Re: Question: Prefer to block on draft-ietf-krb-wg-kdc-model
Leif Johansson <[email protected]> Thu, 28 Jun 2012 20:35:09 +0200
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 06/28/2012 07:01 PM, Nico Williams wrote: > On Thu, Jun 28, 2012 at 10:44 AM, Sam Hartman > <[email protected]> wrote: >>>>>>> "Nico" == Nico Williams <[email protected]> >>>>>>> writes: >> >> Nico> Block. Or fix. But do not publish as-is. I'd be happy >> with removal Nico> of the N-strikes-related attributes as a fix, >> and any related text. >> >> What attributes do you see as related to n-strikes? As an >> individual I actually don't see any. > > To be precise I want the following attributes to be made > explicitly optional, or better: removed: > > 4.1.1.5. principalNumberOfFailedAuthenticationAttempts 4.1.1.6. > principalLastFailedAuthentication 4.1.1.7. > principalLastSuccessfulAuthentication > > I'd be OK with adding a locked attribute. I'm ok removing them or making them optional. I believe that introducing locking will entail a substantial rewrite of the spec which I think is not worth the effort at this point. Maybe next revision! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk/so9gACgkQ8Jx8FtbMZnezYwCggWCL9VkftEOsDNuotF/owAA1 aZsAnRy1D3Qh1Bc5iwUofnTjOruhrTeJ =fM9h -----END PGP SIGNATURE----- _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg