Re: GSS_Inquire_name()

[Nicolas Williams <Nicolas.Williams at sun.com>]

On Tue, Sep 15, 2009 at 10:06:47PM +0200, Luke Howard wrote:
> >>Are all names in all or just the one that are not in asserted/
> >>authenticaticated names ?
> >>
> >>Love
> >
> >Do you mean "are there attributes that are neither asserted nor
> >authenticated?"
> 
> As an implementer this left me completely confused too.
> 
> BTW, see:
> 
> 	http://k5wiki.kerberos.org/wiki/Projects/VerifyAuthData
> 
> for actual implementation experience.

I can't quite remember what I had intended :(

I think I must have meant 'all_attrs' to be the union of the other two
purely for conviennce.  But on second (or third) thought I can't see why
an app might care for attrs without caring as to whether they are
authenticated or asserted.

(Also, there is the more general problem of what entity authenticated a
given attribute.  But for now I think GSS_Inquire_name() is plenty good
enough, minus the all_attrs argument anyways.)

Nico
--