IETF Logo Mail Archive

Re: [kitten] Negotiating "DCE style" -- a proposal and advice request

Nico Williams <nico@cryptonector.com> Wed, 08 June 2011 19:18 UTC

Return-Path: <nico@cryptonector.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B983211E818E for <kitten@ietfa.amsl.com>; Wed, 8 Jun 2011 12:18:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.133
X-Spam-Level:
X-Spam-Status: No, score=-3.133 tagged_above=-999 required=5 tests=[AWL=-1.156, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0VBqLQNZJANq for <kitten@ietfa.amsl.com>; Wed, 8 Jun 2011 12:18:37 -0700 (PDT)
Received: from homiemail-a66.g.dreamhost.com (caiajhbdcaib.dreamhost.com [208.97.132.81]) by ietfa.amsl.com (Postfix) with ESMTP id 3C0BA11E8100 for <kitten@ietf.org>; Wed, 8 Jun 2011 12:18:37 -0700 (PDT)
Received: from homiemail-a66.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a66.g.dreamhost.com (Postfix) with ESMTP id CCAF8350084 for <kitten@ietf.org>; Wed, 8 Jun 2011 12:18:33 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=cryptonector.com; h=mime-version :in-reply-to:references:date:message-id:subject:from:to:cc: content-type; q=dns; s=cryptonector.com; b=tVOWpLVv7bDN6TUx0i/Pv n9KezqMw3mdfpgqpQejLH0qDtFfQqoAuooZWmfCls2LBOnRzV7WlMXrIOrOkEACy gIUSBK95W1UgS+olj1SeRfAnzKij+gljRhgyoQ6RomGfnOKmg03vV9/jLhQhj4w6 BGJRj0XmQEO2bphAXI5C/c=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=dGxe8DQxmDKTOxGqPUQy lhfF0MA=; b=FJvUXbtg2LdyKAREze/hlS0qx9VZsTWpt3oA9/GII8xxn0nZ1Uv0 3Wv7cLB2bh+CaruBgWiu4d4/k7gWf4iba0sibp5EM0+0ahx6wYfnyPUKAB5sQQOX mwfq90r3oJWf5qVSesyMq9BJtZ5Rx2ARcqiH4u76GS4dKJScRVIVuB4=
Received: from mail-pz0-f44.google.com (mail-pz0-f44.google.com [209.85.210.44]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a66.g.dreamhost.com (Postfix) with ESMTPSA id B0A0335007F for <kitten@ietf.org>; Wed, 8 Jun 2011 12:18:33 -0700 (PDT)
Received: by pzk5 with SMTP id 5so432913pzk.31 for <kitten@ietf.org>; Wed, 08 Jun 2011 12:18:33 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.68.10.9 with SMTP id e9mr1217283pbb.255.1307560713276; Wed, 08 Jun 2011 12:18:33 -0700 (PDT)
Received: by 10.68.50.39 with HTTP; Wed, 8 Jun 2011 12:18:33 -0700 (PDT)
In-Reply-To: <BANLkTi=fdzYPDYT2tLXTQrLnnVnRF38Jjg@mail.gmail.com>
References: <BANLkTi=amWmHMfrEO02WtNPDdeO1gNvhmg@mail.gmail.com> <BANLkTin8-TEdfGoRw+PiMzAak1qVcFjZrQ@mail.gmail.com> <BANLkTik9vdp0b9bDqb-WbmfJf1M=Zzai9g@mail.gmail.com> <4DEEF9BC.4040509@samba.org> <BANLkTi=fdzYPDYT2tLXTQrLnnVnRF38Jjg@mail.gmail.com>
Date: Wed, 08 Jun 2011 14:18:33 -0500
Message-ID: <BANLkTikF1TXtipmT1gwS_+bOsWvHH-bVqg@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: "Stefan (metze) Metzmacher" <metze@samba.org>
Content-Type: text/plain; charset="UTF-8"
Cc: kitten@ietf.org, ietf-krb-wg@anl.gov
Subject: Re: [kitten] Negotiating "DCE style" -- a proposal and advice request
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Jun 2011 19:18:38 -0000

On Wed, Jun 8, 2011 at 12:30 AM, Nico Williams <nico@cryptonector.com> wrote:
> On Jun 7, 2011 11:25 PM, "Stefan (metze) Metzmacher" <metze@samba.org>
> wrote:
>> Please don't imply GSS_C_DCE_STYLE.
>
> Why not?

My guess is that you don't like the gratuitous differences between DCE
style and the standard mechanism.  I tend to agree, but as you can
see, it's rather easy to implement negotiation of three-legged
Kerberos if I re-use DCE style.  It's probably not that much harder to
just add the extra leg without implying DCE style, but all
implementations will need to implement DCE style anyways (all except
Samba??).

Anyways, do please explain why not imply DCE style.  Thanks,

Nico
--

v2.46.0 | Report a Bug | By Email | System Status