Re: Review of draft-ietf-krb-wg-referrals-13.txt

Jeffrey Hutzelman <[email protected]> writes:

> 8) Section 11 refers to a key usage value KEY_USAGE_AS_REQ.  But this
>    is not called out in section 12 (Number assignments).  Is this value
>    present in the key usage registry?

This number is present in the key usage registry.

While I was rereading the document, I found the following error in
Appendix A:

          PA-SVR-REFERRAL-DATA ::= SEQUENCE {
                 referred-name   [1] PrincipalName OPTIONAL,
                 referred-realm  [0] Realm
          }}

should probably be:

          PA-SVR-REFERRAL-DATA ::= SEQUENCE {
                 referred-realm  [0] Realm,
                 referred-name   [1] PrincipalName OPTIONAL
          }

at least according to
http://www.isoc.org/isoc/conferences/ndss/01/papers/trostle.pdf, which
I believe is a correct copy of [XPR].  I haven't confirmed whether
Windows actually encodes it that way.
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg