Re: [wss] Kereberos Token Profile Issues

[Anthony Nadalin <drsecure@us.ibm.com>]

Agree, these need to be corrected

Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122
"Dana Kaufman" <dkaufman@forumsys.com>

"Dana Kaufman" <dkaufman@forumsys.com>

06/29/2006 03:32 PM

To	<wss@lists.oasis-open.org>
cc
Subject	[wss] Kereberos Token Profile Issues

Kerberos Token Profile 1.1

1) Lines 203-204 state:

"When a Kerberos Token is referenced using <wsse:SecurityTokenReference>
the @wsse11:TokenType attribute SHOULD be specified."

But the example at line 229 does not have the TokenType attribute as it
should:

<wsse:SecurityTokenReference>

Line 229 should read:

<wsse:SecurityTokenReference
wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-kerberos-toke
n-pr
ofile-1.1#Kerberosv5_AP_REQ">

2) There are syntax errors in lines 253-255.  The right angle bracket is
misplaced:

<wsse:SecurityTokenReference>
wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-kerberos-
token-profile-1.1#Kerberosv5_AP_REQ"

should read:

<wsse:SecurityTokenReference
wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-kerberos-toke
n-pr
ofile-1.1#Kerberosv5_AP_REQ">



Dana S. Kaufman
VP of Product Management
Forum Systems, Inc.
Tel: (781) 788-4232
E-Mail: dkaufman@forumsys.com
Visit http://www.forumsys.com




---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  You may a link to this group and all your TCs in OASIS
at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php