Digest-07 Status (fwd)

["Bernard Aboba" <bernard_aboba@hotmail.com>]

---------- Forwarded message ----------
Date: Wed, 18 Jan 2006 17:13:18 +0100
From: "Beck01, Wolfgang" <BeckW@t-systems.com>
To: aboba@internaut.com
Subject: Digest-07 status

Bernard,

here's a brief status about which changes I've included in digest-07.

  o  clarified protection space usage with different HTTP-style
     protocols
[as requested by Kurt D Zeilenga]
  o  Mentioned Digest-Entity-Body-Hash in RADIUS Client Behavior
     section
[it was only mentioned in the attribute description and in the Server 
Behaviour
section]
  o  added a RADIUS client configuration section for scenario 1
     parameters
[see my mail 'digest negotation issues' on the list of 9 Jan 2006]
  o  Split Client/Server Behavior sections into subsection to enhance
     readability.
[I did not follow all of Alexey Melnikov's change requests, but he was right 
in
that the large blob of text was hard to follow. The structure is now

    3.2.  RADIUS Client Behavior . . . . . . . . . . . . . . . . . .  9
      3.2.1.  Credential Selection . . . . . . . . . . . . . . . . .  9
      3.2.2.  Constructing an Access-Request . . . . . . . . . . . . 10
      3.2.3.  Constructing an Authentication-Info header . . . . . . 10
      3.2.4.  Failed Authentication  . . . . . . . . . . . . . . . . 11
      3.2.5.  Obtaining Nonces . . . . . . . . . . . . . . . . . . . 12
    3.3.  RADIUS Server Behavior . . . . . . . . . . . . . . . . . . 12
      3.3.1.  General Attribute Checks . . . . . . . . . . . . . . . 13
      3.3.2.  Authentication . . . . . . . . . . . . . . . . . . . . 13
      3.3.3.  Constructing the Reply . . . . . . . . . . . . . . . . 14
]

  o  adjusted Table of Attributes entry for Digest-Qop to 0+, as it is
     only a SHOULD in the text.
  o  replace 'without quotes' with 'without surrounding quotes'
  o  removed redundant sentence from Digest-Domain description in 4.17
  o  removed more typos

I won't include Henrik Nordstrom's request to allow Digest-HA1 without
qop-int. His arguments were quite convinving, but it would be a major
change, and not everybody on the WG list seems to be happy about it.

Wolfgang

--
T-Systems
Next Generation IP Services and Systems
+49 6151 937 2863
Am Kavalleriesand 3
64295 Darmstadt
Germany



--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>