IETF Logo Mail Archive

Re: [kitten] On SASL's authzid

Bill Mills <wmills@yahoo-inc.com> Mon, 10 March 2014 18:15 UTC

Return-Path: <wmills@yahoo-inc.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4095A1A04E7 for <kitten@ietfa.amsl.com>; Mon, 10 Mar 2014 11:15:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.22
X-Spam-Level:
X-Spam-Status: No, score=-16.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NEUTRAL=0.779, USER_IN_DEF_WHITELIST=-15] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x-GceMiti9Iu for <kitten@ietfa.amsl.com>; Mon, 10 Mar 2014 11:15:03 -0700 (PDT)
Received: from mrout2-b.corp.bf1.yahoo.com (mrout2-b.corp.bf1.yahoo.com [98.139.253.105]) by ietfa.amsl.com (Postfix) with ESMTP id B39681A0675 for <kitten@ietf.org>; Mon, 10 Mar 2014 11:15:02 -0700 (PDT)
Received: from GQ1-EX10-CAHT04.y.corp.yahoo.com (gq1-ex10-caht04.corp.gq1.yahoo.com [10.73.118.83]) by mrout2-b.corp.bf1.yahoo.com (8.14.4/8.14.4/y.out) with ESMTP id s2AIETNX083834 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <kitten@ietf.org>; Mon, 10 Mar 2014 11:14:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=yahoo-inc.com; s=cobra; t=1394475271; bh=q5ga4b/s9aL+hvTRCZ1T7A44eJ1A7vsXdq+jfyq2d1s=; h=References:Date:From:Reply-To:Subject:To:CC:In-Reply-To; b=wVQQlaUhZmTU5GJHfmVMyQ+Q0sGOPDytf5UDnOBZGGjHozyCX3P9nyt/pD3XsttVg utNdeEIV6gaH0AfJaC4f3QmuRCWKf7rrFw0nIygco/X/7dtWX5i6Os8Ob4e2+17yvm LIjyjyVjqhwOwTb6jqLiaUkvJTM1cO1p92wPgqAA=
Received: from omp1050.mail.ne1.yahoo.com (98.138.89.192) by GQ1-EX10-CAHT04.y.corp.yahoo.com (10.72.228.24) with Microsoft SMTP Server (TLS) id 14.3.181.6; Mon, 10 Mar 2014 11:14:29 -0700
Received: (qmail 79365 invoked by uid 1000); 10 Mar 2014 18:14:28 -0000
Received: (qmail 1777 invoked by uid 60001); 10 Mar 2014 18:14:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo-inc.com; s=ginc1024; t=1394475268; bh=51RWsK7bA5k5h6RCIqxzrq2H2EiU/yNlnIiSL8N0g0Q=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=iJkDvYMYyquWXoMbLyJmNc3mB11JZxdInN+YM3vT1O3NZ6vw0Y8oVj38G3Qo9WqJ9qHKGVYALrIRBKhh1AnQPZPJJWpQRItV4eXUkVYdVZux5WC8xouNpa7//HiE7PdQazhL+7PyYfux38kPdxryr8sQhLHrezqIpftW1jbuXbc=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024; d=yahoo-inc.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=QSgqzNpWOQFClE4sTHWj5js1KqGsGkpgvez2aMneOmgv0Hu2SCPXc/rIsKkvDCs7qixVn+GHkG/o3It3y+Xxcf6CpTgVpLEDRi6B03DSTmtSPPDHkNxDQr8/CO52L1HQa7ib6aaX/vkbBDuE1eJiO59zbRRZ+vclwV2CNmytjjo=;
X-YMail-OSG: I3ZWnkgVM1lvTfWHfKWeRnpEZvPqizQq2HabIOh2Z7kEknF n4EOONVTdPY_xtCjI1vr3H7GX6NDNoDJ.vk6SyO4A4OAEyDu.Ub3kVYpg8at 5UwkoCOdLTdqYrMNl7L9md7PIDGcJYL1pYP5VoGiUYVEsJ6W0OslFNizbPiO pp6DBXpe9Sn1SNyV5ROzoqrJmeaNjRXN4qbDzs4lzZu_lItC5zdJUGMTwstj rzjNwhZH0VCocBnXe.MuAg7evoPPkJrkVWtgvR0ZFZ9GhNeIPPaXZrQiauyV Ct5uKFAcfB34iRQRBrJgDpADu
