[Kdc-info] notes from today

Sam Hartman hartmans at MIT.EDU
Wed Nov 12 21:43:03 EST 2003


>>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at sun.com> writes:

    Nicolas> On Wed, Nov 12, 2003 at 10:43:49PM +0100, Leif Johansson
    Nicolas> wrote:
    >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
    >> 
    >> Please yell if I got it wrong. This is roughly what transpired
    >> today:
    >> 
    >> 1. After some initial confusion about the word 'policy' we
    >> decided that the policy part of the model be restructed as
    >> follows:

    >> Policy type OID Optional opaque parameter "DEFINED BY" the type

    Nicolas> "Open type" is the right ASN.1 terminology.

We're not in an ASN.1 world here.


    Nicolas> per _policy_ type.

    >> 2. Nico commented on the need for words about access control.
    >> The next version will have such words.

I'm uncomfortable getting into ACLs at all in this document even ACL
policy types.  I believe that is a major rathole.



More information about the kdc-info mailing list