I agree with the
changes listed by Hal, but I now find the lines 1286-1290 to be confusing
and partially redundant with section 3.4.4. These lines talk about how
to generate the response and discusses matching the
<ConfirmationMethod> elements. This is what 3.4.4 already
discusses in a more specific way. Since 3.4.4 talks about matching
confirmations, should these lines be replaced with text describing how to
match the <AuthenticationMethod>'s which were described just above
it? I'd suggest some text, but I've got to run right
now.
And just to make
sure I still understand this...
Since
<AuthenticationQuery> extends <SubjectQueryAbstractType>, I can
specify both <AuthenticationMethod>'s and <ConfirmationMethod>'s
in my query, right? At least that's how I read the schema -- the
<ConfirmationMethod> elements are part of the <Subject> element
(by extension) and the <AuthenticationMethod> elements are part of the
<AuthenticationQuery>.
Thanks!
-----Original
Message-----
From: Hal
Lockhart [mailto:hal.lockhart@entegrity.com]
Sent: Tuesday, March 19, 2002 4:41
PM
To:
'security-services@lists.oasis-open.org'
Subject: [security-services] New
(minor) Issue: AuthNMethod, not ConfirmationMethod in AuthNQu
ery
In the
AuthenticationQuery, it is possible to provide an optional
ConfirmationMethod.
I
believe the intent here was to specify an AuthenticationMethod. (Prateek
says this is an old bug that never got fixed.)
Spcifically,
line
1282, 1298 and 2324 change "ConfirmationMethod" to
"AuthenticationMethod"
line
1285 change "confirmation" to "authentication"
Hal