Re: [security-services] Potential error in AuthContext spec?

["Cantor, Scott" <cantor.2@osu.edu>]

On 6/14/13 5:39 PM, "Philpott, Robert" <robert.philpott@rsa.com> wrote:

>We have a use case where someone is attempting to create aninstance
>document  for the class TimeSynchToken and it appears there is an error
>in the spec. The TimeSyncToken schema defines the AuthnMethodBaseType to
>be a restriction of AuthnMethodBaseType where
>PrincipalAuthenticationMethod is optional and Authenticator is required.
> 
>However, the Token element is in the
>PrincipalAuthenticationMechanismType, not in the
>AuthenticatorSequenceGroup and thus it can¹t be part of the Authenticator
>element.
> 
>So we¹re stumped as to how to create a TimeSyncToken authenticator.

Well, clearly you *can* create one, but the error means you'd have to
define something in the Authenticator element.

Looks like an (uncorrectable) error to me. Cut and paste mistake probably.

-- Scott

Attachment: smime.p7s
Description: S/MIME cryptographic signature