Re: [kitten] On SASL's authzid

Ryan Troll <rtroll@googlers.com> Wed, 12 March 2014 03:09 UTC

Return-Path: <rtroll@google.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B82511A08D3 for <kitten@ietfa.amsl.com>; Tue, 11 Mar 2014 20:09:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.925
X-Spam-Level:
X-Spam-Status: No, score=-1.925 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.547, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YzPPsROhJcHt for <kitten@ietfa.amsl.com>; Tue, 11 Mar 2014 20:09:29 -0700 (PDT)
Received: from mail-qa0-x22f.google.com (mail-qa0-x22f.google.com [IPv6:2607:f8b0:400d:c00::22f]) by ietfa.amsl.com (Postfix) with ESMTP id A54FF1A08B4 for <kitten@ietf.org>; Tue, 11 Mar 2014 20:09:29 -0700 (PDT)
Received: by mail-qa0-f47.google.com with SMTP id w5so9440372qac.34 for <kitten@ietf.org>; Tue, 11 Mar 2014 20:09:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlers.com; s=googlers; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=HRxlQ2YNJOL9wIeLuvC86K9tZB9gCAorlckVcRPmFFU=; b=Pcf12gm/dRZWUzeGCrtB2kjVquscdFTjKQ0CE6qt2hXc3WnoclD32yJqMk+1/W4wkJ QFBNNsLRXqvneh84mKHytXW0jlB/u0ybhVUl3dG8tAiBFTFUZwWZIW4bpfvn+wzmqK4B D1UuZpZVQ6/ChQgWr4LBGcJgKu6tJwQ5miNrA=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=HRxlQ2YNJOL9wIeLuvC86K9tZB9gCAorlckVcRPmFFU=; b=HXc9epYCNO8vblpJKgJKSundKC9qjObAvrDcAnSDBhuAxMaf3zx/e4ig6Ms/sVi6vN vSvASXvS/XQcSf1IhHehM2+n6My7RaufiaRgOicN4VP9G5wFoFK3d+cQbzls8jPTeG6a uYp/3DEizKvwq3OqrbpiFDOPpj0y6rGvcYjEXs90rNFWH3Kx2tLJPIy2wqdb8aIGzgnf pmezpAdEyaDfsNPqUzDNrHUkeU8aISsWPQVKlexJzEbPyVMjIjVjRZEAM0u5C+adkBKu AFVDank0QqcmbC+Xzai6dpmE+7/cobhlzqD7rvE68LR7dxlmhWaOg/tYxR1lKfSqadWO +HhQ==
X-Gm-Message-State: ALoCoQnRwPkCMq40+yWnDMYvwsbIp4+V/hAxOjskAiu368X3nYJr8a8/orR0GXKFWmY27Z4G8r+7RINFWbyfBl1P5I5KChkpWL56J/7Tlf96vkY85THLovXEJolmABo8f6KeXV8i6FMurr0pIoJO99Nalbfu48jercqWRNWO9Ut87rK/HkWFDaLjrEH/coAYep+LYkE9Dgxw
MIME-Version: 1.0
X-Received: by 10.140.40.5 with SMTP id w5mr49531337qgw.65.1394593763435; Tue, 11 Mar 2014 20:09:23 -0700 (PDT)
Received: by 10.229.205.197 with HTTP; Tue, 11 Mar 2014 20:09:23 -0700 (PDT)
In-Reply-To: <CAK3OfOj_RoJUq9XX7VOKF0Bo0=fxefSwtYdOL_GVASFv=0WVtg@mail.gmail.com>
References: <CF3FAF4D.4B1F4%cantor.2@osu.edu> <1394230922.9009.YahooMailAndroidMobile@web142803.mail.bf1.yahoo.com> <CAPe4Cjp6KSL5FsHVzNPMxvE_E4BmaWgEuZQVr_wEkexH=ukpAg@mail.gmail.com> <CF436DAF.4B41B%cantor.2@osu.edu> <CAK3OfOivZAPDsanf-MAuUxFtzd5+vy51fpuw6UCgohmZP-T3MQ@mail.gmail.com> <1394474177.99427.YahooMailNeo@web125601.mail.ne1.yahoo.com> <CF437606.4B428%cantor.2@osu.edu> <1394475268.88821.YahooMailNeo@web125603.mail.ne1.yahoo.com> <CF437A98.4B43D%cantor.2@osu.edu> <1394475967.98405.YahooMailNeo@web125604.mail.ne1.yahoo.com> <CAK3OfOirp8ZJi8cKa4WKM80jWU8d_t9Snwk-aEEiggNzxu=H3Q@mail.gmail.com> <1394499537.96053.YahooMailNeo@web142802.mail.bf1.yahoo.com> <CAK3OfOhffp=PupCzzqnUe1cA8C4Af26FLC+eGWCzQpgy6GyMQg@mail.gmail.com> <1394500723.9375.YahooMailNeo@web142803.mail.bf1.yahoo.com> <CAK3OfOg9_V_oZ8YP46nKzWwp+UtxSHY4emiDhP5h2i7Rv+7TWQ@mail.gmail.com> <1394502756.57259.YahooMailNeo@web142803.mail.bf1.yahoo.com> <CAK3OfOh8hSwjg_QQdL-LqKrn9R5tE2HrnFomjXe0TNjtsSLVOg@mail.gmail.com> <1394575617.52449.YahooMailNeo@web142805.mail.bf1.yahoo.com> <CAK3OfOj_RoJUq9XX7VOKF0Bo0=fxefSwtYdOL_GVASFv=0WVtg@mail.gmail.com>
Date: Tue, 11 Mar 2014 20:09:23 -0700
Message-ID: <CAPe4CjpVx+CyGyALP_-zdsTGdpV_+1zL_juJVKRDE-UH+iTB5w@mail.gmail.com>
From: Ryan Troll <rtroll@googlers.com>
To: Nico Williams <nico@cryptonector.com>
Content-Type: multipart/alternative; boundary="001a11c12976e0403204f4602906"
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/acgPqzGzNNrcAvd5DsBeXjY2dkY
Cc: "kitten@ietf.org" <kitten@ietf.org>, Bill Mills <wmills@yahoo-inc.com>
Subject: Re: [kitten] On SASL's authzid
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Mar 2014 03:09:32 -0000

Once this is published, Google will be making changes in order to conform
to the RFC.  This should require two specific changes:

   - Support for the appropriate mechanism name
   - Update to use (whatever user= becomes)

In other words, we will use whatever authzid attribute name you guys decide
on - it doesn't have to be "user=" just because we said so.  If you'd
prefer to name it something else, go for it - don't stick with "user=" for
Google interop.

-R


On Tue, Mar 11, 2014 at 3:51 PM, Nico Williams <nico@cryptonector.com>wrote:

> On Tue, Mar 11, 2014 at 5:06 PM, Bill Mills <wmills_92105@yahoo.com>
> wrote:
> > I was being more vague because you (?) mentioned the renaming stuff.  I'm
> > happy to use that text.
>
> Ah, I thought you were being vague because you didn't want to REQUIRE
> the duplication.
>
> I would prefer to REQUIRE that the authzid go in the GS2 a= and in the
> user=.  That gets us both: interop with Google and interop with GS2.
>
> (But I can bend on this because I'm intent on adding an authzid option
> to GSS (as a name attribute) so that in the end a GS2 implementation
> that supported that option could live with just the user= bit.)
>
> Nico
> --
>
> _______________________________________________
> Kitten mailing list
> Kitten@ietf.org
> https://www.ietf.org/mailman/listinfo/kitten
>