From kitten-bounces@lists.ietf.org Fri Feb 02 16:14:55 2007 Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HD5jy-0002YG-4T; Fri, 02 Feb 2007 16:14:38 -0500 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HD5jw-0002Xv-N4 for kitten@ietf.org; Fri, 02 Feb 2007 16:14:36 -0500 Received: from brmea-mail-3.sun.com ([192.18.98.34]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HD5jt-0007jW-DB for kitten@ietf.org; Fri, 02 Feb 2007 16:14:36 -0500 Received: from fe-amer-01.sun.com ([192.18.108.175]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l12LEXKS005876 for ; Fri, 2 Feb 2007 14:14:33 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JCU00M01TA3UQ00@mail-amer.sun.com> (original mail from Shawn.Emery@Sun.COM) for kitten@ietf.org; Fri, 02 Feb 2007 14:14:32 -0700 (MST) Received: from [129.150.48.6] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JCU00678TO8YR53@mail-amer.sun.com> for kitten@ietf.org; Fri, 02 Feb 2007 14:14:32 -0700 (MST) Date: Fri, 02 Feb 2007 14:12:45 -0700 From: Shawn M Emery To: kitten@ietf.org Message-id: <45C3A94D.1090707@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Thunderbird 1.5.0.9 (X11/20061228) X-Spam-Score: 0.0 (/) X-Scan-Signature: a7d6aff76b15f3f56fcb94490e1052e4 Cc: Subject: draft-ietf-kitten-rfc2853bis-02 review X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kitten-bounces@lists.ietf.org As promised at IETF-68, here is my review of this draft. I apologize for not doing this sooner. Overall comments: Does this draft need to obsolete RFC 2853, but rather just contain the corrections/clarifications based from RFC 2743? I think that most of the people looking at this document are going to be those you already have existing class libraries and will want to know what exactly should be changed. Are there any issues where garbage collection may be indeterministic enough for freeing sensitive data? 4. Additional Controls -- Optional services list needs delimiters of item and its definition. 5.2 Provider Framework -- Add comma here: functionality to the components obtained from providers, the GSS-API can be extended to support an arbitrary list of mechanisms. 5.14 Channel Bindings -- The channel binding mechanism example is out-dated. Refer to: draft-ietf-kitten-gssapi-channel-bindings-02.txt 6.3 GSSCredential interface -- Should we consider draft-ietf-kitten-gssapi-store-cred-02.txt here/now? Thanks, Shawn. -- _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Tue Feb 06 19:22:07 2007 Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HEaZR-0001DJ-1U; Tue, 06 Feb 2007 19:21:57 -0500 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HEaZQ-0001DE-6b for kitten@ietf.org; Tue, 06 Feb 2007 19:21:56 -0500 Received: from nwk-ea-fw-1.sun.com ([192.18.42.249]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HEaZK-00086u-Fn for kitten@ietf.org; Tue, 06 Feb 2007 19:21:56 -0500 Received: from d1-sfbay-09.sun.com ([192.18.39.119]) by nwk-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l170LkUw009543 for ; Tue, 6 Feb 2007 16:21:46 -0800 (PST) Received: from conversion-daemon.d1-sfbay-09.sun.com by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JD200501GW5CL00@d1-sfbay-09.sun.com> (original mail from Seema.Malkani@Sun.COM) for kitten@ietf.org; Tue, 06 Feb 2007 16:21:46 -0800 (PST) Received: from [192.18.60.128] by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JD200FSRH08P4QI@d1-sfbay-09.sun.com> for kitten@ietf.org; Tue, 06 Feb 2007 16:21:45 -0800 (PST) Date: Tue, 06 Feb 2007 16:21:40 -0800 From: Seema Malkani In-reply-to: <45C3A94D.1090707@sun.com> To: Shawn M Emery Message-id: <45C91B94.9030106@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-15 Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en References: <45C3A94D.1090707@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.7) Gecko/20041221 X-Spam-Score: 0.0 (/) X-Scan-Signature: f607d15ccc2bc4eaf3ade8ffa8af02a0 Cc: kitten@ietf.org Subject: Re: draft-ietf-kitten-rfc2853bis-02 review X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Seema.Malkani@Sun.COM List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kitten-bounces@lists.ietf.org Shawn M Emery wrote On 02/02/07 13:12,: > > As promised at IETF-68, here is my review of this draft. I apologize > for not doing this sooner. > > Overall comments: > > Does this draft need to obsolete RFC 2853, but rather just contain the > corrections/clarifications based from RFC 2743? I think that most of > the people looking at this document are going to be those you already > have existing class libraries and will want to know what exactly should > be changed. This draft does need to obsolete RFC 2853. The GSS error codes were misaligned in the spec, which need to be fixed. > > Are there any issues where garbage collection may be indeterministic > enough for freeing sensitive data? No. The GC will sweep all objects not referenced. If you are concerned about any sensitive data, we do provide API where applicable. For instance, we provide an API dispose() to release any system resources. > > 4. Additional Controls > -- > Optional services list needs delimiters of item and its definition. > > 5.2 Provider Framework > -- > Add comma here: > > functionality to the components obtained from providers, the GSS-API > can be extended to support an arbitrary list of mechanisms. Will fix it. > > > 5.14 Channel Bindings > -- > > The channel binding mechanism example is out-dated. Refer to: > draft-ietf-kitten-gssapi-channel-bindings-02.txt This draft does not change the Channel Bindings structure. Extensions to GSS will be covered separately. > > 6.3 GSSCredential interface > -- > > Should we consider draft-ietf-kitten-gssapi-store-cred-02.txt here/now? All GSS extensions will be covered separately. Thanks, Seema _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten From kitten-bounces@lists.ietf.org Wed Feb 28 00:33:39 2007 Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HMHRB-0001Kb-Hw; Wed, 28 Feb 2007 00:33:13 -0500 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HMHRA-0001Gn-OS for kitten@lists.ietf.org; Wed, 28 Feb 2007 00:33:12 -0500 Received: from smtp.microsoft.com ([131.107.115.212]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HMHR7-0007Hn-BJ for kitten@lists.ietf.org; Wed, 28 Feb 2007 00:33:12 -0500 Received: from tk1-exhub-c104.redmond.corp.microsoft.com (157.56.116.117) by TK5-EXGWY-E801.partners.extranet.microsoft.com (10.251.56.50) with Microsoft SMTP Server (TLS) id 8.0.685.24; Tue, 27 Feb 2007 21:33:08 -0800 Received: from win-imc-02.wingroup.windeploy.ntdev.microsoft.com (157.54.69.169) by tk1-exhub-c104.redmond.corp.microsoft.com (157.56.116.117) with Microsoft SMTP Server id 8.0.685.25; Tue, 27 Feb 2007 21:33:08 -0800 Received: from WIN-MSG-20.wingroup.windeploy.ntdev.microsoft.com ([157.54.62.24]) by win-imc-02.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.3953); Tue, 27 Feb 2007 21:33:08 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C75AF9.ED0CBB90" Date: Tue, 27 Feb 2007 21:33:05 -0800 Message-ID: X-MS-Has-Attach: yes X-MS-TNEF-Correlator: Thread-Topic: I-D ACTION:draft-zhu-pku2u-01.txt Thread-Index: AcdayuPiklf2umG8SviBgv6m4k+JnQALobTQ From: "Liqiang(Larry) Zhu" To: , , Nicolas Williams , , , X-OriginalArrivalTime: 28 Feb 2007 05:33:08.0402 (UTC) FILETIME=[EDA99920:01C75AF9] X-Spam-Score: 0.0 (/) X-Scan-Signature: 944ecb6e61f753561f559a497458fb4f Cc: Subject: FW: I-D ACTION:draft-zhu-pku2u-01.txt X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kitten-bounces@lists.ietf.org ------_=_NextPart_001_01C75AF9.ED0CBB90 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Here is the updated PKU2U. Please review it and see if it has addressed all concerns. Thanks, --Larry -----Original Message----- From: Internet-Drafts@ietf.org [mailto:Internet-Drafts@ietf.org]=20 Sent: Tuesday, February 27, 2007 3:50 PM To: i-d-announce@ietf.org Subject: I-D ACTION:draft-zhu-pku2u-01.txt=20 A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Public Key Cryptography Based User-to-User Authentication - (PKU2U) Author(s) : L. Zhu, et al. Filename : draft-zhu-pku2u-01.txt Pages : 10 Date : 2007-2-27 =09 This document defines the public key cryptography based user-to-user authentication protocol - PKU2U. This mechanism provides security services in peer to peer networking environments without requiring a trusted third party. Furthermore, the binding of PKU2U for the Generic Security Service Application Program Interface (GSS-API) per RFC2743 is defined based on RFC4121. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-zhu-pku2u-01.txt To remove yourself from the I-D Announcement list, send a message to=20 i-d-announce-request@ietf.org with the word unsubscribe in the body of=20 the message.=20 You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce=20 to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the=20 username "anonymous" and a password of your e-mail address. After=20 logging in, type "cd internet-drafts" and then=20 "get draft-zhu-pku2u-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html=20 or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-zhu-pku2u-01.txt". =09 NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. ------_=_NextPart_001_01C75AF9.ED0CBB90 Content-Type: application/octet-stream; name="ATT1891765.TXT" Content-Transfer-Encoding: base64 Content-Description: ATT1891765.TXT Content-Disposition: attachment; filename="ATT1891765.TXT" Q29udGVudC1UeXBlOiBtZXNzYWdlL2V4dGVybmFsLWJvZHk7IGFjY2Vzcy10eXBlPW1haWwtc2Vy dmVyOw0KCXNlcnZlcj0ibWFpbHNlcnZAaWV0Zi5vcmciDQoNCkNvbnRlbnQtVHlwZTogdGV4dC9w bGFpbg0KQ29udGVudC1JRDogPDIwMDctMi0yNzE1NTAzNi5JLURAaWV0Zi5vcmc+DQoNCkVOQ09E SU5HIG1pbWUNCkZJTEUgL2ludGVybmV0LWRyYWZ0cy9kcmFmdC16aHUtcGt1MnUtMDEudHh0DQo= ------_=_NextPart_001_01C75AF9.ED0CBB90 Content-Type: application/octet-stream; name="draft-zhu-pku2u-01.URL" Content-Transfer-Encoding: base64 Content-Description: draft-zhu-pku2u-01.URL Content-Disposition: attachment; filename="draft-zhu-pku2u-01.URL" W0ludGVybmV0U2hvcnRjdXRdDQpVUkw9ZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0 cy9kcmFmdC16aHUtcGt1MnUtMDEudHh0DQo= ------_=_NextPart_001_01C75AF9.ED0CBB90 Content-Type: text/plain; name="ATT1891766.txt" Content-Transfer-Encoding: base64 Content-Description: ATT1891766.txt Content-Disposition: attachment; filename="ATT1891766.txt" X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkktRC1Bbm5v dW5jZSBtYWlsaW5nIGxpc3QNCkktRC1Bbm5vdW5jZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cxLmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vaS1kLWFubm91bmNlDQo= ------_=_NextPart_001_01C75AF9.ED0CBB90 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten ------_=_NextPart_001_01C75AF9.ED0CBB90-- From kitten-bounces@lists.ietf.org Wed Feb 28 00:36:26 2007 Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HMHU8-0005Hl-80; Wed, 28 Feb 2007 00:36:16 -0500 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HMHU7-0005Cf-4i for kitten@lists.ietf.org; Wed, 28 Feb 2007 00:36:15 -0500 Received: from mail2.microsoft.com ([131.107.115.215] helo=smtp.microsoft.com) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HMHU5-0007br-P6 for kitten@lists.ietf.org; Wed, 28 Feb 2007 00:36:15 -0500 Received: from TK5-EXHUB-C102.redmond.corp.microsoft.com (157.54.70.72) by TK5-EXGWY-E802.partners.extranet.microsoft.com (10.251.56.168) with Microsoft SMTP Server (TLS) id 8.0.685.24; Tue, 27 Feb 2007 21:36:13 -0800 Received: from win-imc-01.wingroup.windeploy.ntdev.microsoft.com (157.54.0.39) by TK5-EXHUB-C102.redmond.corp.microsoft.com (157.54.70.72) with Microsoft SMTP Server id 8.0.685.25; Tue, 27 Feb 2007 21:36:13 -0800 Received: from WIN-MSG-20.wingroup.windeploy.ntdev.microsoft.com ([157.54.62.24]) by win-imc-01.wingroup.windeploy.ntdev.microsoft.com with Microsoft SMTPSVC(6.0.3790.3953); Tue, 27 Feb 2007 21:36:12 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C75AFA.40CD70E8" Date: Tue, 27 Feb 2007 21:35:26 -0800 Message-ID: X-MS-Has-Attach: yes X-MS-TNEF-Correlator: Thread-Topic: I-D ACTION:draft-zhu-ws-kerb-01.txt Thread-Index: AcdayuzZxpsU2rjgQlq3s38I55mGNAALzlMw From: "Liqiang(Larry) Zhu" To: , X-OriginalArrivalTime: 28 Feb 2007 05:36:12.0809 (UTC) FILETIME=[5B93DF90:01C75AFA] X-Spam-Score: 0.0 (/) X-Scan-Signature: 057ebe9b96adec30a7efb2aeda4c26a4 Cc: Subject: FW: I-D ACTION:draft-zhu-ws-kerb-01.txt X-BeenThere: kitten@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kitten-bounces@lists.ietf.org ------_=_NextPart_001_01C75AFA.40CD70E8 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Here is the updated IAKERB. --larry -----Original Message----- From: Internet-Drafts@ietf.org [mailto:Internet-Drafts@ietf.org]=20 Sent: Tuesday, February 27, 2007 3:50 PM To: i-d-announce@ietf.org Subject: I-D ACTION:draft-zhu-ws-kerb-01.txt=20 A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Initial and Pass Through Authentication Using Kerberos V5 and the GSS-API (IAKERB) Author(s) : J. Altman, L. Zhu Filename : draft-zhu-ws-kerb-01.txt Pages : 10 Date : 2007-2-27 =09 This document defines extensions to the Kerberos protocol and the GSS-API Kerberos mechanism that enable a GSS-API Kerberos client to exchange messages with the KDC using the GSS-API acceptor as the proxy, by encapsulating the Kerberos messages inside GSS-API tokens. With these extensions a client can obtain Kerberos tickets for services where the KDC is not accessible to the client, but is accessible to the application server. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-zhu-ws-kerb-01.txt To remove yourself from the I-D Announcement list, send a message to=20 i-d-announce-request@ietf.org with the word unsubscribe in the body of=20 the message.=20 You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce=20 to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the=20 username "anonymous" and a password of your e-mail address. After=20 logging in, type "cd internet-drafts" and then=20 "get draft-zhu-ws-kerb-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html=20 or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-zhu-ws-kerb-01.txt". =09 NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. ------_=_NextPart_001_01C75AFA.40CD70E8 Content-Type: application/octet-stream; name="ATT1891948.TXT" Content-Transfer-Encoding: base64 Content-Description: ATT1891948.TXT Content-Disposition: attachment; filename="ATT1891948.TXT" Q29udGVudC1UeXBlOiBtZXNzYWdlL2V4dGVybmFsLWJvZHk7IGFjY2Vzcy10eXBlPW1haWwtc2Vy dmVyOw0KCXNlcnZlcj0ibWFpbHNlcnZAaWV0Zi5vcmciDQoNCkNvbnRlbnQtVHlwZTogdGV4dC9w bGFpbg0KQ29udGVudC1JRDogPDIwMDctMi0yNzE1NTI0OC5JLURAaWV0Zi5vcmc+DQoNCkVOQ09E SU5HIG1pbWUNCkZJTEUgL2ludGVybmV0LWRyYWZ0cy9kcmFmdC16aHUtd3Mta2VyYi0wMS50eHQN Cg== ------_=_NextPart_001_01C75AFA.40CD70E8 Content-Type: application/octet-stream; name="draft-zhu-ws-kerb-01.URL" Content-Transfer-Encoding: base64 Content-Description: draft-zhu-ws-kerb-01.URL Content-Disposition: attachment; filename="draft-zhu-ws-kerb-01.URL" W0ludGVybmV0U2hvcnRjdXRdDQpVUkw9ZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0 cy9kcmFmdC16aHUtd3Mta2VyYi0wMS50eHQNCg== ------_=_NextPart_001_01C75AFA.40CD70E8 Content-Type: text/plain; name="ATT1891949.txt" Content-Transfer-Encoding: base64 Content-Description: ATT1891949.txt Content-Disposition: attachment; filename="ATT1891949.txt" X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkktRC1Bbm5v dW5jZSBtYWlsaW5nIGxpc3QNCkktRC1Bbm5vdW5jZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cxLmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vaS1kLWFubm91bmNlDQo= ------_=_NextPart_001_01C75AFA.40CD70E8 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kitten mailing list Kitten@lists.ietf.org https://www1.ietf.org/mailman/listinfo/kitten ------_=_NextPart_001_01C75AFA.40CD70E8--