IETF Logo Mail Archive

Re: [kitten] On SASL's authzid

"Cantor, Scott" <cantor.2@osu.edu> Mon, 10 March 2014 18:22 UTC

Return-Path: <cantor.2@osu.edu>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC53C1A04E7 for <kitten@ietfa.amsl.com>; Mon, 10 Mar 2014 11:22:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t6Ocq29jakNS for <kitten@ietfa.amsl.com>; Mon, 10 Mar 2014 11:22:28 -0700 (PDT)
Received: from tx2outboundpool.messaging.microsoft.com (tx2ehsobe001.messaging.microsoft.com [65.55.88.11]) by ietfa.amsl.com (Postfix) with ESMTP id 7D3EF1A06B8 for <kitten@ietf.org>; Mon, 10 Mar 2014 11:22:26 -0700 (PDT)
Received: from mail209-tx2-R.bigfish.com (10.9.14.249) by TX2EHSOBE009.bigfish.com (10.9.40.29) with Microsoft SMTP Server id 14.1.225.22; Mon, 10 Mar 2014 18:22:20 +0000
Received: from mail209-tx2 (localhost [127.0.0.1]) by mail209-tx2-R.bigfish.com (Postfix) with ESMTP id 62435C8015E; Mon, 10 Mar 2014 18:22:20 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:164.107.81.214; KIP:(null); UIP:(null); IPV:NLI; H:cio-krc-pf07; RD:none; EFVD:NLI
X-SpamScore: 3
X-BigFish: VPS3(zzbb2dI98dI9371I1432Izz1f42h1d77h208ch1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6hzz1de098h8275bh1de097hz2fh109h2a8h839h944he5bhf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah224fh1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h2216h22d0h2336h2438h2461h2476h2487h24ach24d7h2516h2545h255eh259ch25cch25f6h2605h1b1cn1b1bi1155h)
Received-SPF: pass (mail209-tx2: domain of osu.edu designates 164.107.81.214 as permitted sender) client-ip=164.107.81.214; envelope-from=cantor.2@osu.edu; helo=cio-krc-pf07 ; cio-krc-pf07 ;
Received: from mail209-tx2 (localhost.localdomain [127.0.0.1]) by mail209-tx2 (MessageSwitch) id 1394475738769638_18938; Mon, 10 Mar 2014 18:22:18 +0000 (UTC)
Received: from TX2EHSMHS005.bigfish.com (unknown [10.9.14.249]) by mail209-tx2.bigfish.com (Postfix) with ESMTP id B7E88A400A3; Mon, 10 Mar 2014 18:22:18 +0000 (UTC)
Received: from cio-krc-pf07 (164.107.81.214) by TX2EHSMHS005.bigfish.com (10.9.99.105) with Microsoft SMTP Server (TLS) id 14.16.227.3; Mon, 10 Mar 2014 18:22:16 +0000
Received: from CIO-TNC-HT07.osuad.osu.edu (localhost [127.0.0.1]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by cio-krc-pf07 (Postfix) with ESMTPS id 6FA76500072; Mon, 10 Mar 2014 14:22:12 -0400 (EDT)
Received: from CIO-KRC-D1MBX01.osuad.osu.edu ([fe80::450b:35e6:80f4:f3e0]) by CIO-TNC-HT07.osuad.osu.edu ([fe80::1c0f:4d2:f020:9937%12]) with mapi id 14.03.0174.001; Mon, 10 Mar 2014 14:22:08 -0400
From: "Cantor, Scott" <cantor.2@osu.edu>
To: Bill Mills <wmills@yahoo-inc.com>, Nico Williams <nico@cryptonector.com>
Thread-Topic: [kitten] On SASL's authzid
Thread-Index: AQHPOanJU7MgJYkHMUqid6fG1ztCiJrVisiAgAB8cgCAACBAgIAAPI8AgAADUQCAAAdPAIAAEpaA//+uhgCAAFWxAP//rbuAgABUoACABFJIAP//zyiAAAcMbwAAAET+gP//z8SAgAA1UAD//8/aAA==
Date: Mon, 10 Mar 2014 18:22:07 +0000
Message-ID: <CF437A98.4B43D%cantor.2@osu.edu>
References: <CF3FAF4D.4B1F4%cantor.2@osu.edu> <1394230922.9009.YahooMailAndroidMobile@web142803.mail.bf1.yahoo.com> <CAPe4Cjp6KSL5FsHVzNPMxvE_E4BmaWgEuZQVr_wEkexH=ukpAg@mail.gmail.com> <CF436DAF.4B41B%cantor.2@osu.edu> <CAK3OfOivZAPDsanf-MAuUxFtzd5+vy51fpuw6UCgohmZP-T3MQ@mail.gmail.com> <1394474177.99427.YahooMailNeo@web125601.mail.ne1.yahoo.com> <CF437606.4B428%cantor.2@osu.edu> <1394475268.88821.YahooMailNeo@web125603.mail.ne1.yahoo.com>
In-Reply-To: <1394475268.88821.YahooMailNeo@web125603.mail.ne1.yahoo.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [128.146.178.26]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <C45B07E3170CFC4FAA7CC23748488802@osu.edu>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Forward
X-OriginatorOrg: osu.edu
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/GCX61fx_bWhbRdC120igVkM7TcI
Cc: "kitten@ietf.org" <kitten@ietf.org>
Subject: Re: [kitten] On SASL's authzid
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Mar 2014 18:22:29 -0000

On 3/10/14, 2:14 PM, "Bill Mills" <wmills@yahoo-inc.com> wrote:
>
>So we can leave it in user= and not define any GS2 header stuff beyond
>making sure the parsers handle it in the SASL side?

No, I'm saying you leave it out and let GS2 handle it, because it already
is.

>I got the impression from Sam that there's a case where a SASL mechanism
>talks to a GS2 server and it just works.  This sounded like it means that
>the authzid should be populated into the S2 header.

Yes. But that means you need to say nothing about it, unless I'm missing
something. You simply define in terms of GS2, so anything GS2 allows or
requires is there by definition.

That all assumes there's still a refernce to GS2 planned here. If that's
being tabled due to the lack of mutual-auth, and you're defining
essentially a GS2-like header that is compatible with it but not formally
GS2, then you would have to define it in this spec.

-- Scott

v2.46.0 | Report a Bug | By Email | System Status