IETF Logo Mail Archive

Re: [kitten] On SASL's authzid

Bill Mills <wmills_92105@yahoo.com> Tue, 11 March 2014 00:59 UTC

Return-Path: <wmills_92105@yahoo.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96FF61A067A for <kitten@ietfa.amsl.com>; Mon, 10 Mar 2014 17:59:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.045
X-Spam-Level:
X-Spam-Status: No, score=-2.045 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, FREEMAIL_REPLYTO_END_DIGIT=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.547] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XB1t_TTBEcom for <kitten@ietfa.amsl.com>; Mon, 10 Mar 2014 17:59:03 -0700 (PDT)
Received: from nm20.bullet.mail.bf1.yahoo.com (nm20.bullet.mail.bf1.yahoo.com [98.139.212.179]) by ietfa.amsl.com (Postfix) with ESMTP id 6FA941A0671 for <kitten@ietf.org>; Mon, 10 Mar 2014 17:59:03 -0700 (PDT)
Received: from [98.139.212.151] by nm20.bullet.mail.bf1.yahoo.com with NNFMP; 11 Mar 2014 00:58:57 -0000
Received: from [98.139.212.246] by tm8.bullet.mail.bf1.yahoo.com with NNFMP; 11 Mar 2014 00:58:57 -0000
Received: from [127.0.0.1] by omp1055.mail.bf1.yahoo.com with NNFMP; 11 Mar 2014 00:58:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 689905.64240.bm@omp1055.mail.bf1.yahoo.com
Received: (qmail 96597 invoked by uid 60001); 11 Mar 2014 00:58:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1394499537; bh=st4nj1BDcDhjLnsft3SxA93S/rl+cW6i6Feu68HhmYw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=1JkncaLEwIBs7rQCpJv69TDyPql1+RPQrZp285h3rr5rSbJedgR8aI1z7BkkSknTBpfZ0bqzXlqQiTBvIsyYgKCw+UWEcfnjEy5NtOQhUKkij/YKsksfD9pJwKPSNGJEL39glbhVnf6uGqo2V9NWLTZf7W6fFeYhUdOd0UiWGf0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=Yzd+yUuvXSEQgg+FHF1WZHWCYKFxBHOgyP1jeCz3K6jYfaGF7NNlT2PEDdWm9c3Wq7Ylh4C9SdO+Kgz4IlBz7i7mJ+KEe0SmoN8IgrOfmVGYcUle/qh/1xPvu6xiEjxtDUX9+w1UmE0hBC+UTGpRbFp3hR9jiUCE7dzCzwayem0=;
X-YMail-OSG: 1t1s7GUVM1kn2BYkmD.VfAQLkSg0jaafK.xxTEbAfR7IUdh 3c2iUX6ebs818ik1sPuWoWvThxWuWkv01gNm1PODrnf8coGcZRz4lLdqTi8h 5BaDXyQIAdYJwhbCT8W3vFelV8FlGWhbcyqj1dmxoW0f3ZrCye1IjUJ.FtCV 3QIzZh7ed4Ea2IMxLvBCfoGILrK36z7fBnmv1iOXVW3VHljrUQMH5nj.yJek zX8BUUmnuccbNA4bYbag.Lsp5blUyMOvAoKlkbp7YgTrdKEcPYzqI0l1mT1Q jovwcw42cUJOU7vK.jH7dclPlP0uJDd76lA7cY5cBiEB3ud7UrnJGD5VnGGL hfl65FRHYcZHXRJ1YYYMn3WDuZQA3euq26M8oij6Hikk.7LPeJFrH3PA_ZgE wyxnHsNslsoyzZcM3UNt4cnwXGClDI.HHUyr923veoV9Y2.Tj1zdc2BGyJks VbKa8NNJz532VxKBvCyWgKq.VoWd1iYa9cdcYkl3P4ufzzItghhekv4rydap P0k0wobvYt2q5gpfzxqK7MsA5rl7t86dLqgkhwpLJgQ49.tuiLwFP5KPFsUW dCmS4CDkDjnfWq7Px32cxE6sjpX2dnXo-
Received: from [209.131.62.115] by web142802.mail.bf1.yahoo.com via HTTP; Mon, 10 Mar 2014 17:58:57 PDT
