From mailman-bounces@lists.ietf.org Fri Oct 1 05:29:41 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 01 Oct 2004 05:29:40 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 97C11131AC for ; Fri, 1 Oct 2004 05:29:40 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CDJIt-00021c-6J for ietf.kitten@mailboxes.suchdamage.org; Fri, 01 Oct 2004 05:02:15 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: lists.ietf.org mailing list memberships reminder From: mailman-owner@lists.ietf.org To: ietf.kitten@mailboxes.suchdamage.org X-No-Archive: yes Message-ID: Date: Fri, 01 Oct 2004 05:00:50 -0400 Precedence: bulk X-BeenThere: mailman@lists.ietf.org X-Mailman-Version: 2.1.5 List-Id: Mailman site list X-List-Administrivia: yes Sender: mailman-bounces@lists.ietf.org Errors-To: mailman-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.6 required=5.0 tests=BAYES_00,NO_REAL_NAME autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 2355 Lines: 56 This is a reminder, sent out once a month, about your lists.ietf.org mailing list memberships. It includes your subscription info and how to use it to change it or unsubscribe from a list. You can visit the URLs to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on. In addition to the URL interfaces, you can also use email to make such changes. For more info, send a message to the '-request' address of the list (for example, mailman-request@lists.ietf.org) containing just the word 'help' in the message body, and an email message will be sent to you with instructions. ********************************************************************** NOTE WELL: Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made within the context of an IETF activity is considered an "IETF Contribution". Such statements include oral statements in IETF sessions, as well as written and electronic communications made at any time or place, which are addressed to: o the IETF plenary session, o any IETF working group or portion thereof, o the IESG, or any member thereof on behalf of the IESG, o the IAB or any member thereof on behalf of the IAB, o any IETF mailing list, including the IETF list itself, any working group or design team list, or any other list functioning under IETF auspices, o the RFC Editor or the Internet-Drafts function All IETF Contributions are subject to the rules of RFC 3667 and RFC 3668. Statements made outside of an IETF session, mailing list or other function, that are clearly not intended to be input to an IETF activity, group or function, are not IETF Contributions in the context of this notice. Please consult RFC 3667 for details. ******************************************************************************* If you have questions, problems, comments, etc, send them to mailman-owner@lists.ietf.org. Thanks! Passwords for ietf.kitten@mailboxes.suchdamage.org: List Password // URL ---- -------- kitten@lists.ietf.org fooglagre https://www1.ietf.org/mailman/options/kitten/ietf.kitten%40mailboxes.suchdamage.org From kitten-bounces@lists.ietf.org Mon Oct 4 18:50:02 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 04 Oct 2004 18:50:01 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 223E113230 for ; Mon, 4 Oct 2004 18:50:01 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CEbaZ-0004Yl-15; Mon, 04 Oct 2004 18:45:51 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CEbaN-0004QA-Mo for kitten@megatron.ietf.org; Mon, 04 Oct 2004 18:45:39 -0400 Received: from jalapeno.cc.columbia.edu (IDENT:cu41754@jalapeno.cc.columbia.edu [128.59.206.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA05763 for ; Mon, 4 Oct 2004 18:45:36 -0400 (EDT) Received: from [192.168.1.10] (24-193-46-55.nyc.rr.com [24.193.46.55]) (user=jaltman mech=PLAIN bits=0) by jalapeno.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i94Mjan2018167 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Mon, 4 Oct 2004 18:45:38 -0400 (EDT) Message-ID: <4161D298.4060002@columbia.edu> Date: Mon, 04 Oct 2004 18:45:44 -0400 From: Jeffrey Altman Organization: No Longer Affiliated with Columbia University in the City of New York User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 Cc: Subject: Kitten at IETF-61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1065453087==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 5814 Lines: 108 This is a cryptographically signed message in MIME format. --===============1065453087== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms060305080009010004070106" This is a cryptographically signed message in MIME format. --------------ms060305080009010004070106 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Since the IESG has not been able to get the formation of the Kitten Working Group on their agenda we have been advised to hold a 2nd BOF at IETF-61. If we get approval for the Charter before we arrive in D.C. the slot will converted from a BOF slot to a WG slot. The question to be answered then is: what do we wish to accomplish by the end of IETF-61? Jeffrey Altman --------------ms060305080009010004070106 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAwxk8TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwNTI3MTc1ODU4WhcNMDUwNTI3MTc1ODU4 WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3JqO5AsZrozd+mJ2mPuCTYo2 +nJ9Qq6jtUYtp7YTMW4d2Q6GLhNaHb1l9m74SxuY4f5vP6JtZjr6p9+LCCxD0w0NVLKRgUDp z+tKFitbkJe9BSCxCURRvY3vdWA71gSCUvZAN3346hHb4oGVqgdpmfFJXYAHWpC46wiL72N9 WxySzY17/0eU0c8+r9dNoLpPQeL43O66O80jCl1qnXMaXaakZPsfm+5W90MYXhpQ1WIQpv02 lBn3BH5YE8xwbsNrw5AF4v7pjMuW85GI6FrDmfbpJX473Rpl5rmv3TpXkJ+7UsIIO1puyS8r 1o7kjDZ5EUYJxxglTGR6XL/RNzqHAgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAZYeVFCMP0iV+UVa0 eFoXkzMVl61CNAVY2YQ9/QQazO3G4qNiif35ArrnjPRDRj5M7WTeOCFqPVuvCttyJRiDKsEe L4Yah22mRA3mR7x52j2FquPYZ9qCr1IhrNGzsMk+gopX5G0fTHZb6+uDu5SeMPNNcIznGA7M CMpXAJ2PcKgwggL6MIICY6ADAgECAgMMZPEwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA0MDUyNzE3NTg1OFoXDTA1 MDUyNzE3NTg1OFowazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NyajuQLGa6M 3fpidpj7gk2KNvpyfUKuo7VGLae2EzFuHdkOhi4TWh29ZfZu+EsbmOH+bz+ibWY6+qffiwgs Q9MNDVSykYFA6c/rShYrW5CXvQUgsQlEUb2N73VgO9YEglL2QDd9+OoR2+KBlaoHaZnxSV2A B1qQuOsIi+9jfVscks2Ne/9HlNHPPq/XTaC6T0Hi+NzuujvNIwpdap1zGl2mpGT7H5vuVvdD GF4aUNViEKb9NpQZ9wR+WBPMcG7Da8OQBeL+6YzLlvORiOhaw5n26SV+O90aZea5r906V5Cf u1LCCDtabskvK9aO5Iw2eRFGCccYJUxkely/0Tc6hwIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAGWH lRQjD9IlflFWtHhaF5MzFZetQjQFWNmEPf0EGsztxuKjYon9+QK654z0Q0Y+TO1k3jghaj1b rwrbciUYgyrBHi+GGodtpkQN5ke8edo9harj2Gfagq9SIazRs7DJPoKKV+RtH0x2W+vrg7uU njDzTXCM5xgOzAjKVwCdj3CoMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMMZPEw CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDQxMDA0MjI0NTQ0WjAjBgkqhkiG9w0BCQQxFgQUyw42fAk/xQzjlgka33469Bj0SnMw UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAwxk8TB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMMZPEwDQYJKoZIhvcNAQEBBQAEggEAIn3LSSqiEeYLh0DrkMzwYFRCupAb9ZkYj0DQpSWd mHcdU83XPT8wI+ROmuy9nNIRcj0M+TbeOz8aXmhYcLVGZo5clBui97HpPssdJXaiPM7QjRCg NU1LWhIlRqFcfijsvDTphAFo1O2EMhxizQs5l6PpfuLr5vJyUjAyYNpm/RnHNF9qEMdZWeGG zKzGGOJN5OSkYcUQ6Uur5vPGzglz+CGHpsuTbPeHeLCKswILg4ibUUu3n1BbNNE2l6lVg/VN HxGKNKhima4k3HuAG+ImoFc+zi+uE3ZnpaA28yT3YmB896AOa1FB8AQ6aTqFV7JhJXU2laNC UKZxYisqEZCOlAAAAAAAAA== --------------ms060305080009010004070106-- --===============1065453087== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1065453087==-- From kitten-bounces@lists.ietf.org Mon Oct 4 19:12:05 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 04 Oct 2004 19:12:04 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 9051013230 for ; Mon, 4 Oct 2004 19:12:04 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CEbyj-0007y8-L8; Mon, 04 Oct 2004 19:10:49 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CEbxm-0007oG-FU for kitten@megatron.ietf.org; Mon, 04 Oct 2004 19:09:50 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA06715 for ; Mon, 4 Oct 2004 19:09:46 -0400 (EDT) Received: from stratton-three-seventy-six.mit.edu ([18.187.6.121] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CEc6w-0004qJ-Tk for kitten@ietf.org; Mon, 04 Oct 2004 19:19:19 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id BDCCFE004F; Mon, 4 Oct 2004 19:09:56 -0400 (EDT) To: Jeffrey Altman References: <4161D298.4060002@columbia.edu> From: Sam Hartman Date: Mon, 04 Oct 2004 19:09:56 -0400 In-Reply-To: <4161D298.4060002@columbia.edu> (Jeffrey Altman's message of "Mon, 04 Oct 2004 18:45:44 -0400") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: d17f825e43c9aed4fd65b7edddddec89 Cc: kitten@ietf.org Subject: Re: Kitten at IETF-61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 632 Lines: 17 >>>>> "Jeffrey" == Jeffrey Altman writes: Jeffrey> Since the IESG has not been able to get the formation of Jeffrey> the Kitten Working Group on their agenda we have been Jeffrey> advised to hold a 2nd BOF at IETF-61. If we get approval Jeffrey> for the Charter before we arrive in D.C. the slot will Jeffrey> converted from a BOF slot to a WG slot. Should we cancel if we don't get approved? I.E. do we actually want to use our second BOF slot? _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 8 17:30:41 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 08 Oct 2004 17:30:40 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 2EF1013207 for ; Fri, 8 Oct 2004 17:30:40 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG1y4-0000di-1F; Fri, 08 Oct 2004 17:08:00 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG1VL-0002a8-Cm for kitten@megatron.ietf.org; Fri, 08 Oct 2004 16:38:19 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA08463 for ; Fri, 8 Oct 2004 16:38:17 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CG1fJ-0001sn-AB for kitten@ietf.org; Fri, 08 Oct 2004 16:48:38 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id 55ABD16009B; Fri, 8 Oct 2004 16:38:32 -0400 (EDT) To: kitten@ietf.org From: Sam Hartman Date: Fri, 08 Oct 2004 16:38:32 -0400 Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 7d33c50f3756db14428398e2bdedd581 Cc: Subject: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 700 Lines: 27 I still haven't thought of anything for us to do with a BOF slot at IETf 61. I think the first tasks of a working group are: 1) Ask Nico what needs to happen to get his pseudo mechs draft to a last-callable state. 2) Find an editor for GSSAPI V3 3) Figure out if we want to do things like the PRF as separate drafts or to fold them into the GSS spec as optional features. 4) Better figure out what naming problem we're going to solve and narrow the scope of our solution. 5) Discuss time lines for things and make sure everything has an editor. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 8 17:59:20 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 08 Oct 2004 17:59:17 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id E433E13207 for ; Fri, 8 Oct 2004 17:59:16 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG2a1-0008Hu-6H; Fri, 08 Oct 2004 17:47:13 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG2X9-00073X-GX for kitten@megatron.ietf.org; Fri, 08 Oct 2004 17:44:16 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA20430 for ; Fri, 8 Oct 2004 17:44:09 -0400 (EDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CG2h3-0005f5-OD for kitten@ietf.org; Fri, 08 Oct 2004 17:54:31 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by brmea-mail-4.sun.com (8.12.10/8.12.9) with ESMTP id i98Li8NH005084 for ; Fri, 8 Oct 2004 15:44:08 -0600 (MDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i98Li7Jf000568 for ; Fri, 8 Oct 2004 15:44:07 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i98LhxVN002065; Fri, 8 Oct 2004 16:43:59 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i98Lhsb9002064; Fri, 8 Oct 2004 16:43:54 -0500 (CDT) Date: Fri, 8 Oct 2004 16:43:54 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041008214353.GC1892@binky.central.sun.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 39bd8f8cbb76cae18b7e23f7cf6b2b9f Cc: kitten@ietf.org Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 1234 Lines: 43 On Fri, Oct 08, 2004 at 04:38:32PM -0400, Sam Hartman wrote: > > > I still haven't thought of anything for us to do with a BOF slot at > IETf 61. > > I think the first tasks of a working group are: > > 1) Ask Nico what needs to happen to get his pseudo mechs draft to a last-callable state. Review. I suppose we can last call I-Ds immediately and see what happens :) > 2) Find an editor for GSSAPI V3 But do we need a meeting for this? I think we may manage work distribution amongst the usual suspects to start with and re-distribute the load later if need be or if other would-be-editors pipe up who want to do the work. > 3) Figure out if we want to do things like the PRF as separate drafts or to fold them into the GSS spec as optional features. Ok. > 4) Better figure out what naming problem we're going to solve and > narrow the scope of our solution. Yeah. This could use a meeting. But first I'd like to meet with you about this. > 5) Discuss time lines for things and make sure everything has an > editor. Yup. Meeting. Perhaps this can wait for #62. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 8 18:07:06 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 08 Oct 2004 18:07:06 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 3515F13835 for ; Fri, 8 Oct 2004 18:07:06 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG2lw-0003WR-Fl; Fri, 08 Oct 2004 17:59:32 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG2bl-0000gE-13 for kitten@megatron.ietf.org; Fri, 08 Oct 2004 17:49:01 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA20915 for ; Fri, 8 Oct 2004 17:48:58 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CG2lj-0005np-9p for kitten@ietf.org; Fri, 08 Oct 2004 17:59:20 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i98Lmws3021162 for ; Fri, 8 Oct 2004 14:48:58 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i98LmvJf003095 for ; Fri, 8 Oct 2004 15:48:57 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i98LmohB002088; Fri, 8 Oct 2004 16:48:50 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i98LmoJp002087; Fri, 8 Oct 2004 16:48:50 -0500 (CDT) Date: Fri, 8 Oct 2004 16:48:50 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041008214849.GA1905@binky.central.sun.com> References: <20041008214353.GC1892@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041008214353.GC1892@binky.central.sun.com> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Cc: kitten@ietf.org Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 592 Lines: 20 On Fri, Oct 08, 2004 at 04:43:53PM -0500, Nicolas Williams wrote: > On Fri, Oct 08, 2004 at 04:38:32PM -0400, Sam Hartman wrote: > > 4) Better figure out what naming problem we're going to solve and > > narrow the scope of our solution. > > Yeah. This could use a meeting. But first I'd like to meet with you > about this. Or maybe we can do this on the list -- it's just as well I think. Basically, we need to work out the interfaces. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 8 18:06:58 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 08 Oct 2004 18:06:58 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id E12E613207 for ; Fri, 8 Oct 2004 18:06:56 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG2lv-0003Vb-41; Fri, 08 Oct 2004 17:59:31 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG2bd-0000V7-1G for kitten@megatron.ietf.org; Fri, 08 Oct 2004 17:48:53 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA20891 for ; Fri, 8 Oct 2004 17:48:50 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CG2lb-0005nV-G5 for kitten@ietf.org; Fri, 08 Oct 2004 17:59:12 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id A02B2E004F; Fri, 8 Oct 2004 17:49:05 -0400 (EDT) To: Nicolas Williams References: <20041008214353.GC1892@binky.central.sun.com> From: Sam Hartman Date: Fri, 08 Oct 2004 17:49:05 -0400 In-Reply-To: <20041008214353.GC1892@binky.central.sun.com> (Nicolas Williams's message of "Fri, 8 Oct 2004 16:43:54 -0500") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 2870a44b67ee17965ce5ad0177e150f4 Cc: kitten@ietf.org Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 297 Lines: 10 I'm hoping that at least one (possibly even the only) editor for the GSSAPI spec is not a usual suspect. I think we're all fairly over loaded at this point. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 8 18:08:16 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 08 Oct 2004 18:08:16 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 25CF213207 for ; Fri, 8 Oct 2004 18:08:16 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG2m1-0003Yl-U7; Fri, 08 Oct 2004 17:59:37 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG2gF-0001eT-6h for kitten@megatron.ietf.org; Fri, 08 Oct 2004 17:53:39 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA21232 for ; Fri, 8 Oct 2004 17:53:36 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CG2qE-0005vL-DX for kitten@ietf.org; Fri, 08 Oct 2004 18:03:58 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i98Lrbs3022925 for ; Fri, 8 Oct 2004 14:53:37 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i98LraJf004829 for ; Fri, 8 Oct 2004 15:53:37 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i98LrTR6002150; Fri, 8 Oct 2004 16:53:29 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i98LrTmS002149; Fri, 8 Oct 2004 16:53:29 -0500 (CDT) Date: Fri, 8 Oct 2004 16:53:29 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041008215329.GD1892@binky.central.sun.com> References: <20041008214353.GC1892@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: d17f825e43c9aed4fd65b7edddddec89 Cc: kitten@ietf.org Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 564 Lines: 17 On Fri, Oct 08, 2004 at 05:49:05PM -0400, Sam Hartman wrote: > I'm hoping that at least one (possibly even the only) editor for the > GSSAPI spec is not a usual suspect. I think we're all fairly over > loaded at this point. Yeah, I'm just thinking about KITTEN skipping #61 on account of the IESG failing to pronounce a WG in time. OTOH, there was plenty of interest expressed at #60, I don't want to disappoint. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Wed Oct 13 14:05:45 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Wed, 13 Oct 2004 14:05:45 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 1AC031324F for ; Wed, 13 Oct 2004 14:05:45 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CHnMn-0005Qp-No; Wed, 13 Oct 2004 13:56:49 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CHnEV-0003MG-G1 for kitten@megatron.ietf.org; Wed, 13 Oct 2004 13:48:15 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA19097 for ; Wed, 13 Oct 2004 13:48:16 -0400 (EDT) Received: from host50.foretec.com ([65.246.255.50] helo=mx2.foretec.com) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CHnPV-0001Yq-JU for kitten@ietf.org; Wed, 13 Oct 2004 13:59:38 -0400 Received: from pool-151-201-247-16.pitt.east.verizon.net ([151.201.247.16] helo=liandra.pc.cs.cmu.edu) by mx2.foretec.com with smtp (Exim 4.24) id 1CHnEY-0000jo-SX for kitten@ietf.org; Wed, 13 Oct 2004 13:48:19 -0400 Received: from liandra.pc.cs.cmu.edu ([127.0.0.1]) by liandra.pc.cs.cmu.edu id aa08025; 8 Oct 2004 18:17 EDT Date: Fri, 08 Oct 2004 18:17:35 -0400 From: Jeffrey Hutzelman To: Nicolas Williams , Sam Hartman Message-ID: <13850000.1097273855@liandra.pc.cs.cmu.edu> In-Reply-To: <20041008215329.GD1892@binky.central.sun.com> References: <20041008214353.GC1892@binky.central.sun.com> <20041008215329.GD1892@binky.central.sun.com> X-Mailer: Mulberry/3.0.3 (Linux/x86) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Spam-Score: 1.3 (+) X-Scan-Signature: 7d33c50f3756db14428398e2bdedd581 Content-Transfer-Encoding: 7bit Cc: kitten@ietf.org Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-2.7 required=5.0 tests=BAYES_00,DATE_IN_PAST_96_XX autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 972 Lines: 27 On Friday, October 08, 2004 16:53:29 -0500 Nicolas Williams wrote: > On Fri, Oct 08, 2004 at 05:49:05PM -0400, Sam Hartman wrote: >> I'm hoping that at least one (possibly even the only) editor for the >> GSSAPI spec is not a usual suspect. I think we're all fairly over >> loaded at this point. > > Yeah, I'm just thinking about KITTEN skipping #61 on account of the IESG > failing to pronounce a WG in time. OTOH, there was plenty of interest > expressed at #60, I don't want to disappoint. Perhaps we can request a short slot and just do a brief overview of what people have been working on, and maybe some discussion of the things that have been brought up since the proposed charter in san diego. At this point I think the real work of kitten is going to happen online for some time yet. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Wed Oct 13 14:11:31 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Wed, 13 Oct 2004 14:11:31 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 54BA91324F for ; Wed, 13 Oct 2004 14:11:31 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CHnSk-0006gB-BU; Wed, 13 Oct 2004 14:02:58 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CHnHv-00040j-CE for kitten@megatron.ietf.org; Wed, 13 Oct 2004 13:51:47 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA19384 for ; Wed, 13 Oct 2004 13:51:48 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CHnSu-0001eS-L4 for kitten@ietf.org; Wed, 13 Oct 2004 14:03:10 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9DHpj7q028254 for ; Wed, 13 Oct 2004 10:51:45 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9DHpiJh006859 for ; Wed, 13 Oct 2004 11:51:44 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9DHpXYt028718; Wed, 13 Oct 2004 12:51:33 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9DHpWGJ028717; Wed, 13 Oct 2004 12:51:32 -0500 (CDT) Date: Wed, 13 Oct 2004 12:51:32 -0500 From: Nicolas Williams To: Jeffrey Hutzelman Message-ID: <20041013175132.GJ19141@binky.central.sun.com> References: <20041008214353.GC1892@binky.central.sun.com> <20041008215329.GD1892@binky.central.sun.com> <13850000.1097273855@liandra.pc.cs.cmu.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <13850000.1097273855@liandra.pc.cs.cmu.edu> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab Cc: kitten@ietf.org, Sam Hartman Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 1116 Lines: 28 On Fri, Oct 08, 2004 at 06:17:35PM -0400, Jeffrey Hutzelman wrote: > > > On Friday, October 08, 2004 16:53:29 -0500 Nicolas Williams > wrote: > > >On Fri, Oct 08, 2004 at 05:49:05PM -0400, Sam Hartman wrote: > >>I'm hoping that at least one (possibly even the only) editor for the > >>GSSAPI spec is not a usual suspect. I think we're all fairly over > >>loaded at this point. > > > >Yeah, I'm just thinking about KITTEN skipping #61 on account of the IESG > >failing to pronounce a WG in time. OTOH, there was plenty of interest > >expressed at #60, I don't want to disappoint. > > Perhaps we can request a short slot and just do a brief overview of what > people have been working on, and maybe some discussion of the things that > have been brought up since the proposed charter in san diego. At this > point I think the real work of kitten is going to happen online for some > time yet. If nothing else we should present the charter. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 8 18:47:34 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 08 Oct 2004 18:47:33 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 9E7E913207 for ; Fri, 8 Oct 2004 18:47:33 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG3Py-0006dL-Go; Fri, 08 Oct 2004 18:40:54 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG3Le-0005o1-N4 for kitten@megatron.ietf.org; Fri, 08 Oct 2004 18:36:26 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA25672 for ; Fri, 8 Oct 2004 18:36:23 -0400 (EDT) Received: from brazilnut.cc.columbia.edu ([128.59.206.18] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CG3Ve-0006p3-Fz for kitten@ietf.org; Fri, 08 Oct 2004 18:46:46 -0400 Received: from [192.168.1.10] (24-193-46-55.nyc.rr.com [24.193.46.55]) (user=jaltman mech=PLAIN bits=0) by brazilnut.