Re: [kitten] Authentication Indicator in Kerberos tickets

[Richard Feezel <[e-mail]>]

On Wed, Oct 1, 2014 at 1:25 PM, Benjamin Kaduk <[e-mail]> wrote:

> On Mon, 29 Sep 2014, Richard Feezel wrote:
>
> > I would like to encourage the group to adopt this document as well.
>
> [puts on chair hat]
> Thanks for speaking up.  I think I would like to hear a little bit more
> support from other WG participants before adopting this as a WG item,
> though.
>
> Does anyone else want to see us pick it up?  I think Nico was expressing
> some opinions on how things like this should be done on IRC, so maybe he
> would support it?
> [takes off chair hat]
>
I too would like to hear from other members of the group.

>
> > I plan to do some trial implementation testing and would like to know
> what
> > values I can safely use for the Authorization Data fields for CAMMAC and
> > Authentication Indicators in advance of an official action by this group
> > and the IANA?
>
> The draft-ietf-krb-wg-cammac-10 assigns the ad-type number 96 for
> AD-CAMMAC.
> For the AUTHENTICATION-INDICATOR itself (hmm, that should be changed
> to have an AD- prefix), there is not yet an assigned number, but
> draft-ietf-kitten-kerberos-iana-registries-03 specifies that negative
> integer values are for private or local use.  You are unlikely to
> encounter trouble picking a ~random negative 32-bit signed integer and
> using it for your local implementation, but should expect to change your
> implementation when an official value is assigned.
>
> Does that address your question?
>
Yes, thanks.  One related question, would it be appropriate to ask the
author of  *draft-**jain-kitten-krb-auth-**indicator-01.txt* to include a
proposed ad-type value in the next revision?


> -Ben Kaduk
>
-- 
Richard M Feezel
[e-mail]