Re: [kitten] Fwd: [Technical Errata Reported] RFC5801 (2825)

[Simon Josefsson <[e-mail]>]

Stephen Farrell <[e-mail]> writes:

> Hi all,
>
> Can you confirm that this is correct, or not?

I think we could use some more discussion before approving this -- for
example, what impact does this have on existing implementations?

I will try to change my implementation to use 255 instead of 0 and see
if it still works and inteoperates with my old version.  It would be
useful if others could do similar experiments.  I don't expect serious
problems, but I think we should consider the impact before approving
this.

I do agree it is a bug in the specification though.

/Simon

> Thanks,
> S.
>
> -------- Original Message --------
> Subject: [Technical Errata Reported] RFC5801 (2825)
> Date: Tue,  7 Jun 2011 20:58:20 -0700 (PDT)
> From: RFC Errata System <[e-mail]>
> To: [e-mail], [e-mail],
> [e-mail], [e-mail], [e-mail],
> [e-mail]
> CC: [e-mail], [e-mail]
>
>
> The following errata report has been submitted for RFC5801,
> "Using Generic Security Service Application Program Interface (GSS-API)
> Mechanisms in Simple Authentication and Security Layer (SASL): The GS2
> Mechanism Family".
>
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata_search.php?rfc=5801&eid=2825
>
> --------------------------------------
> Type: Technical
> Reported by: Thomas Maslen <[e-mail]>
>
> Section: 5.1
>
> Original Text
> -------------
> The initiator-address-type and acceptor-address-type fields of the
> GSS-CHANNEL-BINDINGS structure MUST be set to 0.
>
>
> Corrected Text
> --------------
> The initiator-address-type and acceptor-address-type fields of the
> GSS-CHANNEL-BINDINGS structure MUST be set to 255 (GSS_C_AF_NULLADDR).
>
>
> Notes
> -----
> See RFC 2744, section 3.11, last paragraph:  "[...] or omit addressing
> information, specifying GSS_C_AF_NULLADDR as the address-types".
>
> Appendix A of RFC 2744 specifies that the value of GSS_C_AF_NULLADDR is 255.
>
> Instructions:
> -------------
> This errata is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party (IESG)
> can log in to change the status and edit the report, if necessary.
>
> --------------------------------------
> RFC5801 (draft-ietf-sasl-gs2-20)
> --------------------------------------
> Title               : Using Generic Security Service Application Program
> Interface (GSS-API) Mechanisms in Simple Authentication and Security
> Layer (SASL): The GS2 Mechanism Family
> Publication Date    : July 2010
> Author(s)           : S. Josefsson, N. Williams
> Category            : PROPOSED STANDARD
> Source              : Simple Authentication and Security Layer
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG