Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-general-pac-02
Simo Sorce <simo@redhat.com> Wed, 22 June 2011 17:04 UTC
Return-Path: <ietf-krb-wg-bounces@lists.anl.gov>
X-Original-To: ietfarch-krb-wg-archive@ietfa.amsl.com
Delivered-To: ietfarch-krb-wg-archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 745FB21F8574 for <ietfarch-krb-wg-archive@ietfa.amsl.com>; Wed, 22 Jun 2011 10:04:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.599
X-Spam-Level:
X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MiU3zlWHYBDH for <ietfarch-krb-wg-archive@ietfa.amsl.com>; Wed, 22 Jun 2011 10:04:07 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by ietfa.amsl.com (Postfix) with ESMTP id CDF0E21F8573 for <krb-wg-archive@lists.ietf.org>; Wed, 22 Jun 2011 10:04:07 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 2226755; Wed, 22 Jun 2011 12:04:07 -0500 (CDT)
Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id ECF343A; Wed, 22 Jun 2011 12:04:04 -0500 (CDT)
Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 9CD792CC0FC; Wed, 22 Jun 2011 12:04:04 -0500 (CDT)
X-Original-To: ietf-krb-wg@lists.anl.gov
Delivered-To: ietf-krb-wg@lists.anl.gov
Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by lists.anl.gov (Postfix) with ESMTP id 6AC7080E9A for <ietf-krb-wg@lists.anl.gov>; Wed, 22 Jun 2011 12:04:02 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 4F45B7CC056; Wed, 22 Jun 2011 12:04:02 -0500 (CDT)
Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 21640-05; Wed, 22 Jun 2011 12:04:02 -0500 (CDT)
Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id EF7697CC05F for <ietf-krb-wg@lists.anl.gov>; Wed, 22 Jun 2011 12:04:01 -0500 (CDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AigCALkfAk7RhLcckWdsb2JhbABUEIQ5okcUAQEBAQkLCxsGH7gFkR+BK4N4gQoElk+KcFM
X-IronPort-AV: E=Sophos;i="4.65,407,1304312400"; d="scan'208";a="62305265"
Received: from mx1.redhat.com ([209.132.183.28]) by mailgateway.anl.gov with ESMTP; 22 Jun 2011 12:04:01 -0500
Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id p5MH3uTY016135 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 22 Jun 2011 13:03:56 -0400
Received: from [172.17.32.2] (pilototp-int.redhat.com [10.11.232.41]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id p5MH3tSA029041; Wed, 22 Jun 2011 13:03:55 -0400
From: Simo Sorce <simo@redhat.com>
To: Sam Hartman <hartmans-ietf@mit.edu>
In-Reply-To: <tslfwn2rpfc.fsf@mit.edu>
References: <CA262E7D.DCF2%cantor.2@osu.edu> <tslfwn2rpfc.fsf@mit.edu>
Organization: Red Hat, Inc.
Date: Wed, 22 Jun 2011 13:03:54 -0400
Message-ID: <1308762234.25324.41.camel@willson.li.ssimo.org>
Mime-Version: 1.0
X-Scanned-By: MIMEDefang 2.68 on 10.5.11.22
X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov
Cc: "ietf-krb-wg@lists.anl.gov" <ietf-krb-wg@lists.anl.gov>
Subject: Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-general-pac-02
X-BeenThere: ietf-krb-wg@lists.anl.gov
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" <ietf-krb-wg.lists.anl.gov>
List-Unsubscribe: <https://lists.anl.gov/mailman/options/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=unsubscribe>
List-Archive: <https://lists.anl.gov/pipermail/ietf-krb-wg>
List-Post: <mailto:ietf-krb-wg@lists.anl.gov>
List-Help: <mailto:ietf-krb-wg-request@lists.anl.gov?subject=help>
List-Subscribe: <https://lists.anl.gov/mailman/listinfo/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: ietf-krb-wg-bounces@lists.anl.gov
Sender: ietf-krb-wg-bounces@lists.anl.gov
On Wed, 2011-06-22 at 09:00 -0400, Sam Hartman wrote: > >>>>> "Cantor," == Cantor, Scott E <cantor.2@osu.edu> writes: > > Cantor,> On 6/21/11 8:44 AM, "Simo Sorce" <simo@redhat.com> wrote: > >>> It is worth noting that the SAML Assertion element has the > >>> semantics described in section 5.1 ("PAD Format"); consequently, > >>> in principle a SAML attribute assertion could be used as the PAD > >>> payload. > >> > >> It could, but I didn't want to add SAML as a dependency for a > >> KDC. ASN.1 while not fancy is available already in both the KDC > >> and the Kerberos client libraries, so it seems a more common > >> denominator. > > Cantor,> Perhaps somebody should simply define an ASN.1 encoding for > Cantor,> SAML assertions. > > Cantor,> The encoding is unimportant. The semantics are where all > Cantor,> the interesting code lives. > <hat role="individual"> > > I agree with Scott. I don't care about the encoding. However I do > believe this document should give explicit guidance for how PAD > attributes are surfaced through naming extensions. Are you willing to provide or point to sample language for one of the attributes? I am willing to integrate that guidance if examples are provided. Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg
- [Ietf-krb-wg] Review of draft-sorce-krbwg-general… Josh Howlett
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Simo Sorce
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Josh Howlett
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Cantor, Scott E.
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Henry B. Hotz
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Martin Rex
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Cantor, Scott E.
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Sam Hartman
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Simo Sorce
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Sam Hartman
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Simo Sorce
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Nico Williams
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Nico Williams
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Nico Williams
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Cantor, Scott E.
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Nico Williams
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Cantor, Scott E.
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Nico Williams
- Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-gen… Cantor, Scott E.