X-Rocket-MIMEInfo: 002.001, RXhhbXBsZXMgaW7CoGh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYta2l0dGVuLXNhc2wtb2F1dGgtMTQjc2VjdGlvbi00CgpEb2VzIHRoYXQgYW5zd2VyIHlvdXIgcXVlc3Rpb24_CgoKCgpPbiBNb25kYXksIE1hcmNoIDEwLCAyMDE0IDU6NTMgUE0sIE5pY28gV2lsbGlhbXMgPG5pY29AY3J5cHRvbmVjdG9yLmNvbT4gd3JvdGU6CiAKV2Ugbm93IGFncmVlIHRoYXQgdXNlcj0gaXMganVzdCB0aGUgYXV0aHppZC7CoCBHb29kLgoKVGhlIG9ubHkgcXVlc3Rpb24gaXMgd2hldGhlciB0byBkZXMBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.177.636
References: <CF3FAF4D.4B1F4%cantor.2@osu.edu> <1394230922.9009.YahooMailAndroidMobile@web142803.mail.bf1.yahoo.com> <CAPe4Cjp6KSL5FsHVzNPMxvE_E4BmaWgEuZQVr_wEkexH=ukpAg@mail.gmail.com> <CF436DAF.4B41B%cantor.2@osu.edu> <CAK3OfOivZAPDsanf-MAuUxFtzd5+vy51fpuw6UCgohmZP-T3MQ@mail.gmail.com> <1394474177.99427.YahooMailNeo@web125601.mail.ne1.yahoo.com> <CF437606.4B428%cantor.2@osu.edu> <1394475268.88821.YahooMailNeo@web125603.mail.ne1.yahoo.com> <CF437A98.4B43D%cantor.2@osu.edu> <1394475967.98405.YahooMailNeo@web125604.mail.ne1.yahoo.com> <CAK3OfOirp8ZJi8cKa4WKM80jWU8d_t9Snwk-aEEiggNzxu=H3Q@mail.gmail.com>
Message-ID: <1394499537.96053.YahooMailNeo@web142802.mail.bf1.yahoo.com>
Date: Mon, 10 Mar 2014 17:58:57 -0700
From: Bill Mills <wmills_92105@yahoo.com>
To: Nico Williams <nico@cryptonector.com>, Bill Mills <wmills@yahoo-inc.com>
In-Reply-To: <CAK3OfOirp8ZJi8cKa4WKM80jWU8d_t9Snwk-aEEiggNzxu=H3Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1397251415-537766711-1394499537=:96053"
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/PyzIG5NO0haYBg7S2nqihVSeszE
Cc: "kitten@ietf.org" <kitten@ietf.org>
Subject: Re: [kitten] On SASL's authzid
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Bill Mills <wmills_92105@yahoo.com>
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Mar 2014 00:59:05 -0000

Examples in http://tools.ietf.org/html/draft-ietf-kitten-sasl-oauth-14#section-4

Does that answer your question?




On Monday, March 10, 2014 5:53 PM, Nico Williams <nico@cryptonector.com> wrote:
 
We now agree that user= is just the authzid.  Good.

The only question is whether to describe user= at all.  Assuming that
you need it for interop with Google you have two choices:

- don't use GS2

- use GS2 and shoe-horn in the user= as a name attribute at the GSS
layer (or leave it for GSS implementors to figure that out?)

Either works.  I submitted an I-D last week for adding a GSS name
attribute for conveying authzids, so it just so happens that it should
be easy enough to do what you want.  Let's see if we can.  What does a
fully formed SASL OAuth token's "header" with user= look like?

Nico

--

_______________________________________________
Kitten mailing list
Kitten@ietf.org
https://www.ietf.org/mailman/listinfo/kitten

v2.46.0 | Report a Bug | By Email | System Status