Re: draft-ietf-kitten-extended-mech-inquiry-02.txt

Jeffrey Hutzelman <jhutz@cmu.edu> Tue, 21 November 2006 19:34 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1GmbNc-0003tz-F7; Tue, 21 Nov 2006 14:34:04 -0500
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1GmbNb-0003tu-EZ for kitten@ietf.org; Tue, 21 Nov 2006 14:34:03 -0500
Received: from chokecherry.srv.cs.cmu.edu ([128.2.185.41]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GmbNa-0006Uu-19 for kitten@ietf.org; Tue, 21 Nov 2006 14:34:03 -0500
Received: from SIRIUS.FAC.CS.CMU.EDU (SIRIUS.FAC.CS.CMU.EDU [128.2.209.170]) (authenticated bits=0) by chokecherry.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id kALJXcwI012010 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 21 Nov 2006 14:33:38 -0500 (EST)
Date: Tue, 21 Nov 2006 14:33:38 -0500
From: Jeffrey Hutzelman <jhutz@cmu.edu>
To: Nicolas Williams <Nicolas.Williams@sun.com>
Message-ID: <6A71F080C24954C4889411C8@sirius.fac.cs.cmu.edu>
In-Reply-To: <20061121040049.GU5938@binky.Central.Sun.COM>
References: <45507F6D.8030100@quest.com> <20061107163008.GZ25646@binky.Central.Sun.COM> <45510098.6050601@quest.com> <20061107225534.GI25646@binky.Central.Sun.COM> <B60CCBC6669D250E0A29E20F@sirius.fac.cs.cmu.edu> <20061120231647.GP5938@binky.Central.Sun.COM> <37D450410D255794AF851E93@sirius.fac.cs.cmu.edu> <20061121040049.GU5938@binky.Central.Sun.COM>
Originator-Info: login-token=Mulberry:01G7GXOIUZDKxn/A+5Ti/Hp7IjzmOi5RCIJsWdUTE=; token_authority=postmaster@andrew.cmu.edu
X-Mailer: Mulberry/3.1.6 (Linux/x86)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 69a74e02bbee44ab4f8eafdbcedd94a1
Cc: kitten@ietf.org, David Leonard <David.Leonard@quest.com>, Jeffrey Hutzelman <jhutz@cmu.edu>
Subject: Re: draft-ietf-kitten-extended-mech-inquiry-02.txt
X-BeenThere: kitten@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/kitten>
List-Post: <mailto:kitten@lists.ietf.org>
List-Help: <mailto:kitten-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@lists.ietf.org?subject=subscribe>
Errors-To: kitten-bounces@lists.ietf.org


On Monday, November 20, 2006 10:00:49 PM -0600 Nicolas Williams 
<Nicolas.Williams@sun.com> wrote:

> On Mon, Nov 20, 2006 at 07:16:27PM -0500, Jeffrey Hutzelman wrote:
>> >> This could be solved by defining the short descriptions to be part of
>> >> the  ABI, but then you can't add descriptions for new attribute OID's
>> >> without  making what is essentially a backward-incompatible change.
>> >
>> > I don't see how adding new attributes breaks ABIs.  Can you elaborate?
>> > Or did I misread?
>>
>> Adding _descriptions_ for new attributes breaks the ABI, because a
>> quality  implementation will produce useful descriptions for unknown
>> attributes,  like "unknown-attribute-1.3.6.1.4.1.22484.42.4.1", and that
>> string will no  longer work when the attribute becomes supported and the
>> description  changes to "gco-example-attr-1".
>
> The function in question (GSS_Display_mech_attr()) returns an ERROR
> (GSS_S_BAD_MECH_ATTR) for unknown mech attr OIDs, so nothing like
> "unknown-attribute-1.3.6.1.4.1.22484.42.4.1" will ever be outut by it.

OK.


> And you can't argue that adding new mechanism attributes would break the
> ABI, not any more than you would argue that adding new mechanisms would.

Yes, I agree that adding new values for which it does not return an error 
is not a backward-incompatible change.


> Note that one could implement such a thing in terms of
> GSS_Display_mech_attr().  In pseudo-C-code:

UGH.  If we think people should have any business doing the mapping in that 
direction, we should just provide the API for it.  If not, not.

_______________________________________________
Kitten mailing list
Kitten@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/kitten