On Mon, Jan 28, 2008 at 03:38:17PM -0500, Jeffrey Hutzelman wrote:
I should note that this is not a krb-wg document, and is getting close
to off-topic here. I started the discussion here because I was raising
an issue specifically related to Kerberos and potentially broader than
just PKU2U; namely, handling of mapping X.500 DN's to Kerberos
principal names. It seems that particular issue has been resolved, at
least for PKU2U, by observing that PKU2U needn't expose Kerberos
principal names and so doesn't actually need such a mapping.
At this point, I think the remaining issues are not particularly
Kerberos specific, and in fact much of this seems to touch on things
that affect other GSS-API mechanisms and the work of the Kitten WG. I
think it might be worth taking the discussion of naming issues and
especially naming extensions to the Kitten list.
KITTEN doesn't work on mechanisms either, but KITTEN is appropriate for
discussion of GSS-API naming issues. So, yes, we should take this to
the KITTEN list, though eventually PKU2U will be off-topic there also.
