, not only the case of a privileged client process.
> > 
> > Sure, but for the Multi-principal piece we do say the following which says that the use-case is privileged client process….
> 
> It was always my intention that traditional (read: multi-user
> shared-cache) NFS client implementations would just always use
> "multi-principal" contexts when doing any RPCs on a user's behalf.
> 
> That is, addressing the "user can impersonate the server to the client"
> problem was always my first and foremost goal with this protocol, though
> I didn't always say so explicitly (since at the time the attack was not
> well-known, I didn't want to publicize it).

Oh, that's really helpful to know.

It'd be great if we could get a paragraph into the draft explaining
this.  (And also the server-to-server copy stuff, and any other example
uses.)  It's easier to understand with the motivations.

--b.