RE: Authentication Context Comments

[Paul Madsen <p.madsen@entrust.com>]

Hi Prateek, I agree with your proposed change (as long as the 'AuthNMethod' was a typo and you meant AuthnMethod :-) )

 

Thanks

 

Paul

-----Original Message-----
From: Mishra, Prateek [mailto:pmishra@netegrity.com]
Sent: Tuesday, November 16, 2004 11:46 AM
To: security-services@lists.oasis-open.org
Cc: p.madsen@entrust.com; john.kemp@nokia.com
Subject: Authentication Context Comments

I had taken an editorial action to review recent comments on the authentication context specification and check if all updates had been picked up in schema and documents. The only comment from the relevant time period I found was:

 

Errors in Authentication Context Schemas

 

http://lists.oasis-open.org/archives/security-services/200409/msg00089.html

 

Resolutions to date:

 

1) No change, the idea is that RestrictedLengthType is a utility type used by RestrictedPassword.

The minimum size restriction is intentional rather than accidental.

 

2) Proposed change has been made.

 

3) Use of <AuthenticationMethod> in the core AC schema versus <AuthNMethod> in all derived

classes. The intention here is to use the same name (the derived classes all

restrict AuthenticationMethod but refer to AuthNMethod instead). This change has not been made.

 

 

Proposed change:   replace AuthenticationMethod by AuthNMethod in core AC schema

(and specification).