IETF Logo Mail Archive

Re: [kitten] Kerberos Service Discovery using DNS

Greg Hudson <ghudson@mit.edu> Wed, 11 March 2015 16:35 UTC

Return-Path: <ghudson@mit.edu>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5771C1A1A73 for <kitten@ietfa.amsl.com>; Wed, 11 Mar 2015 09:35:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.211
X-Spam-Level:
X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HFWyOSEhsuOS for <kitten@ietfa.amsl.com>; Wed, 11 Mar 2015 09:35:35 -0700 (PDT)
Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EB1C1A004B for <kitten@ietf.org>; Wed, 11 Mar 2015 09:35:35 -0700 (PDT)
X-AuditID: 12074424-f79356d000004839-a3-55006ed63c5a
Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 15.2E.18489.6DE60055; Wed, 11 Mar 2015 12:35:34 -0400 (EDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id t2BGZS5H004249; Wed, 11 Mar 2015 12:35:28 -0400
Received: from [18.101.8.239] (vpn-18-101-8-239.mit.edu [18.101.8.239]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id t2BGZLCn026971 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Wed, 11 Mar 2015 12:35:27 -0400
Message-ID: <55006EC9.1030101@mit.edu>
Date: Wed, 11 Mar 2015 12:35:21 -0400
From: Greg Hudson <ghudson@mit.edu>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: Benjamin Kaduk <kaduk@mit.edu>, Nathaniel McCallum <npmccallum@redhat.com>
References: <1425578271.2715.5.camel@redhat.com> <alpine.GSO.1.10.1503111201350.3953@multics.mit.edu>
In-Reply-To: <alpine.GSO.1.10.1503111201350.3953@multics.mit.edu>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmplleLIzCtJLcpLzFFi42IR4hRV1r2WxxBq0H5RwuLo5lUsFnO/zmJ1 YPJYsuQnk8f7fVfZApiiuGxSUnMyy1KL9O0SuDI+T7nHWtDBWjFrWjdTA2M/SxcjJ4eEgInE jhXr2CBsMYkL99YD2VwcQgKLmSR2t59ggXA2MkrMmryXGcI5wiTx68FLsHZeATWJpjUfGUFs FgFViUvz7jOD2GwCyhLr928FqxEVCJOYve4iI0S9oMTJmU/A4iICfhLXny0HW80sICxxYfte VhBbWMBKYvPGJWD1QgKpEo+6toHVcwo4Sjx9+54Vol5PYsf1X1C2vETz1tnMExgFZyFZMQtJ 2SwkZQsYmVcxyqbkVunmJmbmFKcm6xYnJ+blpRbpmuvlZpbopaaUbmIEhTC7i8oOxuZDSocY BTgYlXh4Z8z6HyLEmlhWXJl7iFGSg0lJlDcgmSFUiC8pP6UyI7E4I76oNCe1+BCjBAezkgjv jkCgHG9KYmVValE+TEqag0VJnHfTD74QIYH0xJLU7NTUgtQimKwMB4eSBO+zXKBGwaLU9NSK tMycEoQ0EwcnyHAeoOEGeSDDiwsSc4sz0yHypxh1ORa075/JJMSSl5+XKiXOexRkkABIUUZp HtwcWOp5xSgO9JYw7yGQKh5g2oKb9ApoCRPQEhZroId5i0sSEVJSDYzaVVIOT5eruzm2xp4J FesQ+62gEZ3vMp1JKt5rkoX/6xPte1VPhNrwm3mdM317z3Bd5/o02zuzD9xY7H08yVj32f/O HWyZT2R/nrPfwGF0Vrg8W6PP8WK5/LpbNrcT9Vtuv8+bKK2vGZObFX6j4pj5qxulitre4gmV dTu3LyqfXpZtuLsvS4mlOCPRUIu5qDgRALAvRDsYAwAA
Archived-At: <http://mailarchive.ietf.org/arch/msg/kitten/wx-iBCiTXKJ6hSboPLRfe2TbAAI>
Cc: kitten@ietf.org
Subject: Re: [kitten] Kerberos Service Discovery using DNS
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Mar 2015 16:35:37 -0000

On 03/11/2015 12:05 PM, Benjamin Kaduk wrote:
> Section 5.1 calls out that the default path differs from that in
> [MS-KKDCP].  It seems like some justification for this deviation should be
> offered, or the gratuitous difference removed.

Section 2.1 of [MS-KKDCP] states, "The URI uses the virtual directory
/KdcProxy unless otherwise configured."  I don't know what this actually
means.  I doubt it means that software should convert a URI like
http://hostname to http://hostname/KdcProxy.

In a similar vein it seems weird for this document to say anything about
a default path.  A URI always has a path component; it may be empty.

v2.23.0 | Report a Bug | By Email