IETF Logo Mail Archive

Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-general-pac-02

"Henry B. Hotz" <hotz@jpl.nasa.gov> Tue, 21 June 2011 20:49 UTC

Return-Path: <ietf-krb-wg-bounces@lists.anl.gov>
X-Original-To: ietfarch-krb-wg-archive@ietfa.amsl.com
Delivered-To: ietfarch-krb-wg-archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EF0D11E8122 for <ietfarch-krb-wg-archive@ietfa.amsl.com>; Tue, 21 Jun 2011 13:49:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gze7FsbWkwjC for <ietfarch-krb-wg-archive@ietfa.amsl.com>; Tue, 21 Jun 2011 13:49:56 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by ietfa.amsl.com (Postfix) with ESMTP id 9DAC611E80E4 for <krb-wg-archive@lists.ietf.org>; Tue, 21 Jun 2011 13:49:56 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id ED1FF4B; Tue, 21 Jun 2011 15:49:55 -0500 (CDT)
Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 201594E; Tue, 21 Jun 2011 15:49:54 -0500 (CDT)
Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id E7D312CC0FD; Tue, 21 Jun 2011 15:49:53 -0500 (CDT)
X-Original-To: ietf-krb-wg@lists.anl.gov
Delivered-To: ietf-krb-wg@lists.anl.gov
Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by lists.anl.gov (Postfix) with ESMTP id 8EE8E80E91 for <ietf-krb-wg@lists.anl.gov>; Tue, 21 Jun 2011 15:49:52 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 793357CC066; Tue, 21 Jun 2011 15:49:52 -0500 (CDT)
Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 27317-01; Tue, 21 Jun 2011 15:49:52 -0500 (CDT)
Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 869F67CC064 for <ietf-krb-wg@lists.anl.gov>; Tue, 21 Jun 2011 15:49:51 -0500 (CDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AnwAAOoCAU6AlYtpkWdsb2JhbABUEKcFAQEBAQkLCwcUBSCIc79VhioEhyKPGIp8Vg
X-IronPort-AV: E=Sophos;i="4.65,402,1304312400"; d="scan'208";a="62251039"
Received: from smtp.jpl.nasa.gov (HELO mail.jpl.nasa.gov) ([128.149.139.105]) by mailgateway.anl.gov with ESMTP/TLS/DHE-RSA-AES256-SHA; 21 Jun 2011 15:49:51 -0500
Received: from laphotz.jpl.nasa.gov (laphotz.jpl.nasa.gov [128.149.133.44]) (authenticated (0 bits)) by smtp.jpl.nasa.gov (Switch-3.4.3/Switch-3.4.3) with ESMTP id p5LKni30020408 (using TLSv1/SSLv3 with cipher AES128-SHA (128 bits) verified NO); Tue, 21 Jun 2011 13:49:45 -0700
Mime-Version: 1.0 (Apple Message framework v1084)
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
In-Reply-To: <CA262E7D.DCF2%cantor.2@osu.edu>
Date: Tue, 21 Jun 2011 13:49:44 -0700
Message-Id: <B9AF237B-011D-4704-96F2-071FA171D53A@jpl.nasa.gov>
References: <CA262E7D.DCF2%cantor.2@osu.edu>
To: "Cantor, Scott E." <cantor.2@osu.edu>
X-Mailer: Apple Mail (2.1084)
X-Source-IP: laphotz.jpl.nasa.gov [128.149.133.44]
X-Source-Sender: hotz@jpl.nasa.gov
X-AUTH: Authorized
X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov
Cc: "ietf-krb-wg@lists.anl.gov" <ietf-krb-wg@lists.anl.gov>, Simo Sorce <simo@redhat.com>
Subject: Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-general-pac-02
X-BeenThere: ietf-krb-wg@lists.anl.gov
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" <ietf-krb-wg.lists.anl.gov>
List-Unsubscribe: <https://lists.anl.gov/mailman/options/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=unsubscribe>
List-Archive: <https://lists.anl.gov/pipermail/ietf-krb-wg>
List-Post: <mailto:ietf-krb-wg@lists.anl.gov>
List-Help: <mailto:ietf-krb-wg-request@lists.anl.gov?subject=help>
List-Subscribe: <https://lists.anl.gov/mailman/listinfo/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: ietf-krb-wg-bounces@lists.anl.gov
Sender: ietf-krb-wg-bounces@lists.anl.gov

On Jun 21, 2011, at 8:20 AM, Cantor, Scott E. wrote:

> On 6/21/11 8:44 AM, "Simo Sorce" <simo@redhat.com> wrote:
>>> It is worth noting that the SAML Assertion element has the semantics
>>> described in section 5.1 ("PAD Format"); consequently, in principle a
>>> SAML
>>> attribute assertion could be used as the PAD payload.
>> 
>> It could, but I didn't want to add SAML as a dependency for a KDC. ASN.1
>> while not fancy is available already in both the KDC and the Kerberos
>> client libraries, so it seems a more common denominator.
> 
> Perhaps somebody should simply define an ASN.1 encoding for SAML
> assertions.
> 
> The encoding is unimportant. The semantics are where all the interesting
> code lives.
> 
> -- Scott


+1

Also +1 to direct reference to RFC2307.
------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu



_______________________________________________
ietf-krb-wg mailing list
ietf-krb-wg@lists.anl.gov
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg

v2.23.0 | Report a Bug | By Email