Re: [kitten] Authentication Indicator in Kerberos tickets

[Benjamin Kaduk <[e-mail]>]

On Mon, 29 Sep 2014, Richard Feezel wrote:

> I would like to encourage the group to adopt this document as well.

[puts on chair hat]
Thanks for speaking up.  I think I would like to hear a little bit more
support from other WG participants before adopting this as a WG item,
though.

Does anyone else want to see us pick it up?  I think Nico was expressing
some opinions on how things like this should be done on IRC, so maybe he
would support it?
[takes off chair hat]

> I plan to do some trial implementation testing and would like to know what
> values I can safely use for the Authorization Data fields for CAMMAC and
> Authentication Indicators in advance of an official action by this group
> and the IANA?

The draft-ietf-krb-wg-cammac-10 assigns the ad-type number 96 for
AD-CAMMAC.
For the AUTHENTICATION-INDICATOR itself (hmm, that should be changed
to have an AD- prefix), there is not yet an assigned number, but
draft-ietf-kitten-kerberos-iana-registries-03 specifies that negative
integer values are for private or local use.  You are unlikely to
encounter trouble picking a ~random negative 32-bit signed integer and
using it for your local implementation, but should expect to change your
implementation when an official value is assigned.

Does that address your question?

-Ben Kaduk