IETF Logo Mail Archive

Re: [kitten] On SASL's authzid

Bill Mills <wmills_92105@yahoo.com> Tue, 11 March 2014 22:07 UTC

Return-Path: <wmills_92105@yahoo.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B48791A0800 for <kitten@ietfa.amsl.com>; Tue, 11 Mar 2014 15:07:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.045
X-Spam-Level:
X-Spam-Status: No, score=-2.045 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, FREEMAIL_REPLYTO_END_DIGIT=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.547] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O54kZFLcs1Vd for <kitten@ietfa.amsl.com>; Tue, 11 Mar 2014 15:07:08 -0700 (PDT)
Received: from nm44-vm6.bullet.mail.bf1.yahoo.com (nm44-vm6.bullet.mail.bf1.yahoo.com [216.109.115.30]) by ietfa.amsl.com (Postfix) with ESMTP id 7843F1A0823 for <kitten@ietf.org>; Tue, 11 Mar 2014 15:07:03 -0700 (PDT)
Received: from [66.196.81.173] by nm44.bullet.mail.bf1.yahoo.com with NNFMP; 11 Mar 2014 22:06:57 -0000
Received: from [98.139.212.241] by tm19.bullet.mail.bf1.yahoo.com with NNFMP; 11 Mar 2014 22:06:57 -0000
Received: from [127.0.0.1] by omp1050.mail.bf1.yahoo.com with NNFMP; 11 Mar 2014 22:06:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 549003.43301.bm@omp1050.mail.bf1.yahoo.com
Received: (qmail 53663 invoked by uid 60001); 11 Mar 2014 22:06:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1394575617; bh=UL2l/MF+RJRDnTLDiqlIid/ERRuSo2vpA/dU0GvC/5M=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=d8YhNPcFkOpDY6G2B+p2a/Wo7WDAiGOxjcNSVOAaFW97KJf61xR0MgSRvSNxTL7Vrb4Ps3P8/18quO40pSFBu+NPHeXP87D07sfBkKwb6Ln1AqzH0iwCeEJZZjp1jOD/nUOGdu6QUakgGxVnuxZZqAVtI6JOeS1w79sEOw+lyhM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=KJ08aACQLMbdnMllY/7PqzX5meEWE0gPKizYlvwbFqUQFyDthcphyfDEuyxNTS4NqVvciMxKrGKKYPZCQARn2vYZwxOLwxi1ZqJyRjEyAi5SMqQ6Ab/uomMdiDjKh/vhkfBW1PTVrgndDPtI8X6m2HHRM47KqvUzhqVmGSSl68E=;
X-YMail-OSG: a_EaHYAVM1mhjE.qah_5uL0hidwah679UhJPgd5ds3G9Uvr m2PXCw69XAm2bE8Q8Cg6CTDepXK0T7CAzAyUo3Zq.6c9AO0AFHcLbKnCSs05 5fn_3zCJJjZZrS1pprEdq5fJfwmW0dhHCUBxiroQU6e0Of6GhYFRPpTomoYF OL6zrplh24nxOovmyz3E16_kLT.DCGxY5L8VxGCVgYVA4ZRr_wZPTf765GDo VlHB0kGzc8wWnvSmyoy8PQi3_d8HwNt5jgQX5lAFZQ40297nd6518Om0uSVY HCoP2YdlruIn1Hmi80gAuKmiDXMatiDWoe._ywejIaOEK3YkV6LDg0KwzMFu mg.vFXcVoatJ5eFFy399OvGhPpX8ASOGGe0v2Kgbz50U4F2aSQqLae0Pn7tC 99ytftE05kFWuKzF626Ti1wPkZVBXYxTnxIWVcIus_4O62ejnYCkeYY.Wepf Rk7n6xx8UnznY127k_Pzb7Ybn9dySsZ7SKysqaNWTSFLUDMDt2Fb59d_G4dL 3YjZ8RezYXlPF3VTZDISBi7bgXXaPzPQbxCq_yHh1qbM38pt1ak7pn5oSFnN DmuNcyyns3KuFKnq55algN_YVVVI-
Received: from [209.131.62.115] by web142805.mail.bf1.yahoo.com via HTTP; Tue, 11 Mar 2014 15:06:57 PDT
X-Rocket-MIMEInfo: 002.001, SSB3YXMgYmVpbmcgbW9yZSB2YWd1ZSBiZWNhdXNlIHlvdSAoPykgbWVudGlvbmVkIHRoZSByZW5hbWluZyBzdHVmZi4gwqBJJ20gaGFwcHkgdG8gdXNlIHRoYXQgdGV4dC4KCiJDb250YWlucyB0aGUgdXNlciBuYW1lIGFzb2NpYXRlZCB3aXRoIHRoZcKgcmVzb3VyY2UgYmVpbmcgYWNjZXNzZWQswqB0aGXCoApTQVNMICJhdXRoemlkIi4gwqBJbiBvcmRlciB0byBpbnRlcm9wZXJhdGXCoHdpdGggR1MyIGltcGxlbWVudGF0aW9uc8Kgb2bCoAp0aGlzIHNhbWUgbWVjaGFuaXNtIHRoZSB1c2VyPSBTSE9VTEQgYWwBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.177.636
