IETF Logo Mail Archive

Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-general-pac-02

"Cantor, Scott E." <cantor.2@osu.edu> Tue, 21 June 2011 15:20 UTC

Return-Path: <ietf-krb-wg-bounces@lists.anl.gov>
X-Original-To: ietfarch-krb-wg-archive@ietfa.amsl.com
Delivered-To: ietfarch-krb-wg-archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5F9A11E816A for <ietfarch-krb-wg-archive@ietfa.amsl.com>; Tue, 21 Jun 2011 08:20:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.766
X-Spam-Level:
X-Spam-Status: No, score=-4.766 tagged_above=-999 required=5 tests=[AWL=1.833, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZH1IE7BaIBl1 for <ietfarch-krb-wg-archive@ietfa.amsl.com>; Tue, 21 Jun 2011 08:20:51 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by ietfa.amsl.com (Postfix) with ESMTP id D997211E807E for <krb-wg-archive@lists.ietf.org>; Tue, 21 Jun 2011 08:20:50 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 6250649; Tue, 21 Jun 2011 10:20:50 -0500 (CDT)
Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 380EE48; Tue, 21 Jun 2011 10:20:48 -0500 (CDT)
Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 9A8922CC101; Tue, 21 Jun 2011 10:20:47 -0500 (CDT)
X-Original-To: ietf-krb-wg@lists.anl.gov
Delivered-To: ietf-krb-wg@lists.anl.gov
Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by lists.anl.gov (Postfix) with ESMTP id D6A482CC0FC for <ietf-krb-wg@lists.anl.gov>; Tue, 21 Jun 2011 10:20:43 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C1CE47CC05C; Tue, 21 Jun 2011 10:20:43 -0500 (CDT)
Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07377-03-6; Tue, 21 Jun 2011 10:20:43 -0500 (CDT)
Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id D4D237CC05F for <ietf-krb-wg@lists.anl.gov>; Tue, 21 Jun 2011 10:20:42 -0500 (CDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AqEDAKS1AE6AktiDe2dsb2JhbABUpnEUAQEWJgQhv3uIeIYqBKFs
X-IronPort-AV: E=Sophos;i="4.65,401,1304312400"; d="scan'208";a="62227308"
Received: from defang17.it.ohio-state.edu ([128.146.216.131]) by mailgateway.anl.gov with ESMTP; 21 Jun 2011 10:20:42 -0500
Received: from CIO-TNC-HT06.osuad.osu.edu (cio-tnc-ht06.osuad.osu.edu [164.107.81.171]) by defang17.it.ohio-state.edu (8.13.7/8.13.1) with ESMTP id p5LFKBwo001264; Tue, 21 Jun 2011 11:20:25 -0400
Received: from CIO-KRC-D1MBX01.osuad.osu.edu ([fe80::450b:35e6:80f4:f3e0]) by CIO-TNC-HT06.osuad.osu.edu ([fe80::dde8:9609:5365:c6f3%11]) with mapi; Tue, 21 Jun 2011 11:18:52 -0400
From: "Cantor, Scott E." <cantor.2@osu.edu>
To: Simo Sorce <simo@redhat.com>, Josh Howlett <Josh.Howlett@ja.net>
Thread-Topic: [Ietf-krb-wg] Review of draft-sorce-krbwg-general-pac-02
Thread-Index: AQHMMBDXxpNwazRfuUGGoPQt8s0XypTH7U4A
Date: Tue, 21 Jun 2011 15:20:14 +0000
Message-ID: <CA262E7D.DCF2%cantor.2@osu.edu>
In-Reply-To: <1308660271.25324.20.camel@willson.li.ssimo.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-ID: <5116f61c-4830-499b-b79b-67ca0f19de05>
MIME-Version: 1.0
X-CanIt-Geo: ip=164.107.81.171; country=US; region=OH; city=Columbus; latitude=39.9968; longitude=-82.9882; metrocode=535; areacode=614; http://maps.google.com/maps?q=39.9968,-82.9882&z=6
X-CanItPRO-Stream: outbound
X-Scanned-By: CanIt (www . roaringpenguin . com) on 128.146.216.131
X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov
Cc: "ietf-krb-wg@lists.anl.gov" <ietf-krb-wg@lists.anl.gov>
Subject: Re: [Ietf-krb-wg] Review of draft-sorce-krbwg-general-pac-02
X-BeenThere: ietf-krb-wg@lists.anl.gov
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" <ietf-krb-wg.lists.anl.gov>
List-Unsubscribe: <https://lists.anl.gov/mailman/options/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=unsubscribe>
List-Archive: <https://lists.anl.gov/pipermail/ietf-krb-wg>
List-Post: <mailto:ietf-krb-wg@lists.anl.gov>
List-Help: <mailto:ietf-krb-wg-request@lists.anl.gov?subject=help>
List-Subscribe: <https://lists.anl.gov/mailman/listinfo/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: ietf-krb-wg-bounces@lists.anl.gov
Sender: ietf-krb-wg-bounces@lists.anl.gov

On 6/21/11 8:44 AM, "Simo Sorce" <simo@redhat.com> wrote:
>>It is worth noting that the SAML Assertion element has the semantics
>> described in section 5.1 ("PAD Format"); consequently, in principle a
>>SAML
>> attribute assertion could be used as the PAD payload.
>
>It could, but I didn't want to add SAML as a dependency for a KDC. ASN.1
>while not fancy is available already in both the KDC and the Kerberos
>client libraries, so it seems a more common denominator.

Perhaps somebody should simply define an ASN.1 encoding for SAML
assertions.

The encoding is unimportant. The semantics are where all the interesting
code lives.

-- Scott

_______________________________________________
ietf-krb-wg mailing list
ietf-krb-wg@lists.anl.gov
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg

v2.23.0 | Report a Bug | By Email