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i98MaOju000884 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Fri, 8 Oct 2004 18:36:24 -0400 (EDT) Message-ID: <41671679.1080606@columbia.edu> Date: Fri, 08 Oct 2004 18:36:41 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org References: <20041008214353.GC1892@binky.central.sun.com> <20041008215329.GD1892@binky.central.sun.com> In-Reply-To: <20041008215329.GD1892@binky.central.sun.com> X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 X-Spam-Score: 0.0 (/) X-Scan-Signature: 32b73d73e8047ed17386f9799119ce43 Cc: Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1364470241==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 5905 Lines: 113 This is a cryptographically signed message in MIME format. --===============1364470241== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms030403090604080608030505" This is a cryptographically signed message in MIME format. --------------ms030403090604080608030505 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Nicolas Williams wrote: > Yeah, I'm just thinking about KITTEN skipping #61 on account of the IESG > failing to pronounce a WG in time. OTOH, there was plenty of interest > expressed at #60, I don't want to disappoint. > > Nico Unless there is a change of opinion before the deadline I will encourage the submission of the outstanding drafts which have yet to be published and advise the AD that we will not be requesting a second BOF slot. Jeffrey Altman --------------ms030403090604080608030505 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAwxk8TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwNTI3MTc1ODU4WhcNMDUwNTI3MTc1ODU4 WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3JqO5AsZrozd+mJ2mPuCTYo2 +nJ9Qq6jtUYtp7YTMW4d2Q6GLhNaHb1l9m74SxuY4f5vP6JtZjr6p9+LCCxD0w0NVLKRgUDp z+tKFitbkJe9BSCxCURRvY3vdWA71gSCUvZAN3346hHb4oGVqgdpmfFJXYAHWpC46wiL72N9 WxySzY17/0eU0c8+r9dNoLpPQeL43O66O80jCl1qnXMaXaakZPsfm+5W90MYXhpQ1WIQpv02 lBn3BH5YE8xwbsNrw5AF4v7pjMuW85GI6FrDmfbpJX473Rpl5rmv3TpXkJ+7UsIIO1puyS8r 1o7kjDZ5EUYJxxglTGR6XL/RNzqHAgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAZYeVFCMP0iV+UVa0 eFoXkzMVl61CNAVY2YQ9/QQazO3G4qNiif35ArrnjPRDRj5M7WTeOCFqPVuvCttyJRiDKsEe L4Yah22mRA3mR7x52j2FquPYZ9qCr1IhrNGzsMk+gopX5G0fTHZb6+uDu5SeMPNNcIznGA7M CMpXAJ2PcKgwggL6MIICY6ADAgECAgMMZPEwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA0MDUyNzE3NTg1OFoXDTA1 MDUyNzE3NTg1OFowazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NyajuQLGa6M 3fpidpj7gk2KNvpyfUKuo7VGLae2EzFuHdkOhi4TWh29ZfZu+EsbmOH+bz+ibWY6+qffiwgs Q9MNDVSykYFA6c/rShYrW5CXvQUgsQlEUb2N73VgO9YEglL2QDd9+OoR2+KBlaoHaZnxSV2A B1qQuOsIi+9jfVscks2Ne/9HlNHPPq/XTaC6T0Hi+NzuujvNIwpdap1zGl2mpGT7H5vuVvdD GF4aUNViEKb9NpQZ9wR+WBPMcG7Da8OQBeL+6YzLlvORiOhaw5n26SV+O90aZea5r906V5Cf u1LCCDtabskvK9aO5Iw2eRFGCccYJUxkely/0Tc6hwIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAGWH lRQjD9IlflFWtHhaF5MzFZetQjQFWNmEPf0EGsztxuKjYon9+QK654z0Q0Y+TO1k3jghaj1b rwrbciUYgyrBHi+GGodtpkQN5ke8edo9harj2Gfagq9SIazRs7DJPoKKV+RtH0x2W+vrg7uU njDzTXCM5xgOzAjKVwCdj3CoMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMMZPEw CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDQxMDA4MjIzNjQxWjAjBgkqhkiG9w0BCQQxFgQUy+W07S4ljojNvWQdaZ3wVINbmMow UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAwxk8TB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMMZPEwDQYJKoZIhvcNAQEBBQAEggEAkhiuwxjD9RpYE5ZEIQ3/h7fN0AgYsoY7OxC7O+pS FC1ESEq5O+UflQ2VkOC7IdrprhpP/7KPc7ea8W6YjAn08ri2ftuyT+Y9RnEYLkzUdmvyRUmM 2Pc8VxsauOPEs7UOxsgZs90kTGxDUuLEGCSeeIwdn21y2S1O9crO1sWEvCSThqtM8C8NwQ4+ akLOENYMmsrLWclLaglgyBmdL/oUbcIykPom26BQ/Q6YRORLoORWqBag1ksMio5AgQ7+b9nf EyxpMkcmANDVoH4CiRytBwbqienZ3LGmsNmP8/kPHIKQ5n+Hg8mCXLePp0Lcl3rrfrtstG8o GK6VhChYK0QrnwAAAAAAAA== --------------ms030403090604080608030505-- --===============1364470241== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1364470241==-- From kitten-bounces@lists.ietf.org Fri Oct 8 19:00:24 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 08 Oct 2004 19:00:23 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 84CAE13207 for ; Fri, 8 Oct 2004 19:00:23 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG3cD-0002Af-Eu; Fri, 08 Oct 2004 18:53:33 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG3YB-0001OO-9h for kitten@megatron.ietf.org; Fri, 08 Oct 2004 18:49:23 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA26510 for ; Fri, 8 Oct 2004 18:49:20 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CG3i9-00071j-KD for kitten@ietf.org; Fri, 08 Oct 2004 18:59:44 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i98MnJs3013122 for ; Fri, 8 Oct 2004 15:49:20 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i98MnJJh028272 for ; Fri, 8 Oct 2004 16:49:19 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i98MnB2P005019; Fri, 8 Oct 2004 17:49:11 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i98MnAPq005011; Fri, 8 Oct 2004 17:49:10 -0500 (CDT) Date: Fri, 8 Oct 2004 17:49:10 -0500 From: Nicolas Williams To: Jeffrey Altman Message-ID: <20041008224910.GG1892@binky.central.sun.com> References: <20041008214353.GC1892@binky.central.sun.com> <20041008215329.GD1892@binky.central.sun.com> <41671679.1080606@columbia.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <41671679.1080606@columbia.edu> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 08170828343bcf1325e4a0fb4584481c Cc: kitten@ietf.org Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 710 Lines: 21 On Fri, Oct 08, 2004 at 06:36:41PM -0400, Jeffrey Altman wrote: > Nicolas Williams wrote: > > > >Yeah, I'm just thinking about KITTEN skipping #61 on account of the IESG > >failing to pronounce a WG in time. OTOH, there was plenty of interest > >expressed at #60, I don't want to disappoint. > > > >Nico > > Unless there is a change of opinion before the deadline I will encourage > the submission of the outstanding drafts which have yet to be published > and advise the AD that we will not be requesting a second BOF slot. I will publish some additional I-Ds, yes. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 8 19:01:13 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 08 Oct 2004 19:01:12 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id AF4D813207 for ; Fri, 8 Oct 2004 19:01:12 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG3gg-0003AT-Gw; Fri, 08 Oct 2004 18:58:10 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CG3Zs-0001dw-S5 for kitten@megatron.ietf.org; Fri, 08 Oct 2004 18:51:08 -0400 Received: from pecan.cc.columbia.edu (IDENT:cu41754@pecan.cc.columbia.edu [128.59.206.21]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA26567 for ; Fri, 8 Oct 2004 18:51:05 -0400 (EDT) Received: from [192.168.1.10] (24-193-46-55.nyc.rr.com [24.193.46.55]) (user=jaltman mech=PLAIN bits=0) by pecan.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i98Mp42q012243 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Fri, 8 Oct 2004 18:51:07 -0400 (EDT) Message-ID: <416719EC.4090905@columbia.edu> Date: Fri, 08 Oct 2004 18:51:24 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org References: <20041008214353.GC1892@binky.central.sun.com> <20041008215329.GD1892@binky.central.sun.com> <41671679.1080606@columbia.edu> <20041008224910.GG1892@binky.central.sun.com> In-Reply-To: <20041008224910.GG1892@binky.central.sun.com> X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 Cc: Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0849174301==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 5572 Lines: 104 This is a cryptographically signed message in MIME format. --===============0849174301== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms070304050709040606030609" This is a cryptographically signed message in MIME format. --------------ms070304050709040606030609 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Nicolas Williams wrote: > I will publish some additional I-Ds, yes. In particular I want to see the SPNEGO and C-Sharp drafts. --------------ms070304050709040606030609 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAwxk8TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwNTI3MTc1ODU4WhcNMDUwNTI3MTc1ODU4 WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3JqO5AsZrozd+mJ2mPuCTYo2 +nJ9Qq6jtUYtp7YTMW4d2Q6GLhNaHb1l9m74SxuY4f5vP6JtZjr6p9+LCCxD0w0NVLKRgUDp z+tKFitbkJe9BSCxCURRvY3vdWA71gSCUvZAN3346hHb4oGVqgdpmfFJXYAHWpC46wiL72N9 WxySzY17/0eU0c8+r9dNoLpPQeL43O66O80jCl1qnXMaXaakZPsfm+5W90MYXhpQ1WIQpv02 lBn3BH5YE8xwbsNrw5AF4v7pjMuW85GI6FrDmfbpJX473Rpl5rmv3TpXkJ+7UsIIO1puyS8r 1o7kjDZ5EUYJxxglTGR6XL/RNzqHAgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAZYeVFCMP0iV+UVa0 eFoXkzMVl61CNAVY2YQ9/QQazO3G4qNiif35ArrnjPRDRj5M7WTeOCFqPVuvCttyJRiDKsEe L4Yah22mRA3mR7x52j2FquPYZ9qCr1IhrNGzsMk+gopX5G0fTHZb6+uDu5SeMPNNcIznGA7M CMpXAJ2PcKgwggL6MIICY6ADAgECAgMMZPEwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA0MDUyNzE3NTg1OFoXDTA1 MDUyNzE3NTg1OFowazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NyajuQLGa6M 3fpidpj7gk2KNvpyfUKuo7VGLae2EzFuHdkOhi4TWh29ZfZu+EsbmOH+bz+ibWY6+qffiwgs Q9MNDVSykYFA6c/rShYrW5CXvQUgsQlEUb2N73VgO9YEglL2QDd9+OoR2+KBlaoHaZnxSV2A B1qQuOsIi+9jfVscks2Ne/9HlNHPPq/XTaC6T0Hi+NzuujvNIwpdap1zGl2mpGT7H5vuVvdD GF4aUNViEKb9NpQZ9wR+WBPMcG7Da8OQBeL+6YzLlvORiOhaw5n26SV+O90aZea5r906V5Cf u1LCCDtabskvK9aO5Iw2eRFGCccYJUxkely/0Tc6hwIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAGWH lRQjD9IlflFWtHhaF5MzFZetQjQFWNmEPf0EGsztxuKjYon9+QK654z0Q0Y+TO1k3jghaj1b rwrbciUYgyrBHi+GGodtpkQN5ke8edo9harj2Gfagq9SIazRs7DJPoKKV+RtH0x2W+vrg7uU njDzTXCM5xgOzAjKVwCdj3CoMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMMZPEw CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDQxMDA4MjI1MTI0WjAjBgkqhkiG9w0BCQQxFgQU/+RV+T6W8wGBvdfbG16UwTdXSR4w UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAwxk8TB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMMZPEwDQYJKoZIhvcNAQEBBQAEggEAJuQBFRdOKcGOzaSO3C88cRA+85yH2EqgpCyGff7z sff+KrI19pXG6VIqbDMWTtbTwwzVZ9ayX2ASp4kDatpDq/ssLCE/z2ZpnagOVCLg1YBtNZ6/ nEKk8AtSa0Yg5sAr6SAEnHa84vWYiS0Ls2+AoLvN98RLzcVU4N/O1iW5+1wbzaOfTaYB2Sxx fo1XAS0jKCe8p3m96RGzTVkS9kSq8mCJHvaYz2WzhF0BdXtN7mkZgUPwJitvuSJcj1tvuNgY gMOcz3SOyvrE5pE4Q9lA4on4NwfL/q2ezQLZzAtIcdH3peJFpyZoIIqxdNFcoKZedZDxDkCz SRyGsCblQx5rqAAAAAAAAA== --------------ms070304050709040606030609-- --===============0849174301== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============0849174301==-- From kitten-bounces@lists.ietf.org Wed Oct 13 13:28:43 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Wed, 13 Oct 2004 13:28:42 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 6C0EC1324F for ; Wed, 13 Oct 2004 13:28:42 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CHmma-0005dz-C8; Wed, 13 Oct 2004 13:19:24 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CHmgj-00049C-5m for kitten@megatron.ietf.org; Wed, 13 Oct 2004 13:13:21 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA16564 for ; Wed, 13 Oct 2004 13:13:20 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.206.20] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CHmrh-0000tg-Fh for kitten@ietf.org; Wed, 13 Oct 2004 13:24:42 -0400 Received: from [18.18.6.109] (WEST-NINETYTWO-THREE-SIXTY-FOUR.MIT.EDU [18.18.6.109]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i9DHDGaC009821 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 13 Oct 2004 13:13:17 -0400 (EDT) Message-ID: <416D61EE.5010905@columbia.edu> Date: Wed, 13 Oct 2004 13:12:14 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org References: <20041008214353.GC1892@binky.central.sun.com> <20041008215329.GD1892@binky.central.sun.com> <41671679.1080606@columbia.edu> <20041008224910.GG1892@binky.central.sun.com> <416719EC.4090905@columbia.edu> In-Reply-To: <416719EC.4090905@columbia.edu> X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 X-Spam-Score: 0.0 (/) X-Scan-Signature: b280b4db656c3ca28dd62e5e0b03daa8 Cc: Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1597101132==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 5740 Lines: 104 This is a cryptographically signed message in MIME format. --===============1597101132== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms040704040702090809080303" This is a cryptographically signed message in MIME format. --------------ms040704040702090809080303 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit I have received strong indications that Kitten will be a working group in time for a meeting at IETF 61. I have been asked to resubmit the charter with fixed delivery dates instead of estimated time periods. I am going to estimate delivery dates starting from the end of November. Jeffrey Altman --------------ms040704040702090809080303 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAwxk8TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwNTI3MTc1ODU4WhcNMDUwNTI3MTc1ODU4 WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3JqO5AsZrozd+mJ2mPuCTYo2 +nJ9Qq6jtUYtp7YTMW4d2Q6GLhNaHb1l9m74SxuY4f5vP6JtZjr6p9+LCCxD0w0NVLKRgUDp z+tKFitbkJe9BSCxCURRvY3vdWA71gSCUvZAN3346hHb4oGVqgdpmfFJXYAHWpC46wiL72N9 WxySzY17/0eU0c8+r9dNoLpPQeL43O66O80jCl1qnXMaXaakZPsfm+5W90MYXhpQ1WIQpv02 lBn3BH5YE8xwbsNrw5AF4v7pjMuW85GI6FrDmfbpJX473Rpl5rmv3TpXkJ+7UsIIO1puyS8r 1o7kjDZ5EUYJxxglTGR6XL/RNzqHAgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAZYeVFCMP0iV+UVa0 eFoXkzMVl61CNAVY2YQ9/QQazO3G4qNiif35ArrnjPRDRj5M7WTeOCFqPVuvCttyJRiDKsEe L4Yah22mRA3mR7x52j2FquPYZ9qCr1IhrNGzsMk+gopX5G0fTHZb6+uDu5SeMPNNcIznGA7M CMpXAJ2PcKgwggL6MIICY6ADAgECAgMMZPEwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA0MDUyNzE3NTg1OFoXDTA1 MDUyNzE3NTg1OFowazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NyajuQLGa6M 3fpidpj7gk2KNvpyfUKuo7VGLae2EzFuHdkOhi4TWh29ZfZu+EsbmOH+bz+ibWY6+qffiwgs Q9MNDVSykYFA6c/rShYrW5CXvQUgsQlEUb2N73VgO9YEglL2QDd9+OoR2+KBlaoHaZnxSV2A B1qQuOsIi+9jfVscks2Ne/9HlNHPPq/XTaC6T0Hi+NzuujvNIwpdap1zGl2mpGT7H5vuVvdD GF4aUNViEKb9NpQZ9wR+WBPMcG7Da8OQBeL+6YzLlvORiOhaw5n26SV+O90aZea5r906V5Cf u1LCCDtabskvK9aO5Iw2eRFGCccYJUxkely/0Tc6hwIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAGWH lRQjD9IlflFWtHhaF5MzFZetQjQFWNmEPf0EGsztxuKjYon9+QK654z0Q0Y+TO1k3jghaj1b rwrbciUYgyrBHi+GGodtpkQN5ke8edo9harj2Gfagq9SIazRs7DJPoKKV+RtH0x2W+vrg7uU njDzTXCM5xgOzAjKVwCdj3CoMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMMZPEw CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDQxMDEzMTcxMjE0WjAjBgkqhkiG9w0BCQQxFgQUaZaq6SSkl9pLQYP9hHAPx+Cg4nUw UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAwxk8TB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMMZPEwDQYJKoZIhvcNAQEBBQAEggEAceLFWh492x2xs0yj8SBU44l9gBPv4WpDM+wMIV/4 /9AnnBBaJon7Axc13/06g6qsW7AQUPPdvtbAxp/glrEmTgwBi0ZkqjHmIVVriOBmkJQ58IJI /t+05OnuednchIBMscAiCK+5XalBNk5+U1TZVkVsp3eX0MlGB/xvVPYsugSxa0a6IWPxjAq0 FiiL2MYNxC5l4SJBiuh2hreBvPFcT/MtFz9VC3CuWbQqS0tAl0JUTW/AaaJWWeob4sRRSmQG efr7PNuZ26/km3jShrGtavvhZ5HATDW+hMxtKpWYI26+9vwRAWlwAJ9qgslVuUCyBldmK0AV iRc3+Wva8iNexwAAAAAAAA== --------------ms040704040702090809080303-- --===============1597101132== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1597101132==-- From kitten-bounces@lists.ietf.org Wed Oct 13 13:50:51 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Wed, 13 Oct 2004 13:50:50 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id E842F1324F for ; Wed, 13 Oct 2004 13:50:49 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CHn7c-0001j8-PA; Wed, 13 Oct 2004 13:41:08 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CHmzr-0000Bv-SV for kitten@megatron.ietf.org; Wed, 13 Oct 2004 13:33:07 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA17986 for ; Wed, 13 Oct 2004 13:33:06 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CHnAr-0001HK-94 for kitten@ietf.org; Wed, 13 Oct 2004 13:44:29 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i9DHX5s3024171 for ; Wed, 13 Oct 2004 10:33:05 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9DHX4Jh027224 for ; Wed, 13 Oct 2004 11:33:05 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9DHWr5i028282; Wed, 13 Oct 2004 12:32:53 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9DHWquC028281; Wed, 13 Oct 2004 12:32:52 -0500 (CDT) Date: Wed, 13 Oct 2004 12:32:52 -0500 From: Nicolas Williams To: Jeffrey Altman Message-ID: <20041013173252.GI19141@binky.central.sun.com> References: <20041008214353.GC1892@binky.central.sun.com> <20041008215329.GD1892@binky.central.sun.com> <41671679.1080606@columbia.edu> <20041008224910.GG1892@binky.central.sun.com> <416719EC.4090905@columbia.edu> <416D61EE.5010905@columbia.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <416D61EE.5010905@columbia.edu> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 856eb5f76e7a34990d1d457d8e8e5b7f Cc: kitten@ietf.org Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 675 Lines: 24 Excellent. On Wed, Oct 13, 2004 at 01:12:14PM -0400, Jeffrey Altman wrote: > I have received strong indications that Kitten will be a working group > in time for a meeting at IETF 61. I have been asked to resubmit the > charter with fixed delivery dates instead of estimated time periods. > I am going to estimate delivery dates starting from the end of November. > > Jeffrey Altman > > _______________________________________________ > Kitten mailing list > Kitten@lists.ietf.org > https://www1.ietf.org/mailman/listinfo/kitten _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 14 09:53:08 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 14 Oct 2004 09:53:07 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id A2ABB13824 for ; Thu, 14 Oct 2004 09:53:07 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CI614-0002qf-AA; Thu, 14 Oct 2004 09:51:38 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CI10I-0000Dm-5O for kitten@megatron.ietf.org; Thu, 14 Oct 2004 04:30:30 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA18804 for ; Thu, 14 Oct 2004 04:30:28 -0400 (EDT) Received: from mail3.microsoft.com ([131.107.3.123]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CI1BP-0004ML-PZ for kitten@ietf.org; Thu, 14 Oct 2004 04:42:00 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail3.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Thu, 14 Oct 2004 01:30:05 -0700 Received: from red-imc-01.redmond.corp.microsoft.com ([157.54.9.102]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 14 Oct 2004 01:29:50 -0700 Received: from win-imc-02.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.84]) by red-imc-01.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Thu, 14 Oct 2004 01:29:34 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-02.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Thu, 14 Oct 2004 01:30:06 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Thu, 14 Oct 2004 01:30:13 -0700 Message-ID: Thread-Topic: What to do at IETF 61 thread-index: AcStir6icGyquT1wT9qilKjtaZtycQEPEd2w From: "Liqiang(Larry) Zhu" To: "Jeffrey Altman" , X-OriginalArrivalTime: 14 Oct 2004 08:30:06.0795 (UTC) FILETIME=[029289B0:01C4B1C8] X-Spam-Score: 0.0 (/) X-Scan-Signature: 0bc60ec82efc80c84b8d02f4b0e4de22 Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Thu, 14 Oct 2004 09:51:36 -0400 Cc: Subject: RE: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 950 Lines: 34 > In particular I want to see the SPNEGO and C-Sharp drafts. Sorry, I was a bit overloaded recently. I will get the SPNEGO draft polished this week and get it in before this coming new draft cut-off. My apology to Nico for this. I do not think I can deliver the c-sharp draft with a decent quality by IETF-61: due the recent LH scaling-back, our resources were re-focused/relocated and we will not be able to look at this in the near future. -- Larry -----Original Message----- From: kitten-bounces@lists.ietf.org [mailto:kitten-bounces@lists.ietf.org] On Behalf Of Jeffrey Altman Sent: Friday, October 08, 2004 3:51 PM To: kitten@ietf.org Subject: Re: What to do at IETF 61 Nicolas Williams wrote: > I will publish some additional I-Ds, yes. In particular I want to see the SPNEGO and C-Sharp drafts. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 15 13:04:36 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 15 Oct 2004 13:04:35 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 3525B131D0 for ; Fri, 15 Oct 2004 13:04:35 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CIVSg-0001BV-CX; Fri, 15 Oct 2004 13:01:50 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CIVPr-0000PK-Vt for kitten@megatron.ietf.org; Fri, 15 Oct 2004 12:58:56 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA20369 for ; Fri, 15 Oct 2004 12:58:52 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.206.20] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CIVbG-0004HA-F9 for kitten@ietf.org; Fri, 15 Oct 2004 13:10:43 -0400 Received: from [18.18.6.109] (WEST-NINETYTWO-THREE-SIXTY-FOUR.MIT.EDU [18.18.6.109]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i9FGwolV028749 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 15 Oct 2004 12:58:51 -0400 (EDT) Message-ID: <41700187.8080304@columbia.edu> Date: Fri, 15 Oct 2004 12:57:43 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Liqiang(Larry) Zhu" References: In-Reply-To: X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 X-Spam-Score: 0.0 (/) X-Scan-Signature: 1a1bf7677bfe77d8af1ebe0e91045c5b Cc: kitten@ietf.org Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0291069424==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 6085 Lines: 124 This is a cryptographically signed message in MIME format. --===============0291069424== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms080407090909090506010006" This is a cryptographically signed message in MIME format. --------------ms080407090909090506010006 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Larry: Reminder. The cutoff date for submissions of new internet drafts is Monday morning at 9:00am EDT. Thanks. Jeffrey Altman Liqiang(Larry) Zhu wrote: >>In particular I want to see the SPNEGO and C-Sharp drafts. > > > Sorry, I was a bit overloaded recently. I will get the SPNEGO draft > polished this week and get it in before this coming new draft cut-off. > My apology to Nico for this. > > I do not think I can deliver the c-sharp draft with a decent quality by > IETF-61: due the recent LH scaling-back, our resources were > re-focused/relocated and we will not be able to look at this in the near > future. > > > -- Larry --------------ms080407090909090506010006 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAwxk8TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwNTI3MTc1ODU4WhcNMDUwNTI3MTc1ODU4 WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3JqO5AsZrozd+mJ2mPuCTYo2 +nJ9Qq6jtUYtp7YTMW4d2Q6GLhNaHb1l9m74SxuY4f5vP6JtZjr6p9+LCCxD0w0NVLKRgUDp z+tKFitbkJe9BSCxCURRvY3vdWA71gSCUvZAN3346hHb4oGVqgdpmfFJXYAHWpC46wiL72N9 WxySzY17/0eU0c8+r9dNoLpPQeL43O66O80jCl1qnXMaXaakZPsfm+5W90MYXhpQ1WIQpv02 lBn3BH5YE8xwbsNrw5AF4v7pjMuW85GI6FrDmfbpJX473Rpl5rmv3TpXkJ+7UsIIO1puyS8r 1o7kjDZ5EUYJxxglTGR6XL/RNzqHAgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAZYeVFCMP0iV+UVa0 eFoXkzMVl61CNAVY2YQ9/QQazO3G4qNiif35ArrnjPRDRj5M7WTeOCFqPVuvCttyJRiDKsEe L4Yah22mRA3mR7x52j2FquPYZ9qCr1IhrNGzsMk+gopX5G0fTHZb6+uDu5SeMPNNcIznGA7M CMpXAJ2PcKgwggL6MIICY6ADAgECAgMMZPEwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA0MDUyNzE3NTg1OFoXDTA1 MDUyNzE3NTg1OFowazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NyajuQLGa6M 3fpidpj7gk2KNvpyfUKuo7VGLae2EzFuHdkOhi4TWh29ZfZu+EsbmOH+bz+ibWY6+qffiwgs Q9MNDVSykYFA6c/rShYrW5CXvQUgsQlEUb2N73VgO9YEglL2QDd9+OoR2+KBlaoHaZnxSV2A B1qQuOsIi+9jfVscks2Ne/9HlNHPPq/XTaC6T0Hi+NzuujvNIwpdap1zGl2mpGT7H5vuVvdD GF4aUNViEKb9NpQZ9wR+WBPMcG7Da8OQBeL+6YzLlvORiOhaw5n26SV+O90aZea5r906V5Cf u1LCCDtabskvK9aO5Iw2eRFGCccYJUxkely/0Tc6hwIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAGWH lRQjD9IlflFWtHhaF5MzFZetQjQFWNmEPf0EGsztxuKjYon9+QK654z0Q0Y+TO1k3jghaj1b rwrbciUYgyrBHi+GGodtpkQN5ke8edo9harj2Gfagq9SIazRs7DJPoKKV+RtH0x2W+vrg7uU njDzTXCM5xgOzAjKVwCdj3CoMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMMZPEw CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDQxMDE1MTY1NzQzWjAjBgkqhkiG9w0BCQQxFgQU8ce9FlLED8NmXs10MaBxTQER/jww UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAwxk8TB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMMZPEwDQYJKoZIhvcNAQEBBQAEggEAxPCqkOqfi1BLn//by5SQxbNh7vvEv8ArHyZ22S6r emrq0DiSudCj1Nslre+A5sHrl6j8aePIlYhBFfuQy99p0KdjxI4q8jNqWWSacVrNywkQq3LK VXQqAsjf8GAxcpUjRaEIJSYRgo+MlvE359kv3kfpl6nKzcuxKS6ZsKB50mQAmvX0eoDSC8RE 0A0CSGjZIrXmGqU9N0GpjgPmfcp2qkt9Mu8O3hn2Tht6nZGB4jx9mQvI8F5VHESJQV3oJBaF 5CrvJnKfWhJ3fo5VAgGRV8MgfK01cryM1a1QuI+DC3/ZautJmyFxO8CAgcgPw/IcYtxe2T7j 1oKAHlmD1Bi9+gAAAAAAAA== --------------ms080407090909090506010006-- --===============0291069424== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============0291069424==-- From kitten-bounces@lists.ietf.org Wed Oct 27 04:58:05 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Wed, 27 Oct 2004 04:58:05 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id BDB6F13226 for ; Wed, 27 Oct 2004 04:58:04 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMjc8-00048w-O0; Wed, 27 Oct 2004 04:57:04 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMjV3-000302-Ih for kitten@megatron.ietf.org; Wed, 27 Oct 2004 04:49:45 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA17472 for ; Wed, 27 Oct 2004 04:49:42 -0400 (EDT) Received: from mail1.microsoft.com ([131.107.3.125]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMjiq-0000Sv-Qi for kitten@ietf.org; Wed, 27 Oct 2004 05:04:03 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail1.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 27 Oct 2004 01:49:19 -0700 Received: from red-hub-03.redmond.corp.microsoft.com ([157.54.2.25]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 27 Oct 2004 01:49:10 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-03.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 27 Oct 2004 01:49:29 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1110); Wed, 27 Oct 2004 01:49:08 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Wed, 27 Oct 2004 01:46:43 -0700 Message-ID: Thread-Topic: What to do at IETF 61 thread-index: AcSxUCarurzdG7YtTmqlpvgt6Lv3AAKsVUbY From: "Liqiang(Larry) Zhu" To: "Nicolas Williams" , "Jeffrey Hutzelman" X-OriginalArrivalTime: 27 Oct 2004 08:49:08.0640 (UTC) FILETIME=[D2890200:01C4BC01] X-Spam-Score: 0.5 (/) X-Scan-Signature: dbb8771284c7a36189745aa720dc20ab Cc: kitten@ietf.org, Sam Hartman Subject: RE: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0119783761==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.4 required=5.0 tests=BAYES_00,HTML_MESSAGE autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 5277 Lines: 158 This is a multi-part message in MIME format. --===============0119783761== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C4BC01.CCF30A95" This is a multi-part message in MIME format. ------_=_NextPart_001_01C4BC01.CCF30A95 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I want to request a slot for OCSP-PKINIT, another slot for the referral = draft.=20 =20 The OCSP-PKINIT draft is out for quite a while and there was not any = serious issue. I will request a few more folks to review the referral = draft. =20 -- Larry ________________________________ From: kitten-bounces@lists.ietf.org on behalf of Nicolas Williams Sent: Wed 10/13/2004 10:51 AM To: Jeffrey Hutzelman Cc: kitten@ietf.org; Sam Hartman Subject: Re: What to do at IETF 61 On Fri, Oct 08, 2004 at 06:17:35PM -0400, Jeffrey Hutzelman wrote: > > > On Friday, October 08, 2004 16:53:29 -0500 Nicolas Williams > wrote: > > >On Fri, Oct 08, 2004 at 05:49:05PM -0400, Sam Hartman wrote: > >>I'm hoping that at least one (possibly even the only) editor for the > >>GSSAPI spec is not a usual suspect. I think we're all fairly over > >>loaded at this point. > > > >Yeah, I'm just thinking about KITTEN skipping #61 on account of the = IESG > >failing to pronounce a WG in time. OTOH, there was plenty of = interest > >expressed at #60, I don't want to disappoint. > > Perhaps we can request a short slot and just do a brief overview of = what > people have been working on, and maybe some discussion of the things = that > have been brought up since the proposed charter in san diego. At this > point I think the real work of kitten is going to happen online for = some > time yet. If nothing else we should present the charter. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten ------_=_NextPart_001_01C4BC01.CCF30A95 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =0A= =0A= =0A= =0A= =0A= =0A= Re: What to do at IETF 61=0A= =0A= =0A=
=0A=
I want to = request a slot for =0A= OCSP-PKINIT, another slot for the referral draft.
=0A=
 
=0A=
The OCSP-PKINIT draft is out for quite a while and there = was not =0A= any serious issue.  I will request a few more folks to review the = referral =0A= draft.
=0A=
 
=0A=
-- Larry
=0A=

=0A=
=0A= From: kitten-bounces@lists.ietf.org = on behalf of =0A= Nicolas Williams
Sent: Wed 10/13/2004 10:51 AM
To: = Jeffrey =0A= Hutzelman
Cc: kitten@ietf.org; Sam Hartman
Subject: = Re: What =0A= to do at IETF 61

=0A=
=0A=

On Fri, Oct 08, 2004 at 06:17:35PM -0400, Jeffrey = Hutzelman =0A= wrote:
>
>
> On Friday, October 08, 2004 16:53:29 = -0500 =0A= Nicolas Williams
> <Nicolas.Williams@sun.com> = wrote:
>
> =0A= >On Fri, Oct 08, 2004 at 05:49:05PM -0400, Sam Hartman wrote:
> =0A= >>I'm hoping that at least one (possibly even the only) editor for =0A= the
> >>GSSAPI spec is not a usual suspect.  I think = we're all =0A= fairly over
> >>loaded at this point.
> >
> = >Yeah, =0A= I'm just thinking about KITTEN skipping #61 on account of the = IESG
> =0A= >failing to pronounce a WG in time.  OTOH, there was plenty of =0A= interest
> >expressed at #60, I don't want to =0A= disappoint.
>
> Perhaps we can request a short slot and just = do a =0A= brief overview of what
> people have been working on, and maybe = some =0A= discussion of the things that
> have been brought up since the = proposed =0A= charter in san diego.  At this
> point I think the real work = of =0A= kitten is going to happen online for some
> time yet.

If = nothing =0A= else we should present the =0A= charter.

_______________________________________________
Kitten= =0A= mailing list
Kitten@lists.ietf.org
https://www1.ietf.= org/mailman/listinfo/kitten

=0A= =0A= =0A= ------_=_NextPart_001_01C4BC01.CCF30A95-- --===============0119783761== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============0119783761==-- From kitten-bounces@lists.ietf.org Wed Oct 27 09:06:52 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Wed, 27 Oct 2004 09:06:51 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 06D82131D0 for ; Wed, 27 Oct 2004 09:06:51 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMnUo-0004C1-Aq; Wed, 27 Oct 2004 09:05:46 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMnTt-00042d-7o for kitten@megatron.ietf.org; Wed, 27 Oct 2004 09:04:49 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA01826 for ; Wed, 27 Oct 2004 09:04:47 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.206.20] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMnhl-0004r6-6r for kitten@ietf.org; Wed, 27 Oct 2004 09:19:09 -0400 Received: from [192.168.1.10] (24-193-46-55.nyc.rr.com [24.193.46.55]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i9RD4gir011690 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 27 Oct 2004 09:04:47 -0400 (EDT) Message-ID: <417F9D09.3050008@columbia.edu> Date: Wed, 27 Oct 2004 09:05:13 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org References: In-Reply-To: X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 X-Spam-Score: 0.0 (/) X-Scan-Signature: d6b246023072368de71562c0ab503126 Content-Transfer-Encoding: 7bit Cc: Subject: Re: What to do at IETF 61 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 557 Lines: 25 Liqiang(Larry) Zhu wrote: > I want to request a slot for OCSP-PKINIT, another slot for the referral > draft. > > The OCSP-PKINIT draft is out for quite a while and there was not any > serious issue. I will request a few more folks to review the referral > draft. > > -- Larry Larry: The OSCP PKINIT work is not part of Kitten. I suggest you make this request in the Kerberos working group. Thanks. - Jeff _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 14 12:56:37 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 14 Oct 2004 12:56:37 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id B9EB813824 for ; Thu, 14 Oct 2004 12:56:36 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CI8h7-0003AW-IW; Thu, 14 Oct 2004 12:43:13 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CI8bO-0002Bg-DK for kitten@megatron.ietf.org; Thu, 14 Oct 2004 12:37:18 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA05664 for ; Thu, 14 Oct 2004 12:37:15 -0400 (EDT) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CI8mY-0006H1-Vx for kitten@ietf.org; Thu, 14 Oct 2004 12:48:52 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by brmea-mail-3.sun.com (8.12.10/8.12.9) with ESMTP id i9EGbFui027070 for ; Thu, 14 Oct 2004 10:37:15 -0600 (MDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9EGbEJf018554 for ; Thu, 14 Oct 2004 10:37:15 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9EGb04E007604 for ; Thu, 14 Oct 2004 11:37:00 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9EGb0Up007603 for kitten@ietf.org; Thu, 14 Oct 2004 11:37:00 -0500 (CDT) Date: Thu, 14 Oct 2004 11:37:00 -0500 From: Nicolas Williams To: kitten@ietf.org Message-ID: <20041014163700.GV19141@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 08170828343bcf1325e4a0fb4584481c Cc: Subject: One more item for the charter X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 560 Lines: 21 o Publish guidelines on extensions to the GSS-API with respect to namespace and language specific issues. o Set up IANA registries for GSS-API symbol namespaces. (Ok, that's two items, but really quite closely related.) Doing this should help us keep the interface clean, at least with respect to namespace issues. Note that I consider such namespaces as flags, error codes and so on, as being covered. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 18 04:48:23 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 18 Oct 2004 04:48:22 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 2F59A1324F for ; Mon, 18 Oct 2004 04:48:22 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CJTAj-00030z-26; Mon, 18 Oct 2004 04:47:17 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CJT98-0002r9-Gw for kitten@megatron.ietf.org; Mon, 18 Oct 2004 04:45:38 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA27983 for ; Mon, 18 Oct 2004 04:45:36 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CJTL5-0003PS-Sw for kitten@ietf.org; Mon, 18 Oct 2004 04:58:00 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9I8ja7q019906 for ; Mon, 18 Oct 2004 01:45:37 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9I8jajW002399 for ; Mon, 18 Oct 2004 02:45:36 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9I8jLZK005311 for ; Mon, 18 Oct 2004 03:45:21 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9I8jLR3005310 for kitten@ietf.org; Mon, 18 Oct 2004 03:45:21 -0500 (CDT) Date: Mon, 18 Oct 2004 03:45:21 -0500 From: Nicolas Williams To: kitten@ietf.org Message-ID: <20041018084521.GA19141@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 8abaac9e10c826e8252866cbe6766464 Cc: Subject: Six new I-Ds submitted X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1187 Lines: 38 In the past few days I have submitted the following six Internet-Drafts: - Guide to the GSS-APIv3 (draft-williams-gssapi-v3-guide-to-00.txt) - Namespace Considerations and Registries for GSS-API Extensions (draft-williams-gssapi-extensions-iana-00.txt) - GSS-API Domain-Based Service Names and Name Type (draft-williams-gssapi-domain-based-names-00.txt) - GSS-API Domain-Based Service Names Mapping for the Kerberos V GSS Mechanism (draft-williams-krb5-gssapi-domain-based-names-00.txt) - A PRF API extension for the GSS-API (draft-williams-gssapi-prf-00.txt) - A PRF for the Kerberos V GSS-API Mechanism (draft-williams-krb5-gssapi-prf-00.txt) Some of these are barebones in terms of references. That's just me running out of time ahead of the cut-off for new I-Ds for the 61st IETF. Look for them to appear in the I-D repository soon. It looks like we will have a meeting at IETF #61. I would like a slot for presenting on the topic of what has been published as I-Ds, what needs to be done, etc... Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 08:14:13 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 08:14:13 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id C0CE31383D for ; Thu, 21 Oct 2004 08:14:12 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKavU-0002am-HB; Thu, 21 Oct 2004 07:16:12 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKOKj-0001rm-B7 for kitten@megatron.ietf.org; Wed, 20 Oct 2004 17:49:25 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA01057 for ; Wed, 20 Oct 2004 17:49:12 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKOX2-000744-Io for kitten@ietf.org; Wed, 20 Oct 2004 18:02:09 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i9KLnCs3024943 for ; Wed, 20 Oct 2004 14:49:12 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9KLnAJf021213 for ; Wed, 20 Oct 2004 15:49:11 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9KLmr49017875 for ; Wed, 20 Oct 2004 16:48:53 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9KLmqFr017874 for kitten@ietf.org; Wed, 20 Oct 2004 16:48:52 -0500 (CDT) Date: Wed, 20 Oct 2004 16:48:52 -0500 From: Nicolas Williams To: kitten@ietf.org Message-ID: <20041020214852.GV19142@binky.central.sun.com> References: <20041018084521.GA19141@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041018084521.GA19141@binky.central.sun.com> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7bac9cb154eb5790ae3b2913587a40de Cc: Subject: Re: Six new I-Ds submitted X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 343 Lines: 16 All of these are now in the repository. Please review them, particularly the "Guide to the GSS-APIv3" I-D: http://www.ietf.org/internet-drafts/draft-williams-gssapi-v3-guide-to-00.txt Thanks, Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 07:48:01 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 07:47:59 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 79AEE1383D for ; Thu, 21 Oct 2004 07:47:59 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKamT-0006pt-Fz; Thu, 21 Oct 2004 07:06:53 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKLEN-0006T5-6W; Wed, 20 Oct 2004 14:30:39 -0400 Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA07262; Wed, 20 Oct 2004 14:30:37 -0400 (EDT) Message-Id: <200410201830.OAA07262@ietf.org> From: The IESG To: IETF-Announce@ietf.org Date: Wed, 20 Oct 2004 14:30:37 -0400 Cc: kitten@ietf.org Subject: WG Review: Kitten (kitten) X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: iesg@ietf.org List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 3868 Lines: 94 A new IETF working group has been proposed in the Security Area. The IESG has not made any determination as yet. The following description was submitted, and is provided for informational purposes only. Please send your comments to the IESG mailing list (iesg@ietf.org) by October 27th. Kitten (kitten) ================ Current Status: Proposed Working Group Description: The Generic Security Services API [RFC 2743, RFC 2744] provides an API for applications to set up security contexts and to use these contexts for per-message protection services. The Common Authentication Technology Next Generation Working Group (Kitten) will work on standardizing extensions and improvements to the core GSSAPI specification and language bindings that the IETF believes are necessary based on experience using GSSAPI over the last 10 years. Extensions may be published as separate drafts or included in a GSSAPI version 3. While version 2 of the GSSAPI may be clarified, no backward incompatible changes will be made to this version of the API. This working group is chartered to revise the GSSAPI v2 RFCs for the purpose of clarifying areas of ambiguity: o Use of channel bindings o Thread safety restrictions o C language utilization clarifications and recommendations (e.g., type utilization, name spaces) o Guidelines for GSS-API mechanism designers o Guidelines for GSS-API application protocol designers This working group is chartered to specify a non-backward compatible GSSAPI v3 including support for the following extensions: o Clarify the portable use of channel bindings and better specify channel bindings in a language-independent manner. o Specify thread safety extensions to allow multi-threaded applications to use GSSAPI o Definitions of channel bindings for TLS, IPSec, SSH and other cryptographic channels based on work started in the NFSV4 working group. o Define a GSSAPI extension to allow applications to store credentials. Discussions to be started based upon: o draft-williams-gss-store-deleg-creds-xx.txt o Extensions to solve problems posed by the Global Grid Forum's GSSAPI extensions document. o Extensions to deal with mechanism-specific extensibility in a multi-mechanism environment. o Extend the GSS-API to support authorization by portable GSS applications while also supporting mechanisms that do not have a single canonical name for each authentication identity. o Specify a Domain-based GSS service principal name consisting of: service name, host name, and domain name for use by application services hosted across multiple servers. o Extensions to support stackable GSSAPI mechanisms. o Define a Psuedo-Random Function for GSSAPI This working group is chartered to perform the following GSSAPI mechanism specification work: o Specify a GSSAPI v2/v3 Channel Conjunction Mechanism o Revise RFC 2748 (SPNEGO) to correct problems that make the specification unimplementable and to document the problems found in widely-deployed attempts to implement this spec. o Update the GSSAPI Java Language Bindings to match actual implementation This working group is chartered to perform the following new GSSAPI Language Binding specification work: o Specify a language binding for C# End of Proposed Charter The participants of the IETF-CAT mailing list realize the quantity of work which we desire to undertake is quite ambitious in scope. This is simply an indication of how much work has accumulated over the last few years since the CAT working group disbanded. We believe that we can accomplish the stated work items in 18 months. MAILING LIST: The mailing list for discussions is kitten@lists.ietf.org Use the following web page to join: https://www1.ietf.org/mailman/listinfo/kitten _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 08:46:56 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 08:46:55 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 0DCDC1383D for ; Thu, 21 Oct 2004 08:46:55 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKbMe-0002c4-IG; Thu, 21 Oct 2004 07:44:16 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKWUj-0003qj-N0 for kitten@megatron.ietf.org; Thu, 21 Oct 2004 02:32:17 -0400 Received: from jalapeno.cc.columbia.edu (IDENT:cu41754@jalapeno.cc.columbia.edu [128.59.206.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA14305 for ; Thu, 21 Oct 2004 02:32:10 -0400 (EDT) Received: from [192.168.1.10] (24-193-46-55.nyc.rr.com [24.193.46.55]) (user=jaltman mech=PLAIN bits=0) by jalapeno.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i9L6WBMW013454 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 21 Oct 2004 02:32:11 -0400 (EDT) Message-ID: <41775806.4040900@columbia.edu> Date: Thu, 21 Oct 2004 02:32:38 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 Cc: Subject: Proposed Agenda for IETF 61 (Draft 1) X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1584606909==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 6443 Lines: 131 This is a cryptographically signed message in MIME format. --===============1584606909== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms060306010205080607060500" This is a cryptographically signed message in MIME format. --------------ms060306010205080607060500 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Charter Review (20 minutes) New Drafts: - Guide to the GSS-APIv3 (draft-williams-gssapi-v3-guide-to-00.txt) - Namespace Considerations and Registries for GSS-API Extensions (draft-williams-gssapi-extensions-iana-00.txt) - GSS-API Domain-Based Service Names and Name Type (draft-williams-gssapi-domain-based-names-00.txt) - GSS-API Domain-Based Service Names Mapping for the Kerberos V GSS Mechanism (draft-williams-krb5-gssapi-domain-based-names-00.txt) - A PRF API extension for the GSS-API (draft-williams-gssapi-prf-00.txt) - A PRF for the Kerberos V GSS-API Mechanism (draft-williams-krb5-gssapi-prf-00.txt) - Generic Security Service API Version 2 : Java & C# Bindings (draft-morris-java-gssapi-update-for-csharp-00.txt) - The Simple and Protected GSS-API Negotiation Mechanism (draft-zhu-spnego-2478bis-00.txt) Are there any additional topics folks would like to discuss? I think we are currently looking at a 90 minute time slot --------------ms060306010205080607060500 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAwxk8TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwNTI3MTc1ODU4WhcNMDUwNTI3MTc1ODU4 WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3JqO5AsZrozd+mJ2mPuCTYo2 +nJ9Qq6jtUYtp7YTMW4d2Q6GLhNaHb1l9m74SxuY4f5vP6JtZjr6p9+LCCxD0w0NVLKRgUDp z+tKFitbkJe9BSCxCURRvY3vdWA71gSCUvZAN3346hHb4oGVqgdpmfFJXYAHWpC46wiL72N9 WxySzY17/0eU0c8+r9dNoLpPQeL43O66O80jCl1qnXMaXaakZPsfm+5W90MYXhpQ1WIQpv02 lBn3BH5YE8xwbsNrw5AF4v7pjMuW85GI6FrDmfbpJX473Rpl5rmv3TpXkJ+7UsIIO1puyS8r 1o7kjDZ5EUYJxxglTGR6XL/RNzqHAgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAZYeVFCMP0iV+UVa0 eFoXkzMVl61CNAVY2YQ9/QQazO3G4qNiif35ArrnjPRDRj5M7WTeOCFqPVuvCttyJRiDKsEe L4Yah22mRA3mR7x52j2FquPYZ9qCr1IhrNGzsMk+gopX5G0fTHZb6+uDu5SeMPNNcIznGA7M CMpXAJ2PcKgwggL6MIICY6ADAgECAgMMZPEwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA0MDUyNzE3NTg1OFoXDTA1 MDUyNzE3NTg1OFowazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NyajuQLGa6M 3fpidpj7gk2KNvpyfUKuo7VGLae2EzFuHdkOhi4TWh29ZfZu+EsbmOH+bz+ibWY6+qffiwgs Q9MNDVSykYFA6c/rShYrW5CXvQUgsQlEUb2N73VgO9YEglL2QDd9+OoR2+KBlaoHaZnxSV2A B1qQuOsIi+9jfVscks2Ne/9HlNHPPq/XTaC6T0Hi+NzuujvNIwpdap1zGl2mpGT7H5vuVvdD GF4aUNViEKb9NpQZ9wR+WBPMcG7Da8OQBeL+6YzLlvORiOhaw5n26SV+O90aZea5r906V5Cf u1LCCDtabskvK9aO5Iw2eRFGCccYJUxkely/0Tc6hwIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAGWH lRQjD9IlflFWtHhaF5MzFZetQjQFWNmEPf0EGsztxuKjYon9+QK654z0Q0Y+TO1k3jghaj1b rwrbciUYgyrBHi+GGodtpkQN5ke8edo9harj2Gfagq9SIazRs7DJPoKKV+RtH0x2W+vrg7uU njDzTXCM5xgOzAjKVwCdj3CoMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMMZPEw CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDQxMDIxMDYzMjM4WjAjBgkqhkiG9w0BCQQxFgQUs0exB9PxYjaRs+ejIif3jQ0Creww UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAwxk8TB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMMZPEwDQYJKoZIhvcNAQEBBQAEggEAv+7VWear+RqlB73n3dT2cx2BDu4P8TEyxXOvMGeM 0oz/9bUkZox0GhBF4yjW2KqIFkrGOAyhbdyWprghg1VJ/D0Utp2L5rvIL53mU9psRziScDuV OaUcNa08tMVOL+AeplSQPYNz6qEgRrluGoe59zCzj8aL7OUAxc3iBq6X67Mo/p9VWpFfM7SK /8Vb6+5op/kj58ZkM91ICOuHhXwxrGfXivN24XJpT51WoJg6RncyxmaXjVadwkG0bZEq9iWt XwwQB/jGCElepIYEir5s9JAtg16zxA+/jk7Sx8VCUTe7o4CxU9CILaApaUD+fnyWu0kZpF9D XjmJVNIC9KuTBwAAAAAAAA== --------------ms060306010205080607060500-- --===============1584606909== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1584606909==-- From kitten-bounces@lists.ietf.org Sat Oct 23 18:57:31 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sat, 23 Oct 2004 18:57:31 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id A64EC130EB for ; Sat, 23 Oct 2004 18:57:30 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLUlS-0005bH-Cw; Sat, 23 Oct 2004 18:53:34 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLUi6-0005Ea-PD for kitten@megatron.ietf.org; Sat, 23 Oct 2004 18:50:06 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA29736 for ; Sat, 23 Oct 2004 18:50:03 -0400 (EDT) Received: from stratton-two-sixty-four.mit.edu ([18.187.6.9] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLUvD-0005t5-Fd for kitten@ietf.org; Sat, 23 Oct 2004 19:03:40 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id 7DFD616004F; Sat, 23 Oct 2004 18:50:12 -0400 (EDT) To: Jeffrey Altman References: <41775806.4040900@columbia.edu> From: Sam Hartman Date: Sat, 23 Oct 2004 18:50:12 -0400 In-Reply-To: <41775806.4040900@columbia.edu> (Jeffrey Altman's message of "Thu, 21 Oct 2004 02:32:38 -0400") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 7a6398bf8aaeabc7a7bb696b6b0a2aad Cc: kitten@ietf.org Subject: Re: Proposed Agenda for IETF 61 (Draft 1) X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 542 Lines: 19 >>>>> "Jeffrey" == Jeffrey Altman writes: Jeffrey> - GSS-API Domain-Based Service Names Mapping for the Jeffrey> Kerberos V GSS Mechanism Jeffrey> (draft-williams-krb5-gssapi-domain-based-names-00.txt) Why is this our draft not krb-wg's? Jeffrey> - A PRF for the Kerberos V GSS-API Mechanism Jeffrey> (draft-williams-krb5-gssapi-prf-00.txt) Same here. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Wed Oct 27 09:27:07 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Wed, 27 Oct 2004 09:27:05 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 725DF131D0 for ; Wed, 27 Oct 2004 09:27:05 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMnou-0000nG-CZ; Wed, 27 Oct 2004 09:26:32 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMniS-0007fo-Js for kitten@megatron.ietf.org; Wed, 27 Oct 2004 09:19:52 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA02578 for ; Wed, 27 Oct 2004 09:19:50 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.206.20] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMnwJ-00054h-HM for kitten@ietf.org; Wed, 27 Oct 2004 09:34:12 -0400 Received: from [192.168.1.10] (24-193-46-55.nyc.rr.com [24.193.46.55]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i9RDJnBm016225 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 27 Oct 2004 09:19:49 -0400 (EDT) Message-ID: <417FA092.6050901@columbia.edu> Date: Wed, 27 Oct 2004 09:20:18 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org References: <41775806.4040900@columbia.edu> In-Reply-To: X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 X-Spam-Score: 0.0 (/) X-Scan-Signature: 0bc60ec82efc80c84b8d02f4b0e4de22 Content-Transfer-Encoding: 7bit Cc: Subject: Re: Proposed Agenda for IETF 61 (Draft 1) X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1158 Lines: 34 Sam Hartman wrote: >>>>>>"Jeffrey" == Jeffrey Altman writes: > > > > Jeffrey> - GSS-API Domain-Based Service Names Mapping for the > Jeffrey> Kerberos V GSS Mechanism > Jeffrey> (draft-williams-krb5-gssapi-domain-based-names-00.txt) > > Why is this our draft not krb-wg's? > > > Jeffrey> - A PRF for the Kerberos V GSS-API Mechanism > Jeffrey> (draft-williams-krb5-gssapi-prf-00.txt) > Same here. I believe the question which these documents raise is to what extent do we want discussions of new GSS-API features to be taking place in two working groups. If we are defining PRF for GSS then we are going to require a PRF for the mechs as well. Do we really want to be holding discussions PRF for GSS in both Kitten and Kerberos? I believe it is acceptable at IETF 61 for Nico to present these documents at Kitten as they are not at this point working group documents. I would like to discuss where these documents belong at the Kitten meeting. Jeffrey Altman _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Wed Oct 27 15:13:52 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Wed, 27 Oct 2004 15:13:52 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id C2791131D0 for ; Wed, 27 Oct 2004 15:13:50 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMt7d-0005so-I6; Wed, 27 Oct 2004 15:06:13 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMszz-0000FK-Ol for kitten@megatron.ietf.org; Wed, 27 Oct 2004 14:58:20 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA01686 for ; Wed, 27 Oct 2004 14:58:15 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMtDr-0004Gk-0E for kitten@ietf.org; Wed, 27 Oct 2004 15:12:40 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9RIwD7q023362 for ; Wed, 27 Oct 2004 11:58:13 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9RIwCjY009290 for ; Wed, 27 Oct 2004 12:58:13 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9RIvpb5021361; Wed, 27 Oct 2004 13:57:51 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9RIvo3d021360; Wed, 27 Oct 2004 13:57:50 -0500 (CDT) Date: Wed, 27 Oct 2004 13:57:50 -0500 From: Nicolas Williams To: Jeffrey Altman Message-ID: <20041027185750.GE21427@binky.central.sun.com> References: <41775806.4040900@columbia.edu> <417FA092.6050901@columbia.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <417FA092.6050901@columbia.edu> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 9182cfff02fae4f1b6e9349e01d62f32 Cc: kitten@ietf.org Subject: Re: Proposed Agenda for IETF 61 (Draft 1) X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1189 Lines: 31 On Wed, Oct 27, 2004 at 09:20:18AM -0400, Jeffrey Altman wrote: > Sam Hartman wrote: > >Why is this our draft not krb-wg's? > > I believe the question which these documents raise is to what extent > do we want discussions of new GSS-API features to be taking place in > two working groups. If we are defining PRF for GSS then we are going > to require a PRF for the mechs as well. Do we really want to be holding > discussions PRF for GSS in both Kitten and Kerberos? > > I believe it is acceptable at IETF 61 for Nico to present these > documents at Kitten as they are not at this point working group > documents. I would like to discuss where these documents belong at > the Kitten meeting. I also see no problem with presenting these I-Ds at KITTEN; if nothing else doing so would show that we are doing the mechanism-specific work needed to instantiate these extensions, that we are making progress on our charter. That said, as long as the KRB WG is open for business then these two I-Ds can be reviewed and last called there. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 28 22:28:59 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 28 Oct 2004 22:28:58 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 6C1EB13259 for ; Thu, 28 Oct 2004 22:28:58 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CNK72-0003LU-5W; Thu, 28 Oct 2004 19:55:24 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CNIOy-0007Hp-NA for kitten@megatron.ietf.org; Thu, 28 Oct 2004 18:05:48 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA24577 for ; Thu, 28 Oct 2004 18:05:46 -0400 (EDT) Received: from minbar.fac.cs.cmu.edu ([128.2.185.161]) by ietf-mx.ietf.org with smtp (Exim 4.33) id 1CNId7-0007MD-7h for kitten@ietf.org; Thu, 28 Oct 2004 18:20:26 -0400 Received: from minbar.fac.cs.cmu.edu ([127.0.0.1]) by minbar.fac.cs.cmu.edu id aa29867; 28 Oct 2004 18:05 EDT Date: Thu, 28 Oct 2004 18:05:14 -0400 From: Jeffrey Hutzelman To: Jeffrey Altman , kitten@ietf.org Message-ID: <1031310000.1099001114@minbar.fac.cs.cmu.edu> In-Reply-To: <417FA092.6050901@columbia.edu> References: <41775806.4040900@columbia.edu> <417FA092.6050901@columbia.edu> X-Mailer: Mulberry/3.0.3 (Linux/x86) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Spam-Score: 0.0 (/) X-Scan-Signature: 856eb5f76e7a34990d1d457d8e8e5b7f Content-Transfer-Encoding: 7bit Cc: Subject: Re: Proposed Agenda for IETF 61 (Draft 1) X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 978 Lines: 24 On Wednesday, October 27, 2004 09:20:18 -0400 Jeffrey Altman wrote: > I believe the question which these documents raise is to what extent > do we want discussions of new GSS-API features to be taking place in > two working groups. If we are defining PRF for GSS then we are going > to require a PRF for the mechs as well. Do we really want to be holding > discussions PRF for GSS in both Kitten and Kerberos? > > I believe it is acceptable at IETF 61 for Nico to present these documents > at Kitten as they are not at this point working group documents. I would > like to discuss where these documents belong at the Kitten meeting. Yes, that sounds like a good idea. You should make sure to mention this over on krb-wg, so people there who don't also read here will know the discussion is happening. -- Jeff _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 10:02:24 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 10:02:23 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 7B3651383D for ; Thu, 21 Oct 2004 10:02:23 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKdR3-0004f0-QA; Thu, 21 Oct 2004 09:56:57 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKdHa-0000wz-Oi for kitten@megatron.ietf.org; Thu, 21 Oct 2004 09:47:10 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA29377 for ; Thu, 21 Oct 2004 09:47:04 -0400 (EDT) Received: from mail1.microsoft.com ([131.107.3.125]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKdU8-00035G-NE for kitten@ietf.org; Thu, 21 Oct 2004 10:00:10 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail1.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Thu, 21 Oct 2004 06:46:18 -0700 Received: from red-hub-03.redmond.corp.microsoft.com ([157.54.2.25]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 06:46:32 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-03.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 06:46:23 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Thu, 21 Oct 2004 06:46:27 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 21 Oct 2004 06:46:31 -0700 Message-ID: Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS3Z4MdVU82/K77QXm9aeHpNhuzOwACzD+Q From: "Liqiang(Larry) Zhu" To: "Nicolas Williams" , X-OriginalArrivalTime: 21 Oct 2004 13:46:27.0206 (UTC) FILETIME=[5CABAA60:01C4B774] X-Spam-Score: 0.0 (/) X-Scan-Signature: 856eb5f76e7a34990d1d457d8e8e5b7f Content-Transfer-Encoding: quoted-printable Cc: Paul Leach Subject: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 742 Lines: 24 Windows 2000 has shipped services with the "domain based" names, but the DC name is the second component, and the domain name is the third component. For example, the Kerberos principal name for our LDAP servers is in the form of "ldap//@". If you do not have a good reason for what is in the current draft, please adjust the order for interoperability and backward-compatibility. For consistency, please change the generic "domain based name" to service@host@domain, when the domain name is absent, this can simply be service@host (NOT service@host@). -- Larry _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 12:56:24 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 12:56:23 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 223881383D for ; Thu, 21 Oct 2004 12:56:23 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKg43-00006u-8l; Thu, 21 Oct 2004 12:45:23 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKfqe-0002Pf-NA for kitten@megatron.ietf.org; Thu, 21 Oct 2004 12:31:32 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA20091 for ; Thu, 21 Oct 2004 12:31:29 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKg3H-0007Wf-Pl for kitten@ietf.org; Thu, 21 Oct 2004 12:44:37 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i9LGVTs3029027 for ; Thu, 21 Oct 2004 09:31:29 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9LGVTjW023881 for ; Thu, 21 Oct 2004 10:31:29 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9LGVCo2018561; Thu, 21 Oct 2004 11:31:12 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9LGVCdf018560; Thu, 21 Oct 2004 11:31:12 -0500 (CDT) Date: Thu, 21 Oct 2004 11:31:12 -0500 From: Nicolas Williams To: "Liqiang(Larry) Zhu" Message-ID: <20041021163111.GN19141@binky.central.sun.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: e5ba305d0e64821bf3d8bc5d3bb07228 Cc: kitten@ietf.org, Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1209 Lines: 37 On Thu, Oct 21, 2004 at 06:46:31AM -0700, Liqiang(Larry) Zhu wrote: > > Windows 2000 has shipped services with the "domain based" names, but the > DC name is the second component, and the domain name is the third > component. > > For example, the Kerberos principal name for our LDAP servers is in the > form of "ldap//@". Is a NetBIOS name? > > If you do not have a good reason for what is in the current draft, > please adjust the order for interoperability and backward-compatibility. I didn't have a good reason for any one particular ordering of the components. > For consistency, please change the generic "domain based name" to > service@host@domain, when the domain name is absent, this can simply be > service@host (NOT service@host@). The generic syntax has it as service@@host when the domain part is missing. This is only useful in query form (i.e., as an input to GSS_Import_name()). And it has the benefit of looking different from hostbased names. Or, at least, I thought it was a benefit. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Sun Oct 24 13:47:48 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sun, 24 Oct 2004 13:47:48 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 11E77131D0 for ; Sun, 24 Oct 2004 13:47:48 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLmQ3-0003Xr-HP; Sun, 24 Oct 2004 13:44:39 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLmPD-0003Rv-Fn for kitten@megatron.ietf.org; Sun, 24 Oct 2004 13:43:47 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA16000 for ; Sun, 24 Oct 2004 13:43:46 -0400 (EDT) Received: from stratton-two-sixty-four.mit.edu ([18.187.6.9] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLmcU-0001ny-8t for kitten@ietf.org; Sun, 24 Oct 2004 13:57:31 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id A8510168027; Sun, 24 Oct 2004 13:43:54 -0400 (EDT) To: Nicolas Williams References: <20041021163111.GN19141@binky.central.sun.com> From: Sam Hartman Date: Sun, 24 Oct 2004 13:43:54 -0400 In-Reply-To: <20041021163111.GN19141@binky.central.sun.com> (Nicolas Williams's message of "Thu, 21 Oct 2004 11:31:12 -0500") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 0f1ff0b0158b41ac6b9548d0972cdd31 Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" , Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 204 Lines: 8 Why do we want to support domain based names with a null domain? _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Sun Oct 24 17:04:41 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sun, 24 Oct 2004 17:04:41 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 09804131D0 for ; Sun, 24 Oct 2004 17:04:40 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLpWc-00027j-Kn; Sun, 24 Oct 2004 17:03:38 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLpU2-0001zz-Lv for kitten@megatron.ietf.org; Sun, 24 Oct 2004 17:00:58 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA00262 for ; Sun, 24 Oct 2004 17:00:56 -0400 (EDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLphM-0005Ng-0N for kitten@ietf.org; Sun, 24 Oct 2004 17:14:44 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by brmea-mail-4.sun.com (8.12.10/8.12.9) with ESMTP id i9OL0vNH024902 for ; Sun, 24 Oct 2004 15:00:57 -0600 (MDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9OL0ujW007521 for ; Sun, 24 Oct 2004 15:00:56 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9OL0bMp018977; Sun, 24 Oct 2004 16:00:37 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9OL0awg018976; Sun, 24 Oct 2004 16:00:36 -0500 (CDT) Date: Sun, 24 Oct 2004 16:00:36 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041024210036.GE21427@binky.central.sun.com> References: <20041021163111.GN19141@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 08e48e05374109708c00c6208b534009 Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" , Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 401 Lines: 14 On Sun, Oct 24, 2004 at 01:43:54PM -0400, Sam Hartman wrote: > Why do we want to support domain based names with a null domain? Only for the query syntax (i.e., for input to gss_import_name()). Domain-based MNs should always have all three components. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 13:54:50 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 13:54:50 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 1D6F71324F for ; Mon, 25 Oct 2004 13:54:50 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM906-0002Xi-Si; Mon, 25 Oct 2004 13:51:22 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM8ro-00025q-7F for kitten@megatron.ietf.org; Mon, 25 Oct 2004 13:42:48 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA17433 for ; Mon, 25 Oct 2004 13:42:46 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CM95H-0003rv-Ne for kitten@ietf.org; Mon, 25 Oct 2004 13:56:45 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9PHgj7q001853 for ; Mon, 25 Oct 2004 10:42:45 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PHgjjW016691 for ; Mon, 25 Oct 2004 11:42:45 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PHgOmp019559; Mon, 25 Oct 2004 12:42:24 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PHgOlQ019558; Mon, 25 Oct 2004 12:42:24 -0500 (CDT) Date: Mon, 25 Oct 2004 12:42:24 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025174223.GU21427@binky.central.sun.com> References: <20041021163111.GN19141@binky.central.sun.com> <20041024210036.GE21427@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041024210036.GE21427@binky.central.sun.com> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" , Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 707 Lines: 20 On Sun, Oct 24, 2004 at 04:00:36PM -0500, Nicolas Williams wrote: > On Sun, Oct 24, 2004 at 01:43:54PM -0400, Sam Hartman wrote: > > Why do we want to support domain based names with a null domain? > > Only for the query syntax (i.e., for input to gss_import_name()). > Domain-based MNs should always have all three components. I was trying to explain this again today when I convinced myself that even for the query syntax the domain part should be required, otherwise we create potential security problems in discovering what to fill for the domain part. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 13:00:52 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 13:00:51 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id DCBA11383D for ; Thu, 21 Oct 2004 13:00:50 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKg83-0002CH-6D; Thu, 21 Oct 2004 12:49:31 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKg3D-0007r1-VD for kitten@megatron.ietf.org; Thu, 21 Oct 2004 12:44:32 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA21553 for ; Thu, 21 Oct 2004 12:44:28 -0400 (EDT) Received: from mail1.microsoft.com ([131.107.3.125]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKgFr-0007qx-8e for kitten@ietf.org; Thu, 21 Oct 2004 12:57:36 -0400 Received: from mailout2.microsoft.com ([157.54.1.120]) by mail1.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Thu, 21 Oct 2004 09:43:17 -0700 Received: from red-hub-04.redmond.corp.microsoft.com ([157.54.3.6]) by mailout2.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 09:43:55 -0700 Received: from win-imc-02.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.84]) by red-hub-04.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 09:43:58 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-02.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Thu, 21 Oct 2004 09:43:57 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 21 Oct 2004 09:43:57 -0700 Message-ID: Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS3i3Zb+xrOGckyS6uR4LRYh/GetgAAFC7A From: "Liqiang(Larry) Zhu" To: "Nicolas Williams" X-OriginalArrivalTime: 21 Oct 2004 16:43:57.0845 (UTC) FILETIME=[28F23450:01C4B78D] X-Spam-Score: 0.0 (/) X-Scan-Signature: 5a9a1bd6c2d06a21d748b7d0070ddcb8 Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org, Paul Leach Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 2094 Lines: 63 Nicolas Williams wrote: > Is a NetBIOS name? No, we do not support ldap//. > And it has the benefit of looking different from hostbased names.=20 > Or, at least, I thought it was a benefit. I would rather design domain-based-service-names as a super-set of host-based-service-names, such that a host-based service is just a domain based service with the domain name being the default value, this way you can use the existing service@host names at the place where server@host@domain is needed. This provides backward compatibility (as it is an incremental change). -- Larry -----Original Message----- From: Nicolas Williams [mailto:Nicolas.Williams@sun.com]=20 Sent: Thursday, October 21, 2004 9:31 AM To: Liqiang(Larry) Zhu Cc: kitten@ietf.org; Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name On Thu, Oct 21, 2004 at 06:46:31AM -0700, Liqiang(Larry) Zhu wrote: >=20 > Windows 2000 has shipped services with the "domain based" names, but=20 > the DC name is the second component, and the domain name is the third=20 > component. >=20 > For example, the Kerberos principal name for our LDAP servers is in=20 > the form of "ldap//@". Is a NetBIOS name? >=20 > If you do not have a good reason for what is in the current draft,=20 > please adjust the order for interoperability and backward-compatibility. I didn't have a good reason for any one particular ordering of the components. > For consistency, please change the generic "domain based name" to=20 > service@host@domain, when the domain name is absent, this can simply=20 > be service@host (NOT service@host@). The generic syntax has it as service@@host when the domain part is missing. This is only useful in query form (i.e., as an input to GSS_Import_name()). And it has the benefit of looking different from hostbased names. Or, at least, I thought it was a benefit. Nico --=20 _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 13:02:54 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 13:02:53 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id C48761383D for ; Thu, 21 Oct 2004 13:02:52 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgGh-0008NY-F5; Thu, 21 Oct 2004 12:58:27 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKg5N-0001T3-GN for kitten@megatron.ietf.org; Thu, 21 Oct 2004 12:46:45 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA21878 for ; Thu, 21 Oct 2004 12:46:42 -0400 (EDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKgI0-0007x7-Po for kitten@ietf.org; Thu, 21 Oct 2004 12:59:50 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by brmea-mail-4.sun.com (8.12.10/8.12.9) with ESMTP id i9LGkhNH004928 for ; Thu, 21 Oct 2004 10:46:43 -0600 (MDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9LGkgjW029090 for ; Thu, 21 Oct 2004 10:46:42 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9LGkPfQ018573; Thu, 21 Oct 2004 11:46:25 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9LGkPqu018572; Thu, 21 Oct 2004 11:46:25 -0500 (CDT) Date: Thu, 21 Oct 2004 11:46:25 -0500 From: Nicolas Williams To: "Liqiang(Larry) Zhu" Message-ID: <20041021164625.GO19141@binky.central.sun.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 93238566e09e6e262849b4f805833007 Cc: kitten@ietf.org, Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1062 Lines: 30 On Thu, Oct 21, 2004 at 09:43:57AM -0700, Liqiang(Larry) Zhu wrote: > Nicolas Williams wrote: > > Is a NetBIOS name? > > No, we do not support ldap//. > > > And it has the benefit of looking different from hostbased names. > > Or, at least, I thought it was a benefit. > > I would rather design domain-based-service-names as a super-set of > host-based-service-names, such that a host-based service is just a > domain based service with the domain name being the default value, this > way you can use the existing service@host names at the place where > server@host@domain is needed. This provides backward compatibility (as > it is an incremental change). The application still requires changing though, to use the new name type OID. Or is there something about the SSPI that obviates the need for name type OIDs? Anyways, I don't feel strongly about this one way or the other. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 16:37:38 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 16:37:37 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id A54A91383D for ; Thu, 21 Oct 2004 16:37:36 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKiuj-0002xc-3s; Thu, 21 Oct 2004 15:47:57 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKikf-0001d1-Ly for kitten@megatron.ietf.org; Thu, 21 Oct 2004 15:37:33 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA11203 for ; Thu, 21 Oct 2004 15:37:31 -0400 (EDT) Received: from smtpde02.sap-ag.de ([155.56.68.170]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKixB-0004L3-Dg for kitten@ietf.org; Thu, 21 Oct 2004 15:50:39 -0400 Received: from sap-ag.de (smtpde02) by smtpde02.sap-ag.de (out) with ESMTP id VAA01090; Thu, 21 Oct 2004 21:36:39 +0200 (MESZ) From: Martin Rex Message-Id: <200410211936.VAA18266@uw1048.wdf.sap.corp> To: Nicolas.Williams@sun.com (Nicolas Williams) Date: Thu, 21 Oct 2004 21:36:39 +0200 (MET DST) In-Reply-To: <20041021164625.GO19141@binky.central.sun.com> from "Nicolas Williams" at Oct 21, 4 11:46:25 am MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-SAP: out X-SAP: out X-SAP: out X-SAP: out X-Spam-Score: 0.0 (/) X-Scan-Signature: 21c69d3cfc2dd19218717dbe1d974352 Content-Transfer-Encoding: 8bit Cc: kitten@ietf.org, lzhu@windows.microsoft.com, paulle@windows.microsoft.com Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: martin.rex@sap.com List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1850 Lines: 50 Nicolas Williams wrote: > > The application still requires changing though, to use the new name type > OID. Or is there something about the SSPI that obviates the need for > name type OIDs? The reality when dealing with SSPI's inconsistent naming in a mix of (a) meta-knowledge (b) heuristic trial-and-error (c) dirty hacks and the "traditional" SSPI calls (pre-W2K) don't tag names. e.g. QueryCredentialsAttributes(NAMES) on a SSPI Kerberos credential will return a correct Kerberos principal name (i.e. REALM name with correct case), and similarly will QueryContextAttributes(NATIVE_NAMES) return *correct* Kerberos principal names However, the two newer SSPI calls, which actually have a parameter to distinguish name types, namely GetUserNameEx() and TranslateName() are broken in that they (a) do not work at all without an Active Directory (b) fail most of the time to produce the default Kerberos principal name when requesting "NameUserPrincipal" on most W2K+ platforms. (c) do not return correct Kerberos principal names, but instead return lookalikes with the lowercase DNS domain name following the @ character, which is obviously inconsistent with the semantics of QueryCredentialsAttributes(NAMES) and QueryContextAttributes(NATIVE_NAMES) But if you open a command shell and look at the environment of a Windows W2K+ machine joined to a W2K+ domain, then there is the environment variable "USERDNSDOMAIN", containing the DNS domain name in _all_uppercase_ -- which is kind of funny, because it happens to be the correct spelling for the Kerberos REALM name, and *NOT* the DNS domain name (I know that the DNS name is actually case-insensitive). :-/ -Martin _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 21:14:24 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 21:14:23 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 991C41383D for ; Thu, 21 Oct 2004 21:14:23 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKlMG-0004YF-L7; Thu, 21 Oct 2004 18:24:32 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKjr2-0003WI-3A for kitten@megatron.ietf.org; Thu, 21 Oct 2004 16:48:12 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA23278 for ; Thu, 21 Oct 2004 16:48:09 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.206.20] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKk3i-0007xo-A4 for kitten@ietf.org; Thu, 21 Oct 2004 17:01:19 -0400 Received: from [192.168.1.10] (24-193-46-55.nyc.rr.com [24.193.46.55]) (user=jaltman mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i9LKm174023898 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 21 Oct 2004 16:48:07 -0400 (EDT) Message-ID: <41782097.9050409@columbia.edu> Date: Thu, 21 Oct 2004 16:48:23 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org References: <200410211936.VAA18266@uw1048.wdf.sap.corp> In-Reply-To: <200410211936.VAA18266@uw1048.wdf.sap.corp> X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 X-Spam-Score: 0.0 (/) X-Scan-Signature: 14582b0692e7f70ce7111d04db3781c8 Cc: Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1933658501==" Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 6122 Lines: 118 This is a cryptographically signed message in MIME format. --===============1933658501== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms090600030406090009040402" This is a cryptographically signed message in MIME format. --------------ms090600030406090009040402 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Martin Rex wrote: > But if you open a command shell and look at the environment of > a Windows W2K+ machine joined to a W2K+ domain, then there is > the environment variable "USERDNSDOMAIN", containing the DNS domain > name in _all_uppercase_ -- which is kind of funny, because it happens > to be the correct spelling for the Kerberos REALM name, and *NOT* the > DNS domain name (I know that the DNS name is actually case-insensitive). > > :-/ This value can also be found at: HKEY_CURRENT_USER\"Volatile Environment" "USERDNSDOMAIN" which is how MIT Kerberos obtains it when we can't obtain the realm (oops domain) name from LsaGetLogonSessionData(). Jeffrey Altman --------------ms090600030406090009040402 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJPzCC AvowggJjoAMCAQICAwxk8TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDQwNTI3MTc1ODU4WhcNMDUwNTI3MTc1ODU4 WjBrMQ8wDQYDVQQEEwZBbHRtYW4xFTATBgNVBCoTDEplZmZyZXkgRXJpYzEcMBoGA1UEAxMT SmVmZnJleSBFcmljIEFsdG1hbjEjMCEGCSqGSIb3DQEJARYUamFsdG1hbkBjb2x1bWJpYS5l ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3JqO5AsZrozd+mJ2mPuCTYo2 +nJ9Qq6jtUYtp7YTMW4d2Q6GLhNaHb1l9m74SxuY4f5vP6JtZjr6p9+LCCxD0w0NVLKRgUDp z+tKFitbkJe9BSCxCURRvY3vdWA71gSCUvZAN3346hHb4oGVqgdpmfFJXYAHWpC46wiL72N9 WxySzY17/0eU0c8+r9dNoLpPQeL43O66O80jCl1qnXMaXaakZPsfm+5W90MYXhpQ1WIQpv02 lBn3BH5YE8xwbsNrw5AF4v7pjMuW85GI6FrDmfbpJX473Rpl5rmv3TpXkJ+7UsIIO1puyS8r 1o7kjDZ5EUYJxxglTGR6XL/RNzqHAgMBAAGjMTAvMB8GA1UdEQQYMBaBFGphbHRtYW5AY29s dW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAZYeVFCMP0iV+UVa0 eFoXkzMVl61CNAVY2YQ9/QQazO3G4qNiif35ArrnjPRDRj5M7WTeOCFqPVuvCttyJRiDKsEe L4Yah22mRA3mR7x52j2FquPYZ9qCr1IhrNGzsMk+gopX5G0fTHZb6+uDu5SeMPNNcIznGA7M CMpXAJ2PcKgwggL6MIICY6ADAgECAgMMZPEwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA0MDUyNzE3NTg1OFoXDTA1 MDUyNzE3NTg1OFowazEPMA0GA1UEBBMGQWx0bWFuMRUwEwYDVQQqEwxKZWZmcmV5IEVyaWMx HDAaBgNVBAMTE0plZmZyZXkgRXJpYyBBbHRtYW4xIzAhBgkqhkiG9w0BCQEWFGphbHRtYW5A Y29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NyajuQLGa6M 3fpidpj7gk2KNvpyfUKuo7VGLae2EzFuHdkOhi4TWh29ZfZu+EsbmOH+bz+ibWY6+qffiwgs Q9MNDVSykYFA6c/rShYrW5CXvQUgsQlEUb2N73VgO9YEglL2QDd9+OoR2+KBlaoHaZnxSV2A B1qQuOsIi+9jfVscks2Ne/9HlNHPPq/XTaC6T0Hi+NzuujvNIwpdap1zGl2mpGT7H5vuVvdD GF4aUNViEKb9NpQZ9wR+WBPMcG7Da8OQBeL+6YzLlvORiOhaw5n26SV+O90aZea5r906V5Cf u1LCCDtabskvK9aO5Iw2eRFGCccYJUxkely/0Tc6hwIDAQABozEwLzAfBgNVHREEGDAWgRRq YWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBAGWH lRQjD9IlflFWtHhaF5MzFZetQjQFWNmEPf0EGsztxuKjYon9+QK654z0Q0Y+TO1k3jghaj1b rwrbciUYgyrBHi+GGodtpkQN5ke8edo9harj2Gfagq9SIazRs7DJPoKKV+RtH0x2W+vrg7uU njDzTXCM5xgOzAjKVwCdj3CoMIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAzMDcx NzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnK mVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/ cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8 YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1haWxDQS5j cmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwy LTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2asZw9/r6y+whehQ5aUnX9MIbj4 Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowg T2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHTHUb/XV9lTzGCAzswggM3AgEB MGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0 ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMMZPEw CQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMDQxMDIxMjA0ODIzWjAjBgkqhkiG9w0BCQQxFgQUo4wGXHeUEJOGZS3cP47Eht1gmq0w UgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYBBAGCNxAEMWswaTBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAwxk8TB6BgsqhkiG9w0B CRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQ dHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENB AgMMZPEwDQYJKoZIhvcNAQEBBQAEggEAi0TrQ9ieBdBYt07dISFW6A16+KcjWPULoKsX67hD ZnLbtmsLRxKQziKh8ESy8rg1fqeNpW7QKExB3Khe6RohNRwPuq3wlwrAhkmxejbKFRPKH1Dd I6vBvXBKlIORvmpNTcXiMnczz+3X4rn0taFe6k+PXnXgvx8Rxs/+JiofpdvWTEG2kZRUYEPB xzukQL9hmo6O/ssDxByxX1RCHVkDCL11xlECOz5CeYXjvrUKSrSqw1OVqyMp6xLEw2gEWgeZ K2am0LM4Nd1LwQAQHZ1ls+nqP5Sy2BL6FxRYhMaL2WM/v90pUjsO4WmNkMftXOpPEcwzqMTL WOYOitTdMnuZzwAAAAAAAA== --------------ms090600030406090009040402-- --===============1933658501== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --===============1933658501==-- From kitten-bounces@lists.ietf.org Fri Oct 22 19:04:38 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 22 Oct 2004 19:04:37 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 7280F130EB for ; Fri, 22 Oct 2004 19:04:36 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL7rm-0000nA-1M; Fri, 22 Oct 2004 18:26:34 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL7Zt-0000Bu-M6 for kitten@megatron.ietf.org; Fri, 22 Oct 2004 18:08:05 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA29164 for ; Fri, 22 Oct 2004 18:08:00 -0400 (EDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CL7mj-0004pe-B3 for kitten@ietf.org; Fri, 22 Oct 2004 18:21:22 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by brmea-mail-4.sun.com (8.12.10/8.12.9) with ESMTP id i9MM7xNH014715 for ; Fri, 22 Oct 2004 16:07:59 -0600 (MDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9MM7xjW009953 for ; Fri, 22 Oct 2004 16:07:59 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9MM7fam016274; Fri, 22 Oct 2004 17:07:41 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9MM7eC0016273; Fri, 22 Oct 2004 17:07:40 -0500 (CDT) Date: Fri, 22 Oct 2004 17:07:40 -0500 From: Nicolas Williams To: "Liqiang(Larry) Zhu" Message-ID: <20041022220740.GU21427@binky.central.sun.com> References: <20041021164625.GO19141@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041021164625.GO19141@binky.central.sun.com> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: de4f315c9369b71d7dd5909b42224370 Cc: kitten@ietf.org, Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 767 Lines: 23 On Thu, Oct 21, 2004 at 11:46:25AM -0500, Nicolas Williams wrote: > The application still requires changing though, to use the new name type > OID. Or is there something about the SSPI that obviates the need for > name type OIDs? Sorry I asked that. I didn't mean to start a thread about bugs in an implementation on this list. So, let me rephrase: what is the benefit of changing the generic domain-based name syntax as Larry requests? To me it's almost six of one, half a dozen of the other. Except for this: service@@host instantly looks like a domain based name using a default domain, to me, so I prefer it. