[kitten] New I-D: generic name attributes

Nico Williams <nico@cryptonector.com> Sun, 07 July 2013 22:47 UTC

Return-Path: <nico@cryptonector.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7FA021F9CC4 for <kitten@ietfa.amsl.com>; Sun, 7 Jul 2013 15:47:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.96
X-Spam-Level:
X-Spam-Status: No, score=-1.96 tagged_above=-999 required=5 tests=[AWL=0.017, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VHwPY8R4amVR for <kitten@ietfa.amsl.com>; Sun, 7 Jul 2013 15:47:47 -0700 (PDT)
Received: from homiemail-a87.g.dreamhost.com (caiajhbdcaid.dreamhost.com [208.97.132.83]) by ietfa.amsl.com (Postfix) with ESMTP id DDD0F21F9D0A for <kitten@ietf.org>; Sun, 7 Jul 2013 15:47:42 -0700 (PDT)
Received: from homiemail-a87.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a87.g.dreamhost.com (Postfix) with ESMTP id 1848126C05E for <kitten@ietf.org>; Sun, 7 Jul 2013 15:47:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:date:message-id:subject:from:to:content-type; s= cryptonector.com; bh=LhpR8+Cxdb8f6VeX3ry5wg23l9s=; b=QZ0NwWCvh1l qNCy2+ivNhWlGcKJkyDibPCFbmJ4oE8c9QWk8ItTuIbXBnpRl2FFABiroZBWzMv7 YOFjspzLlzQuCVrSNvsqVfo+iIgE2F6VH+v0jcBLj6oy3hGPnRUY5P/VvJKvyuTk ssDUPZcudfCiki9epdHq0eCbFDrUIVrM=
Received: from mail-we0-f176.google.com (mail-we0-f176.google.com [74.125.82.176]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a87.g.dreamhost.com (Postfix) with ESMTPSA id B01A626C05B for <kitten@ietf.org>; Sun, 7 Jul 2013 15:47:40 -0700 (PDT)
Received: by mail-we0-f176.google.com with SMTP id t56so3132552wes.21 for <kitten@ietf.org>; Sun, 07 Jul 2013 15:47:38 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=18V2+aYjozbudehowaLi0yOlzP/cFwsqNsHe01WRzRA=; b=FUDPgPea/dbdRowOVg1ucdBp0l4d/Kx/GlO6YMRE0OZaHhZbMgsigwh/Z8Ld+lRBJV LfRYDJ0ZlltmGege5rzfnhXgzoIMfnHHXa1+v0Mlm2DrBBuO9izoepFQsyJuuv68cNNJ cnqfICbHsU/FjjSg6fxUUgk+Zvn93EmDSxgJluvysIFZsG2RdRbmgIQlxGMOYLCMLr0e 2PU2ZXXGvlqeg5Sk6MrqDMls4WHPyeKHsCbv3YLEHncRl6X7sOULOvDln7IQ4X5TWY3u wnsyYN3RGe+3uFojgsdbb6MeGrBK3+caTJCdPnlxfREu8f6MwlJNyt5Q6/toCnq1mB3s TPyQ==
MIME-Version: 1.0
X-Received: by 10.180.75.144 with SMTP id c16mr30545410wiw.1.1373237258737; Sun, 07 Jul 2013 15:47:38 -0700 (PDT)
Received: by 10.216.152.73 with HTTP; Sun, 7 Jul 2013 15:47:38 -0700 (PDT)
Date: Sun, 07 Jul 2013 17:47:38 -0500
Message-ID: <CAK3OfOiNMEZ8HNWdMvrQ=wZk0vF=dynZQ12eHKMYvEyy77__YA@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: kitten@ietf.org
Content-Type: text/plain; charset="UTF-8"
Subject: [kitten] New I-D: generic name attributes
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 07 Jul 2013 22:47:51 -0000

I've just posted draft-williams-kitten-generic-naming-attributes-00

An implementation can be found here:
https://github.com/nicowilliams/heimdal/tree/name_attrs-rebase1

I believe these should be rather useful.

A common use case would be to authorize host-based initiator
principals by hostname.

Future name attributes that could be added include:

 - the PAC/PAD
 - SIDs/UIDs/GIDs of the principal
 - ...