[Nicolas Williams] Re: GSSAPI naming and domain-based names

Hi.  Over in the SASL working group we have been discussing the
problem of GSSAPI and naming for SASL mechanisms.  The problem is that
if you are using some protocol like LDAP that does SRV records, you
need to make sure that you authenticate both the name the user typed
in as well as the eventual hostname that you ended up using at the
GSSAPI layer.

Nico is going to work on a proposal that he will presumably submit as
a proposed standard.  At this time, this is not a work item of the
SASL working group, although we expect to discuss the issues on our
mailing lists.  Interested CAT fanciers may want to follow that
discussion.