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 13:16:24 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 13:16:18 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 3581F1383D for ; Thu, 21 Oct 2004 13:16:18 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgJc-0000rf-M3; Thu, 21 Oct 2004 13:01:28 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgAI-0003az-JE for kitten@megatron.ietf.org; Thu, 21 Oct 2004 12:51:50 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA22302 for ; Thu, 21 Oct 2004 12:51:44 -0400 (EDT) Received: from mail1.microsoft.com ([131.107.3.125]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKgMu-00084S-PC for kitten@ietf.org; Thu, 21 Oct 2004 13:04:53 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail1.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Thu, 21 Oct 2004 09:50:34 -0700 Received: from red-hub-03.redmond.corp.microsoft.com ([157.54.2.25]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 09:51:16 -0700 Received: from win-imc-02.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.84]) by red-hub-03.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 09:51:17 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-02.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Thu, 21 Oct 2004 09:51:15 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 21 Oct 2004 09:51:14 -0700 Message-ID: Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS3jZoALWcJU8msS02PpGgHKE4rTAAACohw From: "Liqiang(Larry) Zhu" To: "Nicolas Williams" X-OriginalArrivalTime: 21 Oct 2004 16:51:15.0812 (UTC) FILETIME=[2DFEAA40:01C4B78E] X-Spam-Score: 0.0 (/) X-Scan-Signature: 8b30eb7682a596edff707698f4a80f7d Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org, Paul Leach Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1502 Lines: 45 Nicolas Williams wrote: > Or is there something about the SSPI that obviates the need for name type OIDs? SSPI does not use OID at the API level. =20 -- Larry -----Original Message----- From: Nicolas Williams [mailto:Nicolas.Williams@sun.com]=20 Sent: Thursday, October 21, 2004 9:46 AM To: Liqiang(Larry) Zhu Cc: kitten@ietf.org; Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name On Thu, Oct 21, 2004 at 09:43:57AM -0700, Liqiang(Larry) Zhu wrote: > Nicolas Williams wrote: > > Is a NetBIOS name? >=20 > No, we do not support ldap//. >=20 > > And it has the benefit of looking different from hostbased names.=20 > > Or, at least, I thought it was a benefit. >=20 > I would rather design domain-based-service-names as a super-set of=20 > host-based-service-names, such that a host-based service is just a=20 > domain based service with the domain name being the default value,=20 > this way you can use the existing service@host names at the place=20 > where server@host@domain is needed. This provides backward=20 > compatibility (as it is an incremental change). The application still requires changing though, to use the new name type OID. Or is there something about the SSPI that obviates the need for name type OIDs? Anyways, I don't feel strongly about this one way or the other. Nico --=20 _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 13:16:47 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 13:16:46 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 2595B1383D for ; Thu, 21 Oct 2004 13:16:46 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgKS-0001Eq-1m; Thu, 21 Oct 2004 13:02:20 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgCl-00052Y-PJ for kitten@megatron.ietf.org; Thu, 21 Oct 2004 12:54:23 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA22482 for ; Thu, 21 Oct 2004 12:54:20 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKgPP-000882-Bj for kitten@ietf.org; Thu, 21 Oct 2004 13:07:28 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9LGsL7q026098 for ; Thu, 21 Oct 2004 09:54:21 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9LGsKJf003344 for ; Thu, 21 Oct 2004 10:54:20 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9LGrxSL018582; Thu, 21 Oct 2004 11:53:59 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9LGrxA0018581; Thu, 21 Oct 2004 11:53:59 -0500 (CDT) Date: Thu, 21 Oct 2004 11:53:59 -0500 From: Nicolas Williams To: "Liqiang(Larry) Zhu" Message-ID: <20041021165359.GP19141@binky.central.sun.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 08e48e05374109708c00c6208b534009 Cc: kitten@ietf.org, Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 404 Lines: 14 On Thu, Oct 21, 2004 at 09:51:14AM -0700, Liqiang(Larry) Zhu wrote: > Nicolas Williams wrote: > > Or is there something about the SSPI that obviates the need for name > type OIDs? > > SSPI does not use OID at the API level. Does it use generic GSS name syntax? _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 13:20:02 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 13:20:01 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id E98AA1383D for ; Thu, 21 Oct 2004 13:20:00 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgXZ-0005ss-6j; Thu, 21 Oct 2004 13:15:53 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgI7-0000c5-9j for kitten@megatron.ietf.org; Thu, 21 Oct 2004 12:59:55 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA23276 for ; Thu, 21 Oct 2004 12:59:51 -0400 (EDT) Received: from mail1.microsoft.com ([131.107.3.125]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKgUk-0008KQ-GO for kitten@ietf.org; Thu, 21 Oct 2004 13:12:59 -0400 Received: from mailout2.microsoft.com ([157.54.1.120]) by mail1.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Thu, 21 Oct 2004 09:58:39 -0700 Received: from red-hub-02.redmond.corp.microsoft.com ([157.54.7.100]) by mailout2.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 09:59:18 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-02.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 09:58:45 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Thu, 21 Oct 2004 09:59:22 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 21 Oct 2004 09:59:21 -0700 Message-ID: Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS3jqnoGni7n3sqTHW+eN8zqgPamQAADHxQ From: "Liqiang(Larry) Zhu" To: "Nicolas Williams" X-OriginalArrivalTime: 21 Oct 2004 16:59:22.0831 (UTC) FILETIME=[5047DDF0:01C4B78F] X-Spam-Score: 0.0 (/) X-Scan-Signature: 7d33c50f3756db14428398e2bdedd581 Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org, Paul Leach Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 782 Lines: 27 Nicolas Williams wrote: > Does it use generic GSS name syntax? No, it only uses single-string "flatten" names. -- larry -----Original Message----- From: Nicolas Williams [mailto:Nicolas.Williams@sun.com]=20 Sent: Thursday, October 21, 2004 9:54 AM To: Liqiang(Larry) Zhu Cc: kitten@ietf.org; Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name On Thu, Oct 21, 2004 at 09:51:14AM -0700, Liqiang(Larry) Zhu wrote: > Nicolas Williams wrote: > > Or is there something about the SSPI that obviates the need for name > type OIDs? >=20 > SSPI does not use OID at the API level. =20 Does it use generic GSS name syntax? _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 13:20:37 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 13:20:36 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id DCC301383D for ; Thu, 21 Oct 2004 13:20:35 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgY9-0006Sq-2b; Thu, 21 Oct 2004 13:16:29 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgKN-0001D2-Rx for kitten@megatron.ietf.org; Thu, 21 Oct 2004 13:02:16 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA23409 for ; Thu, 21 Oct 2004 13:02:12 -0400 (EDT) Received: from cluster-a.mailcontrol.com ([80.69.8.190] helo=rly12a.srv.mailcontrol.com) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKgX2-0008Nw-Aa for kitten@ietf.org; Thu, 21 Oct 2004 13:15:20 -0400 Received: from cybersafe.ltd.uk (dsl-212-23-30-205.zen.co.uk [212.23.30.205]) by rly12a.srv.mailcontrol.com (MailControl) with ESMTP id i9LH1gJI008011; Thu, 21 Oct 2004 18:01:42 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 21 Oct 2004 18:01:42 +0100 Message-ID: <0D8F2EFD3A10E24DAEEA48EA6DA07D300A17F9@postman-pat.csafe.local> From: "Tim Alsop" To: "Liqiang(Larry) Zhu" , "Nicolas Williams" , X-Scanned-By: MailControl A-05-00-00 (www.mailcontrol.com) X-Spam-Score: 0.0 (/) X-Scan-Signature: d17f825e43c9aed4fd65b7edddddec89 Content-Transfer-Encoding: quoted-printable Cc: Paul Leach Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 562 Lines: 17 For example, the Kerberos principal name for our LDAP servers is in the form of "ldap//@". Tim> Can I assume that this principal name format is only used for services ? The reason for asking is that I have noticed I sometimes get a tgt in my Microsoft cache with a principal name of tim\@domain.com@DOMAIN.COM - is this a correct format for a user account principal name ? Thanks, Tim. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 13:22:15 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 13:22:14 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 392FC1383D for ; Thu, 21 Oct 2004 13:22:14 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgbH-0000dM-B6; Thu, 21 Oct 2004 13:19:43 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKgNZ-0001jx-3z for kitten@megatron.ietf.org; Thu, 21 Oct 2004 13:05:33 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA23690 for ; Thu, 21 Oct 2004 13:05:29 -0400 (EDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKgaC-0008Tb-F7 for kitten@ietf.org; Thu, 21 Oct 2004 13:18:38 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by brmea-mail-4.sun.com (8.12.10/8.12.9) with ESMTP id i9LH5TNH018326 for ; Thu, 21 Oct 2004 11:05:29 -0600 (MDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9LH5PJh010156 for ; Thu, 21 Oct 2004 11:05:29 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9LH56dK021356; Thu, 21 Oct 2004 12:05:06 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9LH55Ke021355; Thu, 21 Oct 2004 12:05:05 -0500 (CDT) Date: Thu, 21 Oct 2004 12:05:05 -0500 From: Nicolas Williams To: Tim Alsop Message-ID: <20041021170505.GQ19141@binky.central.sun.com> References: <0D8F2EFD3A10E24DAEEA48EA6DA07D300A17F9@postman-pat.csafe.local> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <0D8F2EFD3A10E24DAEEA48EA6DA07D300A17F9@postman-pat.csafe.local> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7a6398bf8aaeabc7a7bb696b6b0a2aad Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" , Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 678 Lines: 19 On Thu, Oct 21, 2004 at 06:01:42PM +0100, Tim Alsop wrote: > Can I assume that this principal name format is only used for > services ? The reason for asking is that I have noticed I sometimes get > a tgt in my Microsoft cache with a principal name of > tim\@domain.com@DOMAIN.COM - is this a correct format for a user account > principal name ? Isn't that a UPN? I.e., the one component is "user@domain" and the '\' is added in the display form of the name to quote the '@' so it's not parsed as the end of the last component. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 21:44:44 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 21:44:43 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 9ED291383D for ; Thu, 21 Oct 2004 21:44:42 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKo33-0003uJ-4w; Thu, 21 Oct 2004 21:16:53 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKihe-0007Dy-9S for kitten@megatron.ietf.org; Thu, 21 Oct 2004 15:34:26 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA10913 for ; Thu, 21 Oct 2004 15:34:24 -0400 (EDT) Received: from mail2.microsoft.com ([131.107.3.124]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKiuK-0004J9-84 for kitten@ietf.org; Thu, 21 Oct 2004 15:47:32 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail2.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Thu, 21 Oct 2004 12:33:30 -0700 Received: from red-hub-03.redmond.corp.microsoft.com ([157.54.2.25]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 12:33:53 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-03.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 12:34:00 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Thu, 21 Oct 2004 12:33:56 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 21 Oct 2004 12:33:53 -0700 Message-ID: <91D7F2CEE3425A4A9D11311D09FCE2460B80E92F@WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com> Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS3jZmZ0sO3ZvA0Q0WOjsbnHWGhdQAFpRPw From: "Paul Leach" To: "Nicolas Williams" , "Liqiang(Larry) Zhu" X-OriginalArrivalTime: 21 Oct 2004 19:33:56.0014 (UTC) FILETIME=[E7874CE0:01C4B7A4] X-Spam-Score: 0.0 (/) X-Scan-Signature: e5ba305d0e64821bf3d8bc5d3bb07228 Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Thu, 21 Oct 2004 21:16:52 -0400 Cc: kitten@ietf.org Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: O Content-Length: 1314 Lines: 37 As the kerb clarifications says (sec 5.2.2), IIRC unchanged from 1510: name-type This field specifies the type of name that follows. Pre-defined values for this field are specified in section 6.2. The name-type SHOULD be treated as a hint. Ignoring the name type, no two names can be the same (i.e. at least one of the components, or the realm, must be different). As far as I can tell, that means that a new name type isn't needed. In our implementation, the name->key database entries is keyed (in the database sense) by (e.g.) "host/foo.example.com" for host-based services, and "ldap/dc.example.com/example.com" for an ldap server for the "example.com" domain running on "dc.example.com". > -----Original Message----- > From: Nicolas Williams [mailto:Nicolas.Williams@sun.com] > Sent: Thursday, October 21, 2004 12:46 PM > To: Liqiang(Larry) Zhu > Cc: kitten@ietf.org; Paul Leach >=20 > The application still requires changing though, to use the new name type > OID. Or is there something about the SSPI that obviates the need for > name type OIDs? >=20 > Anyways, I don't feel strongly about this one way or the other. >=20 > Nico > -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 16:30:31 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 16:30:30 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 71F0B1383D for ; Thu, 21 Oct 2004 16:30:30 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKiub-0002u6-UX; Thu, 21 Oct 2004 15:47:50 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKijd-0000ah-1a for kitten@megatron.ietf.org; Thu, 21 Oct 2004 15:36:29 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA11090 for ; Thu, 21 Oct 2004 15:36:26 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKiwF-0004Kj-0U for kitten@ietf.org; Thu, 21 Oct 2004 15:49:32 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i9LJaNs3009603 for ; Thu, 21 Oct 2004 12:36:23 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9LJaMJf021060 for ; Thu, 21 Oct 2004 13:36:22 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9LJa4mZ026790; Thu, 21 Oct 2004 14:36:04 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9LJa3Kl026789; Thu, 21 Oct 2004 14:36:03 -0500 (CDT) Date: Thu, 21 Oct 2004 14:36:03 -0500 From: Nicolas Williams To: Paul Leach Message-ID: <20041021193603.GB21427@binky.central.sun.com> References: <91D7F2CEE3425A4A9D11311D09FCE2460B80E92F@WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <91D7F2CEE3425A4A9D11311D09FCE2460B80E92F@WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7a6398bf8aaeabc7a7bb696b6b0a2aad Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 693 Lines: 19 On Thu, Oct 21, 2004 at 12:33:53PM -0700, Paul Leach wrote: > As the kerb clarifications says (sec 5.2.2), IIRC unchanged from 1510: > > name-type > This field specifies the type of name that follows. Pre-defined > values for this field are specified in section 6.2. The name-type > SHOULD be treated as a hint. Ignoring the name type, no two names > can be the same (i.e. at least one of the components, or the > realm, must be different). > > As far as I can tell, that means that a new name type isn't needed. Correct. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Tue Oct 26 13:22:00 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Tue, 26 Oct 2004 13:21:58 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 9CFF513226 for ; Tue, 26 Oct 2004 13:21:57 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMUsZ-00045k-4j; Tue, 26 Oct 2004 13:13:03 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL3st-0001vp-Qz for kitten@megatron.ietf.org; Fri, 22 Oct 2004 14:11:27 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA25828 for ; Fri, 22 Oct 2004 14:11:24 -0400 (EDT) Received: from mail1.microsoft.com ([131.107.3.125]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CL45i-0003VM-R4 for kitten@ietf.org; Fri, 22 Oct 2004 14:24:43 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail1.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Fri, 22 Oct 2004 11:10:42 -0700 Received: from red-hub-02.redmond.corp.microsoft.com ([157.54.7.100]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Fri, 22 Oct 2004 11:10:52 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-02.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Fri, 22 Oct 2004 11:09:16 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Fri, 22 Oct 2004 11:10:51 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Fri, 22 Oct 2004 11:10:53 -0700 Message-ID: <91D7F2CEE3425A4A9D11311D09FCE2460B87A7EB@WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com> Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS3rd1QDVujnp4DQ3STXPfZa2ZobgAqRt5g From: "Richard B. Ward" To: , "Nicolas Williams" X-OriginalArrivalTime: 22 Oct 2004 18:10:51.0344 (UTC) FILETIME=[76D8C500:01C4B862] X-Spam-Score: 0.0 (/) X-Scan-Signature: 7aafa0432175920a4b3e118e16c5cb64 Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Tue, 26 Oct 2004 13:13:01 -0400 Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" , Paul Leach Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 2666 Lines: 60 =20 -----Original Message----- From: kitten-bounces@lists.ietf.org [mailto:kitten-bounces@lists.ietf.org] On Behalf Of Martin Rex ... However, the two newer SSPI calls, which actually have a parameter to distinguish name types, namely GetUserNameEx() and TranslateName() are broken in that they (a) do not work at all without an Active Directory [richardw] you can't claim that they are broken when their sole design point was to provide an API to map among the different name strings associated with an account in an active directory instance. Nor are they even part of the SSPI interface, for that very reason. While you may wish that they did something else, the only thing that they were intended to do was deal with AD account objects. (b) fail most of the time to produce the default Kerberos principal name when requesting "NameUserPrincipal" on most W2K+ platforms. [richardw] See above. The 'NameUserPrincipal' value corresponds to the userPrincipalName attribute on the account object, sometimes referred to in kerberos crowds as the enterprise name type. There was some debate whether this should default to the value "'samAccountName'@'dns.domain.name'" if no explicit userPrincipalName was defined, but eventually we decided against it for consistancy reasons (you would get a different value from LDAP, and would greatly complicate rename scenarios). (c) do not return correct Kerberos principal names, but instead return lookalikes with the lowercase DNS domain name following the @ character, which is obviously inconsistent with the semantics of QueryCredentialsAttributes(NAMES) and QueryContextAttributes(NATIVE_NAMES) [richardw] Again, you have confused the nature of the API. GetUserNameEx and TranslateName are for talking to a Windows (or compatible) directory. QueryContextAttributes() is for talking to a particular security implementation and security context. But if you open a command shell and look at the environment of a Windows W2K+ machine joined to a W2K+ domain, then there is the environment variable "USERDNSDOMAIN", containing the DNS domain name in _all_uppercase_ -- which is kind of funny, because it happens to be the correct spelling for the Kerberos REALM name, and *NOT* the DNS domain name (I know that the DNS name is actually case-insensitive).=20 [richardw] A non-technical reason behind this. The domain name was uppercase to avoid worry among the early adopters of win2k who were used to seeing the USERDOMAIN environment variable. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 22 18:34:16 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 22 Oct 2004 18:34:15 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 7ECDE130EB for ; Fri, 22 Oct 2004 18:34:15 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL7oi-0004E2-Fp; Fri, 22 Oct 2004 18:23:24 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL75d-00084R-Fm for kitten@megatron.ietf.org; Fri, 22 Oct 2004 17:36:49 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA22368 for ; Fri, 22 Oct 2004 17:36:44 -0400 (EDT) Received: from smtpde02.sap-ag.de ([155.56.68.170]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CL7IJ-0002XN-O1 for kitten@ietf.org; Fri, 22 Oct 2004 17:50:06 -0400 Received: from sap-ag.de (smtpde02) by smtpde02.sap-ag.de (out) with ESMTP id XAA19959; Fri, 22 Oct 2004 23:35:57 +0200 (MESZ) From: Martin Rex Message-Id: <200410222135.XAA01919@uw1048.wdf.sap.corp> To: richardw@windows.microsoft.com (Richard B. Ward) Date: Fri, 22 Oct 2004 23:35:57 +0200 (MET DST) In-Reply-To: <91D7F2CEE3425A4A9D11311D09FCE2460B87A7EB@WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com> from "Richard B. Ward" at Oct 22, 4 11:10:53 am MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-SAP: out X-SAP: out X-SAP: out X-SAP: out X-SAP: out X-Spam-Score: 1.1 (+) X-Scan-Signature: 6ffdee8af20de249c24731d8414917d3 Content-Transfer-Encoding: 8bit Cc: kitten@ietf.org, lzhu@windows.microsoft.com, paulle@windows.microsoft.com, Nicolas.Williams@sun.com Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: martin.rex@sap.com List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.6 required=5.0 tests=BAYES_00,MAILTO_TO_SPAM_ADDR autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 5431 Lines: 132 Richard B. Ward wrote: > Martin Rex wrote: > > > > (b) fail most of the time to produce the default Kerberos principal > > name when requesting "NameUserPrincipal" on most W2K+ platforms. > > [richardw] See above. The 'NameUserPrincipal' value corresponds to the > userPrincipalName attribute on the account object, sometimes referred to > in kerberos crowds as the enterprise name type. There was some debate > whether this should default to the value > "'samAccountName'@'dns.domain.name'" if no explicit userPrincipalName > was defined, but eventually we decided against it for consistancy > reasons (you would get a different value from LDAP, and would greatly > complicate rename scenarios). OK, lets do a reality check here: Remember, I do not have that weird "userPrincipalName" defined for any of my accounts in any of the ADs. Account from W2K-domain W2Ksp4 (member of W2K3-domain at W2K-level, account from trusted W2K-domain): GetUserNameEx(NameSamCompatible)=="SAP_ALL\d019080" GetUserNameEx(NameUserPrincipal) failed with ERROR_NONE_MAPPED TranslateName(Sam->Principal,"SAP_ALL\d019080") failed with ERROR_NONE_MAPPED TranslateName(Principal->Sam,"d019080@SAP.CORP") == "SAP_ALL\d019080" WinXPsp1 (member of W2K-domain) GetUserNameEx(NameSamCompatible)=="SAP_ALL\d019080" GetUserNameEx(NameUserPrincipal)=="d019080@SAP.CORP" TranslateName(Sam->Principal,"SAP_ALL\d019080") failed with ERROR_NONE_MAPPED TranslateName(Principal->Sam,"d019080@SAP.CORP") == "SAP_ALL\d019080" WinXPsp2 (member of W2K3-domain at W2K-level, account fron trusted W2K-domain): GetUserNameEx(NameSamCompatible)=="SAP_ALL\d019080" GetUserNameEx(NameUserPrincipal)=="d019080@sap.corp" TranslateName(Sam->Principal,"SAP_ALL\d019080") failed with ERROR_NONE_MAPPED TranslateName(Principal->Sam,"d019080@sap.corp") == "SAP_ALL\d019080" W2K3 (member of W2K3-domain at W2K-level, account from trusted W2K-domain): GetUserNameEx(NameSamCompatible)=="SAP_ALL\d019080" GetUserNameEx(NameUserPrincipal)=="d019080@sap.corp" TranslateName(Sam->Principal,"SAP_ALL\d019080") failed with ERROR_NONE_MAPPED TranslateName(Principal->Sam,"d019080@sap.corp") == "SAP_ALL\d019080" Account from W2K3-domain at w2k forest functional level W2Ksp4: GetUserNameEx(NameSamCompatible)=="NT5\d019080" GetUserNameEx(NameUserPrincipal)=="d019080@nt5.sap-ag.de" TranslateName(Principal->Sam,"d019080@nt5.sap-ag.de") == "NT5\d019080" TranslateName(Sam->Principal,"NT5\d019080") == "d019080@nt5.sap-ag.de" WinXPsp2: GetUserNameEx(NameSamCompatible)=="NT5\d019080" GetUserNameEx(NameUserPrincipal)=="d019080@nt5.sap-ag.de" TranslateName(Sam->Principal,"NT5\d019080") == "d019080@nt5.sap-ag.de" TranslateName(Principal->Sam,"d019080@nt5.sap-ag.de") == "NT5\d019080" W2K3: GetUserNameEx(NameSamCompatible)=="NT5\d019080" GetUserNameEx(NameUserPrincipal)=="d019080@nt5.sap-ag.de" TranslateName(Sam->Principal,"NT5\d019080") == "d019080@nt5.sap-ag.de" TranslateName(Principal->Sam,"d019080@nt5.sap-ag.de") == "NT5\d019080" Now tell me again with a straight face that this works exactly as you described and anywhere remotely consistent and you'll risk to loose a lot of credibility in this forum. - With an account created in a W2K3 AD, the mapping to the default principal appears to work even without a manually defined userPrincipalName attribute in the AD -- contrary to what you claimed - with an account from a W2K AD, the call to GetUserNameEx() succeeds on all but W2Ksp4 machines. - when the WinXP is a member of a W2K-domain and using a W2K-domain account, then GetUserNameEx(UserPrincipal) returns a name with an upper case realm name - when the W2K(+) machine is a member of a W2K3-domain, then GetUserNameEx(UserPrincipal) returns a lower-case realm name, even when the account is only from a trusted W2K-domain - TranslateName(SamCompatible,UserPrincipal) never works for accounts from a W2K-domain on any NT5.x machine - TranslateName(SamCompatible,UserPrincipal) always works for accounts from a W2K3-domain on any NT5.x machine As long as we have to live with customer that use W2K domains and W2K machines, the API calls GetUserNameEx() and TranslateName() are entirely useless -- which is why I call them broken. > > (c) do not return correct Kerberos principal names, but instead > return lookalikes with the lowercase DNS domain name following > the @ character, which is obviously inconsistent with the semantics > of QueryCredentialsAttributes(NAMES) > and QueryContextAttributes(NATIVE_NAMES) > > [richardw] Again, you have confused the nature of the API. > GetUserNameEx and TranslateName are for talking to a Windows (or > compatible) directory. QueryContextAttributes() is for talking to a > particular security implementation and security context. I'm so sorry, but the code that Microsoft shipped does not align with your explanation. GetUserNameEx() on WinXPsp1 joined to a W2K domain does in fact return a name with all-uppercase REALM name (and if it really depends on the *directory*, then I would assume that even a W2K3 machine attached to a W2K domain would return an all-uppercase REALM name from GetUserNameEx() -- I just don't have such a machine to check. -Martin _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Tue Oct 26 13:22:17 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Tue, 26 Oct 2004 13:22:17 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 986CB13226 for ; Tue, 26 Oct 2004 13:22:16 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMUsZ-00045r-AK; Tue, 26 Oct 2004 13:13:03 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL7WG-0005xw-CM for kitten@megatron.ietf.org; Fri, 22 Oct 2004 18:04:20 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA28115 for ; Fri, 22 Oct 2004 18:04:15 -0400 (EDT) Received: from mail1.microsoft.com ([131.107.3.125]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CL7j6-0004Vk-0j for kitten@ietf.org; Fri, 22 Oct 2004 18:17:37 -0400 Received: from mailout2.microsoft.com ([157.54.1.120]) by mail1.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Fri, 22 Oct 2004 15:03:39 -0700 Received: from red-hub-02.redmond.corp.microsoft.com ([157.54.7.100]) by mailout2.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Fri, 22 Oct 2004 15:04:08 -0700 Received: from win-imc-02.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.84]) by red-hub-02.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Fri, 22 Oct 2004 15:04:04 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-02.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Fri, 22 Oct 2004 15:03:43 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Fri, 22 Oct 2004 15:03:42 -0700 Message-ID: <91D7F2CEE3425A4A9D11311D09FCE246011D9873@WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com> Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS4fyy01/0KM8DfTZ+JxwUOYC3C4QAAcNlA From: "Richard B. Ward" To: X-OriginalArrivalTime: 22 Oct 2004 22:03:43.0640 (UTC) FILETIME=[FEFBF180:01C4B882] X-Spam-Score: 1.1 (+) X-Scan-Signature: 827a2a57ca7ab0837847220f447e8d56 Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Tue, 26 Oct 2004 13:13:01 -0400 Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" , Paul Leach , Nicolas.Williams@sun.com Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.6 required=5.0 tests=BAYES_00,MAILTO_TO_SPAM_ADDR autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 6413 Lines: 169 Bah. Sorry about that Martin, it appears that someone decided to change the behavior from predictable (win2k) to this rather strange attempt to populate that name mapping locally. The oddity in win2k that you note stems from the effort to get away from the flat names and accept "upn" style names in as many places as possible; your case 'TranslateName(Principal->Sam,"d019080@SAP.CORP") =3D=3D = "SAP_ALL\d019080" ' is a result of that flexibility. I've filed bugs to get the translate behavior consistant with the getusername. =20 -----Original Message----- From: Martin Rex [mailto:martin.rex@sap.com]=20 Sent: Friday, October 22, 2004 2:36 PM To: Richard B. Ward Cc: martin.rex@sap.com; Nicolas.Williams@sun.com; kitten@ietf.org; Liqiang(Larry) Zhu; Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name Richard B. Ward wrote: > Martin Rex wrote:=20 > > > > (b) fail most of the time to produce the default Kerberos principal > > name when requesting "NameUserPrincipal" on most W2K+ platforms. >=20 > [richardw] See above. The 'NameUserPrincipal' value corresponds to=20 > the userPrincipalName attribute on the account object, sometimes=20 > referred to in kerberos crowds as the enterprise name type. There was > some debate whether this should default to the value=20 > "'samAccountName'@'dns.domain.name'" if no explicit userPrincipalName=20 > was defined, but eventually we decided against it for consistancy=20 > reasons (you would get a different value from LDAP, and would greatly=20 > complicate rename scenarios). OK, lets do a reality check here: Remember, I do not have that weird "userPrincipalName" defined for any of my accounts in any of the ADs. Account from W2K-domain W2Ksp4 (member of W2K3-domain at W2K-level, account from trusted W2K-domain): GetUserNameEx(NameSamCompatible)=3D=3D"SAP_ALL\d019080" GetUserNameEx(NameUserPrincipal) failed with ERROR_NONE_MAPPED TranslateName(Sam->Principal,"SAP_ALL\d019080") failed with ERROR_NONE_MAPPED TranslateName(Principal->Sam,"d019080@SAP.CORP") =3D=3D = "SAP_ALL\d019080" WinXPsp1 (member of W2K-domain) GetUserNameEx(NameSamCompatible)=3D=3D"SAP_ALL\d019080" GetUserNameEx(NameUserPrincipal)=3D=3D"d019080@SAP.CORP" TranslateName(Sam->Principal,"SAP_ALL\d019080") failed with ERROR_NONE_MAPPED TranslateName(Principal->Sam,"d019080@SAP.CORP") =3D=3D = "SAP_ALL\d019080" WinXPsp2 (member of W2K3-domain at W2K-level, account fron trusted W2K-domain): GetUserNameEx(NameSamCompatible)=3D=3D"SAP_ALL\d019080" GetUserNameEx(NameUserPrincipal)=3D=3D"d019080@sap.corp" TranslateName(Sam->Principal,"SAP_ALL\d019080") failed with ERROR_NONE_MAPPED TranslateName(Principal->Sam,"d019080@sap.corp") =3D=3D = "SAP_ALL\d019080" W2K3 (member of W2K3-domain at W2K-level, account from trusted W2K-domain): GetUserNameEx(NameSamCompatible)=3D=3D"SAP_ALL\d019080" GetUserNameEx(NameUserPrincipal)=3D=3D"d019080@sap.corp" TranslateName(Sam->Principal,"SAP_ALL\d019080") failed with ERROR_NONE_MAPPED TranslateName(Principal->Sam,"d019080@sap.corp") =3D=3D = "SAP_ALL\d019080" Account from W2K3-domain at w2k forest functional level W2Ksp4: GetUserNameEx(NameSamCompatible)=3D=3D"NT5\d019080" GetUserNameEx(NameUserPrincipal)=3D=3D"d019080@nt5.sap-ag.de" TranslateName(Principal->Sam,"d019080@nt5.sap-ag.de") =3D=3D = "NT5\d019080" TranslateName(Sam->Principal,"NT5\d019080") =3D=3D = "d019080@nt5.sap-ag.de" WinXPsp2: GetUserNameEx(NameSamCompatible)=3D=3D"NT5\d019080" GetUserNameEx(NameUserPrincipal)=3D=3D"d019080@nt5.sap-ag.de" TranslateName(Sam->Principal,"NT5\d019080") =3D=3D = "d019080@nt5.sap-ag.de" TranslateName(Principal->Sam,"d019080@nt5.sap-ag.de") =3D=3D = "NT5\d019080" =20 W2K3: GetUserNameEx(NameSamCompatible)=3D=3D"NT5\d019080" GetUserNameEx(NameUserPrincipal)=3D=3D"d019080@nt5.sap-ag.de" TranslateName(Sam->Principal,"NT5\d019080") =3D=3D = "d019080@nt5.sap-ag.de" TranslateName(Principal->Sam,"d019080@nt5.sap-ag.de") =3D=3D = "NT5\d019080" Now tell me again with a straight face that this works exactly as you described and anywhere remotely consistent and you'll risk to loose a lot of credibility in this forum. - With an account created in a W2K3 AD, the mapping to the default principal appears to work even without a manually defined userPrincipalName attribute in the AD -- contrary to what you claimed - with an account from a W2K AD, the call to GetUserNameEx() succeeds on all but W2Ksp4 machines. - when the WinXP is a member of a W2K-domain and using a W2K-domain account, then GetUserNameEx(UserPrincipal) returns a name with an upper case realm name - when the W2K(+) machine is a member of a W2K3-domain, then GetUserNameEx(UserPrincipal) returns a lower-case realm name, even when the account is only from a trusted W2K-domain - TranslateName(SamCompatible,UserPrincipal) never works for accounts from a W2K-domain on any NT5.x machine - TranslateName(SamCompatible,UserPrincipal) always works for accounts from a W2K3-domain on any NT5.x machine As long as we have to live with customer that use W2K domains and W2K machines, the API calls GetUserNameEx() and TranslateName() are entirely useless -- which is why I call them broken. >=20 > (c) do not return correct Kerberos principal names, but instead > return lookalikes with the lowercase DNS domain name following > the @ character, which is obviously inconsistent with the semantics > of QueryCredentialsAttributes(NAMES) > and QueryContextAttributes(NATIVE_NAMES) >=20 > [richardw] Again, you have confused the nature of the API. > GetUserNameEx and TranslateName are for talking to a Windows (or > compatible) directory. QueryContextAttributes() is for talking to a=20 > particular security implementation and security context. I'm so sorry, but the code that Microsoft shipped does not align with your explanation. GetUserNameEx() on WinXPsp1 joined to a W2K domain does in fact return a name with all-uppercase REALM name (and if it really depends on the *directory*, then I would assume that even a W2K3 machine attached to a W2K domain would return an all-uppercase REALM name from GetUserNameEx() -- I just don't have such a machine to check. -Martin _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 22 19:05:48 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 22 Oct 2004 19:05:47 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 9A2A8130EB for ; Fri, 22 Oct 2004 19:05:46 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL7zA-0006c0-Sb; Fri, 22 Oct 2004 18:34:12 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL7oK-0003NP-8c for kitten@megatron.ietf.org; Fri, 22 Oct 2004 18:23:00 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA02883 for ; Fri, 22 Oct 2004 18:22:55 -0400 (EDT) Received: from mail2.microsoft.com ([131.107.3.124]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CL81B-0005jU-1z for kitten@ietf.org; Fri, 22 Oct 2004 18:36:17 -0400 Received: from mailout2.microsoft.com ([157.54.1.120]) by mail2.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Fri, 22 Oct 2004 15:22:16 -0700 Received: from red-hub-04.redmond.corp.microsoft.com ([157.54.3.6]) by mailout2.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Fri, 22 Oct 2004 15:22:50 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-04.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Fri, 22 Oct 2004 15:22:24 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Fri, 22 Oct 2004 15:22:24 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Fri, 22 Oct 2004 15:22:23 -0700 Message-ID: Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS4g57IpxMdqvkYS8KkhM0zD6N1PQAAKT9w From: "Liqiang(Larry) Zhu" To: "Nicolas Williams" X-OriginalArrivalTime: 22 Oct 2004 22:22:24.0178 (UTC) FILETIME=[9AE07920:01C4B885] X-Spam-Score: 0.0 (/) X-Scan-Signature: cab78e1e39c4b328567edb48482b6a69 Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org, Paul Leach Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1808 Lines: 51 Nicolas Williams wrote: > So, let me rephrase: what is the benefit of changing the generic domain-based name syntax as Larry requests? 1) you can transform the domain based names to Kerberos principal name (when using SSPI, sorry about that, something you may not care but we do) simply by replacing the '@' with '/', this is consistent with how host-based services are treated when used with SSPI. 2) you may include your "domain based services" as an extended name form of "host based services", therefore they are really the same name type as Paul suggested. 3) as an incremental change it has the benefit of being backward-compatible(please note I said this rather loosely). as I as I can tell, you only have a weak preference and do not have a strong feeling here. -- Larry -----Original Message----- From: Nicolas Williams [mailto:Nicolas.Williams@sun.com]=20 Sent: Friday, October 22, 2004 3:08 PM To: Liqiang(Larry) Zhu Cc: kitten@ietf.org; Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name On Thu, Oct 21, 2004 at 11:46:25AM -0500, Nicolas Williams wrote: > The application still requires changing though, to use the new name=20 > type OID. Or is there something about the SSPI that obviates the need > for name type OIDs? Sorry I asked that. I didn't mean to start a thread about bugs in an implementation on this list. So, let me rephrase: what is the benefit of changing the generic domain-based name syntax as Larry requests? To me it's almost six of one, half a dozen of the other. Except for this: service@@host instantly looks like a domain based name using a default domain, to me, so I prefer it. Nico --=20 _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Fri Oct 22 19:20:01 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Fri, 22 Oct 2004 19:19:56 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id E86B3130EB for ; Fri, 22 Oct 2004 19:19:55 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL8T7-0003mR-Ui; Fri, 22 Oct 2004 19:05:09 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CL7tn-0002Of-NA for kitten@megatron.ietf.org; Fri, 22 Oct 2004 18:28:39 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA04041 for ; Fri, 22 Oct 2004 18:28:34 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CL86d-00064M-Np for kitten@ietf.org; Fri, 22 Oct 2004 18:41:57 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9MMSX7q025953 for ; Fri, 22 Oct 2004 15:28:33 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9MMSXjW016474 for ; Fri, 22 Oct 2004 16:28:33 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9MMSFIc016305; Fri, 22 Oct 2004 17:28:15 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9MMSFDZ016304; Fri, 22 Oct 2004 17:28:15 -0500 (CDT) Date: Fri, 22 Oct 2004 17:28:15 -0500 From: Nicolas Williams To: "Liqiang(Larry) Zhu" Message-ID: <20041022222815.GW21427@binky.central.sun.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 39bd8f8cbb76cae18b7e23f7cf6b2b9f Cc: kitten@ietf.org, Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1586 Lines: 43 On Fri, Oct 22, 2004 at 03:22:23PM -0700, Liqiang(Larry) Zhu wrote: > Nicolas Williams wrote: > > So, let me rephrase: what is the benefit of changing the generic > domain-based name syntax as Larry requests? > > 1) you can transform the domain based names to Kerberos principal name > (when using SSPI, sorry about that, something you may not care but we > do) simply by replacing the '@' with '/', this is consistent with how > host-based services are treated when used with SSPI. Well, this transformation is just as simple either way, so, color me unconvinced by (1) > 2) you may include your "domain based services" as an extended name form > of "host based services", therefore they are really the same name type > as Paul suggested. This falls in the same category as (1) :) > 3) as an incremental change it has the benefit of being > backward-compatible(please note I said this rather loosely). As far as the GSS-API is concerned (3) is not applicable: you must change the app to use the new OID when you want domain-based names anyways, so (3) falls in the same category as (1). > as I as I can tell, you only have a weak preference and do not have a > strong feeling here. Yeah, but I want to to be convinced one way or the other. I have one argument, obvious difference, that I find mildly convincing for one way and none that I find convincing for the other. Perhaps Martin or Sam have something to say about this? Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 19:56:54 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 19:56:53 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 9C6E11324F for ; Mon, 25 Oct 2004 19:56:53 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMERj-0005yP-Fz; Mon, 25 Oct 2004 19:40:15 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMCt3-0001Xm-A4 for kitten@megatron.ietf.org; Mon, 25 Oct 2004 18:00:21 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA22610 for ; Mon, 25 Oct 2004 18:00:17 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMD6Y-0004tV-VQ for kitten@ietf.org; Mon, 25 Oct 2004 18:14:20 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id 303ECE0053; Mon, 25 Oct 2004 18:00:29 -0400 (EDT) To: Nicolas Williams References: <20041022222815.GW21427@binky.central.sun.com> From: Sam Hartman Date: Mon, 25 Oct 2004 18:00:29 -0400 In-Reply-To: <20041022222815.GW21427@binky.central.sun.com> (Nicolas Williams's message of "Fri, 22 Oct 2004 17:28:15 -0500") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 01485d64dfa90b45a74269b3ca9d5574 Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" , Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 268 Lines: 9 I'd prefer for the Kerberos MN for domain-based names to be Windows compatible unless there is a compelling reason not to do so. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 19:57:00 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 19:57:00 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id D8A351324F for ; Mon, 25 Oct 2004 19:56:59 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMES3-0006Un-VH; Mon, 25 Oct 2004 19:40:35 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMCwk-0004zM-AW for kitten@megatron.ietf.org; Mon, 25 Oct 2004 18:04:10 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA23633 for ; Mon, 25 Oct 2004 18:04:06 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMDAF-0005DW-C6 for kitten@ietf.org; Mon, 25 Oct 2004 18:18:08 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i9PM46s3020457 for ; Mon, 25 Oct 2004 15:04:06 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PM46jW021593 for ; Mon, 25 Oct 2004 16:04:06 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PM3ibG019946; Mon, 25 Oct 2004 17:03:44 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PM3eGK019945; Mon, 25 Oct 2004 17:03:40 -0500 (CDT) Date: Mon, 25 Oct 2004 17:03:39 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025220339.GH21427@binky.central.sun.com> References: <20041022222815.GW21427@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 30ac594df0e66ffa5a93eb4c48bcb014 Cc: kitten@ietf.org, "Liqiang(Larry) Zhu" , Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 453 Lines: 15 On Mon, Oct 25, 2004 at 06:00:29PM -0400, Sam Hartman wrote: > I'd prefer for the Kerberos MN for domain-based names to be Windows > compatible unless there is a compelling reason not to do so. I've already agreed to that. In fact, I thought I'd made sure I had the Windows convention right; guess not. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Sat Oct 23 19:52:35 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sat, 23 Oct 2004 19:52:34 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 45140130EB for ; Sat, 23 Oct 2004 19:52:34 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLVde-0003ek-T5; Sat, 23 Oct 2004 19:49:34 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLVaO-0003L5-H3 for kitten@megatron.ietf.org; Sat, 23 Oct 2004 19:46:12 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA02336 for ; Sat, 23 Oct 2004 19:46:08 -0400 (EDT) Received: from mail2.microsoft.com ([131.107.3.124]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLVnW-0006ev-80 for kitten@ietf.org; Sat, 23 Oct 2004 19:59:46 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail2.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Sat, 23 Oct 2004 16:45:17 -0700 Received: from red-hub-02.redmond.corp.microsoft.com ([157.54.7.100]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 23 Oct 2004 16:45:02 -0700 Received: from win-imc-02.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.84]) by red-hub-02.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 23 Oct 2004 16:45:04 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-02.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Sat, 23 Oct 2004 16:45:02 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sat, 23 Oct 2004 16:45:08 -0700 Message-ID: <91D7F2CEE3425A4A9D11311D09FCE2460B87AF78@WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com> Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS4hoP9bUIDnoNtRb2PjYeiuIwy7gA0yn3g From: "Paul Leach" To: "Nicolas Williams" , "Liqiang(Larry) Zhu" X-OriginalArrivalTime: 23 Oct 2004 23:45:02.0267 (UTC) FILETIME=[508A90B0:01C4B95A] X-Spam-Score: 0.0 (/) X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1053 Lines: 28 > -----Original Message----- > From: Nicolas Williams [mailto:Nicolas.Williams@sun.com] > Sent: Friday, October 22, 2004 6:28 PM > To: Liqiang(Larry) Zhu > Cc: kitten@ietf.org; Paul Leach > Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name >=20 >=20 > Yeah, but I want to to be convinced one way or the other. I have one > argument, obvious difference, that I find mildly convincing for one way > and none that I find convincing for the other. [Paul Leach] I don't know that anyone will find this convincing, but I make the following (perhaps purely personal) observation: I find it difficult to deal with the indirection that happens at the GSS-API level, because how one "sees" Kerberos through the lens of GSS-API and what one sees on the wire are different. The proposal at hand adds one more such indirection, and isn't an extension in spirit of the "service/realm" model already in use. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Sat Oct 23 20:46:44 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sat, 23 Oct 2004 20:46:42 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 677341313F for ; Sat, 23 Oct 2004 20:46:42 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLWVv-0001Et-HC; Sat, 23 Oct 2004 20:45:39 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLWVM-00012B-GO for kitten@megatron.ietf.org; Sat, 23 Oct 2004 20:45:05 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA04278 for ; Sat, 23 Oct 2004 20:45:02 -0400 (EDT) Received: from mail2.microsoft.com ([131.107.3.124]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLWiT-0007Oe-VL for kitten@ietf.org; Sat, 23 Oct 2004 20:58:39 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail2.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Sat, 23 Oct 2004 17:44:33 -0700 Received: from red-hub-03.redmond.corp.microsoft.com ([157.54.2.25]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 23 Oct 2004 17:44:28 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-03.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 23 Oct 2004 17:44:29 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1110); Sat, 23 Oct 2004 17:44:31 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Date: Sat, 23 Oct 2004 17:44:30 -0700 Message-ID: Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS4hoP9bUIDnoNtRb2PjYeiuIwy7gA0yn3gAAFspEA= From: "Liqiang(Larry) Zhu" To: "Paul Leach" , "Nicolas Williams" X-OriginalArrivalTime: 24 Oct 2004 00:44:31.0137 (UTC) FILETIME=[9FC0E910:01C4B962] X-Spam-Score: 0.0 (/) X-Scan-Signature: c1c65599517f9ac32519d043c37c5336 Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1998 Lines: 53 I agree with Paul. The domain-based service name ought to be reduced to be simply the = host-based service name, when the domain component is missing, without = un-necessary indirections. In other words, the argument for the "service@domain@host" proposal from = Nico can be used against it: it is another indirection such that = "service@@host" does not appear to be the same as "service@host" at = least for na=EFve readers.=20 I think we are getting into an argument (or an issue) similar to the = "Big Endian" vs "Little Endian" issue. There won't necessarily be a = winning argument from either camp, thus your expectation might be too = high when you wanted something really convincing. -- Larry -----Original Message----- From: Paul Leach=20 Sent: Saturday, October 23, 2004 4:45 PM To: Nicolas Williams; Liqiang(Larry) Zhu Cc: kitten@ietf.org Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name > -----Original Message----- > From: Nicolas Williams [mailto:Nicolas.Williams@sun.com] > Sent: Friday, October 22, 2004 6:28 PM > To: Liqiang(Larry) Zhu > Cc: kitten@ietf.org; Paul Leach > Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name >=20 >=20 > Yeah, but I want to to be convinced one way or the other. I have one=20 > argument, obvious difference, that I find mildly convincing for one=20 > way and none that I find convincing for the other. [Paul Leach] I don't know that anyone will find this convincing, but I = make the following (perhaps purely personal) observation: I find it = difficult to deal with the indirection that happens at the GSS-API = level, because how one "sees" Kerberos through the lens of GSS-API and = what one sees on the wire are different. The proposal at hand adds one = more such indirection, and isn't an extension in spirit of the = "service/realm" model already in use. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Sun Oct 24 16:47:40 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sun, 24 Oct 2004 16:47:40 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 587F1131D0 for ; Sun, 24 Oct 2004 16:47:40 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLpGC-00013C-2J; Sun, 24 Oct 2004 16:46:40 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLpFq-0000yk-F5 for kitten@megatron.ietf.org; Sun, 24 Oct 2004 16:46:18 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA29349 for ; Sun, 24 Oct 2004 16:46:16 -0400 (EDT) Received: from mail2.microsoft.com ([131.107.3.124]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLpT9-000598-JQ for kitten@ietf.org; Sun, 24 Oct 2004 17:00:04 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail2.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Sun, 24 Oct 2004 13:45:48 -0700 Received: from red-hub-02.redmond.corp.microsoft.com ([157.54.7.100]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Sun, 24 Oct 2004 13:45:50 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-02.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.211); Sun, 24 Oct 2004 13:45:46 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1110); Sun, 24 Oct 2004 13:45:45 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sun, 24 Oct 2004 13:45:44 -0700 Message-ID: Thread-Topic: Comments: draft-williams-krb5-gssapi-domain-based-name Thread-Index: AcS58QRwpfO1hqdcSD2GM63Ix/Xk/gAGQVnQ From: "Liqiang(Larry) Zhu" To: "Sam Hartman" , "Nicolas Williams" X-OriginalArrivalTime: 24 Oct 2004 20:45:45.0605 (UTC) FILETIME=[6F7BF350:01C4BA0A] X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Content-Transfer-Encoding: quoted-printable Cc: kitten@ietf.org, Paul Leach Subject: RE: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 607 Lines: 20 >From my perspective, this is for convenience: our users are lazy and always try to type the least number of characters possible.=20 -- Larry=20 -----Original Message----- From: Sam Hartman [mailto:hartmans@mit.edu]=20 Sent: Sunday, October 24, 2004 10:44 AM To: Nicolas Williams Cc: Liqiang(Larry) Zhu; kitten@ietf.org; Paul Leach Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name Why do we want to support domain based names with a null domain? _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Sun Oct 24 16:54:40 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sun, 24 Oct 2004 16:54:40 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 9F53A131D0 for ; Sun, 24 Oct 2004 16:54:39 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLpMw-0001VW-Di; Sun, 24 Oct 2004 16:53:38 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLpMe-0001SS-NO for kitten@megatron.ietf.org; Sun, 24 Oct 2004 16:53:20 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA29764 for ; Sun, 24 Oct 2004 16:53:18 -0400 (EDT) Received: from stratton-two-sixty-four.mit.edu ([18.187.6.9] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLpZy-0005HQ-9Z for kitten@ietf.org; Sun, 24 Oct 2004 17:07:06 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id CF50BE0053; Sun, 24 Oct 2004 16:53:23 -0400 (EDT) To: "Liqiang(Larry) Zhu" References: From: Sam Hartman Date: Sun, 24 Oct 2004 16:53:23 -0400 In-Reply-To: (Liqiang Zhu's message of "Sun, 24 Oct 2004 13:45:44 -0700") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 68c8cc8a64a9d0402e43b8eee9fc4199 Cc: kitten@ietf.org, Paul Leach , Nicolas Williams Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 629 Lines: 18 >>>>> "Liqiang(Larry)" == Liqiang(Larry) Zhu writes: Liqiang(Larry)> From my perspective, this is for convenience: our Liqiang(Larry)> users are lazy and always try to type the least Liqiang(Larry)> number of characters possible. I'm not seeing how what you say is different from what I'm saying. If the domain is null, why aren't we using a host name not a domain name? Seems like this works well with lazy users. BTW, we have lazy users too;) _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Sun Oct 24 21:21:41 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sun, 24 Oct 2004 21:21:41 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 5C4261313F for ; Sun, 24 Oct 2004 21:21:41 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLtVZ-0000hk-EF; Sun, 24 Oct 2004 21:18:49 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLtSF-0000QZ-Ux for kitten@megatron.ietf.org; Sun, 24 Oct 2004 21:15:24 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA15525 for ; Sun, 24 Oct 2004 21:15:22 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLtfa-0000uG-Ec for kitten@ietf.org; Sun, 24 Oct 2004 21:29:11 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9P1FK7q014847 for ; Sun, 24 Oct 2004 18:15:21 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9P1FKjW010295 for ; Sun, 24 Oct 2004 19:15:20 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9P1F16d019100; Sun, 24 Oct 2004 20:15:01 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9P1F08t019099; Sun, 24 Oct 2004 20:15:00 -0500 (CDT) Date: Sun, 24 Oct 2004 20:15:00 -0500 From: Nicolas Williams To: "Liqiang(Larry) Zhu" Message-ID: <20041025011500.GH21427@binky.central.sun.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7a6398bf8aaeabc7a7bb696b6b0a2aad Cc: kitten@ietf.org, Paul Leach , Sam Hartman Subject: Re: Comments: draft-williams-krb5-gssapi-domain-based-name X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 631 Lines: 19 On Sun, Oct 24, 2004 at 01:45:44PM -0700, Liqiang(Larry) Zhu wrote: > Sam> Why do we want to support domain based names with a null domain? Larry> From my perspective, this is for convenience: our users are Larry> lazy and always try to type the least number of characters Larry> possible. Same for me, but, again, the domain part is optional only for the query syntax of domain-based names. Actual mechanism names (MNs) of the domain-based kind must have the domain be present. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 10:42:05 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 10:42:04 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 7B2AB1383D for ; Thu, 21 Oct 2004 10:42:04 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKdyI-0006TG-F8; Thu, 21 Oct 2004 10:31:18 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKdow-0000FB-NB for kitten@megatron.ietf.org; Thu, 21 Oct 2004 10:21:38 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA04475 for ; Thu, 21 Oct 2004 10:21:36 -0400 (EDT) Received: from mail3.microsoft.com ([131.107.3.123]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CKe1Y-0004A7-0y for kitten@ietf.org; Thu, 21 Oct 2004 10:34:42 -0400 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail3.microsoft.com with Microsoft SMTPSVC(6.0.3790.196); Thu, 21 Oct 2004 07:21:06 -0700 Received: from red-hub-02.redmond.corp.microsoft.com ([157.54.7.100]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 07:21:04 -0700 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com ([157.54.0.39]) by red-hub-02.redmond.corp.microsoft.com with Microsoft SMTPSVC(6.0.3790.0); Thu, 21 Oct 2004 07:20:31 -0700 Received: from WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com ([157.54.12.81]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.1069); Thu, 21 Oct 2004 07:21:05 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 21 Oct 2004 07:21:03 -0700 Message-ID: Thread-Topic: New draft: draft-zhu-spnego-2478bis Thread-Index: AcS3eTJY5OxuuKpqTfSYB5M3lFk13A== From: "Liqiang(Larry) Zhu" To: X-OriginalArrivalTime: 21 Oct 2004 14:21:05.0226 (UTC) FILETIME=[33445AA0:01C4B779] X-Spam-Score: 0.0 (/) X-Scan-Signature: 8ac499381112328dd60aea5b1ff596ea Content-Transfer-Encoding: quoted-printable Cc: Subject: New draft: draft-zhu-spnego-2478bis X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 302 Lines: 12 Please review. I had a typo in appendix A, "BER encoding is required" should be "DER encoding is required". This will be corrected in the next version. -- Larry _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Thu Oct 21 11:08:33 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Thu, 21 Oct 2004 11:08:30 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 174FC13859 for ; Thu, 21 Oct 2004 11:08:30 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKeQa-0003Wn-PA; Thu, 21 Oct 2004 11:00:32 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CKeAo-0003Sp-Kw for kitten@megatron.ietf.org; Thu, 21 Oct 2004 10:44:16 -0400 Received: from brazilnut.cc.columbia.edu (IDENT:cu41754@brazilnut.cc.columbia.edu [128.59.206.18]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA08262 for ; Thu, 21 Oct 2004 10:44:07 -0400 (EDT) Received: from [192.168.1.10] (24-193-46-55.nyc.rr.com [24.193.46.55]) (user=jaltman mech=PLAIN bits=0) by brazilnut.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id i9LEi8hm018189 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 21 Oct 2004 10:44:08 -0400 (EDT) Message-ID: <4177CB52.30802@columbia.edu> Date: Thu, 21 Oct 2004 10:44:34 -0400 From: Jeffrey Altman Organization: Mass User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kitten@ietf.org X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: multipart/mixed; boundary="------------030704040402060700090100" X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.40 Cc: Subject: Kitten Charter, Milestones, and Deliverables: Please Review X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 8171 Lines: 244 This is a multi-part message in MIME format. --------------030704040402060700090100 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Attached is the Charter once again with a reformatted Milestones and Deliverables section. I believe I have added all of the drafts which have been published in the last six weeks. (This is one prolific group.) Please review. I will be sending this document to the IESG shortly. Jeffrey Altman --------------030704040402060700090100 Content-Type: text/plain; name="kitten_charter-20041021.txt" Content-Disposition: inline; filename="kitten_charter-20041021.txt" Content-Transfer-Encoding: 7bit Kitten (GSS-API Next Generation) MAILING LIST: The mailing list for discussions is kitten@lists.ietf.org Use the following web page to join: https://www1.ietf.org/mailman/listinfo/kitten PROPOSED CHARTER: The Generic Security Services API [RFC 2743, RFC 2744] provides an API for applications to set up security contexts and to use these contexts for per-message protection services. The Common Authentication Technology Next Generation Working Group (Kitten) will work on standardizing extensions and improvements to the core GSSAPI specification and language bindings that the IETF believes are necessary based on experience using GSSAPI over the last 10 years. Extensions may be published as separate drafts or included in a GSSAPI version 3. While version 2 of the GSSAPI may be clarified, no backward incompatible changes will be made to this version of the API. This working group is chartered to revise the GSSAPI v2 RFCs for the purpose of clarifying areas of ambiguity: o Use of channel bindings o Thread safety restrictions o C language utilization clarifications and recommendations (e.g., type utilization, name spaces) o Guidelines for GSS-API mechanism designers o Guidelines for GSS-API application protocol designers This working group is chartered to specify a non-backward compatible GSSAPI v3 including support for the following extensions: o Clarify the portable use of channel bindings and better specify channel bindings in a language-independent manner. o Specify thread safety extensions to allow multi-threaded applications to use GSSAPI o Definitions of channel bindings for TLS, IPSec, SSH and other cryptographic channels based on work started in the NFSV4 working group. o Define a GSSAPI extension to allow applications to store credentials. Discussions to be started based upon: o draft-williams-gss-store-deleg-creds-xx.txt o Extensions to solve problems posed by the Global Grid Forum's GSSAPI extensions document. o Extensions to deal with mechanism-specific extensibility in a multi-mechanism environment. o Extend the GSS-API to support authorization by portable GSS applications while also supporting mechanisms that do not have a single canonical name for each authentication identity. o Specify a Domain-based GSS service principal name consisting of: service name, host name, and domain name for use by application services hosted across multiple servers. o Extensions to support stackable GSSAPI mechanisms. o Define a Psuedo-Random Function for GSSAPI This working group is chartered to perform the following GSSAPI mechanism specification work: o Specify a GSSAPI v2/v3 Channel Conjunction Mechanism o Revise RFC 2748 (SPNEGO) to correct problems that make the specification unimplementable and to document the problems found in widely-deployed attempts to implement this spec. o Update the GSSAPI Java Language Bindings to match actual implementation This working group is chartered to perform the following new GSSAPI Language Binding specification work: o Specify a language binding for C# END PROPOSED CHARTER MILESTONES The participants of the IETF-CAT mailing list realize the quantity of work which we desire to undertake is quite ambitious in scope. This is simply an indication of how much work has accumulated over the last few years since the CAT working group disbanded. We believe that we can accomplish the stated work items in 18 months. Nov 2004 (IETF 61): * First Meeting March 2005 (IETF 62): * First drafts of either "Clarifications to GSSAPIv2" as Informational OR submit "Generic Security Service Application Program Interface Version 2, Update 2" and "Generic Security Service API Version 2, Update 2 : C-bindings" to the IESG as Proposed Standard July 2005 (IETF 63): * Submit either "Clarifications to GSSAPIv2" as Informational OR submit "Generic Security Service Application Program Interface Version 2, Update 2" and "Generic Security Service API Version 2, Update 2 : C-bindings" to the IESG as Proposed Standard * Submit "The Channel Conjunction Mechanism (CCM) for the GSSAPI" to the IESG as Proposed Standard * Submit "On the Use of Channel Bindings to Secure Channels" to the IESG as Proposed Standard * Submit "The Simple and Protected GSS-API Negotiation Mechanism (Revised)" to the IESG as Proposed Standard Nov 2005 (IETF 64): * Submit "GSSAPI Mechanisms without a Unique Canonical Name" to the IESG as Proposed Standard July 2006 (IETF 66): * Submit "Generic Security Service Application Program Interface Version 3" to the IESG as Proposed Standard * Submit "Generic Security Service API Version 3 : C-bindings" to the IESG as Proposed Standard * Submit "Generic Security Service API Version 3 : Java and C# bindings" to the IESG as Proposed Standard Nov 2006 (IETF 67): * Charter Review END MILESTONES DELIVERABLES Either: o Clarifications to GSSAPIv2 (May 2005 to IESG) Informational [editor: TBD] Or: o Generic Security Service Application Program Interface Version 2, Update 2 [editor: TBD] o Generic Security Service API Version 2, Update 1 : C-bindings [editor: TBD] End: o The Channel Conjunction Mechanism (CCM) for the GSSAPI [editors: Mike Eisler/Nicolas Williams] (based on draft-ietf-nfsv4-ccm, which has been discussed previously in the NFSv4 WG) o On the Use of Channel Bindings to Secure Channels [editor: Nicolas Williams] (based on draft-ietf-nfsv4-channel-bindings, which has been discussed previously in the NFSv4 WG) o GSSAPIv3 [editor: to be determined] o Stackable Generic Security Service Pseudo-mechanisms [editor: Nicolas Williams] draft-williams-gssapi-stackable-pseudo-mechs o GSS-APIv2 Extension for Storing Delegated Credentials [editor: Nicolas Williams] draft-williams-gssapi-store-deleg-creds o GSSAPI Mechanisms without a Unique Canonical Name [editor: Sam Hartman] draft-hartman-gss-naming o SPNEGO (RFC 2478) Revisions [editor: Wyllys Ingersoll / Larry Zhu] draft-zhu-spnego-2478bis o Guide to the GSS-APIv3 [editor: Nicolas Williams] draft-williams-gssapi-v3-guide-to o Namespace Considerations and Registries for GSS-API Extensions [editor: Nicolas Williams] draft-williams-gssapi-extensions-iana o GSS-API Domain-Based Service Names and Name Type [editor: Nicolas Williams] draft-williams-gssapi-domain-based-names o GSS-API Domain-Based Service Names Mapping for the Kerberos V GSS Mechanism [editor: Nicolas Williams] draft-williams-krb5-gssapi-domain-based-names o A PRF API extension for the GSS-API [editor: Nicolas Williams] draft-williams-gssapi-prf o A PRF for the Kerberos V GSS-API Mechanism [editor: Nicolas Williams] draft-williams-krb5-gssapi-prf o Generic Security Service API Version 2 : Java & C# Bindings [editors: Larry Zhu / Corby Morris] draft-morris-java-gssapi-update-for-csharp END OF DELIVERABLES (Last Updated 2004-10-21) --------------030704040402060700090100 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten --------------030704040402060700090100-- From kitten-bounces@lists.ietf.org Sun Oct 24 16:51:41 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Sun, 24 Oct 2004 16:51:39 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 0CE5F131D0 for ; Sun, 24 Oct 2004 16:51:38 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLpK4-0001Lh-9O; Sun, 24 Oct 2004 16:50:40 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CLpJG-0001IQ-AD for kitten@megatron.ietf.org; Sun, 24 Oct 2004 16:49:50 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA29513 for ; Sun, 24 Oct 2004 16:49:48 -0400 (EDT) Received: from stratton-two-sixty-four.mit.edu ([18.187.6.9] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CLpWY-0005EJ-QI for kitten@ietf.org; Sun, 24 Oct 2004 17:03:36 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id 97E98E0053; Sun, 24 Oct 2004 16:49:57 -0400 (EDT) To: kitten@ietf.org From: Sam Hartman Date: Sun, 24 Oct 2004 16:49:57 -0400 Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: cab78e1e39c4b328567edb48482b6a69 Cc: Subject: Submitted draft-hartman-gss-naming-01 X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 2077 Lines: 51 I've submitted version 01 of my naming draft. I have reorganized it somewhat. My goal is to turn this into a problem statement and solution map for the improvements we're trying to make to GSS naming. My hope is that we can get agreement that this draft accurately describes the situations we'd like to get our naming architecture to work under. IN the next version or so, I'd like to get to a point where it describes all the solutions we are considering and the problems we'd have to solve to implement these solutions. I beliee I have sections for the three major solutions: * name attributes * credential extensions * Mechanisms to use with gss_export_name I'd appreciate help from Martin and Nico on the third solution. I don't seem to find the discussion in my archives and I'm not sure I fully understand it. In particular, was the goal to simply allow mechanism names to be mapped into things like machine user ids or did that solution also deal with exposing things like Kerberos authorization data? solutio I've also attempted to address two of Martin's three major objections to the draft. I've tried to clear up the distinction between authorization and authentication in the draft. I think things were clear in my head, but I was unclear in my language. I've also tried to make the text consistent with the idea that any particular ACL will need some canonical authorization form. I've not stated this explicitly, but I believe the text is consistent with that. I chose not to address Martin's other concern. He believed I should discuss implementations that have gone beyond (or in some cases violated) the GSSAPI spec. I wasn't able to fit that discussion in with what I was trying to say. I'm certainly happy to include details of implementation extensions (both within the spec and beyond what is permitted by the spec) where they make a useful point to the discussion that is here before us. --Sam _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 13:19:19 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 13:19:18 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 803A81324F for ; Mon, 25 Oct 2004 13:19:18 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM8RI-0006Vz-5j; Mon, 25 Oct 2004 13:15:24 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM8L8-0005HZ-3t for kitten@megatron.ietf.org; Mon, 25 Oct 2004 13:09:02 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA14607 for ; Mon, 25 Oct 2004 13:08:58 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CM8Yc-00035C-Cj for kitten@ietf.org; Mon, 25 Oct 2004 13:22:58 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id AE957E0053; Mon, 25 Oct 2004 13:09:10 -0400 (EDT) To: kitten@ietf.org From: Sam Hartman Date: Mon, 25 Oct 2004 13:09:10 -0400 Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 39bd8f8cbb76cae18b7e23f7cf6b2b9f Cc: Subject: Comments on draft-williams-gssapi-v3-guide X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1226 Lines: 43 In the section on portability considerations, you propose using runtime configuration at compile time in order to perform compile-time feature tests. This practice is problematic for cross-compiled environments. I think we may want to consider cases wher compile time tests for at least some features are appropriate. Do we really need an IANA registry for names of APIs in the GSSAPI? It seems like we expect such apis to be defined through standards action. Do we expect it to be hard enough to manage that we get significant value from an IANA registry? I do believe we want an IANA registry for error values and possibly for minor status. Here are some questions I think we should consider with regard to GSSAPI v3: 1) To what extent are we trying to produce a single API document incorperating all the new APIs and to what extent are a bunch of smaller documents appropriate? 2) To what extent do we want to encourage V2 implementations to adopt backward-compatible parts of V3? 3) What parts of what we propose are actually backward incompatible? --Sam _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 13:54:41 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 13:54:41 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id BB5EA1324F for ; Mon, 25 Oct 2004 13:54:40 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM8uD-0002GS-Mw; Mon, 25 Oct 2004 13:45:17 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM8q9-0001qI-Hf for kitten@megatron.ietf.org; Mon, 25 Oct 2004 13:41:05 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA17334 for ; Mon, 25 Oct 2004 13:41:04 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CM93a-0003qH-Vn for kitten@ietf.org; Mon, 25 Oct 2004 13:55:02 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9PHf17q000971 for ; Mon, 25 Oct 2004 10:41:01 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PHf0jW015164 for ; Mon, 25 Oct 2004 11:41:00 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PHednq019550; Mon, 25 Oct 2004 12:40:39 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PHedg4019549; Mon, 25 Oct 2004 12:40:39 -0500 (CDT) Date: Mon, 25 Oct 2004 12:40:39 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025174039.GT21427@binky.central.sun.