Re: [security-services] Groups - sstc-saml-schema-authn-context-kerberos-1.0.xsduploaded

[John Kemp <john.kemp@nokia.com>]

Hi Tim,

ext Tim Alsop wrote:

>It is not clear to me why references are made to challenge response -
>can you explain this element and how it would be used with Kerberos
>authentication ?
>
>  
>
I had modelled the Kerberos protocol as a challenge-response using a 
shared secret (<SharedSecretChallengeResponse>), but I think this is 
actually incorrect, and it should be modelled as 
<SharedSecretDynamicPlaintext>.

Thoughts?

Cheers,

- JohnK