RE: RSA Interop 2005 Guidelines

[Rich Salz <rsalz@datapower.com>]

> We're not creating end-entity certs for the users we're talking about
> here. This is simply a discussion of what will be in the NameID of a
> Subject of an Assertion that will contain the AuthnStatement indicating
> the user logged in with a password.

okey.  i might have been a bit confused by the questions.

> Our user repository is built around looking users up by uid, not CN.  So
> for us, I'd prefer to stick with the uid.  I'm sure we can hack it to
> work with CN's, but I'd rather not.

i actually don't care all that much.  i was just trying to follow what was
done last year.  shrug, whatever works for folks.

	/r$

-- 
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html