References: <CF3FAF4D.4B1F4%cantor.2@osu.edu> <1394230922.9009.YahooMailAndroidMobile@web142803.mail.bf1.yahoo.com> <CAPe4Cjp6KSL5FsHVzNPMxvE_E4BmaWgEuZQVr_wEkexH=ukpAg@mail.gmail.com> <CF436DAF.4B41B%cantor.2@osu.edu> <CAK3OfOivZAPDsanf-MAuUxFtzd5+vy51fpuw6UCgohmZP-T3MQ@mail.gmail.com> <1394474177.99427.YahooMailNeo@web125601.mail.ne1.yahoo.com> <CF437606.4B428%cantor.2@osu.edu> <1394475268.88821.YahooMailNeo@web125603.mail.ne1.yahoo.com> <CF437A98.4B43D%cantor.2@osu.edu> <1394475967.98405.YahooMailNeo@web125604.mail.ne1.yahoo.com> <CAK3OfOirp8ZJi8cKa4WKM80jWU8d_t9Snwk-aEEiggNzxu=H3Q@mail.gmail.com> <1394499537.96053.YahooMailNeo@web142802.mail.bf1.yahoo.com> <CAK3OfOhffp=PupCzzqnUe1cA8C4Af26FLC+eGWCzQpgy6GyMQg@mail.gmail.com> <1394500723.9375.YahooMailNeo@web142803.mail.bf1.yahoo.com> <CAK3OfOg9_V_oZ8YP46nKzWwp+UtxSHY4emiDhP5h2i7Rv+7TWQ@mail.gmail.com> <1394502756.57259.YahooMailNeo@web142803.mail.bf1.yahoo.com> <CAK3OfOh8hSwjg_QQdL-LqKrn9R5tE2HrnFomjXe0TNjtsSLVOg@mail.gmail.com>
Message-ID: <1394575617.52449.YahooMailNeo@web142805.mail.bf1.yahoo.com>
Date: Tue, 11 Mar 2014 15:06:57 -0700
From: Bill Mills <wmills_92105@yahoo.com>
To: Nico Williams <nico@cryptonector.com>
In-Reply-To: <CAK3OfOh8hSwjg_QQdL-LqKrn9R5tE2HrnFomjXe0TNjtsSLVOg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1583497461-1195175731-1394575617=:52449"
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/rrwb9SHSafqZCprfJxsUDHGTt5s
Cc: "kitten@ietf.org" <kitten@ietf.org>, Bill Mills <wmills@yahoo-inc.com>
Subject: Re: [kitten] On SASL's authzid
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Bill Mills <wmills_92105@yahoo.com>
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Mar 2014 22:07:12 -0000

I was being more vague because you (?) mentioned the renaming stuff.  I'm happy to use that text.

"Contains the user name asociated with the resource being accessed, the 
SASL "authzid".  In order to interoperate with GS2 implementations of 
this same mechanism the user= SHOULD also appear in the GS2 header's 
authzid attribute (a=)."


Any objections?



On Tuesday, March 11, 2014 2:51 PM, Nico Williams <nico@cryptonector.com> wrote:
 
On Mon, Mar 10, 2014 at 8:52 PM, Bill Mills <wmills_92105@yahoo.com> wrote:
> OK, so here's proposed new text for defining user=
>
> "Contains the user name being asociated with the
> resource being
 accessed, the SASL "authzid".  If a GS2
> mechanism is defined this value will be duplicated unless
> the GS2 mechanism is defined so this value can be re-used."

How about replacing the last sentence with: "In order to interoperate
with GS2 implementations of this same mechanism the user= SHOULD also
appear in the GS2 header's authzid attribute (a=)."


Nico
--

v2.46.0 | Report a Bug | By Email | System Status