Received: from [209.131.62.115] by web125603.mail.ne1.yahoo.com via HTTP; Mon, 10 Mar 2014 11:14:28 PDT
X-Rocket-MIMEInfo: 002.001, U28gd2UgY2FuIGxlYXZlIGl0IGluIHVzZXI9IGFuZCBub3QgZGVmaW5lIGFueSBHUzIgaGVhZGVyIHN0dWZmIGJleW9uZCBtYWtpbmcgc3VyZSB0aGUgcGFyc2VycyBoYW5kbGUgaXQgaW4gdGhlIFNBU0wgc2lkZT8gCgpJIGdvdCB0aGUgaW1wcmVzc2lvbiBmcm9tIFNhbSB0aGF0IHRoZXJlJ3MgYSBjYXNlIHdoZXJlIGEgU0FTTCBtZWNoYW5pc20gdGFsa3MgdG8gYSBHUzIgc2VydmVyIGFuZCBpdCBqdXN0IHdvcmtzLsKgIFRoaXMgc291bmRlZCBsaWtlIGl0IG1lYW5zIHRoYXQgdGhlIGF1dGh6aWQgc2hvdWwBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.177.636
References: <CF3FAF4D.4B1F4%cantor.2@osu.edu> <1394230922.9009.YahooMailAndroidMobile@web142803.mail.bf1.yahoo.com> <CAPe4Cjp6KSL5FsHVzNPMxvE_E4BmaWgEuZQVr_wEkexH=ukpAg@mail.gmail.com> <CF436DAF.4B41B%cantor.2@osu.edu> <CAK3OfOivZAPDsanf-MAuUxFtzd5+vy51fpuw6UCgohmZP-T3MQ@mail.gmail.com> <1394474177.99427.YahooMailNeo@web125601.mail.ne1.yahoo.com> <CF437606.4B428%cantor.2@osu.edu>
Message-ID: <1394475268.88821.YahooMailNeo@web125603.mail.ne1.yahoo.com>
Date: Mon, 10 Mar 2014 11:14:28 -0700
From: Bill Mills <wmills@yahoo-inc.com>
To: "Cantor, Scott" <cantor.2@osu.edu>, Nico Williams <nico@cryptonector.com>
In-Reply-To: <CF437606.4B428%cantor.2@osu.edu>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="933233344-1320578246-1394475268=:88821"
X-Milter-Version: master.31+4-gbc07cd5+
X-CLX-ID: 475270004
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/meo9qJ4dSdyxJZFEznl9D-E6PGA
Cc: "kitten@ietf.org" <kitten@ietf.org>
Subject: Re: [kitten] On SASL's authzid
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Bill Mills <wmills@yahoo-inc.com>
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Mar 2014 18:15:04 -0000

So we can leave it in user= and not define any GS2 header stuff beyond making sure the parsers handle it in the SASL side? 

I got the impression from Sam that there's a case where a SASL mechanism talks to a GS2 server and it just works.  This sounded like it means that the authzid should be populated into the S2 header.


-bill



--------------------------------
William J. Mills
"Paranoid" MUX Yahoo!





On Monday, March 10, 2014 11:04 AM, "Cantor, Scott" <cantor.2@osu.edu> wrote:
 
On 3/10/14, 1:56 PM, "Bill Mills" <wmills@yahoo-inc.com> wrote:
>
>And so it goes in a= in the GS2 header?

If the plan is to maintain the GS2 framing (I lost track of that), then
it's not clear anything has to be said at all, since that's basically
defined by GS2 and is independent of whatever mechanism is using GS2. If
it's a SASL concept, it's a SASL concept, it doesn't have to be noted in
every mechanism unless there's something special to say about it, and I
don't think there is. Less is more. That's just my take.

But yeah, if you want to say something about it...


-- Scott

v2.46.0 | Report a Bug | By Email | System Status