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: d8ae4fd88fcaf47c1a71c804d04f413d Cc: kitten@ietf.org Subject: Re: Comments on draft-williams-gssapi-v3-guide X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 3422 Lines: 81 On Mon, Oct 25, 2004 at 01:09:10PM -0400, Sam Hartman wrote: > In the section on portability considerations, you propose using > runtime configuration at compile time in order to perform compile-time > feature tests. This practice is problematic for cross-compiled > environments. I think we may want to consider cases wher compile time > tests for at least some features are appropriate. I thought a runtime facility would be a good way to get started, then we could consider compile-time facilities, for which I'm not sure there will be demand. We should seek consensus on this. Certainly some GSS-APIv3 features, those that define new constants, functions, and/or types, will be detectable at compile time. Semantic extensions (e.g., thread-safety) will require explicit compile-time detection facilities, if those are desired. Also, note that while all language bindings of the GSS-API will have runtime environments, not all will have compile-time environments, so talk of compile-time feature detection is language-specific, so I may insist that all such facilities be specified per-language binding. > Do we really need an IANA registry for names of APIs in the GSSAPI? > It seems like we expect such apis to be defined through standards > action. Do we expect it to be hard enough to manage that we get > significant value from an IANA registry? Hmmm, something to think about. Are there any disadvantages in having a registry for each of the relevant namespaces? > I do believe we want an IANA registry for error values and possibly > for minor status. Small GSS namespaces should definitely have an IANA registry, yes. > Here are some questions I think we should consider with regard to > GSSAPI v3: > > 1) To what extent are we trying to produce a single API document > incorperating all the new APIs and to what extent are a bunch of > smaller documents appropriate? Excellent question. So far we have multiple documents defining different little bits of it, so I figured we should at the very least have a single document to serve as a guide -- that's the document that you comment on. We could, for now, continue with small docs and later merge them. I do find it easier working that way, but if the [putative] WG disagrees then I can adjust. Reguargless, a guide might be useful even if all the other docs are merged into one, either as a temporary guide to KITTEN's work, or as an informational RFC to guide readers of KITTEN's work. > 2) To what extent do we want to encourage V2 implementations to adopt > backward-compatible parts of V3? How would we so encourage them? > 3) What parts of what we propose are actually backward incompatible? None, I don't think, but some can cause portability problems, which Martin pointedly brought up, and which I tried to address in the guide doc. The canonical example of that so far is thread-safety: an application that assumes that the GSS-API is thread-safe wouldn't be portable[*]. [*] Well, by the nature of Java one would expect the Java bindings of the GSS-API to be thread-safe, implicitly if not explicitly; we can make sure that future language bindings are clear on this, as I'm sure the C# bindings will be. Note that I threw in fork-safety as well :/ Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 14:00:09 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 14:00:09 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 93A461324F for ; Mon, 25 Oct 2004 14:00:08 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM93j-0003Fg-M1; Mon, 25 Oct 2004 13:55:07 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM91L-0002k1-Gu for kitten@megatron.ietf.org; Mon, 25 Oct 2004 13:52:39 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA18245 for ; Mon, 25 Oct 2004 13:52:38 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CM9Ep-00044P-AX for kitten@ietf.org; Mon, 25 Oct 2004 14:06:36 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id 24C10E0053; Mon, 25 Oct 2004 13:52:47 -0400 (EDT) To: Nicolas Williams References: <20041025174039.GT21427@binky.central.sun.com> From: Sam Hartman Date: Mon, 25 Oct 2004 13:52:47 -0400 In-Reply-To: <20041025174039.GT21427@binky.central.sun.com> (Nicolas Williams's message of "Mon, 25 Oct 2004 12:40:39 -0500") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab Cc: kitten@ietf.org Subject: Re: Comments on draft-williams-gssapi-v3-guide X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 910 Lines: 28 >>>>> "Nicolas" == Nicolas Williams writes: >> 2) To what extent do we want to encourage V2 implementations to >> adopt backward-compatible parts of V3? Nicolas> How would we so encourage them? I meant more do we think this is desirable or confusing? >> 3) What parts of what we propose are actually backward >> incompatible? Nicolas> None, I don't think, but some can cause portability Nicolas> problems, which Martin pointedly brought up, and which I I think that supporting mechs that do not have a good thing to return for gss_export_name may be such a feature. That's only one part of one of the three options my naming draft now discusses though; it is not clear the working group will adopt it. --Sam _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 14:04:44 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 14:04:44 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 7D5BE1324F for ; Mon, 25 Oct 2004 14:04:42 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM9Cd-00044b-Vd; Mon, 25 Oct 2004 14:04:19 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM9Bo-00040m-G2 for kitten@megatron.ietf.org; Mon, 25 Oct 2004 14:03:28 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA19494 for ; Mon, 25 Oct 2004 14:03:26 -0400 (EDT) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CM9PJ-0004Jx-4t for kitten@ietf.org; Mon, 25 Oct 2004 14:17:25 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by brmea-mail-3.sun.com (8.12.10/8.12.9) with ESMTP id i9PI3Rui003283 for ; Mon, 25 Oct 2004 12:03:27 -0600 (MDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PI3QJf025740 for ; Mon, 25 Oct 2004 12:03:26 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PI36o6019582; Mon, 25 Oct 2004 13:03:06 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PI36EG019581; Mon, 25 Oct 2004 13:03:06 -0500 (CDT) Date: Mon, 25 Oct 2004 13:03:06 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025180305.GW21427@binky.central.sun.com> References: <20041025174039.GT21427@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: cab78e1e39c4b328567edb48482b6a69 Cc: kitten@ietf.org Subject: Re: Comments on draft-williams-gssapi-v3-guide X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 2008 Lines: 51 On Mon, Oct 25, 2004 at 01:52:47PM -0400, Sam Hartman wrote: > >>>>> "Nicolas" == Nicolas Williams writes: > > >> 2) To what extent do we want to encourage V2 implementations to > >> adopt backward-compatible parts of V3? > > Nicolas> How would we so encourage them? > > I meant more do we think this is desirable or confusing? I don't get this. > >> 3) What parts of what we propose are actually backward > >> incompatible? > > Nicolas> None, I don't think, but some can cause portability > Nicolas> problems, which Martin pointedly brought up, and which I > > I think that supporting mechs that do not have a good thing to return > for gss_export_name may be such a feature. That's only one part of > one of the three options my naming draft now discusses though; it is > not clear the working group will adopt it. I'm becoming unconvinced by the "some mechanisms have no canonical names" argument. Considering x.509 certs with multiple subjectAltName's I think that SPKM-like mechanisms could pick one as a canonical name either based on the query name and name type given to GSS_Import_name() and some rules, either site-specific or standardized. Thinking of IPsec I realize that any mechanisms like SPKM would have to involve assertion of one of the several names associated with the credentials used. So, the lack of a canonical name due to a multiplicity of names associated with credentials need not mean anything more than that users/apps should be careful which name they use. IOW, I think we'll always be able to have MNs; MNs are trivially exportable, as long as the mechanisms' designers can agree on an exportable representation of their MNs, but given the above I don't see why they wouldn't. Of course, the extensions for MN->machine-UID/GID mapping remain highly desirable. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 14:58:03 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 14:58:02 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 3B32E1324F for ; Mon, 25 Oct 2004 14:58:02 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMA1H-0007J8-AO; Mon, 25 Oct 2004 14:56:39 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CM9xs-00074e-7W for kitten@megatron.ietf.org; Mon, 25 Oct 2004 14:53:08 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA23334 for ; Mon, 25 Oct 2004 14:53:06 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMABM-00059A-R6 for kitten@ietf.org; Mon, 25 Oct 2004 15:07:06 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id 307AD168027; Mon, 25 Oct 2004 14:53:16 -0400 (EDT) To: Nicolas Williams References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> From: Sam Hartman Date: Mon, 25 Oct 2004 14:53:16 -0400 In-Reply-To: <20041025180305.GW21427@binky.central.sun.com> (Nicolas Williams's message of "Mon, 25 Oct 2004 13:03:06 -0500") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Cc: kitten@ietf.org Subject: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 621 Lines: 20 To be useful you need to standardize which name you pick as the canonical name from a cert. Also, the compatibility issue is not just about whether you have something to return. The issue also includes the question of whether a gssapi v2 application that uses gss_export_name as intended by the v2 spec will get the desired behavior. If you pick some arbitrary mapping then you may have an implementable protocol but you will not have a protocol that meets users' needs. --Sam _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 15:06:40 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 15:06:40 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id DA2431324F for ; Mon, 25 Oct 2004 15:06:39 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMA85-0003GU-Jc; Mon, 25 Oct 2004 15:03:41 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMA5U-00017u-Qc for kitten@megatron.ietf.org; Mon, 25 Oct 2004 15:01:00 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA23748 for ; Mon, 25 Oct 2004 15:00:58 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMAIz-0005Ft-2w for kitten@ietf.org; Mon, 25 Oct 2004 15:14:58 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9PJ0w7q014134 for ; Mon, 25 Oct 2004 12:00:58 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PJ0vjW029714 for ; Mon, 25 Oct 2004 13:00:57 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PJ0arL019602; Mon, 25 Oct 2004 14:00:36 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PJ0aUI019601; Mon, 25 Oct 2004 14:00:36 -0500 (CDT) Date: Mon, 25 Oct 2004 14:00:36 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025190036.GX21427@binky.central.sun.com> References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 2409bba43e9c8d580670fda8b695204a Cc: kitten@ietf.org Subject: Re: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 1119 Lines: 33 On Mon, Oct 25, 2004 at 02:53:16PM -0400, Sam Hartman wrote: > To be useful you need to standardize which name you pick as the > canonical name from a cert. For a given query form. Remember, GSS_Import_name() w/o a name type OID means that the name is in a mechanism-specific form, so such a mechanism could still let the app have full control over which name to user [i.e., assert]. Also, such a mechanism could add new generic name types and syntaxes as well. > Also, the compatibility issue is not just about whether you have > something to return. The issue also includes the question of whether > a gssapi v2 application that uses gss_export_name as intended by the > v2 spec will get the desired behavior. It will, as long as the peer asserts the same name next time. > If you pick some arbitrary mapping then you may have an implementable > protocol but you will not have a protocol that meets users' needs. A single arbitrary mapping is not the only way. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 15:12:43 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 15:12:42 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id C45B21324F for ; Mon, 25 Oct 2004 15:12:41 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAFt-0008QP-MO; Mon, 25 Oct 2004 15:11:45 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAFk-0008LF-K4 for kitten@megatron.ietf.org; Mon, 25 Oct 2004 15:11:36 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA24761 for ; Mon, 25 Oct 2004 15:11:34 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMATF-0005Q3-Af for kitten@ietf.org; Mon, 25 Oct 2004 15:25:34 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id C3B8B168027; Mon, 25 Oct 2004 15:11:38 -0400 (EDT) To: Nicolas Williams References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> <20041025190036.GX21427@binky.central.sun.com> From: Sam Hartman Date: Mon, 25 Oct 2004 15:11:38 -0400 In-Reply-To: <20041025190036.GX21427@binky.central.sun.com> (Nicolas Williams's message of "Mon, 25 Oct 2004 14:00:36 -0500") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: ea4ac80f790299f943f0a53be7e1a21a Cc: kitten@ietf.org Subject: Re: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 1240 Lines: 36 >>>>> "Nicolas" == Nicolas Williams writes: Nicolas> On Mon, Oct 25, 2004 at 02:53:16PM -0400, Sam Hartman Nicolas> wrote: >> To be useful you need to standardize which name you pick as the >> canonical name from a cert. Nicolas> For a given query form. It's not at all that simple. Considre a mechanism that sends an X.509 cert over the wire. Such a mechanism needs to either carry additional data (which name should be exported) or it needs to have a single mapping for the mechanism. Also keep in mind that we want GSSAPI applications to use default credentials when possible. That means that for a V2 application, there needs to be something reasonable that happens when gss_export_name is called on the name of default credentials and on the name of a context established with those credentials. This all strongly points in the direction of an expectation of a single name form exported by gss_export_name for v2 mechanisms. I'm also not really comfortable with the term query form as a description of the input to gss_import_name. --Sam _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 15:20:42 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 15:20:42 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 5984F1324F for ; Mon, 25 Oct 2004 15:20:42 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAMl-0003Mm-EC; Mon, 25 Oct 2004 15:18:51 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAIa-0000vK-M8 for kitten@megatron.ietf.org; Mon, 25 Oct 2004 15:14:32 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA25086 for ; Mon, 25 Oct 2004 15:14:30 -0400 (EDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMAW5-0005SY-6S for kitten@ietf.org; Mon, 25 Oct 2004 15:28:30 -0400 Received: from centralmail1brm.Central.Sun.COM ([129.147.62.1]) by brmea-mail-4.sun.com (8.12.10/8.12.9) with ESMTP id i9PJEUNH022591 for ; Mon, 25 Oct 2004 13:14:30 -0600 (MDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail1brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PJEUjW006413 for ; Mon, 25 Oct 2004 13:14:30 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PJE99E019625; Mon, 25 Oct 2004 14:14:09 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PJE9Qk019624; Mon, 25 Oct 2004 14:14:09 -0500 (CDT) Date: Mon, 25 Oct 2004 14:14:09 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025191409.GY21427@binky.central.sun.com> References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> <20041025190036.GX21427@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: e1e48a527f609d1be2bc8d8a70eb76cb Cc: kitten@ietf.org Subject: Re: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 1660 Lines: 47 On Mon, Oct 25, 2004 at 03:11:38PM -0400, Sam Hartman wrote: > >>>>> "Nicolas" == Nicolas Williams writes: > > Nicolas> On Mon, Oct 25, 2004 at 02:53:16PM -0400, Sam Hartman > Nicolas> wrote: > >> To be useful you need to standardize which name you pick as the > >> canonical name from a cert. > > Nicolas> For a given query form. > > It's not at all that simple. Considre a mechanism that sends an X.509 > cert over the wire. Such a mechanism needs to either carry additional > data (which name should be exported) or it needs to have a single > mapping for the mechanism. I said as much. And I endorse the notion of asserting an ID in the context token. > Also keep in mind that we want GSSAPI applications to use default > credentials when possible. That means that for a V2 application, > there needs to be something reasonable that happens when > gss_export_name is called on the name of default credentials and on > the name of a context established with those credentials. Sure, but this need not require standardizing a canonical name selection method. A mechanism could have its users select a name at logon time, for example. > This all strongly points in the direction of an expectation of a > single name form exported by gss_export_name for v2 mechanisms. Only when starting from GSS_C_NO_NAME, but see above. > I'm also not really > comfortable with the term query form as a description of the input to > gss_import_name. Alternatives? Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 15:22:42 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 15:22:41 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 8CBF01324F for ; Mon, 25 Oct 2004 15:22:41 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAPT-0004yP-Tw; Mon, 25 Oct 2004 15:21:39 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAOW-0004O1-6W for kitten@megatron.ietf.org; Mon, 25 Oct 2004 15:20:40 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA25756 for ; Mon, 25 Oct 2004 15:20:38 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMAc2-0005Xi-32 for kitten@ietf.org; Mon, 25 Oct 2004 15:34:38 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id 5DF04E0053; Mon, 25 Oct 2004 15:20:49 -0400 (EDT) To: Nicolas Williams References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> <20041025190036.GX21427@binky.central.sun.com> <20041025191409.GY21427@binky.central.sun.com> From: Sam Hartman Date: Mon, 25 Oct 2004 15:20:49 -0400 In-Reply-To: <20041025191409.GY21427@binky.central.sun.com> (Nicolas Williams's message of "Mon, 25 Oct 2004 14:14:09 -0500") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 7bac9cb154eb5790ae3b2913587a40de Cc: kitten@ietf.org Subject: Re: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 387 Lines: 16 >>>>> "Nicolas" == Nicolas Williams writes: >> I'm also not really comfortable with the term query form as a >> description of the input to gss_import_name. Nicolas> Alternatives? imported name? Name type? _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 15:39:17 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 15:39:17 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 195AD1324F for ; Mon, 25 Oct 2004 15:39:17 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAaL-00029K-BV; Mon, 25 Oct 2004 15:32:53 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAWU-0000gU-48 for kitten@megatron.ietf.org; Mon, 25 Oct 2004 15:28:54 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA26597 for ; Mon, 25 Oct 2004 15:28:49 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMAjv-0005f5-Ha for kitten@ietf.org; Mon, 25 Oct 2004 15:42:49 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i9PJSms3011804 for ; Mon, 25 Oct 2004 12:28:48 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PJSlJf002678 for ; Mon, 25 Oct 2004 13:28:47 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PJSQVZ019655; Mon, 25 Oct 2004 14:28:26 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PJSQ2n019654; Mon, 25 Oct 2004 14:28:26 -0500 (CDT) Date: Mon, 25 Oct 2004 14:28:26 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025192826.GB21427@binky.central.sun.com> References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> <20041025190036.GX21427@binky.central.sun.com> <20041025191409.GY21427@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7655788c23eb79e336f5f8ba8bce7906 Cc: kitten@ietf.org Subject: Re: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 812 Lines: 29 On Mon, Oct 25, 2004 at 03:20:49PM -0400, Sam Hartman wrote: > >>>>> "Nicolas" == Nicolas Williams writes: > > > >> I'm also not really comfortable with the term query form as a > >> description of the input to gss_import_name. > > Nicolas> Alternatives? > > imported name? Isn't an exported name, re-imported "imported?" A name that's been canonicalized or that is output by GSS_Accept/Inquire_sec_context() is an MN, whereas a name imported by GSS_Import_name() with a name type other than exported name is not. What do we call a name that is not an MN? I like "query name." I've never really liked "MN." > Name type? Huh? _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 15:53:16 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 15:53:16 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 453421324F for ; Mon, 25 Oct 2004 15:53:16 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAqA-0008Iy-94; Mon, 25 Oct 2004 15:49:14 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMAmz-00073k-FB for kitten@megatron.ietf.org; Mon, 25 Oct 2004 15:45:57 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA27756 for ; Mon, 25 Oct 2004 15:45:55 -0400 (EDT) Received: from nwkea-mail-2.sun.com ([192.18.42.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMB0U-0005xW-1T for kitten@ietf.org; Mon, 25 Oct 2004 15:59:55 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-2.sun.com (8.12.10/8.12.9) with ESMTP id i9PJjs7q007839 for ; Mon, 25 Oct 2004 12:45:55 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PJjrJf012231 for ; Mon, 25 Oct 2004 13:45:53 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PJjI92019665; Mon, 25 Oct 2004 14:45:18 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PJjIGb019664; Mon, 25 Oct 2004 14:45:18 -0500 (CDT) Date: Mon, 25 Oct 2004 14:45:18 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025194518.GE19142@binky.central.sun.com> References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> <20041025190036.GX21427@binky.central.sun.com> <20041025191409.GY21427@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041025191409.GY21427@binky.central.sun.com> User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: d6b246023072368de71562c0ab503126 Cc: kitten@ietf.org Subject: Re: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 1060 Lines: 25 Also, for default name, think of the MIT krb5 ccache. It can store tickets for more than one client principal, but the ccache file format specifies a default principal name so that even if one does store tickets for multiple different client principals it is always clear which to use when not explicitly requesting one or another name. Similarly with x.509 certs. Not only might one have certs with multiple names, one might also have multiple certs, either for different names or for the same names but with various other differences (e.g., CA chain; why would ould one do so? I dunno, but one could). As a result, whatever facility one uses to store/manage certs and their private keys one might also want to select one cert and name to act as a default credential. If one thinks of a ccache as a credential, rather than a TGT as a credential, then certs look less special w.r.t. having multiple names. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 19:49:48 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 19:49:47 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 19A4E1324F for ; Mon, 25 Oct 2004 19:49:47 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMEMk-0005ZA-Rg; Mon, 25 Oct 2004 19:35:06 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMBZg-0004Vh-8V for kitten@megatron.ietf.org; Mon, 25 Oct 2004 16:36:16 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA06118 for ; Mon, 25 Oct 2004 16:36:13 -0400 (EDT) Received: from carter-zimmerman.mit.edu ([18.18.3.197] helo=cz.mit.edu) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMBnC-0008Ql-CH for kitten@ietf.org; Mon, 25 Oct 2004 16:50:14 -0400 Received: by cz.mit.edu (Postfix, from userid 8042) id 6C7E7E0053; Mon, 25 Oct 2004 16:36:25 -0400 (EDT) To: Nicolas Williams References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> <20041025190036.GX21427@binky.central.sun.com> <20041025191409.GY21427@binky.central.sun.com> <20041025194518.GE19142@binky.central.sun.com> From: Sam Hartman Date: Mon, 25 Oct 2004 16:36:25 -0400 In-Reply-To: <20041025194518.GE19142@binky.central.sun.com> (Nicolas Williams's message of "Mon, 25 Oct 2004 14:45:18 -0500") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 0.0 (/) X-Scan-Signature: 68c8cc8a64a9d0402e43b8eee9fc4199 Cc: kitten@ietf.org Subject: Re: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Level: Status: RO Content-Length: 751 Lines: 18 >>>>> "Nicolas" == Nicolas Williams writes: Nicolas> Also, for default name, think of the MIT krb5 ccache. It Nicolas> can store tickets for more than one client principal, but Nicolas> the ccache file format specifies a default principal name Nicolas> so that even if one does store tickets for multiple Nicolas> different client principals it is always clear which to Nicolas> use when not explicitly requesting one or another name. Remember the thread on krbdev where we proposed to drop that and use the best match principal for the service in question. _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Mon Oct 25 19:50:49 2004 Return-Path: Received: from solipsist-nation ([unix socket]) by solipsist-nation (Cyrus v2.1.5-Debian2.1.5-1) with LMTP; Mon, 25 Oct 2004 19:50:49 -0400 X-Sieve: CMU Sieve 2.2 Return-Path: Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by suchdamage.org (Postfix) with ESMTP id 732E71324F for ; Mon, 25 Oct 2004 19:50:48 -0400 (EDT) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMENx-00072q-PY; Mon, 25 Oct 2004 19:36:21 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CMBgU-0001h4-1K for kitten@megatron.ietf.org; Mon, 25 Oct 2004 16:43:18 -0400 Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA07065 for ; Mon, 25 Oct 2004 16:43:15 -0400 (EDT) Received: from nwkea-mail-1.sun.com ([192.18.42.13]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CMBty-0000H0-Rb for kitten@ietf.org; Mon, 25 Oct 2004 16:57:16 -0400 Received: from centralmail2brm.Central.Sun.COM ([129.147.62.14]) by nwkea-mail-1.sun.com (8.12.10/8.12.9) with ESMTP id i9PKhFs3016339 for ; Mon, 25 Oct 2004 13:43:15 -0700 (PDT) Received: from binky.central.sun.com (binky.Central.Sun.COM [129.153.128.104]) by centralmail2brm.Central.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL, v2.2) with ESMTP id i9PKhEJf008529 for ; Mon, 25 Oct 2004 14:43:14 -0600 (MDT) Received: from binky.central.sun.com (localhost [127.0.0.1]) by binky.central.sun.com (8.13.1+Sun/8.13.1) with ESMTP id i9PKgrnF019711; Mon, 25 Oct 2004 15:42:53 -0500 (CDT) Received: (from nw141292@localhost) by binky.central.sun.com (8.13.1+Sun/8.13.1/Submit) id i9PKgqjc019710; Mon, 25 Oct 2004 15:42:52 -0500 (CDT) Date: Mon, 25 Oct 2004 15:42:52 -0500 From: Nicolas Williams To: Sam Hartman Message-ID: <20041025204252.GE21427@binky.central.sun.com> References: <20041025174039.GT21427@binky.central.sun.com> <20041025180305.GW21427@binky.central.sun.com> <20041025190036.GX21427@binky.central.sun.com> <20041025191409.GY21427@binky.central.sun.com> <20041025194518.GE19142@binky.central.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i X-Spam-Score: 0.0 (/) X-Scan-Signature: 7d33c50f3756db14428398e2bdedd581 Cc: kitten@ietf.org Subject: Re: Single canonical names X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: kitten-bounces@lists.ietf.org Errors-To: kitten-bounces@lists.ietf.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on solipsist-nation.suchdamage.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Level: Status: RO Content-Length: 1128 Lines: 27 On Mon, Oct 25, 2004 at 04:36:25PM -0400, Sam Hartman wrote: > >>>>> "Nicolas" == Nicolas Williams writes: > > Nicolas> Also, for default name, think of the MIT krb5 ccache. It > Nicolas> can store tickets for more than one client principal, but > Nicolas> the ccache file format specifies a default principal name > Nicolas> so that even if one does store tickets for multiple > Nicolas> different client principals it is always clear which to > Nicolas> use when not explicitly requesting one or another name. > > Remember the thread on krbdev where we proposed to drop that and use > the best match principal for the service in question. That does not change the fact that one could (and one implementor has) treated Kerberos credentials in that way. This helps me view the Kerberos V mechanism as not so different from x.509 certificate-based mechanisms w.r.t. to credentials having multiple names associated with them. Nico -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten