From otbzbsasvneyzx@advdim.com Sun Nov 1 04:07:04 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1377C3A68FC for ; Sun, 1 Nov 2009 04:07:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -12.287 X-Spam-Level: X-Spam-Status: No, score=-12.287 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_DB=0.888, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95, HTML_IMAGE_ONLY_32=1.778, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JIpg7XgY9LZL for ; Sun, 1 Nov 2009 04:07:02 -0800 (PST) Received: from 6-143-251-94.net.stream.pl (6-143-251-94.net.stream.pl [94.251.143.6]) by core3.amsl.com (Postfix) with SMTP id 95A033A68FB for ; Sun, 1 Nov 2009 04:07:00 -0800 (PST) To: Subject: [TPCS #FOQ-43241-670]: Re: C6274 Approved Card From: MIME-Version: 1.0 Importance: High Content-Type: text/html X-Antivirus: avast! (VPS 091029-0, 2009-10-29), Outbound message X-Antivirus-Status: Clean Message-Id: <20091101120701.95A033A68FB@core3.amsl.com> Date: Sun, 1 Nov 2009 04:07:00 -0800 (PST)
We ship Worldwide! To all countries! To all destinations!
Cant see a picture? Click Here!

To unsubscribe from this mailing list, please log in to www.pairbought.com, click on "My Account", click "Update" to edit your registration details and uncheck the "Receive Newsletter?" check box.
Or unsubscribe at http://pairbought.com/faq.php

Privacy Statement | Terms & Conditions | Contact

AMAZON Ltd.
Tower Bridge Business Complex. Unit 8, B220. 258 Clements Road. London. SE55 1DG

© 2009 AMAZON, Ltd. All Rights Reserved

From johncary@aliroo.com Sun Nov 1 15:51:44 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5F10C3A680F for ; Sun, 1 Nov 2009 15:51:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -71.58 X-Spam-Level: X-Spam-Status: No, score=-71.58 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_24=1.552, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_UNI=0.591, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SyW6dJlNrUck for ; Sun, 1 Nov 2009 15:51:43 -0800 (PST) Received: from 201-69-42-151.dial-up.telesp.net.br (201-69-42-151.dial-up.telesp.net.br [201.69.42.151]) by core3.amsl.com (Postfix) with SMTP id 4EC543A67AA for ; Sun, 1 Nov 2009 15:51:35 -0800 (PST) To: Subject: Thank you for choosing us! From: MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091101235137.4EC543A67AA@core3.amsl.com> Date: Sun, 1 Nov 2009 15:51:35 -0800 (PST)
Click here to view as a web page.

View image in browser now
Unsubscribe | Change e-mail address | Privacy Policy | About Us

Copyright 2009 3154 Inc. All rights reserved.
From mitchelle@abercrombiekent.com.au Mon Nov 2 16:23:13 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5BC1F3A67A3 for ; Mon, 2 Nov 2009 16:23:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -29.763 X-Spam-Level: X-Spam-Status: No, score=-29.763 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, GB_I_LETTER=-2, HELO_MISMATCH_COM=0.553, HTML_IMAGE_ONLY_32=1.778, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SUBJ_YOUR_DEBT=2.622, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Xn1j51l+FAw for ; Mon, 2 Nov 2009 16:23:12 -0800 (PST) Received: from alston.com (unknown [201.29.243.110]) by core3.amsl.com (Postfix) with SMTP id F25483A62C1 for ; Mon, 2 Nov 2009 16:23:10 -0800 (PST) To: Subject: Skype: 7 days to save your credit From: MIME-Version: 1.0 Importance: High Content-Type: text/html Message-Id: <20091103002310.F25483A62C1@core3.amsl.com> Date: Mon, 2 Nov 2009 16:23:10 -0800 (PST)
We ship Worldwide! To all countries! To all destinations!
Cant see a picture? Click Here!

To unsubscribe from this mailing list, please log in to www.behindvisit.com, click on "My Account", click "Update" to edit your registration details and uncheck the "Receive Newsletter?" check box.
Or unsubscribe at http://behindvisit.com/faq.php

Privacy Statement | Terms & Conditions | Contact

AMAZON Ltd.
Tower Bridge Business Complex. Unit 2, B782. 288 Clements Road. London. SE35 2DG

© 2009 AMAZON, Ltd. All Rights Reserved

From ietf-krb-wg-bounces@lists.anl.gov Sat Nov 7 21:46:00 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 70C3628C0ED for ; Sat, 7 Nov 2009 21:46:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.599 X-Spam-Level: X-Spam-Status: No, score=-5.599 tagged_above=-999 required=5 tests=[AWL=3.000, BAYES_00=-2.599, GB_I_INVITATION=-2, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bJ5wEb8sw5Ib for ; Sat, 7 Nov 2009 21:45:59 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 572803A69ED for ; Sat, 7 Nov 2009 21:45:59 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 612ED43; Sat, 7 Nov 2009 23:46:24 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id AAB7D3B; Sat, 7 Nov 2009 23:46:16 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 7F96480E32; Sat, 7 Nov 2009 23:46:16 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 1B63080E31 for ; Sat, 7 Nov 2009 23:46:15 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 0C24036; Sat, 7 Nov 2009 23:46:15 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 06FC53B for ; Sat, 7 Nov 2009 23:46:15 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id DCBA636 for ; Sat, 7 Nov 2009 23:46:14 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C57807CC05F; Sat, 7 Nov 2009 23:46:14 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22502-10; Sat, 7 Nov 2009 23:46:14 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id A859D7CC05E for ; Sat, 7 Nov 2009 23:46:14 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AswBAKvp9UqAAtnFmWdsb2JhbACRJIpRAgEBAQgLCgcTiC+nEQEEBYR/iE6CQxEFgWUEgWiKGA X-IronPort-AV: E=Sophos;i="4.44,702,1249275600"; d="scan'208";a="33261684" Received: from smtp02.srv.cs.cmu.edu ([128.2.217.197]) by mailgateway.anl.gov with ESMTP; 07 Nov 2009 23:46:14 -0600 Received: from [174.146.183.96] (174-146-183-96.pools.spcsdns.net [174.146.183.96]) (authenticated bits=0) by smtp02.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nA85k5dE004449 (version=TLSv1/SSLv3 cipher=DES-CBC3-SHA bits=168 verify=NO); Sun, 8 Nov 2009 00:46:10 -0500 (EST) From: "Jeffrey Hutzelman" Date: 08 Nov 2009 00:46:00 -0500 To: X-Mailer: ChatterEmail+ for Treo 6xx/700p (3.0.18) Message-ID: <3340485975.10256741@smtp.srv.cs.cmu.edu> X-Scanned-By: mimedefang-cmuscs on 128.2.217.197 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: [Ietf-krb-wg] FW: WebEX Attendee Invitation: krb-wg at IETF 76 X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov -----Original Message----- From: Alexa Morris Date: Sunday, Nov 8, 2009 12:34 am Subject: WebEX Attendee Invitation: krb-wg at IETF 76 To: jhutz@cmu.edu, larry.zhu@microsoft.com >**** You can forward this email invitation to attendees **** > >Hello , > >IETF Secretariat invites you to attend this online meeting. > >Topic: krb-wg at IETF 76 >Date: Wednesday, November 11, 2009 >Time: 12:45 pm, Japan Time (Tokyo, GMT+09:00) >Meeting Number: 962 027 913 >Meeting Password: krb-wg > > >------------------------------------------------------- >To join the online meeting (Now from iPhones too!) >------------------------------------------------------- >1. Go to https://workgreen.webex.com/workgreen/j.php?ED0168702&UID=0&PW=NODQ1OGIxZDU5&RT=MiM0OQ%3D%3D >2. Enter your name and email address. >3. Enter the meeting password: krb-wg >4. Click "Join Now". > >To view in other time zones or languages, please click the link: >https://workgreen.webex.com/workgreen/j.php?ED0168702&UID=0&PW=NODQ1OGIxZDU5&ORT=MiM0OQ%3D%3D > >------------------------------------------------------- >To join the audio conference only >------------------------------------------------------- >To receive a call back, provide your phone number when you join the meeting, or call the number below and enter the access code. >Call-in toll-free number (US/Canada): 866-699-3239 >Call-in toll number (US/Canada): 1-408-792-6300 >Toll-free dialing restrictions: http://www.webex.com/pdf/tollfree_restrictions.pdf > >Access code:962 027 913 > >------------------------------------------------------- >For assistance >------------------------------------------------------- >1. Go to https://workgreen.webex.com/workgreen/mc >2. On the left navigation bar, click "Support". > >You can contact me at: >amorris@amsl.com >1-510-492-4081 > >To add this meeting to your calendar program (for example Microsoft Outlook), click this link: >https://workgreen.webex.com/workgreen/j.php?ED0168702&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=Hn/go2UxM2mCDwzQNtQYZQHwCED2U5Df70GnWh-6VmE=&RT=MiM0OQ%3D%3D > >The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://workgreen.webex.com/workgreen/systemdiagnosis.php > >Sign up for a free trial of WebEx >http://www.webex.com/go/mcemfreetrial > >http://www.webex.com > > > >IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Sun Nov 8 20:36:53 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3B35F28B797 for ; Sun, 8 Nov 2009 20:36:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.424 X-Spam-Level: X-Spam-Status: No, score=-4.424 tagged_above=-999 required=5 tests=[AWL=2.175, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r6mYL0I9eysm for ; Sun, 8 Nov 2009 20:36:52 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 2B6BF3A67CF for ; Sun, 8 Nov 2009 20:36:52 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 367DB32; Sun, 8 Nov 2009 22:37:18 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 105902B; Sun, 8 Nov 2009 22:37:14 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id D4CC280E32; Sun, 8 Nov 2009 22:37:14 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 39D0C80E2D for ; Sun, 8 Nov 2009 22:37:13 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 2A33B28; Sun, 8 Nov 2009 22:37:13 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 259252B for ; Sun, 8 Nov 2009 22:37:13 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 1E2B828 for ; Sun, 8 Nov 2009 22:37:13 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 04F5E7CC05E; Sun, 8 Nov 2009 22:37:13 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22139-02; Sun, 8 Nov 2009 22:37:12 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id DC0CC7CC05C for ; Sun, 8 Nov 2009 22:37:12 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmsAAMIq90qC7V3kkWdsb2JhbACBToMklwYBAQEBCQsKBxMFKa4FjyqBMoI4VASBaA X-IronPort-AV: E=Sophos;i="4.44,705,1249275600"; d="scan'208";a="33279851" Received: from smtp3.su.se (HELO smtp.su.se) ([130.237.93.228]) by mailgateway.anl.gov with ESMTP; 08 Nov 2009 22:37:11 -0600 Received: from localhost (localhost [127.0.0.1]) by smtp.su.se (Postfix) with ESMTP id 049EF3BFC4 for ; Mon, 9 Nov 2009 05:37:11 +0100 (CET) Received: from smtp.su.se ([127.0.0.1]) by localhost (smtp3.su.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 20607-01-75 for ; Mon, 9 Nov 2009 05:37:10 +0100 (CET) Received: from [133.93.19.61] (host-19-61.meeting.ietf.org [133.93.19.61]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.su.se (Postfix) with ESMTP id 0331B3BF7F for ; Mon, 9 Nov 2009 05:37:09 +0100 (CET) Message-ID: <4AF79C71.5060007@mnt.se> Date: Mon, 09 Nov 2009 05:37:05 +0100 From: Leif Johansson User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: "ietf-krb-wg@anl.gov" X-Enigmail-Version: 0.95.7 X-Virus-Scanned: by amavisd-new at smtp.su.se X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: [Ietf-krb-wg] New text for section 3 X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQpIYXNoOiBTSEExCgpIZXJlIGlzIG15 IHN1Z2dlc3Rpb24gZm9yIG5ldyB0ZXh0IGZvciBzZWN0aW9uIDMgd2hpY2ggSSBob3BlIG1ha2Vz CnRoZSBpbnRlcnByZXRhdGlvbiBvZiB0ZXJtcyBtb3JlIGNsZWFuLiBPYnZpb3VzbHkgSSBuZWVk IHRvIGdvIHRocm91Z2gKdGhlIGF0dHJpYnV0ZXMgYW5kIGNsZWFuIHVwIHRoZSAyMTE5IGxhbmd1 YWdlIHRoZXJlIHRvbyBidXQgZmlyc3QgbGV0cwphZ3JlZSBvbiB0aGlzOgoKLSAtLS0tLS0tLS0t CgpUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBhbiBpbmZvcm1hdGlvbiBtb2RlbCBmb3Iga2VyYmVy b3MgNSBidXQgZG9lcyBub3QKZGlyZWN0bHkgZGVzY3JpYmUgYW55IG1hcHBpbmcgb250byBhIHBh cnRpY3VsYXIgZGF0YSBtb2RlbCAoZGVzY3JpYmVkIGJ5CmEgc2NoZW1hLSBvciBkYXRhIGRlc2Ny aXB0aW9uIGxhbmd1YWdlKS4KCkZvciB0aGlzIHJlYXNvbiB0aGUgcHJlY2lzZSBpbnRlcnByZXRh dGlvbiBvZiB0ZXJtcyBmcm9tIFtSRkMyMTE5XQpyZXF1aXJlIHNvbWUgZXh0cmEgZXhwbGFuYXRp b24uCgpUaGUgdGVybXMgTVVTVCwgTVVTVCBOT1QsIFJFUVVJUkVELCBTSEFMTCwgU0hBTEwgTk9U IG1lYW4gdGhhdCBhCktlcmJlcm9zIGltcGxlbWVudGF0aW9uIE1VU1QsIE1VU1QgTk9UIGV0YyBp bXBsZW1lbnQgYSBmZWF0dXJlIGFzCmRlc2NyaWJlZCBpbiB0aGlzIHNwZWNpZmljYXRpb24gYnV0 IGRvZXMgbm90IGltcGx5IHRoYXQgdGhpcyBmZWF0dXJlCm11c3QgYmUgUkVRVUlSRUQgYnkgYWxs IGRhdGEgbW9kZWxzIGltcGxlbWVudGluZyB0aGlzIGluZm9ybWF0aW9uIG1vZGVsLgoKRm9yIGlu c3RhbmNlIGFuIGF0dHJpYnV0ZSBtYXJrZWQgYXMgTVVTVCBpbiB0aGUgaW5mb3JtYXRpb24gbW9k ZWwgTVVTVApiZSBpbXBsZW1lbnRlZCBieSBhbGwgS2VyYmVyb3MgaW1wbGVtZW50YXRpb25zIGFu ZCBNVVNUIGJlIGluY2x1ZGVkIGluCmFuIExEQVAgc2NoZW1hIGJ1dCBNQVkgYmUgbWFya2VkIGFz IE9QVElPTkFMIGluIHRoZSBMREFQIHNjaGVtYS4gQW55CmRldmlhdGlvbiBmcm9tIHRoaXMgZ2Vu ZXJhbCBwcmluY2lwbGUgd2lsbCBiZSBjbGVhcmx5IGRlc2NyaWJlZCBpbiB0aGUKc3BlY2lmaWNh dGlvbiB0ZXh0IGZvciBpbnN0YW5jZSBieSBzYXlpbmcg4oCdRmVhdHVyZSBYIFNIT1VMRCBiZSBS RVFVSVJFRApieSBhbGwgZGF0YSBtb2RlbHPigJ0uCgotLS0tLUJFR0lOIFBHUCBTSUdOQVRVUkUt LS0tLQpWZXJzaW9uOiBHbnVQRyB2MS40LjkgKEdOVS9MaW51eCkKQ29tbWVudDogVXNpbmcgR251 UEcgd2l0aCBNb3ppbGxhIC0gaHR0cDovL2VuaWdtYWlsLm1vemRldi5vcmcKCmlFWUVBUkVDQUFZ RkFrcjNuR3dBQ2drUThKeDhGdGJNWm5jNytRQ2ZiMS84VkNMZnlBc0sydjI4ZlNrQzkvU2cKRW9B QW4waDloa0VYUWJlQUdPMm9JaGs2WEZiREFZT2sKPTZSUkkKLS0tLS1FTkQgUEdQIFNJR05BVFVS RS0tLS0tCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCmll dGYta3JiLXdnIG1haWxpbmcgbGlzdAppZXRmLWtyYi13Z0BsaXN0cy5hbmwuZ292Cmh0dHBzOi8v bGlzdHMuYW5sLmdvdi9tYWlsbWFuL2xpc3RpbmZvL2lldGYta3JiLXdn From ietf-krb-wg-bounces@lists.anl.gov Sun Nov 8 21:01:23 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A62C028C182 for ; Sun, 8 Nov 2009 21:01:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id raGViuLi8lCe for ; Sun, 8 Nov 2009 21:01:22 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 55CFB28C188 for ; Sun, 8 Nov 2009 21:01:22 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 0A6DE2B; Sun, 8 Nov 2009 23:01:48 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 911C73B; Sun, 8 Nov 2009 23:01:46 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 8CE0B80E32; Sun, 8 Nov 2009 23:01:46 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 0968380E2D for ; Sun, 8 Nov 2009 23:01:45 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id EE45928; Sun, 8 Nov 2009 23:01:44 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id E99132B for ; Sun, 8 Nov 2009 23:01:44 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id E447228 for ; Sun, 8 Nov 2009 23:01:44 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C42247CC05C; Sun, 8 Nov 2009 23:01:44 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 23320-10; Sun, 8 Nov 2009 23:01:44 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id A68A57CC059 for ; Sun, 8 Nov 2009 23:01:44 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AsoEAJ4w90pFGcQc/2dsb2JhbACBTsshhEyIToQ+BA X-IronPort-AV: E=Sophos;i="4.44,705,1249275600"; d="scan'208";a="33280144" Received: from permutation-city.suchdamage.org (HELO mail.suchdamage.org) ([69.25.196.28]) by mailgateway.anl.gov with ESMTP; 08 Nov 2009 23:01:44 -0600 Received: from carter-zimmerman.suchdamage.org (host-17-186.meeting.ietf.org [133.93.17.186]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id 3657F202C8; Mon, 9 Nov 2009 00:01:41 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 72B02445C; Mon, 9 Nov 2009 00:01:39 -0500 (EST) To: Leif Johansson References: <4AF79C71.5060007@mnt.se> From: Sam Hartman Date: Mon, 09 Nov 2009 00:01:39 -0500 In-Reply-To: <4AF79C71.5060007@mnt.se> (Leif Johansson's message of "Mon\, 09 Nov 2009 05\:37\:05 +0100") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: "ietf-krb-wg@anl.gov" Subject: Re: [Ietf-krb-wg] New text for section 3 X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov >>>>> "Leif" == Leif Johansson writes: Leif> For this reason the precise interpretation of terms from Leif> [RFC2119] require some extra explanation. Leif> For instance an attribute marked as MUST in the information Leif> model MUST be implemented by all Kerberos implementations Leif> and MUST be included in an LDAP schema but MAY be marked as Leif> OPTIONAL in the LDAP schema. Any deviation from this general Leif> principle will be clearly described in the specification Leif> text The above seems like a reasonable thing. I'm not sure yet whether I agree with it. Leif> The terms MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT mean Leif> that a Kerberos implementation MUST, MUST NOT etc implement Leif> a feature as described in this specification but does not Leif> imply that this feature must be REQUIRED by all data models Leif> implementing this information model. However this paragraph does not say something similar to the paragraph that comes next in your text (and that I transposed above). When you say that an attribute is required by a data model, in my mind that means that a data model must provide a way of representing the attribute, *not* that the objects of that data model must include the attribute. --Sam _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Sun Nov 8 21:39:01 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0D48D3A6A99 for ; Sun, 8 Nov 2009 21:39:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.511 X-Spam-Level: X-Spam-Status: No, score=-5.511 tagged_above=-999 required=5 tests=[AWL=1.087, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SHIcXv0f2I9r for ; Sun, 8 Nov 2009 21:38:59 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id CBCAF3A68C4 for ; Sun, 8 Nov 2009 21:38:59 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id E1FBA36; Sun, 8 Nov 2009 23:39:25 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 9DB0732; Sun, 8 Nov 2009 23:39:20 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 5FD632CC057; Sun, 8 Nov 2009 23:39:20 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id D9BC32CC052 for ; Sun, 8 Nov 2009 23:39:18 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id CC5B12B; Sun, 8 Nov 2009 23:39:18 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id C797632 for ; Sun, 8 Nov 2009 23:39:18 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id AA3A22B for ; Sun, 8 Nov 2009 23:39:18 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 9145F7CC059; Sun, 8 Nov 2009 23:39:18 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25440-03; Sun, 8 Nov 2009 23:39:18 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 70BC87CC056 for ; Sun, 8 Nov 2009 23:39:18 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AlgAAP4590qC7V3kkWdsb2JhbACBTpoqAQEBAQkLCgcTBb1BhD4EgWiKIw X-IronPort-AV: E=Sophos;i="4.44,706,1249275600"; d="scan'208";a="33280639" Received: from smtp3.su.se (HELO smtp.su.se) ([130.237.93.228]) by mailgateway.anl.gov with ESMTP; 08 Nov 2009 23:39:17 -0600 Received: from localhost (localhost [127.0.0.1]) by smtp.su.se (Postfix) with ESMTP id 7B25C3BFC4; Mon, 9 Nov 2009 06:39:16 +0100 (CET) Received: from smtp.su.se ([127.0.0.1]) by localhost (smtp3.su.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 29897-01-53; Mon, 9 Nov 2009 06:39:16 +0100 (CET) Received: from [133.93.19.61] (host-19-61.meeting.ietf.org [133.93.19.61]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.su.se (Postfix) with ESMTP id EA41A3BF7F; Mon, 9 Nov 2009 06:39:14 +0100 (CET) Message-ID: <4AF7AAFD.6080309@mnt.se> Date: Mon, 09 Nov 2009 06:39:09 +0100 From: Leif Johansson User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: Sam Hartman References: <4AF79C71.5060007@mnt.se> In-Reply-To: X-Enigmail-Version: 0.95.7 X-Virus-Scanned: by amavisd-new at smtp.su.se X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: "ietf-krb-wg@anl.gov" Subject: Re: [Ietf-krb-wg] New text for section 3 X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sam Hartman wrote: >>>>>> "Leif" == Leif Johansson writes: > > > Leif> For this reason the precise interpretation of terms from > Leif> [RFC2119] require some extra explanation. > > Leif> For instance an attribute marked as MUST in the information > Leif> model MUST be implemented by all Kerberos implementations > Leif> and MUST be included in an LDAP schema but MAY be marked as > Leif> OPTIONAL in the LDAP schema. Any deviation from this general > Leif> principle will be clearly described in the specification > Leif> text > > The above seems like a reasonable thing. I'm not sure yet whether I > agree with it. Those two paragraphs don't appear in that order in the text I just sent to the email - this has me potentially confused wrt what you mean by "this paragraph" and "the paragraph that comes next in your text" below. > > Leif> The terms MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT mean > Leif> that a Kerberos implementation MUST, MUST NOT etc implement > Leif> a feature as described in this specification but does not > Leif> imply that this feature must be REQUIRED by all data models > Leif> implementing this information model. > > However this paragraph does not say something similar to the paragraph > that comes next in your text (and that I transposed above). When you > say that an attribute is required by a data model, in my mind that > means that a data model must provide a way of representing the > attribute, *not* that the objects of that data model must include the > attribute. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkr3qv0ACgkQ8Jx8FtbMZneeWwCfT0xkCAe332LfpLrcxbiYYRMx NaYAoJ++ThQWrDlcvEBBUj74fnPlLrSW =vdjq -----END PGP SIGNATURE----- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Sun Nov 8 22:55:54 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BD2403A69A5 for ; Sun, 8 Nov 2009 22:55:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.874 X-Spam-Level: X-Spam-Status: No, score=-5.874 tagged_above=-999 required=5 tests=[AWL=0.725, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6MVirv3iui-M for ; Sun, 8 Nov 2009 22:55:53 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id AE9893A6915 for ; Sun, 8 Nov 2009 22:55:53 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id C986636; Mon, 9 Nov 2009 00:56:19 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 2BCC533; Mon, 9 Nov 2009 00:56:15 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id D21752CC057; Mon, 9 Nov 2009 00:56:15 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id AD2952CC052 for ; Mon, 9 Nov 2009 00:56:13 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 9D1F528; Mon, 9 Nov 2009 00:56:13 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 985A62B for ; Mon, 9 Nov 2009 00:56:13 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 859A428 for ; Mon, 9 Nov 2009 00:56:13 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 2518A7CC059; Mon, 9 Nov 2009 00:56:13 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 29796-01; Mon, 9 Nov 2009 00:56:13 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id E742F7CC056 for ; Mon, 9 Nov 2009 00:56:12 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AogBAJNL90qC7aQ1mWdsb2JhbACBToMklwYBAQEBAQgLCgcTLq1ejymBMoI4VASBaA X-IronPort-AV: E=Sophos;i="4.44,706,1249275600"; d="scan'208";a="33281612" Received: from smtp2.su.se (HELO smtp.su.se) ([130.237.164.53]) by mailgateway.anl.gov with ESMTP; 09 Nov 2009 00:56:11 -0600 Received: from localhost (localhost [127.0.0.1]) by smtp.su.se (Postfix) with ESMTP id E1BAE81A3D for ; Mon, 9 Nov 2009 07:56:10 +0100 (CET) X-Virus-Scanned: by amavisd-new at av-in.su.se Received: from smtp.su.se ([127.0.0.1]) by localhost (smtp2.su.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id CnR7dKDe-Fzh for ; Mon, 9 Nov 2009 07:56:10 +0100 (CET) Received: from [133.93.19.61] (host-19-61.meeting.ietf.org [133.93.19.61]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.su.se (Postfix) with ESMTPSA id B391381923 for ; Mon, 9 Nov 2009 07:56:09 +0100 (CET) Message-ID: <4AF7BD06.6060303@mnt.se> Date: Mon, 09 Nov 2009 07:56:06 +0100 From: Leif Johansson User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: "ietf-krb-wg@anl.gov" References: <4AF79C71.5060007@mnt.se> In-Reply-To: <4AF79C71.5060007@mnt.se> X-Enigmail-Version: 0.95.7 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: Re: [Ietf-krb-wg] New text for section 3 X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQpIYXNoOiBTSEExCgpMZWlmIEpvaGFu c3NvbiB3cm90ZToKPiBIZXJlIGlzIG15IHN1Z2dlc3Rpb24gZm9yIG5ldyB0ZXh0IGZvciBzZWN0 aW9uIDMgd2hpY2ggSSBob3BlIG1ha2VzCj4gdGhlIGludGVycHJldGF0aW9uIG9mIHRlcm1zIG1v cmUgY2xlYW4uIE9idmlvdXNseSBJIG5lZWQgdG8gZ28gdGhyb3VnaAo+IHRoZSBhdHRyaWJ1dGVz IGFuZCBjbGVhbiB1cCB0aGUgMjExOSBsYW5ndWFnZSB0aGVyZSB0b28gYnV0IGZpcnN0IGxldHMK PiBhZ3JlZSBvbiB0aGlzOgo+IAo+IC0tLS0tLS0tLS0KPiAKPiBUaGlzIGRvY3VtZW50IGRlc2Ny aWJlcyBhbiBpbmZvcm1hdGlvbiBtb2RlbCBmb3Iga2VyYmVyb3MgNSBidXQgZG9lcyBub3QKPiBk aXJlY3RseSBkZXNjcmliZSBhbnkgbWFwcGluZyBvbnRvIGEgcGFydGljdWxhciBkYXRhIG1vZGVs IChkZXNjcmliZWQgYnkKPiBhIHNjaGVtYS0gb3IgZGF0YSBkZXNjcmlwdGlvbiBsYW5ndWFnZSku Cj4gCj4gRm9yIHRoaXMgcmVhc29uIHRoZSBwcmVjaXNlIGludGVycHJldGF0aW9uIG9mIHRlcm1z IGZyb20gW1JGQzIxMTldCj4gcmVxdWlyZSBzb21lIGV4dHJhIGV4cGxhbmF0aW9uLgo+IAoKQWZ0 ZXIgdGFsa2luZyB0byBTYW0gQUZLIHRoaXMgaXMgd2hhdCB3ZSBjYW1lIHVwIHdpdGg6Cgo+IFRo ZSB0ZXJtcyBNVVNULCBNVVNUIE5PVCwgUkVRVUlSRUQsIFNIQUxMLCBTSEFMTCBOT1QgbWVhbiB0 aGF0IGEKPiBLZXJiZXJvcyBpbXBsZW1lbnRhdGlvbiBNVVNULCBNVVNUIE5PVCBldGMgaW1wbGVt ZW50IGEgZmVhdHVyZSBhcwo+IGRlc2NyaWJlZCBpbiB0aGlzIHNwZWNpZmljYXRpb24gYnV0IGRv ZXMgbm90IGltcGx5IHRoYXQgdGhpcyBmZWF0dXJlCj4gbXVzdCBiZSBSRVFVSVJFRCBieSBhbGwg ZGF0YSBtb2RlbHMgaW1wbGVtZW50aW5nIHRoaXMgaW5mb3JtYXRpb24gbW9kZWwuCgpUaGUgdGVy bXMgTVVTVCwgTVVTVCBOT1QsIFJFUVVJUkVELCBTSEFMTCwgU0hBTEwgTk9UIG1lYW4gdGhhdCBh CktlcmJlcm9zIGltcGxlbWVudGF0aW9uIE1VU1QsIE1VU1QgTk9UIGV0YyBpbXBsZW1lbnQgYSBm ZWF0dXJlIGFuZAp0aGF0IGFsbCBkYXRhIG1vZGVscyBNVVNUIGV0YyByZXByZXNlbnQgc2FpZCBm ZWF0dXJlIGFzIGRlc2NyaWJlZCBpbgp0aGlzIHNwZWNpZmljYXRpb24gYnV0IGRvZXMgbm90IGlt cGx5IHRoYXQgdGhpcyBmZWF0dXJlIG11c3QgYmUgUkVRVUlSRUQKaW4gYWxsIG9iamVjdHMgcmVw cmVzZW50ZWQgYnkgZGF0YSBtb2RlbHMgaW1wbGVtZW50aW5nIHRoaXMgaW5mb3JtYXRpb24KbW9k ZWwuCgo+IAo+IEZvciBpbnN0YW5jZSBhbiBhdHRyaWJ1dGUgbWFya2VkIGFzIE1VU1QgaW4gdGhl IGluZm9ybWF0aW9uIG1vZGVsIE1VU1QKPiBiZSBpbXBsZW1lbnRlZCBieSBhbGwgS2VyYmVyb3Mg aW1wbGVtZW50YXRpb25zIGFuZCBNVVNUIGJlIGluY2x1ZGVkIGluCj4gYW4gTERBUCBzY2hlbWEg YnV0IE1BWSBiZSBtYXJrZWQgYXMgT1BUSU9OQUwgaW4gdGhlIExEQVAgc2NoZW1hLiBBbnkKPiBk ZXZpYXRpb24gZnJvbSB0aGlzIGdlbmVyYWwgcHJpbmNpcGxlIHdpbGwgYmUgY2xlYXJseSBkZXNj cmliZWQgaW4gdGhlCj4gc3BlY2lmaWNhdGlvbiB0ZXh0IGZvciBpbnN0YW5jZSBieSBzYXlpbmcg 4oCdRmVhdHVyZSBYIFNIT1VMRCBiZSBSRVFVSVJFRAo+IGJ5IGFsbCBkYXRhIG1vZGVsc+KAnS4K PiAKCkZvciBpbnN0YW5jZSBhbiBhdHRyaWJ1dGUgbWFya2VkIGFzIE1VU1QgaW4gdGhlIGluZm9y bWF0aW9uIG1vZGVsIE1VU1QKYmUgaW1wbGVtZW50ZWQgYnkgYWxsIEtlcmJlcm9zIGltcGxlbWVu dGF0aW9ucyBhbmQgTVVTVCBiZSBpbmNsdWRlZCBpbgphbiBMREFQIHNjaGVtYSBidXQgTUFZIGJl IG1hcmtlZCBhcyBPUFRJT05BTCBpbiB0aGUgTERBUCBzY2hlbWEuIEFueQpkZXZpYXRpb24gZnJv bSB0aGlzIGdlbmVyYWwgcHJpbmNpcGxlIHdpbGwgYmUgY2xlYXJseSBkZXNjcmliZWQgaW4gdGhl CnNwZWNpZmljYXRpb24gdGV4dCBmb3IgaW5zdGFuY2UgYnkgc2F5aW5nIOKAnUZlYXR1cmUgWCBT SE9VTEQgYmUgUkVRVUlSRUQKYnkgYWxsIG9iamVjdHPigJ0uCgoJQ2hlZXJzIExlaWYKLS0tLS1C RUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjEuNC45IChHTlUvTGludXgp CkNvbW1lbnQ6IFVzaW5nIEdudVBHIHdpdGggTW96aWxsYSAtIGh0dHA6Ly9lbmlnbWFpbC5tb3pk ZXYub3JnCgppRVlFQVJFQ0FBWUZBa3IzdlFJQUNna1E4Sng4RnRiTVpuZEEvUUNnbThsT1RibWJz ajgrNkc1MXo4c0NxWU1tCjdac0FuaXdkRklUMEk3bXZHM3JwWFhFUEY5d0NZaHcxCj1tL3dYCi0t LS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXwppZXRmLWtyYi13ZyBtYWlsaW5nIGxpc3QKaWV0Zi1rcmItd2dAbGlz dHMuYW5sLmdvdgpodHRwczovL2xpc3RzLmFubC5nb3YvbWFpbG1hbi9saXN0aW5mby9pZXRmLWty Yi13Zw== From ietf-krb-wg-bounces@lists.anl.gov Mon Nov 9 15:25:30 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3D50828C0DC for ; Mon, 9 Nov 2009 15:25:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.544 X-Spam-Level: X-Spam-Status: No, score=-5.544 tagged_above=-999 required=5 tests=[AWL=1.055, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MCeVqdl-fq8i for ; Mon, 9 Nov 2009 15:25:29 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 19C503A69DF for ; Mon, 9 Nov 2009 15:25:29 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id D623A68; Mon, 9 Nov 2009 17:25:55 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id B41A062; Mon, 9 Nov 2009 17:25:52 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 9454C80E33; Mon, 9 Nov 2009 17:25:52 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 49F1780E30 for ; Mon, 9 Nov 2009 17:25:51 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 3AD775A; Mon, 9 Nov 2009 17:25:51 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 3776562 for ; Mon, 9 Nov 2009 17:25:51 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 311655A for ; Mon, 9 Nov 2009 17:25:51 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 1B7D07CC05C; Mon, 9 Nov 2009 17:25:51 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08942-02; Mon, 9 Nov 2009 17:25:51 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id F3BEE7CC059 for ; Mon, 9 Nov 2009 17:25:50 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArACAJoz+EqAAtnEgWdsb2JhbACbfQEBFiSzDIVNiE6EPgQ X-IronPort-AV: E=Sophos;i="4.44,711,1249275600"; d="scan'208";a="33328352" Received: from smtp01.srv.cs.cmu.edu ([128.2.217.196]) by mailgateway.anl.gov with ESMTP; 09 Nov 2009 17:25:50 -0600 Received: from [10.0.0.3] (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp01.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nA9NPm3Z028838 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 9 Nov 2009 18:25:49 -0500 (EST) Date: Mon, 09 Nov 2009 18:25:48 -0500 From: Jeffrey Hutzelman To: ietf-krb-wg@anl.gov Message-ID: X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.196 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: jhutz@cmu.edu Subject: [Ietf-krb-wg] Note-taker needed X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov We are in need of a volunteer to take minutes for the krb-wg meeting this Wednesday afternoon. Neither Larry nor I will be at the meeting, so Shawn Emery has agreed to chair the session, but the meeting cannot proceed without someone to take minutes. If you will be at the meeting and are able to take notes, please let me know ASAP. Don't assume someone else will do it! Really, this HAS to be resolved before the meeting starts. -- Jeff _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Mon Nov 9 20:37:42 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A94A83A6938 for ; Mon, 9 Nov 2009 20:37:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.603 X-Spam-Level: X-Spam-Status: No, score=-5.603 tagged_above=-999 required=5 tests=[AWL=0.996, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PGyqyqspSILc for ; Mon, 9 Nov 2009 20:37:41 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id EE1433A6915 for ; Mon, 9 Nov 2009 20:37:37 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 7B6007B; Mon, 9 Nov 2009 22:38:04 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 8AB3C73; Mon, 9 Nov 2009 22:38:01 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 4F00280E33; Mon, 9 Nov 2009 22:38:01 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 8AF6280E30 for ; Mon, 9 Nov 2009 22:37:59 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 7BCB473; Mon, 9 Nov 2009 22:37:59 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 76FA874 for ; Mon, 9 Nov 2009 22:37:59 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 7272873 for ; Mon, 9 Nov 2009 22:37:59 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 5B2027CC05D; Mon, 9 Nov 2009 22:37:59 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 04851-02; Mon, 9 Nov 2009 22:37:59 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 30F2A7CC059 for ; Mon, 9 Nov 2009 22:37:58 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjMBADN9+EqAAtnFmWdsb2JhbACbfAEBAQEBCAsKBxOxWYVziE6CP4F/BIwL X-IronPort-AV: E=Sophos;i="4.44,713,1249275600"; d="scan'208";a="33335904" Received: from smtp02.srv.cs.cmu.edu ([128.2.217.197]) by mailgateway.anl.gov with ESMTP; 09 Nov 2009 22:37:57 -0600 Received: from [10.0.0.3] (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp02.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAA4bslp010422 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 9 Nov 2009 23:37:55 -0500 (EST) Date: Mon, 09 Nov 2009 23:37:54 -0500 From: Jeffrey Hutzelman To: Nicolas Williams , Sam Hartman Message-ID: In-Reply-To: <20091029160200.GP1105@Sun.COM> References: <4AE75E65.3040105@symas.com> <20091028183425.GU1105@Sun.COM> <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.197 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , jhutz@cmu.edu, ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov --On Thursday, October 29, 2009 11:02:01 AM -0500 Nicolas Williams wrote: > Sam, I don't quite agree. As an administrator I'd like to be able to > set policy for which entypes the KDC will access in pre-auth (including > PA-TGS-REQ) and which enctypes the KDC will accept for Ticket session > keys and Ticket encryption keys. I'd be happy to do so via explicit > lists or via lists constructed from rules ("no weak enctypes", "only AES > enctypes", ...). As someone who actually administers a production Kerberos realm, there are in fact three policies I want to be able to set: (1) enctypes used when setting passwords for users (2) enctypes used when keying services (3) "weak" enctypes which must never be used Generally (1) and (2) will be the same, but in practice they seem to change at different times. Enforcement of (3) is done primarily at the KDC, but must unfortunately also be done in clients and services, particularly those which handle initial authentication using long-term keys derived from passwords. -- Jeff _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Mon Nov 9 21:49:26 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 39EC73A6936 for ; Mon, 9 Nov 2009 21:49:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.764 X-Spam-Level: X-Spam-Status: No, score=-5.764 tagged_above=-999 required=5 tests=[AWL=0.835, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OZ+hTQfxF5-M for ; Mon, 9 Nov 2009 21:49:25 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 1DA713A6905 for ; Mon, 9 Nov 2009 21:49:25 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 24D0A76; Mon, 9 Nov 2009 23:49:52 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 8C83171; Mon, 9 Nov 2009 23:49:48 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 6E07B80E33; Mon, 9 Nov 2009 23:49:48 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 5F95180E30 for ; Mon, 9 Nov 2009 23:49:47 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 5095571; Mon, 9 Nov 2009 23:49:47 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 4BBEA72 for ; Mon, 9 Nov 2009 23:49:47 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 4401F71 for ; Mon, 9 Nov 2009 23:49:46 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id D6FCB7CC05D; Mon, 9 Nov 2009 23:49:46 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 09354-07; Mon, 9 Nov 2009 23:49:46 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id B7A707CC059 for ; Mon, 9 Nov 2009 23:49:46 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArwEANaN+ErBCvxC/2dsb2JhbACcZr9ahD4EgWg X-IronPort-AV: E=Sophos;i="4.44,714,1249275600"; d="scan'208";a="33337106" Received: from backup-server.nordu.net ([193.10.252.66]) by mailgateway.anl.gov with ESMTP; 09 Nov 2009 23:49:45 -0600 Received: from [133.93.19.61] (host-19-61.meeting.ietf.org [133.93.19.61]) (authenticated bits=0) by backup-server.nordu.net (8.14.3/8.14.3) with ESMTP id nAA5nfC8011206 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 10 Nov 2009 06:49:43 +0100 (CET) Message-ID: <4AF8FEF7.6020408@mnt.se> Date: Tue, 10 Nov 2009 06:49:43 +0100 From: Leif Johansson User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: "ietf-krb-wg@anl.gov" X-Enigmail-Version: 0.95.7 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: [Ietf-krb-wg] enctypes take 2 - consensus call X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I talked this over with Sam yesterday and our suggestion is that we keep the attribute as it is and make its semantics more explicit by stating that it is used for explicitly limiting to the listed enctypes in _all_ cases where keys are used in kerberos. In other words the attribute represents the most basic form of a policy for enctypes. If you want something more complex such as allow/deny semantics or such things then you define a policy object (which the text already sais basically). Apart from the we propose adding text to the KeySet object saying that in addition to the policy attribute the presence of a key with a certain enctype in a keyset implies that the server supports that enctype for the given principal. Does that sound like something we can reach consensus around? Cheers Leif -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkr4/vcACgkQ8Jx8FtbMZndjdgCcDpVbnAetZd0wqtNEBBw55cF/ ghsAoLd0WdWFxQ+L6IRcBLQpGftHZyCf =M4Ib -----END PGP SIGNATURE----- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 07:59:47 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6891E28C162 for ; Tue, 10 Nov 2009 07:59:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.289 X-Spam-Level: X-Spam-Status: No, score=-6.289 tagged_above=-999 required=5 tests=[AWL=0.310, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g6rJYiSUzi3b for ; Tue, 10 Nov 2009 07:59:46 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 76F0A28C166 for ; Tue, 10 Nov 2009 07:59:16 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 548897D; Tue, 10 Nov 2009 09:59:43 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id AA2BD79; Tue, 10 Nov 2009 09:59:36 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id AECF380E33; Tue, 10 Nov 2009 09:59:36 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 4A60380E32 for ; Tue, 10 Nov 2009 09:59:35 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 4466A71; Tue, 10 Nov 2009 09:59:35 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 3F87F76 for ; Tue, 10 Nov 2009 09:59:35 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 21DDD71 for ; Tue, 10 Nov 2009 09:59:35 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C7D367CC059; Tue, 10 Nov 2009 09:59:34 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17371-04; Tue, 10 Nov 2009 09:59:34 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 23E747CC05F for ; Tue, 10 Nov 2009 09:59:34 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmMAAM8c+UrAEmIrlGdsb2JhbACcAQEBAQEJCwgJEwWzUo5ygj8agWUEjAs X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33359652" Received: from brmea-mail-2.sun.com ([192.18.98.43]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 09:59:33 -0600 Received: from dm-central-01.central.sun.com ([129.147.62.4]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAAFxXZq009611 for ; Tue, 10 Nov 2009 15:59:33 GMT Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id nAAFxWkT000607 for ; Tue, 10 Nov 2009 08:59:32 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id nAAFlxeW012312; Tue, 10 Nov 2009 09:47:59 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id nAAFlwXC012311; Tue, 10 Nov 2009 09:47:58 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Tue, 10 Nov 2009 09:47:58 -0600 From: Nicolas Williams To: Jeffrey Hutzelman Message-ID: <20091110154758.GO1105@Sun.COM> References: <20091028183425.GU1105@Sun.COM> <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> Mime-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.7i X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov On Mon, Nov 09, 2009 at 11:37:54PM -0500, Jeffrey Hutzelman wrote: > --On Thursday, October 29, 2009 11:02:01 AM -0500 Nicolas Williams > wrote: > > >Sam, I don't quite agree. As an administrator I'd like to be able to > >set policy for which entypes the KDC will access in pre-auth (including > >PA-TGS-REQ) and which enctypes the KDC will accept for Ticket session > >keys and Ticket encryption keys. I'd be happy to do so via explicit > >lists or via lists constructed from rules ("no weak enctypes", "only AES > >enctypes", ...). > > As someone who actually administers a production Kerberos realm, there are > in fact three policies I want to be able to set: > > (1) enctypes used when setting passwords for users > (2) enctypes used when keying services > (3) "weak" enctypes which must never be used > > Generally (1) and (2) will be the same, but in practice they seem to change > at different times. You should want to control enctypes accepted/used. But why should you want to control enctypes available? For password-derived keys the only reason that I see is: to avoid off-line dictionary attacks should the KDB be compromised... but you have such much bigger problems in that case that I don't think that's a problem. User principals should get "all enctypes supported by the KDC software", and service principals should get "all enctypes supported by the software running that principal's service". Actual enctype usage policies should apply in the AS, TGS and AP exchanges, not during key maintenance. > Enforcement of (3) is done primarily at the KDC, but must unfortunately > also be done in clients and services, particularly those which handle > initial authentication using long-term keys derived from passwords. Yes. And if denying a service keys for weak enctypes helps, great (though the same won't work for user principals, since they don't carry their keys and don't know the enctypes for which they have keys). But I think you'll need configuration, or better, obsolescence, to get rid of weak enctypes. Nico -- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 09:13:31 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0528E28C1FD for ; Tue, 10 Nov 2009 09:13:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.655 X-Spam-Level: X-Spam-Status: No, score=-5.655 tagged_above=-999 required=5 tests=[AWL=0.944, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1nP1sFFZRyMC for ; Tue, 10 Nov 2009 09:13:28 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 4203C28C1FE for ; Tue, 10 Nov 2009 09:13:27 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 9171680; Tue, 10 Nov 2009 11:13:54 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 3950D7F; Tue, 10 Nov 2009 11:13:52 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 1B24080E33; Tue, 10 Nov 2009 11:13:52 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 022D080E32 for ; Tue, 10 Nov 2009 11:13:50 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id E6BDE41; Tue, 10 Nov 2009 11:13:50 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id E1F5A79 for ; Tue, 10 Nov 2009 11:13:50 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id D7CFF41 for ; Tue, 10 Nov 2009 11:13:50 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C151C7CC056; Tue, 10 Nov 2009 11:13:50 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19263-02; Tue, 10 Nov 2009 11:13:50 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 910A97CC059 for ; Tue, 10 Nov 2009 11:13:50 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArACAGMu+UqAAtnFgWdsb2JhbACcAwEBFiSzPAWGLYhOgj8agWUE X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33366755" Received: from smtp02.srv.cs.cmu.edu ([128.2.217.197]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 11:13:50 -0600 Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp02.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAAHDmjG027105 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 Nov 2009 12:13:49 -0500 (EST) Date: Tue, 10 Nov 2009 12:13:48 -0500 From: Jeffrey Hutzelman To: Nicolas Williams Message-ID: <8E169C6C4B4DE390A76EC100@atlantis.pc.cs.cmu.edu> In-Reply-To: <20091110154758.GO1105@Sun.COM> References: <20091028183425.GU1105@Sun.COM> <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.197 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , jhutz@cmu.edu, Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov --On Tuesday, November 10, 2009 09:47:58 AM -0600 Nicolas Williams wrote: > On Mon, Nov 09, 2009 at 11:37:54PM -0500, Jeffrey Hutzelman wrote: >> --On Thursday, October 29, 2009 11:02:01 AM -0500 Nicolas Williams >> wrote: >> >> > Sam, I don't quite agree. As an administrator I'd like to be able to >> > set policy for which entypes the KDC will access in pre-auth (including >> > PA-TGS-REQ) and which enctypes the KDC will accept for Ticket session >> > keys and Ticket encryption keys. I'd be happy to do so via explicit >> > lists or via lists constructed from rules ("no weak enctypes", "only >> > AES enctypes", ...). >> >> As someone who actually administers a production Kerberos realm, there >> are in fact three policies I want to be able to set: >> >> (1) enctypes used when setting passwords for users >> (2) enctypes used when keying services >> (3) "weak" enctypes which must never be used >> >> Generally (1) and (2) will be the same, but in practice they seem to >> change at different times. > > You should want to control enctypes accepted/used. But why should you > want to control enctypes available? For password-derived keys the only > reason that I see is: to avoid off-line dictionary attacks should the > KDB be compromised... but you have such much bigger problems in that > case that I don't think that's a problem. > > User principals should get "all enctypes supported by the KDC software", Says you. In practice, this is even usually true. But not always. Furthermore, for users (i.e. things with passwords), configuration includes not just enctypes but salt strings and string-to-key parameters. Does this enctype need a v4- or v5-salted key or both? Does it need a key prepared with AFS's alternate DES string-to-key algorithm? How many PRF iterations should be used in deriving an AES key? Further, in real life most of us like to test new functionality in a controlled way before exposing our users to it. For new enctypes, that includes deploying a KDC supporting a new enctype but only configuring a small set of users and services to use it. > and service principals should get "all enctypes supported by the > software running that principal's service". In practice, the way that's done is that nearly all services in a realm run similar software and support the same enctypes, and the mechanisms that key services know what those are and apply the same rules to all services. Of course, there are always a few exceptions, which must be configured explicitly. > Actual enctype usage policies should apply in the AS, TGS and AP > exchanges, not during key maintenance. Yes, but it turns out that those policies are simple: (1) Never use prohibited "weak" enctypes That's it. Everything else is part of the protocol, or obvious: - Don't use a reply key enctype not supported by the client. - Don't use long-term keys not in the KDB. - Don't issue tickets with a session key not supported by the client, or not in the list of enctypes the service is known to support. Policy about what service key enctypes should be accepted by a service are implicit in the set of keys the service has. This applies even when the service is the TGS, though in several implementations the TGS actually uses the KDB as its key store, so something extra is required if one wants the set of keys available to TGS-as-service to be different from the set available to the KDC. >> Enforcement of (3) is done primarily at the KDC, but must unfortunately >> also be done in clients and services, particularly those which handle >> initial authentication using long-term keys derived from passwords. > > Yes. And if denying a service keys for weak enctypes helps, great > (though the same won't work for user principals, since they don't carry > their keys and don't know the enctypes for which they have keys). But I > think you'll need configuration, or better, obsolescence, to get rid of > weak enctypes. The point of a prohibited-enctypes policy is to disable use of enctypes that are considered so weak that accepting them would compromise security. Of course, prohibiting use of an enctype in this way will cause operational problems if it has not first been removed from use. But as you note, that takes actual work, at least some of which is outside the scope of this discussion. -- Jeff _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 09:32:44 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 756273A6B3B for ; Tue, 10 Nov 2009 09:32:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.58 X-Spam-Level: X-Spam-Status: No, score=-6.58 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UKoKa-SqIGoo for ; Tue, 10 Nov 2009 09:32:43 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 5240F3A685E for ; Tue, 10 Nov 2009 09:32:43 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id BACDC81; Tue, 10 Nov 2009 11:33:10 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 9BA3B41; Tue, 10 Nov 2009 11:33:09 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 9764680E33; Tue, 10 Nov 2009 11:33:09 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 734B580E32 for ; Tue, 10 Nov 2009 11:33:08 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 6C6C241; Tue, 10 Nov 2009 11:33:08 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 66CEF80 for ; Tue, 10 Nov 2009 11:33:08 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 4A4177F for ; Tue, 10 Nov 2009 11:33:08 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 2FEB07CC059; Tue, 10 Nov 2009 11:33:08 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25390-07-10; Tue, 10 Nov 2009 11:33:08 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id BE0D47CC05E for ; Tue, 10 Nov 2009 11:33:06 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkcAANcy+UqAlYtpkWdsb2JhbACcAwEBAQEJCwoHEwWzO459gj8agWUE X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33368179" Received: from smtp.jpl.nasa.gov (HELO mail.jpl.nasa.gov) ([128.149.139.105]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 11:33:01 -0600 Received: from mprox1.jpl.nasa.gov (mprox1.jpl.nasa.gov [137.78.160.140]) by smtp.jpl.nasa.gov (Switch-3.4.1/Switch-3.4.1) with ESMTP id nAAHX0ro010053; Tue, 10 Nov 2009 09:33:00 -0800 Received: from laphotz.jpl.nasa.gov (laphotz.jpl.nasa.gov [128.149.133.44]) by mprox1.jpl.nasa.gov (Switch-3.2.6/Switch-3.2.6) with ESMTP id nAAHWw1t005197 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Tue, 10 Nov 2009 09:32:58 -0800 Message-Id: <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> From: "Henry B. Hotz" To: Nicolas Williams In-Reply-To: <20091110154758.GO1105@Sun.COM> Mime-Version: 1.0 (Apple Message framework v936) Date: Tue, 10 Nov 2009 09:32:58 -0800 References: <20091028183425.GU1105@Sun.COM> <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> X-Mailer: Apple Mail (2.936) X-Source-IP: laphotz.jpl.nasa.gov [128.149.133.44] X-Source-Sender: hotz@jpl.nasa.gov X-AUTH: Authorized X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , "ietf-krb-wg@anl.gov" , Sam Hartman , Jeffrey Hutzelman Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov On Nov 10, 2009, at 7:47 AM, Nicolas Williams wrote: > On Mon, Nov 09, 2009 at 11:37:54PM -0500, Jeffrey Hutzelman wrote: >> --On Thursday, October 29, 2009 11:02:01 AM -0500 Nicolas Williams >> wrote: >> >>> Sam, I don't quite agree. As an administrator I'd like to be able >>> to >>> set policy for which entypes the KDC will access in pre-auth >>> (including >>> PA-TGS-REQ) and which enctypes the KDC will accept for Ticket >>> session >>> keys and Ticket encryption keys. I'd be happy to do so via explicit >>> lists or via lists constructed from rules ("no weak enctypes", >>> "only AES >>> enctypes", ...). >> >> As someone who actually administers a production Kerberos realm, >> there are >> in fact three policies I want to be able to set: >> >> (1) enctypes used when setting passwords for users >> (2) enctypes used when keying services >> (3) "weak" enctypes which must never be used >> >> Generally (1) and (2) will be the same, but in practice they seem >> to change >> at different times. > > You should want to control enctypes accepted/used. But why should you > want to control enctypes available? For password-derived keys the > only > reason that I see is: to avoid off-line dictionary attacks should the > KDB be compromised... but you have such much bigger problems in that > case that I don't think that's a problem. > > User principals should get "all enctypes supported by the KDC > software", > and service principals should get "all enctypes supported by the > software running that principal's service". > > Actual enctype usage policies should apply in the AS, TGS and AP > exchanges, not during key maintenance. If you're arguing that when a user sets a new password/key the main DB should store not-to-be-used enctypes for it, then I don't agree. For one thing, I don't see the advantage, and for another it seems like a really obvious way to guarantee there can't be code paths that might expose a weakness. ------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 09:49:56 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ECB903A67E9 for ; Tue, 10 Nov 2009 09:49:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.293 X-Spam-Level: X-Spam-Status: No, score=-6.293 tagged_above=-999 required=5 tests=[AWL=0.306, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6sp7ieb1txbU for ; Tue, 10 Nov 2009 09:49:56 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 081293A680A for ; Tue, 10 Nov 2009 09:49:56 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 7069C84; Tue, 10 Nov 2009 11:50:23 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 1EAA47D; Tue, 10 Nov 2009 11:50:22 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id DE82880E33; Tue, 10 Nov 2009 11:50:22 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 733E580E32 for ; Tue, 10 Nov 2009 11:50:21 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 6389D41; Tue, 10 Nov 2009 11:50:21 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 5EA8278 for ; Tue, 10 Nov 2009 11:50:21 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 5941641 for ; Tue, 10 Nov 2009 11:50:21 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 411AB7CC056; Tue, 10 Nov 2009 11:50:21 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30559-05; Tue, 10 Nov 2009 11:50:21 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 218AA7CC054 for ; Tue, 10 Nov 2009 11:50:21 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApYAAJc2+UrAEisYe2dsb2JhbACcBAEBCwsJCBMFs1OOfYI/GoFlBA X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33369304" Received: from sca-ea-mail-1.sun.com ([192.18.43.24]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 11:50:20 -0600 Received: from dm-central-02.central.sun.com ([129.147.62.5]) by sca-ea-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nAAHoIXe024814 for ; Tue, 10 Nov 2009 17:50:18 GMT Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-02.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id nAAHoIee001134 for ; Tue, 10 Nov 2009 10:50:18 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id nAAHcglM012412; Tue, 10 Nov 2009 11:38:42 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id nAAHcfli012411; Tue, 10 Nov 2009 11:38:41 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Tue, 10 Nov 2009 11:38:41 -0600 From: Nicolas Williams To: "Henry B. Hotz" Message-ID: <20091110173841.GV1105@Sun.COM> References: <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> Mime-Version: 1.0 Content-Disposition: inline In-Reply-To: <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> User-Agent: Mutt/1.5.7i X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , "ietf-krb-wg@anl.gov" , Sam Hartman , Jeffrey Hutzelman Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov On Tue, Nov 10, 2009 at 09:32:58AM -0800, Henry B. Hotz wrote: > If you're arguing that when a user sets a new password/key the main DB > should store not-to-be-used enctypes for it, then I don't agree. For > one thing, I don't see the advantage, and for another it seems like a > really obvious way to guarantee there can't be code paths that might > expose a weakness. I'm arguing against a separate knob for "what enctypes to create keys for". I'm certainly happy with a "don't ever use these enctypes" knob causing keys of those enctypes to never be created. Also, it's important for services to tell the KDC what enctypes they support, either via what keys they have enctypes for (the MIT way) or separately. And it's important for user password-derived keys to be derived by a realm service, because the enctypes supported by a client might not be all the enctypes that the user needs keys for. Nico -- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 10:13:57 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0EEC43A685E for ; Tue, 10 Nov 2009 10:13:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.703 X-Spam-Level: X-Spam-Status: No, score=-5.703 tagged_above=-999 required=5 tests=[AWL=0.896, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 50jCJ19wu8Eb for ; Tue, 10 Nov 2009 10:13:56 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 2603A3A6847 for ; Tue, 10 Nov 2009 10:13:56 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id C3E377C; Tue, 10 Nov 2009 12:14:22 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 0833C70; Tue, 10 Nov 2009 12:14:20 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id C646680E32; Tue, 10 Nov 2009 12:14:20 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 3D22780E31 for ; Tue, 10 Nov 2009 12:14:19 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 2DBEC78; Tue, 10 Nov 2009 12:14:19 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 28E3E70 for ; Tue, 10 Nov 2009 12:14:19 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 21ECB78 for ; Tue, 10 Nov 2009 12:14:19 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id EB00E7CC05C; Tue, 10 Nov 2009 12:14:18 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06275-05; Tue, 10 Nov 2009 12:14:18 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id C86467CC059 for ; Tue, 10 Nov 2009 12:14:18 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArACADY8+UqAAtnEgWdsb2JhbACcBAEBFiSzRAWGMohOgj8agWUE X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33371064" Received: from smtp01.srv.cs.cmu.edu ([128.2.217.196]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 12:14:18 -0600 Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp01.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAAIEFv3026544 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 Nov 2009 13:14:16 -0500 (EST) Date: Tue, 10 Nov 2009 13:14:16 -0500 From: Jeffrey Hutzelman To: Nicolas Williams , "Henry B. Hotz" Message-ID: <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> In-Reply-To: <20091110173841.GV1105@Sun.COM> References: <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> <20091110173841.GV1105@Sun.COM> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.196 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , jhutz@cmu.edu, Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov --On Tuesday, November 10, 2009 11:38:41 AM -0600 Nicolas Williams wrote: > On Tue, Nov 10, 2009 at 09:32:58AM -0800, Henry B. Hotz wrote: >> If you're arguing that when a user sets a new password/key the main DB >> should store not-to-be-used enctypes for it, then I don't agree. For >> one thing, I don't see the advantage, and for another it seems like a >> really obvious way to guarantee there can't be code paths that might >> expose a weakness. > > I'm arguing against a separate knob for "what enctypes to create keys > for". As an operator, any KDC implementation I deploy will have that knob. I'm not convinced it necessarily needs to be represented in the kDC data model, but it definitely needs to exist. > Also, it's important for services to tell the KDC what enctypes they > support, either via what keys they have enctypes for (the MIT way) or > separately. And it's important for user password-derived keys to be > derived by a realm service, because the enctypes supported by a client > might not be all the enctypes that the user needs keys for. Agree with both of these points. The former pretty much requires representation in the KDC data model. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 10:28:25 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C0B3D3A6B72 for ; Tue, 10 Nov 2009 10:28:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.296 X-Spam-Level: X-Spam-Status: No, score=-6.296 tagged_above=-999 required=5 tests=[AWL=0.303, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rlzR5xa+mU9R for ; Tue, 10 Nov 2009 10:28:24 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id B78533A6B78 for ; Tue, 10 Nov 2009 10:28:24 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 3D19F7E; Tue, 10 Nov 2009 12:28:52 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 123771A; Tue, 10 Nov 2009 12:28:52 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id D9A0A80E32; Tue, 10 Nov 2009 12:28:51 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id C5FCB80E31 for ; Tue, 10 Nov 2009 12:28:50 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id B6EBA12; Tue, 10 Nov 2009 12:28:50 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id B21E71A for ; Tue, 10 Nov 2009 12:28:50 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id AD1DC12 for ; Tue, 10 Nov 2009 12:28:50 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 95FBA7CC05C; Tue, 10 Nov 2009 12:28:50 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10537-04; Tue, 10 Nov 2009 12:28:50 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 7798A7CC056 for ; Tue, 10 Nov 2009 12:28:50 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApYAAPc/+UrAEisYe2dsb2JhbACcBQEBCwsJCBMFs0+OfIJZgWUEjAs X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33371964" Received: from sca-ea-mail-1.sun.com ([192.18.43.24]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 12:28:49 -0600 Received: from dm-central-01.central.sun.com ([129.147.62.4]) by sca-ea-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nAAISnc3007344 for ; Tue, 10 Nov 2009 18:28:49 GMT Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id nAAISmtT060291 for ; Tue, 10 Nov 2009 11:28:48 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id nAAIHGWg012577; Tue, 10 Nov 2009 12:17:16 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id nAAIHG3n012576; Tue, 10 Nov 2009 12:17:16 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Tue, 10 Nov 2009 12:17:16 -0600 From: Nicolas Williams To: Jeffrey Hutzelman Message-ID: <20091110181715.GX1105@Sun.COM> References: <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> <20091110173841.GV1105@Sun.COM> <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> Mime-Version: 1.0 Content-Disposition: inline In-Reply-To: <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> User-Agent: Mutt/1.5.7i X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov On Tue, Nov 10, 2009 at 01:14:16PM -0500, Jeffrey Hutzelman wrote: > --On Tuesday, November 10, 2009 11:38:41 AM -0600 Nicolas Williams > wrote: > > >On Tue, Nov 10, 2009 at 09:32:58AM -0800, Henry B. Hotz wrote: > >>If you're arguing that when a user sets a new password/key the main DB > >>should store not-to-be-used enctypes for it, then I don't agree. For > >>one thing, I don't see the advantage, and for another it seems like a > >>really obvious way to guarantee there can't be code paths that might > >>expose a weakness. > > > >I'm arguing against a separate knob for "what enctypes to create keys > >for". > > As an operator, any KDC implementation I deploy will have that knob. I'm > not convinced it necessarily needs to be represented in the kDC data model, > but it definitely needs to exist. If it needs to exist then it should be in the model. IMO one can do without it. It does no harm, however, to have it. Nico -- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 10:37:41 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1AD0C3A6957 for ; Tue, 10 Nov 2009 10:37:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.745 X-Spam-Level: X-Spam-Status: No, score=-5.745 tagged_above=-999 required=5 tests=[AWL=0.854, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ew4mE2UPQSWj for ; Tue, 10 Nov 2009 10:37:40 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 5580D3A6918 for ; Tue, 10 Nov 2009 10:37:40 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id D12FE7E; Tue, 10 Nov 2009 12:38:07 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 91E0270; Tue, 10 Nov 2009 12:38:07 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 77E4680E32; Tue, 10 Nov 2009 12:38:07 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 52C2880E31 for ; Tue, 10 Nov 2009 12:38:05 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 4CE571A; Tue, 10 Nov 2009 12:38:05 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 4840A70 for ; Tue, 10 Nov 2009 12:38:05 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 42B871A for ; Tue, 10 Nov 2009 12:38:05 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 2C6257CC060; Tue, 10 Nov 2009 12:38:05 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13134-08; Tue, 10 Nov 2009 12:38:05 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 4FB7A7CC059 for ; Tue, 10 Nov 2009 12:38:04 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjMBAE5C+UqAAtnGmWdsb2JhbACcBgEBAQEBCAsKBxOzUQWGMYhOglmBZQQ X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33372524" Received: from smtp03.srv.cs.cmu.edu ([128.2.217.198]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 12:37:48 -0600 Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp03.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAAIbkAx009449 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 Nov 2009 13:37:47 -0500 (EST) Date: Tue, 10 Nov 2009 13:37:46 -0500 From: Jeffrey Hutzelman To: Nicolas Williams Message-ID: In-Reply-To: <20091110181715.GX1105@Sun.COM> References: <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> <20091110173841.GV1105@Sun.COM> <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> <20091110181715.GX1105@Sun.COM> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.198 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , jhutz@cmu.edu, Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov --On Tuesday, November 10, 2009 12:17:16 PM -0600 Nicolas Williams wrote: > On Tue, Nov 10, 2009 at 01:14:16PM -0500, Jeffrey Hutzelman wrote: >> --On Tuesday, November 10, 2009 11:38:41 AM -0600 Nicolas Williams >> wrote: >> >> > On Tue, Nov 10, 2009 at 09:32:58AM -0800, Henry B. Hotz wrote: >> >> If you're arguing that when a user sets a new password/key the main DB >> >> should store not-to-be-used enctypes for it, then I don't agree. For >> >> one thing, I don't see the advantage, and for another it seems like a >> >> really obvious way to guarantee there can't be code paths that might >> >> expose a weakness. >> > >> > I'm arguing against a separate knob for "what enctypes to create keys >> > for". >> >> As an operator, any KDC implementation I deploy will have that knob. >> I'm not convinced it necessarily needs to be represented in the kDC >> data model, but it definitely needs to exist. > > If it needs to exist then it should be in the model. Does it? Is it data or configuration? _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 10:57:39 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 26DEC3A696D for ; Tue, 10 Nov 2009 10:57:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id es4J7VB6PiNa for ; Tue, 10 Nov 2009 10:57:38 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 0BEA23A682C for ; Tue, 10 Nov 2009 10:57:38 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 783A27D; Tue, 10 Nov 2009 12:58:05 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 5835512; Tue, 10 Nov 2009 12:58:05 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 2C68B80E32; Tue, 10 Nov 2009 12:58:05 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 6FBF480E31 for ; Tue, 10 Nov 2009 12:58:03 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 60F0412; Tue, 10 Nov 2009 12:58:03 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 5C51A70 for ; Tue, 10 Nov 2009 12:58:03 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 5514B12 for ; Tue, 10 Nov 2009 12:58:03 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 39FDB7CC059; Tue, 10 Nov 2009 12:58:03 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18998-04; Tue, 10 Nov 2009 12:58:03 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 0C3EC7CC056 for ; Tue, 10 Nov 2009 12:58:03 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApYAAMNG+UrAEisVe2dsb2JhbACcBgEBCwsJCBMFs0aOf4I/GoFlBIFoiiM X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33373838" Received: from sca-ea-mail-3.sun.com ([192.18.43.21]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 12:57:48 -0600 Received: from dm-central-01.central.sun.com ([129.147.62.4]) by sca-ea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAAIvlYU026448 for ; Tue, 10 Nov 2009 18:57:47 GMT Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id nAAIvkrL017999 for ; Tue, 10 Nov 2009 11:57:46 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id nAAIkEZd012621; Tue, 10 Nov 2009 12:46:14 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id nAAIkETh012620; Tue, 10 Nov 2009 12:46:14 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Tue, 10 Nov 2009 12:46:14 -0600 From: Nicolas Williams To: Jeffrey Hutzelman Message-ID: <20091110184614.GY1105@Sun.COM> References: <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> <20091110173841.GV1105@Sun.COM> <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> <20091110181715.GX1105@Sun.COM> Mime-Version: 1.0 Content-Disposition: inline In-Reply-To: <20091110181715.GX1105@Sun.COM> User-Agent: Mutt/1.5.7i X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov On Tue, Nov 10, 2009 at 12:17:16PM -0600, Nicolas Williams wrote: > On Tue, Nov 10, 2009 at 01:14:16PM -0500, Jeffrey Hutzelman wrote: > > As an operator, any KDC implementation I deploy will have that knob. I'm > > not convinced it necessarily needs to be represented in the kDC data model, > > but it definitely needs to exist. > > If it needs to exist then it should be in the model. > > IMO one can do without it. It does no harm, however, to have it. Let me re-state my case: enctype policy management needs to be _simple_. The set of enctype policy knobs in MIT krb5 is not exactly sysadmin- friendly. Let's not make the same mistakes now. The bare minimum enctype policy management knob set needs to be identified, and those knobs must be REQUIRED. All other knobs may be OPTIONAL, RECOMMENDED, or REQUIRED to implement, for all I care, but we must give guidance on how to use the minimal knob set to get the desired effect (namely, to constrain what enctypes are used). The minimal set of enctype policy knobs, IMO, is this: - What enctypes will be accepted or attempted. This covers: - Authenticator encryption enctype - Authenticator sub-session key enctypes - Ticket enc-part encryption key enctype (in AP-REQs and in additional-tickets field in KDC-REQ-BODY) - etype field from KDC-REQ-BODY - enc-authorization-data encryption key enctype This is a knob that should be supported on: - KDCs - services - clients and which applies even to the Kerberos V5 GSS-API mechanism. Default value: the set of all enc-types excluding 1DES enctypes. Alternative default value: AES enc-types only. - What enctypes will be excluded from all other enctype lists unconditionally (no mater what their given values). (i.e., a weak enctype exclusion knob.) This knob too should be available on KDCs, clients and servers. Default value: either empty, or, if we're ready to obsolete the 1DES enctypes, the set of 1DES enctypes. and, maybe, this: - What enctypes can be tried / will be accepted for bare (not FAST- protected) PA-ENC-TIMESTAMP. If not set then the previous knob provides a default. This knob is needed only on KDCs and clients. Default value: same as previous knob. So, two or three in the minimal enctype policy knobs set. If in addition to this you want knobs for specifying what enctypes long-term keys can be created for, that's fine. (Such a knob is needed only on password/key change services.) Nico -- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 11:12:01 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 29FA13A6B75 for ; Tue, 10 Nov 2009 11:12:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.784 X-Spam-Level: X-Spam-Status: No, score=-5.784 tagged_above=-999 required=5 tests=[AWL=0.815, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ReFO8S97zUBC for ; Tue, 10 Nov 2009 11:11:59 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id A51243A69AB for ; Tue, 10 Nov 2009 11:11:59 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 0B87871; Tue, 10 Nov 2009 13:12:17 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id A353679; Tue, 10 Nov 2009 13:12:16 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 7AC9C80E32; Tue, 10 Nov 2009 13:12:16 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 038A680E31 for ; Tue, 10 Nov 2009 13:12:15 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id E9AF712; Tue, 10 Nov 2009 13:12:14 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id E411A1A for ; Tue, 10 Nov 2009 13:12:14 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id DADFA12 for ; Tue, 10 Nov 2009 13:12:14 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C3DEA7CC05D; Tue, 10 Nov 2009 13:12:14 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22916-01; Tue, 10 Nov 2009 13:12:14 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 94C847CC056 for ; Tue, 10 Nov 2009 13:12:14 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjMBAFdJ+UqAAtnGmWdsb2JhbACcBgEBAQEBCAsKBxOzRwWGNohOgj8agWUEgWg X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33374713" Received: from smtp03.srv.cs.cmu.edu ([128.2.217.198]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 13:12:14 -0600 Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp03.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAAJCCKu010222 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 Nov 2009 14:12:13 -0500 (EST) Date: Tue, 10 Nov 2009 14:12:12 -0500 From: Jeffrey Hutzelman To: Nicolas Williams Message-ID: In-Reply-To: <20091110184614.GY1105@Sun.COM> References: <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> <20091110173841.GV1105@Sun.COM> <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> <20091110181715.GX1105@Sun.COM> <20091110184614.GY1105@Sun.COM> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.198 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , jhutz@cmu.edu, Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov --On Tuesday, November 10, 2009 12:46:14 PM -0600 Nicolas Williams wrote: > On Tue, Nov 10, 2009 at 12:17:16PM -0600, Nicolas Williams wrote: >> On Tue, Nov 10, 2009 at 01:14:16PM -0500, Jeffrey Hutzelman wrote: >> > As an operator, any KDC implementation I deploy will have that knob. >> > I'm not convinced it necessarily needs to be represented in the kDC >> > data model, but it definitely needs to exist. >> >> If it needs to exist then it should be in the model. >> >> IMO one can do without it. It does no harm, however, to have it. > > Let me re-state my case: enctype policy management needs to be _simple_. > The set of enctype policy knobs in MIT krb5 is not exactly sysadmin- > friendly. Let's not make the same mistakes now. Agreed. What I'm telling you is that as an operator, what I actually _use_ in a production realm is the ability to control what enctypes are used when keying principals (primarily so I can install software that supports a new enctype but not phase use of it in until I choose) and the ability to disallow the use of existing enctypes even when keys exist. In addition, I expect eventually to use a per-principal knob allowing me to restrict, for a small set of services, what enctypes are used when those services are rekeyed. I do this because I do not want the KDC to issue tickets with AES keys to a service that does not support AES, and we have several of those. > The minimal set of enctype policy knobs, IMO, is this: > > - What enctypes will be accepted or attempted. This covers: > > - Authenticator encryption enctype > - Authenticator sub-session key enctypes > - Ticket enc-part encryption key enctype (in AP-REQs and in > additional-tickets field in KDC-REQ-BODY) > - etype field from KDC-REQ-BODY > - enc-authorization-data encryption key enctype > > This is a knob that should be supported on: > > - KDCs > - services > - clients > > and which applies even to the Kerberos V5 GSS-API mechanism. > > Default value: the set of all enc-types excluding 1DES enctypes. > Alternative default value: AES enc-types only. IMHO the correct default here is to use any and all enctypes the software supports, minus those in the unconditional-exclude list, and let negotiation take care of the rest. This gets you maximum interoperability while allowing any party to declare a particular enctype too weak to use. I don't believe the third knob you describe is in the minimal set. In addition to the policy knobs you describe, the KDC must know what enctypes are actually supported by a service, since it must issue tickets which use an enctype the service can support. Traditionally this has been implied by the list of long-term keys the KDC has for that service, but today, there are common implementations/deployments in which services have passwords, not keys, and the KDC can derive a key for a service for any supporte enctype on demand. > So, two or three in the minimal enctype policy knobs set. > > If in addition to this you want knobs for specifying what enctypes > long-term keys can be created for, that's fine. (Such a knob is needed > only on password/key change services.) Yes, that is needed only on services that key principals. It is arguably part of the configuration of such a service, rather than part of the KDC data described by the model. -- Jeff _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 11:15:33 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 338B93A6858 for ; Tue, 10 Nov 2009 11:15:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.819 X-Spam-Level: X-Spam-Status: No, score=-5.819 tagged_above=-999 required=5 tests=[AWL=0.780, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O625-8UjycWb for ; Tue, 10 Nov 2009 11:15:32 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 1D96C3A6847 for ; Tue, 10 Nov 2009 11:15:32 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 9D91282; Tue, 10 Nov 2009 13:15:59 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 3F0E871; Tue, 10 Nov 2009 13:15:57 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 2631A80E32; Tue, 10 Nov 2009 13:15:57 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 316D080E31 for ; Tue, 10 Nov 2009 13:15:56 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 0E34371; Tue, 10 Nov 2009 13:15:56 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id EDB3D7D for ; Tue, 10 Nov 2009 13:15:55 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id DAADE71 for ; Tue, 10 Nov 2009 13:15:55 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C2EC77CC05E; Tue, 10 Nov 2009 13:15:55 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24025-09; Tue, 10 Nov 2009 13:15:55 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id A30187CC05C for ; Tue, 10 Nov 2009 13:15:55 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjMBAINK+UqAAtnGmWdsb2JhbACcBgEBAQEBCAsKBxOzSIY7iE6CMxSBdwQ X-IronPort-AV: E=Sophos;i="4.44,717,1249275600"; d="scan'208";a="33374968" Received: from smtp03.srv.cs.cmu.edu ([128.2.217.198]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 13:15:55 -0600 Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp03.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAAJFh2v010313 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 Nov 2009 14:15:45 -0500 (EST) Date: Tue, 10 Nov 2009 14:15:43 -0500 From: Jeffrey Hutzelman To: ietf-krb-wg@anl.gov Message-ID: In-Reply-To: <9C30088742EFE2EAFB92FCF2@atlantis.pc.cs.cmu.edu> References: <9C30088742EFE2EAFB92FCF2@atlantis.pc.cs.cmu.edu> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: jhutz@cmu.edu Subject: Re: [Ietf-krb-wg] preliminary review of draft-ietf-krb-wg-preauth-framework-14.txt X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov --On Sunday, August 30, 2009 03:25:03 PM -0400 Jeffrey Hutzelman wrote: > Has Tom verified that the pata registry contents in section 8.1 are > consistent with his current records? It's doubly important to get this > right since we are turning this registry over to IANA. I haven't received confirmation on this yet. > I need someone (preferably more than one someone) to verify that the > ASN.1 module in Appendix C actually compiles. Or on this. In addition, there are two minor editorial nits which have been previously raised but not fixed. One is an extraneous space in "PA-FX-FAST-REPLY" at the top of page 32, and the other is an extraneous line break in "PA-FX-CF2" in what is now section 6.4.6. Both of these can and will be fixed during editing. Otherwise, I believe all open issues on this document have been closed, and I will send it forward as soon as I receive confirmation from Tom that the padata registry initial contents are consistent with his records and an indication from someone that they have successfully compiled the ASN.1 module. -- Jeff _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 12:09:55 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 438863A69F1 for ; Tue, 10 Nov 2009 12:09:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.301 X-Spam-Level: X-Spam-Status: No, score=-6.301 tagged_above=-999 required=5 tests=[AWL=0.298, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ccMFPnWwdy6D for ; Tue, 10 Nov 2009 12:09:54 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id F1B7A28C137 for ; Tue, 10 Nov 2009 12:09:53 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 7F45D71; Tue, 10 Nov 2009 14:10:21 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 0B38B7E; Tue, 10 Nov 2009 14:10:20 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id DE6C480E32; Tue, 10 Nov 2009 14:10:20 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 2E67580E31 for ; Tue, 10 Nov 2009 14:10:19 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 28D8071; Tue, 10 Nov 2009 14:10:19 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 2407B7C for ; Tue, 10 Nov 2009 14:10:19 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 1A14871 for ; Tue, 10 Nov 2009 14:10:19 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 04C067CC05D; Tue, 10 Nov 2009 14:10:19 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07965-03; Tue, 10 Nov 2009 14:10:18 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id CF8CD7CC056 for ; Tue, 10 Nov 2009 14:10:18 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApYAAGZX+UrAEisVe2dsb2JhbACcBgEBCwsJCBMFs1+PDII/GoFlBIFoiiM X-IronPort-AV: E=Sophos;i="4.44,718,1249275600"; d="scan'208";a="33378605" Received: from sca-ea-mail-3.sun.com ([192.18.43.21]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 14:10:18 -0600 Received: from dm-central-01.central.sun.com ([129.147.62.4]) by sca-ea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAAKAH4m017870 for ; Tue, 10 Nov 2009 20:10:17 GMT Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id nAAKAH2p007464 for ; Tue, 10 Nov 2009 13:10:17 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id nAAJwh04012646; Tue, 10 Nov 2009 13:58:43 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id nAAJwh1q012645; Tue, 10 Nov 2009 13:58:43 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Tue, 10 Nov 2009 13:58:43 -0600 From: Nicolas Williams To: Jeffrey Hutzelman Message-ID: <20091110195842.GZ1105@Sun.COM> References: <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> <20091110173841.GV1105@Sun.COM> <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> <20091110181715.GX1105@Sun.COM> <20091110184614.GY1105@Sun.COM> Mime-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.7i X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov On Tue, Nov 10, 2009 at 02:12:12PM -0500, Jeffrey Hutzelman wrote: > --On Tuesday, November 10, 2009 12:46:14 PM -0600 Nicolas Williams > wrote: > >Let me re-state my case: enctype policy management needs to be _simple_. > >The set of enctype policy knobs in MIT krb5 is not exactly sysadmin- > >friendly. Let's not make the same mistakes now. > > Agreed. What I'm telling you is that as an operator, what I actually _use_ > in a production realm is the ability to control what enctypes are used when > keying principals (primarily so I can install software that supports a new > enctype but not phase use of it in until I choose) and the ability to That's not like the supported_enctypes option of the MIT kadmind, but like the -e argument to the MIT kadmin commands + the permitted_enctypes option to the MIT software on the KDC. > disallow the use of existing enctypes even when keys exist. In addition, I > expect eventually to use a per-principal knob allowing me to restrict, for > a small set of services, what enctypes are used when those services are > rekeyed. I do this because I do not want the KDC to issue tickets with AES > keys to a service that does not support AES, and we have several of those. Indeed, that is a highly desirable goal, but the set of enctypes supported by some service is known by that service, not by the KDC, and whatever you may store in the KDB about it can get out of dat when you upgrade the service's software. > >The minimal set of enctype policy knobs, IMO, is this: > > > > - What enctypes will be accepted or attempted. This covers: > > [...] > > > > Default value: the set of all enc-types excluding 1DES enctypes. > > Alternative default value: AES enc-types only. > > IMHO the correct default here is to use any and all enctypes the software > supports, minus those in the unconditional-exclude list, and let > negotiation take care of the rest. This gets you maximum interoperability > while allowing any party to declare a particular enctype too weak to use. Ah, yes, I'd meant to say that, but the way I edited my message I forgot to. > I don't believe the third knob you describe is in the minimal set. I'd be OK with it in that set though. > In addition to the policy knobs you describe, the KDC must know what > enctypes are actually supported by a service, since it must issue tickets > which use an enctype the service can support. Traditionally this has been > implied by the list of long-term keys the KDC has for that service, but > today, there are common implementations/deployments in which services have > passwords, not keys, and the KDC can derive a key for a service for any > supporte enctype on demand. Yes. > >So, two or three in the minimal enctype policy knobs set. > > > >If in addition to this you want knobs for specifying what enctypes > >long-term keys can be created for, that's fine. (Such a knob is needed > >only on password/key change services.) > > Yes, that is needed only on services that key principals. It is arguably > part of the configuration of such a service, rather than part of the KDC > data described by the model. Indeed, that is what I wrote. Nico -- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 17:30:33 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E4EE53A6A1F for ; Tue, 10 Nov 2009 17:30:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tCMbi5QK3Ftu for ; Tue, 10 Nov 2009 17:30:32 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 88C7E3A691F for ; Tue, 10 Nov 2009 17:30:32 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 5133382; Tue, 10 Nov 2009 19:31:00 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id CF33880; Tue, 10 Nov 2009 19:30:54 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 9E5ED80E32; Tue, 10 Nov 2009 19:30:54 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 9C58680E31 for ; Tue, 10 Nov 2009 19:30:52 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 8D7517E; Tue, 10 Nov 2009 19:30:52 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 8A1CC80 for ; Tue, 10 Nov 2009 19:30:52 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 842C67E for ; Tue, 10 Nov 2009 19:30:52 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 6B4037CC05C; Tue, 10 Nov 2009 19:30:52 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06322-06; Tue, 10 Nov 2009 19:30:52 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 4C2D67CC056 for ; Tue, 10 Nov 2009 19:30:52 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Aq0EACui+UpFGcQc/2dsb2JhbACBTs1bhlKIToQ8BA X-IronPort-AV: E=Sophos;i="4.44,719,1249275600"; d="scan'208";a="33393121" Received: from permutation-city.suchdamage.org (HELO mail.suchdamage.org) ([69.25.196.28]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 19:30:51 -0600 Received: from carter-zimmerman.suchdamage.org (host-17-186.meeting.ietf.org [133.93.17.186]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id 17125202FA; Tue, 10 Nov 2009 20:30:51 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 6FF59445C; Tue, 10 Nov 2009 20:30:48 -0500 (EST) To: Nicolas Williams References: <20091029160200.GP1105@Sun.COM> <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> <20091110173841.GV1105@Sun.COM> <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> <20091110181715.GX1105@Sun.COM> <20091110184614.GY1105@Sun.COM> <20091110195842.GZ1105@Sun.COM> From: Sam Hartman Date: Tue, 10 Nov 2009 20:30:48 -0500 In-Reply-To: <20091110195842.GZ1105@Sun.COM> (Nicolas Williams's message of "Tue\, 10 Nov 2009 13\:58\:43 -0600") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , ietf-krb-wg@anl.gov, Sam Hartman , Jeffrey Hutzelman Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov I'm still not convinced that all this complexity is entirely needed. Remember that 6.1.1.13 provides an escape to a policy object. I'd like to look into the option of specifying something incredibly simple for the info model, with the understanding that anything more complex will be part of the policy system. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 17:39:01 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B86E33A6BC2 for ; Tue, 10 Nov 2009 17:39:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.304 X-Spam-Level: X-Spam-Status: No, score=-6.304 tagged_above=-999 required=5 tests=[AWL=0.295, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OO0AXk3AJBIM for ; Tue, 10 Nov 2009 17:39:00 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id C34F03A6BBB for ; Tue, 10 Nov 2009 17:39:00 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 820ED80; Tue, 10 Nov 2009 19:39:28 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 2FF1A81; Tue, 10 Nov 2009 19:39:28 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 1018280E32; Tue, 10 Nov 2009 19:39:28 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 3511480E31 for ; Tue, 10 Nov 2009 19:39:26 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 2638280; Tue, 10 Nov 2009 19:39:26 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 21D3181 for ; Tue, 10 Nov 2009 19:39:26 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 1C39880 for ; Tue, 10 Nov 2009 19:39:26 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 04C037CC05D; Tue, 10 Nov 2009 19:39:26 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07495-01; Tue, 10 Nov 2009 19:39:25 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id D65997CC056 for ; Tue, 10 Nov 2009 19:39:25 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AsYAAIOk+UrAEisYe2dsb2JhbACcDQEBCwsJCBMFwXuEPASMEg X-IronPort-AV: E=Sophos;i="4.44,719,1249275600"; d="scan'208";a="33393415" Received: from sca-ea-mail-1.sun.com ([192.18.43.24]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 19:39:25 -0600 Received: from dm-central-01.central.sun.com ([129.147.62.4]) by sca-ea-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nAB1dONr015802 for ; Wed, 11 Nov 2009 01:39:24 GMT Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id nAB1dNef025920 for ; Tue, 10 Nov 2009 18:39:23 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id nAB1Roln013218; Tue, 10 Nov 2009 19:27:50 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id nAB1Rn8d013217; Tue, 10 Nov 2009 19:27:49 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Tue, 10 Nov 2009 19:27:49 -0600 From: Nicolas Williams To: Sam Hartman Message-ID: <20091111012749.GL1105@Sun.COM> References: <20091110154758.GO1105@Sun.COM> <233D0A11-316F-4C2A-ADC0-67772BB9FE95@jpl.nasa.gov> <20091110173841.GV1105@Sun.COM> <274B4EB90EC3B4AA80188A60@atlantis.pc.cs.cmu.edu> <20091110181715.GX1105@Sun.COM> <20091110184614.GY1105@Sun.COM> <20091110195842.GZ1105@Sun.COM> Mime-Version: 1.0 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.7i X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , ietf-krb-wg@anl.gov, Jeffrey Hutzelman Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov On Tue, Nov 10, 2009 at 08:30:48PM -0500, Sam Hartman wrote: > I'm still not convinced that all this complexity is entirely needed. > Remember that 6.1.1.13 provides an escape to a policy object. I'd > like to look into the option of specifying something incredibly simple > for the info model, with the understanding that anything more complex > will be part of the policy system. One or two global enctype lists seems simple enough. One enctype list if we allow negation, else two. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 18:30:17 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4BAD528C27B for ; Tue, 10 Nov 2009 18:30:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.802 X-Spam-Level: X-Spam-Status: No, score=-5.802 tagged_above=-999 required=5 tests=[AWL=0.797, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0mgqa52ZPq9S for ; Tue, 10 Nov 2009 18:30:16 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 0AB2A28C276 for ; Tue, 10 Nov 2009 18:30:16 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id CAB4382; Tue, 10 Nov 2009 20:30:43 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id AA33B89; Tue, 10 Nov 2009 20:30:43 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 5FCFB80E32; Tue, 10 Nov 2009 20:30:43 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 1910580E31 for ; Tue, 10 Nov 2009 20:30:41 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 13C5682; Tue, 10 Nov 2009 20:30:41 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 0E9E283 for ; Tue, 10 Nov 2009 20:30:41 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id E521382 for ; Tue, 10 Nov 2009 20:30:40 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id CC8327CC05C; Tue, 10 Nov 2009 20:30:40 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13067-05; Tue, 10 Nov 2009 20:30:40 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id A48007CC056 for ; Tue, 10 Nov 2009 20:30:40 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AqkDADqw+UqAAtnEgWdsb2JhbACcDQEBFiSyPoZPiE6EPAQ X-IronPort-AV: E=Sophos;i="4.44,720,1249275600"; d="scan'208";a="33394769" Received: from smtp01.srv.cs.cmu.edu ([128.2.217.196]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 20:30:40 -0600 Received: from MINBAR.FAC.CS.CMU.EDU (MINBAR.FAC.CS.CMU.EDU [128.2.216.42]) (authenticated bits=0) by smtp01.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAB2Udcx006029 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 10 Nov 2009 21:30:39 -0500 (EST) Date: Tue, 10 Nov 2009 21:30:38 -0500 From: Jeffrey Hutzelman To: ietf-krb-wg@anl.gov Message-ID: <3DCE1E3C73D43DA2705B37D6@minbar.fac.cs.cmu.edu> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.196 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: jhutz@cmu.edu Subject: [Ietf-krb-wg] NEW LAST CALL: draft-ietf-krb-wg-cross-problem-statement-05.txt X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov The cross-realm problem statement document previously passed last call in this working group and was forwarded to the IESG for consideration for publication as an informational RFC. During IETF last call, comments and additional input were received which resulted in substantial changes to the document. As a result, this note announces the start of a new three-week last call within the Kerberos Working Group on whether to send the revised document to the IESG. It is my belief that the last paragraph of the revised abstract (quoted below) attempts to turn what began as a problem statement document into a requirements document, and that we do not have consensus for this change. As a result, I have informed the authors that that paragraph will need to be removed when the document is revised to address last call comments. If anyone disagrees with this assessment, please let me know. Title: Problem statement on the cross-realm operation of Kerberos Filename: draft-ietf-krb-wg-cross-problem-statement-05.txt Intended Status: Informational The Kerberos protocol is today one of the most widely deployed authentication protocols in the Internet. In order for a Kerberos deployment to operate in a scalable manner, different Kerberos realms must interoperate in such a way that cross-realm operations can be performed efficiently and securely. This document provides background information regarding large scale Kerberos deployments in the industrial sector, with the aim of identifying issues in the current Kerberos cross-realm authentication model as defined in RFC4120. As industrial automation is moving towards wider adoption of Internet standards, the Kerberos authentication protocol represents one of the best alternatives for ensuring the confidentiality and the integrity of communications in control networks while meeting performance and security requirements. However, the use of Kerberos cross-realm operations in large scale industrial systems may introduce issues that could cause performance and reliability problems. This document describes some examples of actual large scale industrial systems, and lists requirements and restriction regarding authentication operations in such environments. The current document also identifies a number of requirements derived from the industrial automation field. Although they are found in the field of industrial automation, these requirements are general enough and are applicable to the problem of Kerberos cross-realm operations. These requirements need to be satisfied by proposed Kerberos cross- realm frameworks or architectures, as well as specific solutions that implement those frameworks or architectures. This last call will expire at 23:59 EDT on Nov 30, 2009. Note that this provides more than the usual amount of time for comments, due to the ongoing 76th IETF meeting in Hiroshima. Please review this document and send any comments to the Kerberos Working Group mailing list, , by that date. The file can be obtained via http://tools.ietf.org/html/draft-ietf-krb-wg-cross-problem-statement-05 -- Jeffrey T. Hutzelman (N3NHS) Co-Chair, IETF Kerberos Working Group Carnegie Mellon University - Pittsburgh, PA _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 19:10:18 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2EA3028C284 for ; Tue, 10 Nov 2009 19:10:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GbIp6Bniq1xJ for ; Tue, 10 Nov 2009 19:10:14 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 3E8E228C28E for ; Tue, 10 Nov 2009 19:09:40 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 1A18085; Tue, 10 Nov 2009 21:10:08 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 54F8E81; Tue, 10 Nov 2009 21:10:05 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id F318580E32; Tue, 10 Nov 2009 21:10:04 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id CD5E280E31 for ; Tue, 10 Nov 2009 21:10:03 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id C7FCB81; Tue, 10 Nov 2009 21:10:03 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id C459582 for ; Tue, 10 Nov 2009 21:10:03 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id BFCBA81 for ; Tue, 10 Nov 2009 21:10:03 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id A90777CC05C; Tue, 10 Nov 2009 21:10:03 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16228-06; Tue, 10 Nov 2009 21:10:03 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 8A24D7CC056 for ; Tue, 10 Nov 2009 21:10:03 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Aq0EANa5+UpuBL2G/2dsb2JhbACBTtxEhDwEgmM X-IronPort-AV: E=Sophos;i="4.44,720,1249275600"; d="scan'208";a="33395535" Received: from z189134.ppp.asahi-net.or.jp (HELO mama.tanu.org) ([110.4.189.134]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 21:10:02 -0600 Received: from [133.93.19.156] (host-19-156.meeting.ietf.org [133.93.19.156]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mama.tanu.org (Postfix) with ESMTPSA id 15DFB16B10 for ; Wed, 11 Nov 2009 12:10:01 +0900 (JST) Message-ID: <4AFA2AF4.8040205@tanu.org> Date: Wed, 11 Nov 2009 12:09:40 +0900 From: Shoichi Sakane User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: ietf-krb-wg@anl.gov References: <3DCE1E3C73D43DA2705B37D6@minbar.fac.cs.cmu.edu> In-Reply-To: <3DCE1E3C73D43DA2705B37D6@minbar.fac.cs.cmu.edu> X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: Re: [Ietf-krb-wg] NEW LAST CALL: draft-ietf-krb-wg-cross-problem-statement-05.txt X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov > It is my belief that the last paragraph of the revised abstract (quoted > below) attempts to turn what began as a problem statement document into > a requirements document, and that we do not have consensus for this > change. As a result, I have informed the authors that that paragraph > will need to be removed when the document is revised to address last > call comments. If anyone disagrees with this assessment, please let me > know. I agree with removing the last paragraph of the abstract. I want the document to stick into a statement document. Thank you, === Shoichi Sakane _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 20:24:59 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 55EDF3A6930 for ; Tue, 10 Nov 2009 20:24:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.322 X-Spam-Level: X-Spam-Status: No, score=-8.322 tagged_above=-999 required=5 tests=[AWL=0.277, BAYES_00=-2.599, GB_I_INVITATION=-2, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5sirKmm+mubG for ; Tue, 10 Nov 2009 20:24:58 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 13E103A67EB for ; Tue, 10 Nov 2009 20:24:58 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id EBACD83; Tue, 10 Nov 2009 22:25:25 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 9AEA882; Tue, 10 Nov 2009 22:25:22 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 6598C80E32; Tue, 10 Nov 2009 22:25:22 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 9EEA580E31 for ; Tue, 10 Nov 2009 22:25:20 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 9054C80; Tue, 10 Nov 2009 22:25:20 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 8B76082 for ; Tue, 10 Nov 2009 22:25:20 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 6C1A580 for ; Tue, 10 Nov 2009 22:25:20 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 550677CC05C; Tue, 10 Nov 2009 22:25:20 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 21314-03; Tue, 10 Nov 2009 22:25:20 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 2C7507CC056 for ; Tue, 10 Nov 2009 22:25:20 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmcAADrL+UrAEmIrlGdsb2JhbACcDQEBAQEJCwgJEwUpE4duqWMEBY8UgkERBYFlBIFrgzeGZQ X-IronPort-AV: E=Sophos;i="4.44,720,1249275600"; d="scan'208";a="33396774" Received: from brmea-mail-2.sun.com ([192.18.98.43]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 22:25:19 -0600 Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAB4PJ1J002411 for ; Wed, 11 Nov 2009 04:25:19 GMT MIME-version: 1.0 Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSX00000FTGAU00@mail-amer.sun.com> for ietf-krb-wg@anl.gov; Tue, 10 Nov 2009 21:25:19 -0700 (MST) Received: from host-19-253.meeting.ietf.org ([unknown] [133.93.19.253]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSX006EVGA5WI60@mail-amer.sun.com> for ietf-krb-wg@anl.gov; Tue, 10 Nov 2009 21:25:19 -0700 (MST) Date: Tue, 10 Nov 2009 21:25:17 -0700 From: "Shawn M. Emery" To: "ietf-krb-wg@anl.gov" Message-id: <4AFA3CAD.6020204@sun.com> User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: [Ietf-krb-wg] [Fwd: FW: WebEX Attendee Invitation: krb-wg at IETF 76] X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov String for URL should be: https://workgreen.webex.com/workgreen/j.php?ED=130168702&UID=0&PW=NODQ1OGIxZDU5&ORT=MiM0OQ%3D%3D -------- Original Message -------- Subject: [Ietf-krb-wg] FW: WebEX Attendee Invitation: krb-wg at IETF 76 Date: Sun, 08 Nov 2009 00:46:00 -0500 From: Jeffrey Hutzelman To: ietf-krb-wg@anl.gov -----Original Message----- From: Alexa Morris Date: Sunday, Nov 8, 2009 12:34 am Subject: WebEX Attendee Invitation: krb-wg at IETF 76 To: jhutz@cmu.edu, larry.zhu@microsoft.com >**** You can forward this email invitation to attendees **** > >Hello , > >IETF Secretariat invites you to attend this online meeting. > >Topic: krb-wg at IETF 76 >Date: Wednesday, November 11, 2009 >Time: 12:45 pm, Japan Time (Tokyo, GMT+09:00) >Meeting Number: 962 027 913 >Meeting Password: krb-wg > > >------------------------------------------------------- >To join the online meeting (Now from iPhones too!) >------------------------------------------------------- >1. Go to https://workgreen.webex.com/workgreen/j.php?ED0168702&UID=0&PW=NODQ1OGIxZDU5&RT=MiM0OQ%3D%3D >2. Enter your name and email address. >3. Enter the meeting password: krb-wg >4. Click "Join Now". > >To view in other time zones or languages, please click the link: >https://workgreen.webex.com/workgreen/j.php?ED0168702&UID=0&PW=NODQ1OGIxZDU5&ORT=MiM0OQ%3D%3D > >------------------------------------------------------- >To join the audio conference only >------------------------------------------------------- >To receive a call back, provide your phone number when you join the meeting, or call the number below and enter the access code. >Call-in toll-free number (US/Canada): 866-699-3239 >Call-in toll number (US/Canada): 1-408-792-6300 >Toll-free dialing restrictions: http://www.webex.com/pdf/tollfree_restrictions.pdf > >Access code:962 027 913 > >------------------------------------------------------- >For assistance >------------------------------------------------------- >1. Go to https://workgreen.webex.com/workgreen/mc >2. On the left navigation bar, click "Support". > >You can contact me at: >amorris@amsl.com >1-510-492-4081 > >To add this meeting to your calendar program (for example Microsoft Outlook), click this link: >https://workgreen.webex.com/workgreen/j.php?ED0168702&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=Hn/go2UxM2mCDwzQNtQYZQHwCED2U5Df70GnWh-6VmE=&RT=MiM0OQ%3D%3D > >The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://workgreen.webex.com/workgreen/systemdiagnosis.php > >Sign up for a free trial of WebEx >http://www.webex.com/go/mcemfreetrial > >http://www.webex.com > > > >IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 20:35:43 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 101793A67AF for ; Tue, 10 Nov 2009 20:35:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4qS389VQ7peF for ; Tue, 10 Nov 2009 20:35:42 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 1E9033A67A3 for ; Tue, 10 Nov 2009 20:35:42 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id D47BD80; Tue, 10 Nov 2009 22:36:09 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 40A1788; Tue, 10 Nov 2009 22:36:09 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 02FA080E32; Tue, 10 Nov 2009 22:36:09 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id EDC7E80E31 for ; Tue, 10 Nov 2009 22:36:06 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id DEF8B82; Tue, 10 Nov 2009 22:36:06 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id DB66383 for ; Tue, 10 Nov 2009 22:36:06 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id D6D7082 for ; Tue, 10 Nov 2009 22:36:06 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C03467CC05C; Tue, 10 Nov 2009 22:36:06 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22153-06; Tue, 10 Nov 2009 22:36:06 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id A3B427CC056 for ; Tue, 10 Nov 2009 22:36:06 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Aq0EAJPN+UpuBL2G/2dsb2JhbACBTtw0hDwEgmM X-IronPort-AV: E=Sophos;i="4.44,720,1249275600"; d="scan'208";a="33396986" Received: from z189134.ppp.asahi-net.or.jp (HELO mama.tanu.org) ([110.4.189.134]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 22:36:05 -0600 Received: from [133.93.19.156] (host-19-156.meeting.ietf.org [133.93.19.156]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mama.tanu.org (Postfix) with ESMTPSA id 0305D16A65 for ; Wed, 11 Nov 2009 13:36:04 +0900 (JST) Message-ID: <4AFA3F1F.8080304@tanu.org> Date: Wed, 11 Nov 2009 13:35:43 +0900 From: Shoichi Sakane User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: ietf-krb-wg@anl.gov References: <3DCE1E3C73D43DA2705B37D6@minbar.fac.cs.cmu.edu> In-Reply-To: <3DCE1E3C73D43DA2705B37D6@minbar.fac.cs.cmu.edu> X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: Re: [Ietf-krb-wg] NEW LAST CALL: draft-ietf-krb-wg-cross-problem-statement-05.txt X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov I will modify the 05 version with the following minor fixes. I use OUT-IN style to express the differences for reviewers. In line 252 (section 2.1), from "consists on" to "consists of". OUT: request for a service ticket consists on a packet containing a TGT IN : request for a service ticket consists of a packet containing a TGT In line 351 (4th paragraph in section 3), from "each called" to "each on called". OUT: each called "cluster", are scattered in the area. IN : each one called "cluster", are scattered in the area. In line 360 (5th paragraph in section 3), OUT: Furthermore, to reduce power consumption (due explosion-proof requirements), the clock on the CPU may be lowered. IN : Furthermore, to reduce power consumption, the clock on the CPU may be lowered. This adjustment restricts the amount of total energy in the device, thereby reducing the risk of explosions. In line 368 (6th paragraph in section 3), OUT: travel time of data from a device to another device must be within 1 second at most. IN : travel time of data from a device to another device in the both examples must be within 1 second at most. === Shoichi Sakane _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 20:46:55 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A65233A68C7 for ; Tue, 10 Nov 2009 20:46:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.903 X-Spam-Level: X-Spam-Status: No, score=-5.903 tagged_above=-999 required=5 tests=[AWL=0.696, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xM8J69UzjW5C for ; Tue, 10 Nov 2009 20:46:54 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id A9CA428C0DE for ; Tue, 10 Nov 2009 20:46:54 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 941D889; Tue, 10 Nov 2009 22:47:22 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 4D7C987; Tue, 10 Nov 2009 22:47:22 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 11EFC80E32; Tue, 10 Nov 2009 22:47:22 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id BFBF780E31 for ; Tue, 10 Nov 2009 22:47:20 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id B85D980; Tue, 10 Nov 2009 22:47:20 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id B3A2A82 for ; Tue, 10 Nov 2009 22:47:20 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id ADD6680 for ; Tue, 10 Nov 2009 22:47:20 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 974C07CC059; Tue, 10 Nov 2009 22:47:20 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22646-09; Tue, 10 Nov 2009 22:47:20 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 78A3A7CC056 for ; Tue, 10 Nov 2009 22:47:20 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAOjP+UrBCvxC/2dsb2JhbADdcYI9gX8EgWuKJw X-IronPort-AV: E=Sophos;i="4.44,720,1249275600"; d="scan'208";a="33397118" Received: from backup-server.nordu.net ([193.10.252.66]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 22:47:19 -0600 Received: from [133.93.19.61] (host-19-61.meeting.ietf.org [133.93.19.61]) (authenticated bits=0) by backup-server.nordu.net (8.14.3/8.14.3) with ESMTP id nAB4lAd8004327 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 11 Nov 2009 05:47:15 +0100 (CET) Message-ID: <4AFA41D0.7020703@mnt.se> Date: Wed, 11 Nov 2009 05:47:12 +0100 From: Leif Johansson User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: Jeffrey Hutzelman References: <4AE75E65.3040105@symas.com> <20091028183425.GU1105@Sun.COM> <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> In-Reply-To: X-Enigmail-Version: 0.95.7 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , Sam Hartman , ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > > As someone who actually administers a production Kerberos realm, there > are in fact three policies I want to be able to set: > > (1) enctypes used when setting passwords for users > (2) enctypes used when keying services > (3) "weak" enctypes which must never be used > > Generally (1) and (2) will be the same, but in practice they seem to > change at different times. > I believe that we're approaching the policy object event horizon here and I think we should stick with the basic principle wrt policy in this spec which has been that its either really really simple or its arbitrarily complex and is a "policy object". Please review and commend Sams and my suggestion from yesterday! Cheers Leif -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkr6QdAACgkQ8Jx8FtbMZnd7ygCgkLz7IrdmfyKKnURq8KxYbxzw aKMAn04xUmbLAyz52juG+I4TbeaRg7Tn =6juL -----END PGP SIGNATURE----- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 21:56:07 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 28B6E3A6916 for ; Tue, 10 Nov 2009 21:56:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.544 X-Spam-Level: X-Spam-Status: No, score=-6.544 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SEaMvA18-iJh for ; Tue, 10 Nov 2009 21:56:06 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 14FF43A6820 for ; Tue, 10 Nov 2009 21:56:06 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id DD7F483; Tue, 10 Nov 2009 23:56:33 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 5EE0882; Tue, 10 Nov 2009 23:56:31 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 2229B80E32; Tue, 10 Nov 2009 23:56:31 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id CB93280E31 for ; Tue, 10 Nov 2009 23:56:28 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id BCABF80; Tue, 10 Nov 2009 23:56:28 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id B7F3F82 for ; Tue, 10 Nov 2009 23:56:28 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id B152580 for ; Tue, 10 Nov 2009 23:56:28 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 967187CC056; Tue, 10 Nov 2009 23:56:28 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26973-06; Tue, 10 Nov 2009 23:56:28 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 773D17CC054 for ; Tue, 10 Nov 2009 23:56:28 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AksAAILg+UoSBwdQkWdsb2JhbACcDAEBAQEJCwoHEwWxSYZXiE6CPYF/BA X-IronPort-AV: E=Sophos;i="4.44,721,1249275600"; d="scan'208";a="33398228" Received: from biscayne-one-station.mit.edu ([18.7.7.80]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 23:56:28 -0600 Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id nAB5u7ta010314; Wed, 11 Nov 2009 00:56:08 -0500 (EST) Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id nAB5uRNI006300 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 11 Nov 2009 00:56:28 -0500 (EST) Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id nAB5uJhR001330; Wed, 11 Nov 2009 00:56:19 -0500 (EST) To: Leif Johansson References: <4AE75E65.3040105@symas.com> <20091028183425.GU1105@Sun.COM> <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <4AFA41D0.7020703@mnt.se> From: Tom Yu Date: Wed, 11 Nov 2009 00:56:19 -0500 In-Reply-To: <4AFA41D0.7020703@mnt.se> (Leif Johansson's message of "Tue, 10 Nov 2009 23:47:12 -0500") Message-ID: Lines: 24 MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.42 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Howard Chu , "ietf-krb-wg@anl.gov" , Sam Hartman , "jhutz@cmu.edu" Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov Leif Johansson writes: >> >> As someone who actually administers a production Kerberos realm, there >> are in fact three policies I want to be able to set: >> >> (1) enctypes used when setting passwords for users >> (2) enctypes used when keying services >> (3) "weak" enctypes which must never be used >> >> Generally (1) and (2) will be the same, but in practice they seem to >> change at different times. >> > > I believe that we're approaching the policy object event horizon here > and I think we should stick with the basic principle wrt policy in > this spec which has been that its either really really simple or its > arbitrarily complex and is a "policy object". I would like to see clarification of how we draw the line between what should be an attribute and what should be a policy object. I think that some aspects of controlling key selection, particularly session key selection, during ticket issuance are basic enough to not be counted as policy objects. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 21:56:51 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC0393A6C1B for ; Tue, 10 Nov 2009 21:56:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.548 X-Spam-Level: X-Spam-Status: No, score=-6.548 tagged_above=-999 required=5 tests=[AWL=0.051, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oy5e9cYDIlB3 for ; Tue, 10 Nov 2009 21:56:51 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id EE2083A6820 for ; Tue, 10 Nov 2009 21:56:50 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id C6A9385; Tue, 10 Nov 2009 23:57:18 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id A4F9783; Tue, 10 Nov 2009 23:57:18 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 94CF680E32; Tue, 10 Nov 2009 23:57:18 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 4FD0180E31 for ; Tue, 10 Nov 2009 23:57:17 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 4B7EE80; Tue, 10 Nov 2009 23:57:17 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 46AE882 for ; Tue, 10 Nov 2009 23:57:17 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 42E6080 for ; Tue, 10 Nov 2009 23:57:17 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 2CE827CC056; Tue, 10 Nov 2009 23:57:17 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 27076-04; Tue, 10 Nov 2009 23:57:17 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 0E6FE7CC054 for ; Tue, 10 Nov 2009 23:57:17 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AksAAILg+UoSBwdQkWdsb2JhbACcDAEBAQEJCwoHEwWxSYZXiE6EPAQ X-IronPort-AV: E=Sophos;i="4.44,721,1249275600"; d="scan'208";a="33398236" Received: from biscayne-one-station.mit.edu ([18.7.7.80]) by mailgateway.anl.gov with ESMTP; 10 Nov 2009 23:57:16 -0600 Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id nAB5uvBV010614; Wed, 11 Nov 2009 00:56:57 -0500 (EST) Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id nAB5vIls006361 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 11 Nov 2009 00:57:19 -0500 (EST) Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id nAB5vAV9001358; Wed, 11 Nov 2009 00:57:10 -0500 (EST) To: Leif Johansson References: <4AF8FEF7.6020408@mnt.se> From: Tom Yu Date: Wed, 11 Nov 2009 00:57:10 -0500 In-Reply-To: <4AF8FEF7.6020408@mnt.se> (Leif Johansson's message of "Tue, 10 Nov 2009 00:49:43 -0500") Message-ID: Lines: 30 MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.42 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: "ietf-krb-wg@anl.gov" Subject: Re: [Ietf-krb-wg] enctypes take 2 - consensus call X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov Leif Johansson writes: > I talked this over with Sam yesterday and our suggestion is that we > keep the attribute as it is and make its semantics more explicit by > stating that it is used for explicitly limiting to the listed enctypes > in _all_ cases where keys are used in kerberos. In other words the > attribute represents the most basic form of a policy for enctypes. That sounds reasonable to me, but I would like some clarifications. This is not limited to the selection of keys for ticket issuance? Does it also include things like the behavior of any KDC administration service in generating new long-term keys? Are policy objects, etc. allowed to override it? > If you want something more complex such as allow/deny semantics or > such things then you define a policy object (which the text already > sais basically). > > Apart from the we propose adding text to the KeySet object saying > that in addition to the policy attribute the presence of a key with > a certain enctype in a keyset implies that the server supports that > enctype for the given principal. This is consistent with the behavior of existing implementations, though I can see scenarios where you might want to have only one key for a service yet allow the KDC to issue session keys of several possible enctypes for that service. I suppose that sort of policy is implementable by using the principalAllowedEnctype attribute to augment the set of allowable session key enctypes for that service principal. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 22:16:24 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2320928C2AD for ; Tue, 10 Nov 2009 22:16:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.003 X-Spam-Level: X-Spam-Status: No, score=-6.003 tagged_above=-999 required=5 tests=[AWL=0.596, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S9yBntHZ4SrJ for ; Tue, 10 Nov 2009 22:16:14 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 3B76C28C2BC for ; Tue, 10 Nov 2009 22:16:14 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 9C67A82; Wed, 11 Nov 2009 00:16:41 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 490BC31; Wed, 11 Nov 2009 00:16:41 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 13C6480E32; Wed, 11 Nov 2009 00:16:41 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id C560080E31 for ; Wed, 11 Nov 2009 00:16:38 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id B7EF118; Wed, 11 Nov 2009 00:16:38 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id B31BC31 for ; Wed, 11 Nov 2009 00:16:38 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id ADCFA18 for ; Wed, 11 Nov 2009 00:16:38 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 6B51F7CC059; Wed, 11 Nov 2009 00:16:38 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 29477-07; Wed, 11 Nov 2009 00:16:38 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 4B8EF7CC054 for ; Wed, 11 Nov 2009 00:16:38 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAPbk+UrBCvxC/2dsb2JhbADdJYQ8BIFriic X-IronPort-AV: E=Sophos;i="4.44,721,1249275600"; d="scan'208";a="33398609" Received: from backup-server.nordu.net ([193.10.252.66]) by mailgateway.anl.gov with ESMTP; 11 Nov 2009 00:16:37 -0600 Received: from [133.93.19.61] (host-19-61.meeting.ietf.org [133.93.19.61]) (authenticated bits=0) by backup-server.nordu.net (8.14.3/8.14.3) with ESMTP id nAB6GU12011860 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 11 Nov 2009 07:16:35 +0100 (CET) Message-ID: <4AFA56BF.2040600@mnt.se> Date: Wed, 11 Nov 2009 07:16:31 +0100 From: Leif Johansson User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: Tom Yu References: <4AF8FEF7.6020408@mnt.se> In-Reply-To: X-Enigmail-Version: 0.95.7 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: "ietf-krb-wg@anl.gov" Subject: Re: [Ietf-krb-wg] enctypes take 2 - consensus call X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tom Yu wrote: > Leif Johansson writes: > >> I talked this over with Sam yesterday and our suggestion is that we >> keep the attribute as it is and make its semantics more explicit by >> stating that it is used for explicitly limiting to the listed enctypes >> in _all_ cases where keys are used in kerberos. In other words the >> attribute represents the most basic form of a policy for enctypes. > > That sounds reasonable to me, but I would like some clarifications. > This is not limited to the selection of keys for ticket issuance? > Does it also include things like the behavior of any KDC > administration service in generating new long-term keys? Are policy > objects, etc. allowed to override it? The semantics would be that the attribute _if present_ limits *all* uses of enctypes for the principal. If you don't like the expressive power of this you do an extension of the info model or a policy object. > >> If you want something more complex such as allow/deny semantics or >> such things then you define a policy object (which the text already >> sais basically). >> >> Apart from the we propose adding text to the KeySet object saying >> that in addition to the policy attribute the presence of a key with >> a certain enctype in a keyset implies that the server supports that >> enctype for the given principal. > > This is consistent with the behavior of existing implementations, > though I can see scenarios where you might want to have only one key > for a service yet allow the KDC to issue session keys of several > possible enctypes for that service. I suppose that sort of policy is > implementable by using the principalAllowedEnctype attribute to > augment the set of allowable session key enctypes for that service > principal. Yes. As I said we're trying to find the 80/20 sweet spot for policy here (or maybe 90/10). Cheers Leif -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkr6VrwACgkQ8Jx8FtbMZneHbACdFYWh03IAfifs6tpaWc7Rh/h9 ANoAn12PNHkxaKK+DQ+uCaogCxlCCXib =ENlD -----END PGP SIGNATURE----- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 10 22:42:41 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B8DB28C2AE for ; Tue, 10 Nov 2009 22:42:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1c+aHopRclxl for ; Tue, 10 Nov 2009 22:42:40 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 65EE43A67F7 for ; Tue, 10 Nov 2009 22:42:37 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 3702A18; Wed, 11 Nov 2009 00:43:05 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 6C87556; Wed, 11 Nov 2009 00:43:04 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 4558580E32; Wed, 11 Nov 2009 00:43:04 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id E74F580E31 for ; Wed, 11 Nov 2009 00:43:02 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id D6FC418; Wed, 11 Nov 2009 00:43:02 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id D25DF31 for ; Wed, 11 Nov 2009 00:43:02 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id CB9C018 for ; Wed, 11 Nov 2009 00:43:02 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id ABE477CC056; Wed, 11 Nov 2009 00:43:02 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31012-06; Wed, 11 Nov 2009 00:43:02 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 84FB97CC054 for ; Wed, 11 Nov 2009 00:43:02 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Aq0EADrs+UpFGcQc/2dsb2JhbACBTcwmhkmIToQ8BIwS X-IronPort-AV: E=Sophos;i="4.44,721,1249275600"; d="scan'208";a="33399012" Received: from permutation-city.suchdamage.org (HELO mail.suchdamage.org) ([69.25.196.28]) by mailgateway.anl.gov with ESMTP; 11 Nov 2009 00:42:53 -0600 Received: from carter-zimmerman.suchdamage.org (host-17-186.meeting.ietf.org [133.93.17.186]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id 66F24201C9; Wed, 11 Nov 2009 01:42:53 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 97D43445C; Wed, 11 Nov 2009 01:42:51 -0500 (EST) To: Tom Yu References: <4AE75E65.3040105@symas.com> <20091028183425.GU1105@Sun.COM> <20091028204105.GA1105@Sun.COM> <1256767534.2808.196.camel@willson> <20091028221404.GO1105@Sun.COM> <1256770614.2808.199.camel@willson> <4AE8CE49.1070407@symas.com> <20091029160200.GP1105@Sun.COM> <4AFA41D0.7020703@mnt.se> From: Sam Hartman Date: Wed, 11 Nov 2009 01:42:51 -0500 In-Reply-To: (Tom Yu's message of "Wed\, 11 Nov 2009 00\:56\:19 -0500") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: Sam Hartman , "ietf-krb-wg@anl.gov" , Howard Chu , "jhutz@cmu.edu" Subject: Re: [Ietf-krb-wg] Supported enctypes needs its own thread (Re: Comments on informational model) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov >>>>> "Tom" == Tom Yu writes: Tom> I would like to see clarification of how we draw the line Tom> between what should be an attribute and what should be a Tom> policy object. I think that some aspects of controlling key Tom> selection, particularly session key selection, during ticket Tom> issuance are basic enough to not be counted as policy Tom> objects. Can you give examples here? The only thing I can think of that falls into this category is the set of enctypes the KDC assumes the server supports. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Wed Nov 11 01:57:23 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B0A4328C2CD for ; Wed, 11 Nov 2009 01:57:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -29.536 X-Spam-Level: X-Spam-Status: No, score=-29.536 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, HTML_IMAGE_ONLY_24=1.552, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_SBL=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F5EMMTKGp0XO for ; Wed, 11 Nov 2009 01:57:22 -0800 (PST) Received: from 89-201-171-123.dsl.optinet.hr (89-201-171-118.dsl.optinet.hr [89.201.171.118]) by core3.amsl.com (Postfix) with ESMTP id 98B6F28C171 for ; Wed, 11 Nov 2009 01:57:20 -0800 (PST) From: VIAGRA (c) Official Retailer To: krb-wg-archive@lists.ietf.org Subject: FYA: krb-wg-archive@lists.ietf.org 80% Cut Off on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091111095720.98B6F28C171@core3.amsl.com> Date: Wed, 11 Nov 2009 01:57:20 -0800 (PST) Newsletter
Click here to view message online

krb-wg-archive, to make this picture visible, click here!

Thanks for joining our mailing list, krb-wg-archive@lists.ietf.org
REMOVE me | Add me | Manage my settings | Contact Customer Service

Copyright 2009 Yrugu Media, Inc. All rights reserved.


Terms of service     Privacy policy

From krb-wg-archive@lists.ietf.org Wed Nov 11 15:05:38 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0F0F03A68FC for ; Wed, 11 Nov 2009 15:05:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -41.232 X-Spam-Level: X-Spam-Status: No, score=-41.232 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_24=1.552, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, SARE_FROM_DRUGS=1.666, SARE_RECV_VIRTUACOMBR=1.193, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XBsngNgyoyDW for ; Wed, 11 Nov 2009 15:05:31 -0800 (PST) Received: from c9539b37.virtua.com.br (c9539b37.virtua.com.br [201.83.155.55]) by core3.amsl.com (Postfix) with ESMTP id A7D343A6B52 for ; Wed, 11 Nov 2009 15:05:30 -0800 (PST) From: VIAGRA (c) Official Retailer To: krb-wg-archive@lists.ietf.org Subject: FYA: krb-wg-archive@lists.ietf.org 80% Cut Off on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091111230530.A7D343A6B52@core3.amsl.com> Date: Wed, 11 Nov 2009 15:05:30 -0800 (PST) Newsletter
Click here to view message online

krb-wg-archive, to make this picture visible, click here!

Thanks for joining our mailing list, krb-wg-archive@lists.ietf.org
REMOVE me | Add me | Manage my settings | Contact Customer Service

Copyright 2009 Jvu Media, Inc. All rights reserved.


Terms of service     Privacy policy

From krb-wg-archive@lists.ietf.org Wed Nov 11 16:28:30 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 713493A6B8C for ; Wed, 11 Nov 2009 16:28:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -24.332 X-Spam-Level: X-Spam-Status: No, score=-24.332 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e-hPFFJcVEna for ; Wed, 11 Nov 2009 16:28:24 -0800 (PST) Received: from 201-213-246-200.net.prima.net.ar (201-213-246-200.net.prima.net.ar [201.213.246.200]) by core3.amsl.com (Postfix) with ESMTP id CA56E3A67D1 for ; Wed, 11 Nov 2009 16:28:22 -0800 (PST) From: VIAGRA General Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091112002822.CA56E3A67D1@core3.amsl.com> Date: Wed, 11 Nov 2009 16:28:22 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 5, Issue 45 | November 11, 2009

Poor quality of picture or empty place here? Click!
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Bee ©1998-2009, All rights reserved.
From ietf-krb-wg-bounces@lists.anl.gov Wed Nov 11 18:24:36 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 387533A6828 for ; Wed, 11 Nov 2009 18:24:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.582 X-Spam-Level: X-Spam-Status: No, score=-6.582 tagged_above=-999 required=5 tests=[AWL=0.017, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m2H+GRIhV30e for ; Wed, 11 Nov 2009 18:24:35 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 3E18A3A67F2 for ; Wed, 11 Nov 2009 18:24:35 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id CD1D840; Wed, 11 Nov 2009 20:25:03 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 731B938; Wed, 11 Nov 2009 20:24:58 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 3517180E33; Wed, 11 Nov 2009 20:24:58 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 7874580E30 for ; Wed, 11 Nov 2009 20:24:57 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 6A8A437; Wed, 11 Nov 2009 20:24:57 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 65A3438 for ; Wed, 11 Nov 2009 20:24:57 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 5FD7B37 for ; Wed, 11 Nov 2009 20:24:57 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 4868E7CC05C; Wed, 11 Nov 2009 20:24:57 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 01388-09; Wed, 11 Nov 2009 20:24:57 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 277567CC056 for ; Wed, 11 Nov 2009 20:24:57 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Al0AAMsA+0qAlYttkWdsb2JhbACcFQEBAQEJCwoHEwXANoQ8BA X-IronPort-AV: E=Sophos;i="4.44,726,1249275600"; d="scan'208";a="33448567" Received: from smtp.jpl.nasa.gov (HELO mail.jpl.nasa.gov) ([128.149.139.109]) by mailgateway.anl.gov with ESMTP; 11 Nov 2009 20:24:56 -0600 Received: from mprox1.jpl.nasa.gov (mprox1.jpl.nasa.gov [137.78.160.140]) by smtp.jpl.nasa.gov (Switch-3.4.1/Switch-3.4.1) with ESMTP id nAC2OtES020059; Wed, 11 Nov 2009 18:24:55 -0800 Received: from laphotz.jpl.nasa.gov (laphotz.jpl.nasa.gov [128.149.133.44]) by mprox1.jpl.nasa.gov (Switch-3.2.6/Switch-3.2.6) with ESMTP id nAC2OqVD031027 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Wed, 11 Nov 2009 18:24:53 -0800 Message-Id: From: "Henry B. Hotz" To: Leif Johansson In-Reply-To: <4AFA56BF.2040600@mnt.se> Mime-Version: 1.0 (Apple Message framework v936) Date: Wed, 11 Nov 2009 18:24:52 -0800 References: <4AF8FEF7.6020408@mnt.se> <4AFA56BF.2040600@mnt.se> X-Mailer: Apple Mail (2.936) X-Source-IP: laphotz.jpl.nasa.gov [128.149.133.44] X-Source-Sender: hotz@jpl.nasa.gov X-AUTH: Authorized X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: "ietf-krb-wg@anl.gov" , Tom Yu Subject: Re: [Ietf-krb-wg] enctypes take 2 - consensus call X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov On Nov 10, 2009, at 10:16 PM, Leif Johansson wrote: > Tom Yu wrote: >> Leif Johansson writes: >> >>> I talked this over with Sam yesterday and our suggestion is that we >>> keep the attribute as it is and make its semantics more explicit by >>> stating that it is used for explicitly limiting to the listed >>> enctypes >>> in _all_ cases where keys are used in kerberos. In other words the >>> attribute represents the most basic form of a policy for enctypes. >> >> That sounds reasonable to me, but I would like some clarifications. >> This is not limited to the selection of keys for ticket issuance? >> Does it also include things like the behavior of any KDC >> administration service in generating new long-term keys? Are policy >> objects, etc. allowed to override it? > > The semantics would be that the attribute _if present_ limits *all* > uses of enctypes for the principal. If you don't like the expressive > power of this you do an extension of the info model or a policy > object. This would allow you to specify a weak set of keys for a specific, obsolescent service without affecting anything else? Above is just a nit. I think I'm in favor. ------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Wed Nov 11 19:23:35 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACFD73A6870 for ; Wed, 11 Nov 2009 19:23:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.913 X-Spam-Level: X-Spam-Status: No, score=-5.913 tagged_above=-999 required=5 tests=[AWL=0.686, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TBBNhyoS3lGp for ; Wed, 11 Nov 2009 19:23:34 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id AEA843A6811 for ; Wed, 11 Nov 2009 19:23:34 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 6DFBA4F; Wed, 11 Nov 2009 21:24:03 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 154F038; Wed, 11 Nov 2009 21:24:02 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id DB92580E33; Wed, 11 Nov 2009 21:24:02 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id BD3B180E30 for ; Wed, 11 Nov 2009 21:24:00 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id B3C9B37; Wed, 11 Nov 2009 21:24:00 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id AEFC238 for ; Wed, 11 Nov 2009 21:24:00 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id A9A0537 for ; Wed, 11 Nov 2009 21:24:00 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 925DE7CC05C; Wed, 11 Nov 2009 21:24:00 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06080-09; Wed, 11 Nov 2009 21:24:00 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 755F47CC056 for ; Wed, 11 Nov 2009 21:24:00 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkoFANoO+0rBCvxC/2dsb2JhbACdFL9VhDwEgWs X-IronPort-AV: E=Sophos;i="4.44,726,1249275600"; d="scan'208";a="33449701" Received: from backup-server.nordu.net ([193.10.252.66]) by mailgateway.anl.gov with ESMTP; 11 Nov 2009 21:23:59 -0600 Received: from [133.93.19.61] (host-19-61.meeting.ietf.org [133.93.19.61]) (authenticated bits=0) by backup-server.nordu.net (8.14.3/8.14.3) with ESMTP id nAC3NoxO003880 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 12 Nov 2009 04:23:56 +0100 (CET) Message-ID: <4AFB7FC9.1000201@mnt.se> Date: Thu, 12 Nov 2009 04:23:53 +0100 From: Leif Johansson User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: "Henry B. Hotz" References: <4AF8FEF7.6020408@mnt.se> <4AFA56BF.2040600@mnt.se> In-Reply-To: X-Enigmail-Version: 0.95.7 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: "ietf-krb-wg@anl.gov" , Tom Yu Subject: Re: [Ietf-krb-wg] enctypes take 2 - consensus call X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > > This would allow you to specify a weak set of keys for a specific, > obsolescent service without affecting anything else? Yes assuming the service had a separate principal. Cheers Leif -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkr7f8UACgkQ8Jx8FtbMZndn+gCgjFiLub5YSWDL/PFiL7Ar2585 K6sAoIRq45/iDnRjMCxfw6gxieoxQ0QZ =Mxqr -----END PGP SIGNATURE----- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Wed Nov 11 21:26:56 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 072AC28C16C for ; Wed, 11 Nov 2009 21:26:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.739 X-Spam-Level: X-Spam-Status: No, score=-5.739 tagged_above=-999 required=5 tests=[AWL=0.860, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qyp61US+Kc18 for ; Wed, 11 Nov 2009 21:26:55 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 2263328C0FC for ; Wed, 11 Nov 2009 21:26:55 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id F191A4E; Wed, 11 Nov 2009 23:27:23 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id E91E438; Wed, 11 Nov 2009 23:27:19 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id C5A8E80E33; Wed, 11 Nov 2009 23:27:19 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id B2D1680E30 for ; Wed, 11 Nov 2009 23:27:18 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id AD7B737; Wed, 11 Nov 2009 23:27:18 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id A8BD638 for ; Wed, 11 Nov 2009 23:27:18 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 8B57B37 for ; Wed, 11 Nov 2009 23:27:18 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 762467CC05C; Wed, 11 Nov 2009 23:27:18 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16078-04; Wed, 11 Nov 2009 23:27:18 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 586D77CC056 for ; Wed, 11 Nov 2009 23:27:18 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhkBAPoq+0qAAtnFmWdsb2JhbACcFAEBAQEBCAsKBxOwfoYTiE6CRYF3BIFr X-IronPort-AV: E=Sophos;i="4.44,726,1249275600"; d="scan'208";a="33452414" Received: from smtp02.srv.cs.cmu.edu ([128.2.217.197]) by mailgateway.anl.gov with ESMTP; 11 Nov 2009 23:27:18 -0600 Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp02.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAC5RENT018163 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 12 Nov 2009 00:27:16 -0500 (EST) Date: Thu, 12 Nov 2009 00:27:14 -0500 From: Jeffrey Hutzelman To: saag@ietf.org, ietf-krb-wg@anl.gov Message-ID: X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.197 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: jhutz@cmu.edu Subject: [Ietf-krb-wg] KRB-WG session summary for IETF76 X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov DECISIONS (to be validated): ACTION ITEMS: - jhutz: send starttls to IESG - jimsch: validate ASN.1 module in preauth - tlyu: re-verify registry data in preauth - jhutz: send preauth to IESG - hartmans, lha: examine option for simpler anonymous PKINIT - leifj: revise data model SESSION SUMMARY: * Reviewed recent changes in document status: - STARTTLS is mostly ready to go to the IESG. The EKU/SAN issue is not fully resolved, but we've agreed to send the document as-is, with the issue called out in the PROTO writeup. Sam and/or Nico may re-raise the issue in IETF last call, where hopefully it will get some input from the PKIX community. - The preauth framework document is done and ready to go to the IESG. Before it can be sent, we need confirmation that the padata registry is correct (tlyu) and that the ASN.1 module compiles (jimsch). The chairs asked whether anyone was planning on implementing or had already done so, and got multiple positive responses. - Sam Hartman asked about the status of the DHCPv6 option draft. The author of that document, Shoichi Sakane indicated he hasn't had time to work on it recently due to dealing with comments on the cross-realm problem statement draft, but will get to it shortly after IETF. - Sam also asked about the status of anonymous, particularly with respect to Love's proposal for a simpler way to insure that, in an anonymous PKINIT transaction, both the client and KDC have contributed to the TGS session key. * Discussed two documents in last call: - The cross-realm problem statement document received comments during IETF last call which resulted in substantial revisions. A new WGLC has been started and will run until the end of November. Shoichi Sakane indicated he has some minor edits to -05 which he will post to the list during the last call. All participants are encouraged to review and comment on the new version before the last call ends. - The KDC data model document has recently concluded its third WGLC, and several comments were raised. Discussion is still ongoing on several of these; a new document version is expected shortly after discussion dies down. * Sam Hartman described a proposal for an extension to provide for protected negotiation of FAST by adding a typed-hole for protected data in the AS-REP. This technique was first used by Microsoft in Windows 2000 and seems to work. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Wed Nov 11 21:38:17 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5D4F43A6992 for ; Wed, 11 Nov 2009 21:38:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.769 X-Spam-Level: X-Spam-Status: No, score=-5.769 tagged_above=-999 required=5 tests=[AWL=0.830, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6wRbjvF2mCnq for ; Wed, 11 Nov 2009 21:38:16 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 7595B3A6947 for ; Wed, 11 Nov 2009 21:38:16 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 08FCB4A; Wed, 11 Nov 2009 23:38:45 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id D067442; Wed, 11 Nov 2009 23:38:43 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id A403980E33; Wed, 11 Nov 2009 23:38:43 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 274FF80E30 for ; Wed, 11 Nov 2009 23:38:42 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 1865938; Wed, 11 Nov 2009 23:38:42 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 1362942 for ; Wed, 11 Nov 2009 23:38:42 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 0E35438 for ; Wed, 11 Nov 2009 23:38:42 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id EA2D17CC05C; Wed, 11 Nov 2009 23:38:41 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16786-06; Wed, 11 Nov 2009 23:38:41 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id C91EE7CC056 for ; Wed, 11 Nov 2009 23:38:41 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhkBAH8u+0qAAtnGmWdsb2JhbACcFAEBAQEBCAsKBxOwboYSiE6CRYF3BIFr X-IronPort-AV: E=Sophos;i="4.44,726,1249275600"; d="scan'208";a="33452662" Received: from smtp03.srv.cs.cmu.edu ([128.2.217.198]) by mailgateway.anl.gov with ESMTP; 11 Nov 2009 23:38:41 -0600 Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp03.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nAC5ceaj019694 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 12 Nov 2009 00:38:40 -0500 (EST) Date: Thu, 12 Nov 2009 00:38:40 -0500 From: Jeffrey Hutzelman To: ietf-krb-wg@anl.gov Message-ID: <6BB24E7F55787AA81905050C@atlantis.pc.cs.cmu.edu> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.198 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: jhutz@cmu.edu Subject: [Ietf-krb-wg] [saag] Kerberos Working Group Summary - IETF 76 (fwd) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov Thanks to Shawn Emery for acting as session chair, and for preparing the summary below, which complements the one I just posted. -- Jeff ------------ Forwarded Message ------------ Date: Wednesday, November 11, 2009 08:48:14 PM -0700 From: "Shawn M. Emery" To: saag@ietf.org Cc: Subject: [saag] Kerberos Working Group Summary - IETF 76 The kerberos-wg met Wednesday, 11/11/09, during the first afternoon session. Co-chairs: Larry Zhu and Jeffrey Hutzelman (acting, Shawn Emery) The goals of the meeting were to discuss the FAST negotiation issue and resolve encryption type semantics in the KDC data model. Sam Hartman presented issues with FAST negotiation. Need a way to determine if the KDC supports FAST and a way to negotiate the armor ticket securely. Solution entails supplying integrity check in the AS-REP on the server side, providing a new PA-type by the client, and new negotiation to thwart down grade attack. WG members agreed to the solution presented. Encryption type attribute in the data model needs better semantics. Suggestions include separting attribute and policy. Some members would like to include positive/negative support for these. Document Status ---------------------- draft-ietf-krb-wg-preauth-framework 1 asn.1 issue (uint32 undefined) Tom Yu will verify type registry is accurate before sending off for IANA review no implementors draft-josefsson-kerberos5-starttls WGLC finished draft-ietf-krb-wg-cross-problem-statement IETF Last Call/IESG Review Shawn. -- _______________________________________________ saag mailing list saag@ietf.org https://www.ietf.org/mailman/listinfo/saag ---------- End Forwarded Message ---------- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Thu Nov 12 05:37:13 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EB9873A6BC9 for ; Thu, 12 Nov 2009 05:37:13 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Official Resel[...] X-Spam-Flag: NO X-Spam-Score: -29.069 X-Spam-Level: X-Spam-Status: No, score=-29.069 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DSL=1.129, HOST_EQ_STATICB=1.372, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, SARE_FROM_DRUGS=1.666, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZjJbMqcewpOz for ; Thu, 12 Nov 2009 05:37:12 -0800 (PST) Received: from static-66-173-129-195.dsl.cavtel.net (static-66-173-129-195.dsl.cavtel.net [66.173.129.195]) by core3.amsl.com (Postfix) with ESMTP id 51D5B3A6B9F for ; Thu, 12 Nov 2009 05:37:12 -0800 (PST) From: VIAGRA ® Official Reseller To: krb-wg-archive@lists.ietf.org Subject: Subscriber krb-wg-archive@lists.ietf.org: Receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091112133712.51D5B3A6B9F@core3.amsl.com> Date: Thu, 12 Nov 2009 05:37:12 -0800 (PST) Official Store®

If you have images disabled or have trouble viewing this message, please click here.
 
 
krb-wg-archive, unblock this image by hitting this link
 

SHOP ONLINE | STORE LOCATOR | CUSTOMER SERVICE | GIFT CERTIFICATES

You received this e-mail because you are an e-mail subscriber. To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

® Hei Ice & Co., All rights Reserved

From krb-wg-archive@lists.ietf.org Thu Nov 12 09:29:09 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8F6213A68C1 for ; Thu, 12 Nov 2009 09:29:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -29.575 X-Spam-Level: X-Spam-Status: No, score=-29.575 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HELO_EQ_DSL=1.129, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YctLnA7-Mk43 for ; Thu, 12 Nov 2009 09:29:07 -0800 (PST) Received: from adcm31.neoplus.adsl.tpnet.pl (adcm31.neoplus.adsl.tpnet.pl [79.184.38.31]) by core3.amsl.com (Postfix) with ESMTP id 377763A6AC2 for ; Thu, 12 Nov 2009 09:29:05 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091112172906.377763A6AC2@core3.amsl.com> Date: Thu, 12 Nov 2009 09:29:05 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 8, Issue 55 | November 12, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Inyz ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Thu Nov 12 09:48:58 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5E4D83A68DF for ; Thu, 12 Nov 2009 09:48:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -29.345 X-Spam-Level: X-Spam-Status: No, score=-29.345 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, NUMERIC_HTTP_ADDR=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dcNBC1Nqx48k for ; Thu, 12 Nov 2009 09:48:57 -0800 (PST) Received: from 200-101-112-17.cbace702.e.brasiltelecom.net.br (200-101-112-17.cbace702.e.brasiltelecom.net.br [200.101.112.17]) by core3.amsl.com (Postfix) with ESMTP id 898333A6835 for ; Thu, 12 Nov 2009 09:48:55 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091112174855.898333A6835@core3.amsl.com> Date: Thu, 12 Nov 2009 09:48:55 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 AULYAFU Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Thu Nov 12 10:10:38 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B505F3A68BA for ; Thu, 12 Nov 2009 10:10:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -64.637 X-Spam-Level: X-Spam-Status: No, score=-64.637 tagged_above=-999 required=5 tests=[BAYES_99=3.5, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, TVD_SPACE_RATIO=2.219, URIBL_SBL=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qykbsBXgDAGu for ; Thu, 12 Nov 2009 10:10:37 -0800 (PST) Received: from 201009152186.user.veloxzone.com.br (201009152186.user.veloxzone.com.br [201.9.152.186]) by core3.amsl.com (Postfix) with ESMTP id E83D03A686E for ; Thu, 12 Nov 2009 10:10:36 -0800 (PST) From: NEWS To: "krb-wg-archive" Subject: Alert krb-wg-archive Content-Type: text/plain; charset="iso-8859-1" Mime-Version: 1.0 Message-Id: <20091112181036.E83D03A686E@core3.amsl.com> Date: Thu, 12 Nov 2009 10:10:36 -0800 (PST) Not value your clients? http://aviamusic.by.ru/important.html From krb-wg-archive@lists.ietf.org Fri Nov 13 03:18:37 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9E95E3A6A36 for ; Fri, 13 Nov 2009 03:18:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -50.32 X-Spam-Level: X-Spam-Status: No, score=-50.32 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HELO_EQ_AT=0.424, HOST_EQ_AT=0.745, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, SARE_FROM_DRUGS=1.666, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bMpWcZIHgYtm for ; Fri, 13 Nov 2009 03:18:36 -0800 (PST) Received: from chello084114224016.15.vie.surfer.at (chello084114224016.15.vie.surfer.at [84.114.224.16]) by core3.amsl.com (Postfix) with ESMTP id AAC9C3A6873 for ; Fri, 13 Nov 2009 03:18:31 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091113111831.AAC9C3A6873@core3.amsl.com> Date: Fri, 13 Nov 2009 03:18:31 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 ICU Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Fri Nov 13 04:25:15 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E56353A69F7 for ; Fri, 13 Nov 2009 04:25:15 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Fri, 13 Nov 2009 04:25:14 -0800 (PST) Received: from host120.ip-p13.gni.pl (host120.ip-p13.gni.pl [213.227.69.120]) by core3.amsl.com (Postfix) with ESMTP id A704E3A680D for ; Fri, 13 Nov 2009 04:25:13 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091113122513.A704E3A680D@core3.amsl.com> Date: Fri, 13 Nov 2009 04:25:13 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Incorrect image displaying? Press this link

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Fet. All rights reserved.
From krb-wg-archive@lists.ietf.org Fri Nov 13 06:25:34 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 635043A688D for ; Fri, 13 Nov 2009 06:25:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -40.635 X-Spam-Level: X-Spam-Status: No, score=-40.635 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_CHARTER=2.175, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HOST_EQ_CHARTER=1.295, HOST_EQ_DHCP=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_SBL=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6PoyLj1R2FXk for ; Fri, 13 Nov 2009 06:25:33 -0800 (PST) Received: from 68-189-10-38.dhcp.scrm.ca.charter.com (68-189-10-38.dhcp.scrm.ca.charter.com [68.189.10.38]) by core3.amsl.com (Postfix) with ESMTP id CB6BB3A689E for ; Fri, 13 Nov 2009 06:25:32 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091113142532.CB6BB3A689E@core3.amsl.com> Date: Fri, 13 Nov 2009 06:25:32 -0800 (PST) News
Trouble viewing these images? See the online version of this e-mail.

Dear krb-wg-archive@lists.ietf.org to open this image, click here
 

© 1999-2009 Ytqdqqd, Inc.
This e-mail was sent to krb-wg-archive@lists.ietf.org.

Click here to unsubscribe
From krb-wg-archive@lists.ietf.org Fri Nov 13 07:17:27 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 95FB328C0F6 for ; Fri, 13 Nov 2009 07:17:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -29.739 X-Spam-Level: X-Spam-Status: No, score=-29.739 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR=2.426, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Nfj1lk59iFu for ; Fri, 13 Nov 2009 07:17:25 -0800 (PST) Received: from host86-163-208-84.range86-163.btcentralplus.com (host86-163-208-84.range86-163.btcentralplus.com [86.163.208.84]) by core3.amsl.com (Postfix) with ESMTP id B75753A6B05 for ; Fri, 13 Nov 2009 07:17:24 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091113151724.B75753A6B05@core3.amsl.com> Date: Fri, 13 Nov 2009 07:17:24 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 15, Issue 30 | November 12, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Xalaoc ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Sat Nov 14 03:00:22 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E29843A6954 for ; Sat, 14 Nov 2009 03:00:22 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Sat, 14 Nov 2009 03:00:21 -0800 (PST) Received: from mm-235-188-84-93.dynamic.pppoe.mgts.by (mm-235-188-84-93.dynamic.pppoe.mgts.by [93.84.188.235]) by core3.amsl.com (Postfix) with ESMTP id 01B323A67C1 for ; Sat, 14 Nov 2009 03:00:20 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091114110021.01B323A67C1@core3.amsl.com> Date: Sat, 14 Nov 2009 03:00:20 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Incorrect image displaying? Press this link

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Fufqquvq. All rights reserved.
From krb-wg-archive@lists.ietf.org Sat Nov 14 13:35:48 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8981B3A67D8 for ; Sat, 14 Nov 2009 13:35:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -53.948 X-Spam-Level: X-Spam-Status: No, score=-53.948 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HELO_EQ_DSL=1.129, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, NUMERIC_HTTP_ADDR=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, SARE_FROM_DRUGS=1.666, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tx9cTod2yoY0 for ; Sat, 14 Nov 2009 13:35:46 -0800 (PST) Received: from aemn50.neoplus.adsl.tpnet.pl (aemn50.neoplus.adsl.tpnet.pl [79.191.65.50]) by core3.amsl.com (Postfix) with ESMTP id 111203A6403 for ; Sat, 14 Nov 2009 13:35:42 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091114213543.111203A6403@core3.amsl.com> Date: Sat, 14 Nov 2009 13:35:42 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 12, Issue 24 | November 12, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Yugasix ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Sat Nov 14 16:31:47 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 981B73A68AA for ; Sat, 14 Nov 2009 16:31:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -42.366 X-Spam-Level: X-Spam-Status: No, score=-42.366 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02kn1Vxdu9tv for ; Sat, 14 Nov 2009 16:31:46 -0800 (PST) Received: from 157sdl30m3.codetel.net.do (249sdl30m3.codetel.net.do [66.98.36.249]) by core3.amsl.com (Postfix) with ESMTP id D31AB3A68B7 for ; Sat, 14 Nov 2009 16:31:45 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091115003145.D31AB3A68B7@core3.amsl.com> Date: Sat, 14 Nov 2009 16:31:45 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 IAM Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Sat Nov 14 20:55:17 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A9D9A3A67AC for ; Sat, 14 Nov 2009 20:55:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.479 X-Spam-Level: X-Spam-Status: No, score=-3.479 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rqe5IEWXk8M4 for ; Sat, 14 Nov 2009 20:55:16 -0800 (PST) Received: from c-98-252-134-104.hsd1.ga.comcast.net (c-98-252-134-104.hsd1.ga.comcast.net [98.252.134.104]) by core3.amsl.com (Postfix) with ESMTP id 22DA93A6784 for ; Sat, 14 Nov 2009 20:55:16 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091115045516.22DA93A6784@core3.amsl.com> Date: Sat, 14 Nov 2009 20:55:16 -0800 (PST) News
Trouble viewing these images? See the online version of this e-mail.

Dear krb-wg-archive@lists.ietf.org to open this image, click here
 

© 1999-2009 Tyvibetew, Inc.
This e-mail was sent to krb-wg-archive@lists.ietf.org.

Click here to unsubscribe
From krb-wg-archive@lists.ietf.org Sun Nov 15 03:00:04 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 643793A6908 for ; Sun, 15 Nov 2009 03:00:04 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Sun, 15 Nov 2009 03:00:03 -0800 (PST) Received: from pool-173-58-213-172.lsanca.fios.verizon.net (pool-173-60-134-221.lsanca.fios.verizon.net [173.60.134.221]) by core3.amsl.com (Postfix) with ESMTP id 13A5B3A68E9 for ; Sun, 15 Nov 2009 03:00:03 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091115110003.13A5B3A68E9@core3.amsl.com> Date: Sun, 15 Nov 2009 03:00:03 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Cjduky. All rights reserved.
From krb-wg-archive@lists.ietf.org Sun Nov 15 14:24:57 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 299513A6A1E for ; Sun, 15 Nov 2009 14:24:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -33.258 X-Spam-Level: X-Spam-Status: No, score=-33.258 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_EQ_DSL=1.129, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eGKSYxmDECAJ for ; Sun, 15 Nov 2009 14:24:54 -0800 (PST) Received: from bl5-96-178.dsl.telepac.pt (bl8-33-54.dsl.telepac.pt [85.241.33.54]) by core3.amsl.com (Postfix) with ESMTP id 1B6D03A6781 for ; Sun, 15 Nov 2009 14:24:50 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091115222454.1B6D03A6781@core3.amsl.com> Date: Sun, 15 Nov 2009 14:24:50 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 32, Issue 19 | November 15, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Enoc ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Mon Nov 16 03:37:17 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2500F3A6908 for ; Mon, 16 Nov 2009 03:37:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.553 X-Spam-Level: X-Spam-Status: No, score=-15.553 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SC_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mm08rmr8V32C for ; Mon, 16 Nov 2009 03:37:15 -0800 (PST) Received: from 195-226-143-236.dsl.localdial.com (195-226-143-236.dsl.localdial.com [195.226.143.236]) by core3.amsl.com (Postfix) with ESMTP id B3E6B3A67AC for ; Mon, 16 Nov 2009 03:37:14 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091116113714.B3E6B3A67AC@core3.amsl.com> Date: Mon, 16 Nov 2009 03:37:14 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 OLYKONEJI Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Mon Nov 16 03:53:03 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C8FDA3A681E for ; Mon, 16 Nov 2009 03:53:03 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Mon, 16 Nov 2009 03:53:02 -0800 (PST) Received: from 89-212-170-110.static.t-2.net (89-212-170-110.static.t-2.net [89.212.170.110]) by core3.amsl.com (Postfix) with ESMTP id 528473A6A85 for ; Mon, 16 Nov 2009 03:53:01 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091116115301.528473A6A85@core3.amsl.com> Date: Mon, 16 Nov 2009 03:53:01 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Apemuyeh. All rights reserved.
From krb-wg-archive@lists.ietf.org Mon Nov 16 06:25:20 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5EB733A6ABB for ; Mon, 16 Nov 2009 06:25:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -54.89 X-Spam-Level: X-Spam-Status: No, score=-54.89 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sw46t1mmZHNz for ; Mon, 16 Nov 2009 06:25:19 -0800 (PST) Received: from 173-254-222-201.adsl.terra.cl (173-254-222-201.adsl.terra.cl [201.222.254.173]) by core3.amsl.com (Postfix) with ESMTP id 675953A6978 for ; Mon, 16 Nov 2009 06:25:18 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091116142518.675953A6978@core3.amsl.com> Date: Mon, 16 Nov 2009 06:25:18 -0800 (PST) News
Trouble viewing these images? See the online version of this e-mail.

Dear krb-wg-archive@lists.ietf.org can't view this element? Press here to unlock it
 

© 1999-2009 Virjl, Inc.
This e-mail was sent to krb-wg-archive@lists.ietf.org.

Click here to unsubscribe
From krb-wg-archive@lists.ietf.org Mon Nov 16 07:04:07 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E8AC53A6981 for ; Mon, 16 Nov 2009 07:04:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -61.786 X-Spam-Level: X-Spam-Status: No, score=-61.786 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HELO_EQ_TELESP=1.245, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, NUMERIC_HTTP_ADDR=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, SARE_RECV_SPAM_DOMN02=1.666, TVD_RCVD_IP=1.931, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dJVu0XTdzQPH for ; Mon, 16 Nov 2009 07:04:05 -0800 (PST) Received: from 189-19-14-157.dsl.telesp.net.br (189-19-14-157.dsl.telesp.net.br [189.19.14.157]) by core3.amsl.com (Postfix) with ESMTP id BFDC43A67A4 for ; Mon, 16 Nov 2009 07:04:04 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091116150404.BFDC43A67A4@core3.amsl.com> Date: Mon, 16 Nov 2009 07:04:04 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 14, Issue 24 | November 15, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Ekujipynu ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Mon Nov 16 14:42:09 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A68163A68FD for ; Mon, 16 Nov 2009 14:42:09 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Mon, 16 Nov 2009 14:42:08 -0800 (PST) Received: from 201-212-128-11.cab.prima.net.ar (201-212-128-11.cab.prima.net.ar [201.212.128.11]) by core3.amsl.com (Postfix) with ESMTP id B65883A6821 for ; Mon, 16 Nov 2009 14:42:07 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091116224207.B65883A6821@core3.amsl.com> Date: Mon, 16 Nov 2009 14:42:07 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Oeqlqam. All rights reserved.
From krb-wg-archive@lists.ietf.org Tue Nov 17 04:59:14 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 15FCA28C0F0 for ; Tue, 17 Nov 2009 04:59:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -27.796 X-Spam-Level: X-Spam-Status: No, score=-27.796 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HELO_EQ_TELESP=1.245, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, SARE_FROM_DRUGS=1.666, SARE_RECV_SPAM_DOMN02=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1Z-TtypT-7CA for ; Tue, 17 Nov 2009 04:59:12 -0800 (PST) Received: from 200-153-222-184.dsl.telesp.net.br (smtp.crk.com.br [201.47.100.217]) by core3.amsl.com (Postfix) with ESMTP id 1C94528C10B for ; Tue, 17 Nov 2009 04:59:11 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091117125912.1C94528C10B@core3.amsl.com> Date: Tue, 17 Nov 2009 04:59:11 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 CAP Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Tue Nov 17 09:01:15 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4F8AD3A69A6 for ; Tue, 17 Nov 2009 09:01:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -60.402 X-Spam-Level: X-Spam-Status: No, score=-60.402 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, SARE_FROM_DRUGS=1.666, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wMySruAifD2t for ; Tue, 17 Nov 2009 09:01:09 -0800 (PST) Received: from popgdiviaw4.redesulempresas.com.br (popgdiviaw4.redesulempresas.com.br [189.10.207.4]) by core3.amsl.com (Postfix) with ESMTP id 6D31C3A694D for ; Tue, 17 Nov 2009 09:01:07 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091117170107.6D31C3A694D@core3.amsl.com> Date: Tue, 17 Nov 2009 09:01:07 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 IXOK Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Tue Nov 17 11:33:10 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7D9A73A6A58 for ; Tue, 17 Nov 2009 11:33:10 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Tue, 17 Nov 2009 11:33:09 -0800 (PST) Received: from pool-173-68-90-236.nycmny.fios.verizon.net (pool-173-68-90-236.nycmny.fios.verizon.net [173.68.90.236]) by core3.amsl.com (Postfix) with ESMTP id AF43B3A69CD for ; Tue, 17 Nov 2009 11:33:08 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091117193308.AF43B3A69CD@core3.amsl.com> Date: Tue, 17 Nov 2009 11:33:08 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Cydq. All rights reserved.
From krb-wg-archive@lists.ietf.org Tue Nov 17 12:12:32 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3669F3A6BE3 for ; Tue, 17 Nov 2009 12:12:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -72.192 X-Spam-Level: X-Spam-Status: No, score=-72.192 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QnmTnhmi6C9n for ; Tue, 17 Nov 2009 12:12:29 -0800 (PST) Received: from 77-45-42-140.sta.asta-net.com.pl (77-45-42-140.sta.asta-net.com.pl [77.45.42.140]) by core3.amsl.com (Postfix) with ESMTP id C4EC73A6989 for ; Tue, 17 Nov 2009 12:12:28 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091117201228.C4EC73A6989@core3.amsl.com> Date: Tue, 17 Nov 2009 12:12:28 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 6, Issue 26 | November 17, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Loxegu ©1998-2009, All rights reserved.
From ietf-krb-wg-bounces@lists.anl.gov Tue Nov 17 13:50:57 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 49D7D3A6B13 for ; Tue, 17 Nov 2009 13:50:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.132 X-Spam-Level: X-Spam-Status: No, score=-3.132 tagged_above=-999 required=5 tests=[AWL=3.467, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S0X2Bz1op11U for ; Tue, 17 Nov 2009 13:50:56 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 38A783A6894 for ; Tue, 17 Nov 2009 13:50:56 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id E9A273F; Tue, 17 Nov 2009 15:50:54 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 623B044; Tue, 17 Nov 2009 15:50:49 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 05E882CC05F; Tue, 17 Nov 2009 15:50:49 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 5372C80E30 for ; Tue, 17 Nov 2009 15:50:47 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 462F12B; Tue, 17 Nov 2009 15:50:47 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 417AA36 for ; Tue, 17 Nov 2009 15:50:47 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 3B9002B for ; Tue, 17 Nov 2009 15:50:47 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 23C9A7CC05E; Tue, 17 Nov 2009 15:50:47 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26299-01; Tue, 17 Nov 2009 15:50:47 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 090BC7CC059 for ; Tue, 17 Nov 2009 15:50:47 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAJOpAktFGcQc/2dsb2JhbADIMIZIiE+EOwQ X-IronPort-AV: E=Sophos;i="4.44,760,1249275600"; d="scan'208";a="33706601" Received: from permutation-city.suchdamage.org (HELO mail.suchdamage.org) ([69.25.196.28]) by mailgateway.anl.gov with ESMTP; 17 Nov 2009 15:50:46 -0600 Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id 0B41520245; Tue, 17 Nov 2009 16:50:44 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 7D07C445C; Tue, 17 Nov 2009 16:50:37 -0500 (EST) To: ietf-krb-wg@anl.gov From: Sam Hartman Date: Tue, 17 Nov 2009 16:50:37 -0500 Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: krbdev@mit.edu Subject: [Ietf-krb-wg] A couple of notes about the FAST negotiation proposal X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov At the working group meeting, I presented a proposal Larry made for FAST negotiation. As I've started to design an implementation of this proposal, I've run into a couple of things that don't work as well as one might hope. First, some KDCs (including MIT prior to 1.7 among others) will return KDC_ERR_PREAUTH_FAILED not KDC_ERR_PREAUTH_REQUIRED if you have a principal requiring pre-authentication and send a request that includes padata but for which all the padata types are unknown to the KDC. The work around is to try again without including the negotiation hint if you get PREAUTH_FAILED and if you otherwise would accept PREAUTH_REQUIRED. Naturally, if the ticket flag is set, you fail the request because the padata is not unknown. We should also require that KDCs implementing this extension completely ignore unknown padata. (I think the preauth framework already does this). The second issue surrounds cross-realm armor tickets. These can come up because you have a host key as an armor ticket and because a user from another realm is logging in. When Larry and I proposed the negotiation proposal, I think we assumed it would be an AS-REQ proposal. However to handle the TGS-REQ case you end up needing to figure out whether each successive KDC supports FAST. Note that here, we're talking about getting an armor ticket to be used in AS-REQ processing later, *not* the unrelated question of determining whether FAST can be used to protect a TGS request. Here's an example. alice@EXAMPLE.COM logs into a BOSTON.EXAMPLE.COM machine. Her machine has a BOSTON.EXAMPLE.COM armor ticket. It can use that to obtain a cross-realm ticket to use for FAST armor with the EXAMPLE.COM KDCS. I can see a couple of approaches: * Permit the form of negotiation I discussed last week for both AS and TGS * Use FAST to protect the negotiation. If FAST is used, you need to either: * use krbtgt/EXAMPLE.COM@EXAMPLE.COM not krbtgt/EXAMPLE.COM@BOSTON.EXAMPLE.COM as an armor ticket so you actually talk to the EXAMPLE.COM KDCs and can figure out what they support * Otherwise talk to the EXAMPLE.COM KDCs. Thoughts? _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Wed Nov 18 00:47:00 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3F8F93A68B8 for ; Wed, 18 Nov 2009 00:47:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.38 X-Spam-Level: X-Spam-Status: No, score=-3.38 tagged_above=-999 required=5 tests=[BAYES_05=-1.11, J_CHICKENPOX_34=0.6, RCVD_IN_DNSWL_MED=-4, SARE_LWOILCO=1.13] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8ynPVeMgRTuk for ; Wed, 18 Nov 2009 00:46:56 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 34FD93A691A for ; Wed, 18 Nov 2009 00:46:50 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id B09C12B; Wed, 18 Nov 2009 02:46:48 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 595AF2F; Wed, 18 Nov 2009 02:46:44 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 5B27E80E31; Wed, 18 Nov 2009 02:46:44 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 70CC880E30 for ; Wed, 18 Nov 2009 02:46:42 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 5C1701D; Wed, 18 Nov 2009 02:46:42 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 52F6D29 for ; Wed, 18 Nov 2009 02:46:42 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 4467C1D for ; Wed, 18 Nov 2009 02:46:42 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 2BCCD7CC05E; Wed, 18 Nov 2009 02:46:42 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 01021-09; Wed, 18 Nov 2009 02:46:42 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 081C67CC059 for ; Wed, 18 Nov 2009 02:46:41 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Aj4FACBDA0tuBL2G/2dsb2JhbACBTYJ5lE+qVwGROoI3BoEnVwSBb4EDihI X-IronPort-AV: E=Sophos;i="4.44,764,1249275600"; d="txt'?scan'208";a="33725076" Received: from z189134.ppp.asahi-net.or.jp (HELO mama.tanu.org) ([110.4.189.134]) by mailgateway.anl.gov with ESMTP; 18 Nov 2009 02:46:39 -0600 Received: from shoichi.tanu.org (120.145.221.202.bf.2iij.net [202.221.145.120]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mama.tanu.org (Postfix) with ESMTPSA id 59DF116AFF for ; Wed, 18 Nov 2009 17:46:38 +0900 (JST) Message-ID: <4B03B46D.4070103@tanu.org> Date: Wed, 18 Nov 2009 17:46:37 +0900 From: Shoichi Sakane User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: Kerberos-wg Content-Type: multipart/mixed; boundary="------------080204010408090509050906" X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: Re: [Ietf-krb-wg] KRB-WG session summary for IETF76 X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov This is a multi-part message in MIME format. --------------080204010408090509050906 Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit All, > * Discussed two documents in last call: > - The cross-realm problem statement document received comments during > IETF last call which resulted in substantial revisions. A new WGLC > has been started and will run until the end of November. Shoichi > Sakane indicated he has some minor edits to -05 which he will post > to the list during the last call. All participants are encouraged > to review and comment on the new version before the last call ends. I attached new version (not submitted yet) to this mail for your review. This version is included the modifications which I presented by my previous mail before. Best regards, P.S. I sent it the day before yesterday. But, I can't see it in the archive of this ML. I apologize when you receive it twice. Shoichi Sakane --------------080204010408090509050906 Content-Type: text/plain; name="draft-ietf-krb-wg-cross-problem-statement-xx.txt" Content-Transfer-Encoding: base64 Content-Disposition: inline; filename="draft-ietf-krb-wg-cross-problem-statement-xx.txt" CgoKCgoKSU5URVJORVQtRFJBRlQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgUy4gU2FrYW5lCkludGVuZGVkIFN0YXR1czogSW5mb3JtYXRpb25h bCAgICAgICAgICAgICAgICAgICAgICAgICAgIEtlbidpY2hpIEthbWFkYQpFeHBpcmVzOiBN YXkgMjAsIDIwMTAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT LiBacmVsbGkKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFlva29nYXdhIEVsZWN0cmljIENvcnAuCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNLiBJc2hpeWFtYQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRv c2hpYmEgQ29ycC4KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIE5vdmVtYmVyIDE2LCAyMDA5CgoKICAgICAgIFByb2JsZW0gc3RhdGVt ZW50IG9uIHRoZSBjcm9zcy1yZWFsbSBvcGVyYXRpb24gb2YgS2VyYmVyb3MKICAgICAgICAg ICAgZHJhZnQtaWV0Zi1rcmItd2ctY3Jvc3MtcHJvYmxlbS1zdGF0ZW1lbnQteHgudHh0CgoK CgogICAgICAgICAgICAgICAgICAgICAgICAgIFN0YXR1cyBvZiB0aGlzIE1lbW8KCiAgIFRo aXMgSW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIHRvIElFVEYgaW4gZnVsbCBjb25mb3Jt YW5jZSB3aXRoIHRoZQogICBwcm92aXNpb25zIG9mIEJDUCA3OCBhbmQgQkNQIDc5LgoKICAg SW50ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQg RW5naW5lZXJpbmcKICAgVGFzayBGb3JjZSAoSUVURiksIGl0cyBhcmVhcywgYW5kIGl0cyB3 b3JraW5nIGdyb3Vwcy4gIE5vdGUgdGhhdAogICBvdGhlciBncm91cHMgbWF5IGFsc28gZGlz dHJpYnV0ZSB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC0KICAgRHJhZnRzLgoKICAg SW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11 bSBvZiBzaXggbW9udGhzCiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9yIG9i c29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55CiAgIHRpbWUuICBJdCBpcyBpbmFw cHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlCiAgIG1hdGVy aWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiIK CiAgIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQtRHJhZnRzIGNhbiBiZSBhY2Nlc3Nl ZCBhdAogICBodHRwOi8vd3d3LmlldGYub3JnLzFpZC1hYnN0cmFjdHMuaHRtbAoKICAgVGhl IGxpc3Qgb2YgSW50ZXJuZXQtRHJhZnQgU2hhZG93IERpcmVjdG9yaWVzIGNhbiBiZSBhY2Nl c3NlZCBhdAogICBodHRwOi8vd3d3LmlldGYub3JnL3NoYWRvdy5odG1sCgogICBUaGlzIElu dGVybmV0LURyYWZ0IGV4cGlyZXMgaW4gTWF5IDIwLCAyMDEwLgoKCkNvcHlyaWdodCBOb3Rp Y2UKCiAgIENvcHlyaWdodCAoYykgMjAwOSBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBp ZGVudGlmaWVkIGFzIHRoZQogICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNl cnZlZC4KCiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJ RVRGIFRydXN0J3MgTGVnYWwKICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3Vt ZW50cyBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2YKICAgcHVibGljYXRpb24gb2YgdGhpcyBk b2N1bWVudCAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKS4KICAgUGxl YXNlIHJldmlldyB0aGVzZSBkb2N1bWVudHMgY2FyZWZ1bGx5LCBhcyB0aGV5IGRlc2NyaWJl IHlvdXIgcmlnaHRzCgoKClMuU2FrYW5lLCBldCBhbC4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBbUGFnZSAxXQoMCkludGVybmV0LURyYWZ0ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm92ZW1iZXIgMjAw OQoKCiAgIGFuZCByZXN0cmljdGlvbnMgd2l0aCByZXNwZWN0IHRvIHRoaXMgZG9jdW1lbnQu CgoKQWJzdHJhY3QKCiAgIFRoZSBLZXJiZXJvcyBwcm90b2NvbCBpcyB0b2RheSBvbmUgb2Yg dGhlIG1vc3Qgd2lkZWx5IGRlcGxveWVkCiAgIGF1dGhlbnRpY2F0aW9uIHByb3RvY29scyBp biB0aGUgSW50ZXJuZXQuIEluIG9yZGVyIGZvciBhIEtlcmJlcm9zCiAgIGRlcGxveW1lbnQg dG8gb3BlcmF0ZSBpbiBhIHNjYWxhYmxlIG1hbm5lciwgZGlmZmVyZW50IEtlcmJlcm9zIHJl YWxtcwogICBtdXN0IGludGVyb3BlcmF0ZSBpbiBzdWNoIGEgd2F5IHRoYXQgY3Jvc3MtcmVh bG0gb3BlcmF0aW9ucyBjYW4gYmUKICAgcGVyZm9ybWVkIGVmZmljaWVudGx5IGFuZCBzZWN1 cmVseS4KCiAgIFRoaXMgZG9jdW1lbnQgcHJvdmlkZXMgYmFja2dyb3VuZCBpbmZvcm1hdGlv biByZWdhcmRpbmcgbGFyZ2Ugc2NhbGUKICAgS2VyYmVyb3MgZGVwbG95bWVudHMgaW4gdGhl IGluZHVzdHJpYWwgc2VjdG9yLCB3aXRoIHRoZSBhaW0gb2YKICAgaWRlbnRpZnlpbmcgaXNz dWVzIGluIHRoZSBjdXJyZW50IEtlcmJlcm9zIGNyb3NzLXJlYWxtIGF1dGhlbnRpY2F0aW9u CiAgIG1vZGVsIGFzIGRlZmluZWQgaW4gUkZDNDEyMC4KCiAgIEFzIGluZHVzdHJpYWwgYXV0 b21hdGlvbiBpcyBtb3ZpbmcgdG93YXJkcyB3aWRlciBhZG9wdGlvbiBvZiBJbnRlcm5ldAog ICBzdGFuZGFyZHMsIHRoZSBLZXJiZXJvcyBhdXRoZW50aWNhdGlvbiBwcm90b2NvbCByZXBy ZXNlbnRzIG9uZSBvZiB0aGUKICAgYmVzdCBhbHRlcm5hdGl2ZXMgZm9yIGVuc3VyaW5nIHRo ZSBjb25maWRlbnRpYWxpdHkgYW5kIHRoZSBpbnRlZ3JpdHkKICAgb2YgY29tbXVuaWNhdGlv bnMgaW4gY29udHJvbCBuZXR3b3JrcyB3aGlsZSBtZWV0aW5nIHBlcmZvcm1hbmNlIGFuZAog ICBzZWN1cml0eSByZXF1aXJlbWVudHMuCgogICBIb3dldmVyLCB0aGUgdXNlIG9mIEtlcmJl cm9zIGNyb3NzLXJlYWxtIG9wZXJhdGlvbnMgaW4gbGFyZ2Ugc2NhbGUKICAgaW5kdXN0cmlh bCBzeXN0ZW1zIG1heSBpbnRyb2R1Y2UgaXNzdWVzIHRoYXQgY291bGQgY2F1c2UgcGVyZm9y bWFuY2UKICAgYW5kIHJlbGlhYmlsaXR5IHByb2JsZW1zLiBUaGlzIGRvY3VtZW50IGRlc2Ny aWJlcyBzb21lIGV4YW1wbGVzIG9mCiAgIGFjdHVhbCBsYXJnZSBzY2FsZSBpbmR1c3RyaWFs IHN5c3RlbXMsIGFuZCBsaXN0cyByZXF1aXJlbWVudHMgYW5kCiAgIHJlc3RyaWN0aW9uIHJl Z2FyZGluZyBhdXRoZW50aWNhdGlvbiBvcGVyYXRpb25zIGluIHN1Y2ggZW52aXJvbm1lbnRz LgoKICAgVGhlIGN1cnJlbnQgZG9jdW1lbnQgYWxzbyBpZGVudGlmaWVzIGEgbnVtYmVyIG9m IHJlcXVpcmVtZW50cyBkZXJpdmVkCiAgIGZyb20gdGhlIGluZHVzdHJpYWwgYXV0b21hdGlv biBmaWVsZC4gQWx0aG91Z2ggdGhleSBhcmUgZm91bmQgaW4gdGhlCiAgIGZpZWxkIG9mIGlu ZHVzdHJpYWwgYXV0b21hdGlvbiwgdGhlc2UgcmVxdWlyZW1lbnRzIGFyZSBnZW5lcmFsIGVu b3VnaAogICBhbmQgYXJlIGFwcGxpY2FibGUgdG8gdGhlIHByb2JsZW0gb2YgS2VyYmVyb3Mg Y3Jvc3MtcmVhbG0gb3BlcmF0aW9ucy4KCgpDb252ZW50aW9ucyB1c2VkIGluIHRoaXMgZG9j dW1lbnQKCiAgIFRoZSByZWFkZXIgaXMgYXNzdW1lZCB0byBiZSBmYW1pbGlhciB3aXRoIHRo ZSB0ZXJtcyBhbmQgY29uY2VwdHMKICAgZGVzY3JpYmVkIGluIHRoZSBLZXJiZXJvcyBWZXJz aW9uIDUgW1JGQzQxMjBdLgoKCgoKCgoKCgoKCgoKUy5TYWthbmUsIGV0IGFsLiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDJdCgwKSW50 ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBOb3ZlbWJlciAyMDA5CgoKVGFibGUgb2YgQ29udGVudHMKCiAgICAxLiBJbnRyb2R1Y3Rp b24gLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiAg NAogICAgMi4gS2VyYmVyb3MgU3lzdGVtIC4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4gIDQKICAgICAgIDIuMS4gS2VyYmVyb3MgYmFzaWMgb3BlcmF0 aW9uIC4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uICA0CiAgICAgICAyLjIuIENy b3NzLXJlYWxtIG9wZXJhdGlvbiAuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u LiAgNQogICAgMy4gQXBwbHlpbmcgQ3Jvc3MtUmVhbG0gS2VyYmVyb3MgaW4gQ29tcGxleCBF bnZpcm9ubWVudHMgLi4uLi4uLi4gIDYKICAgIDQuIFJlcXVpcmVtZW50cyAuLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uICA3CiAgICA1LiBJc3N1 ZXMgLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLiAgOQogICAgICAgNS4xLiBVbnJlbGlhYmlsaXR5IG9mIGF1dGhlbnRpY2F0aW9uIGNo YWluIC4uLi4uLi4uLi4uLi4uLi4uLi4gIDkKICAgICAgIDUuMi4gUG9zc2liaWxpdHkgb2Yg TUlUTSBpbiB0aGUgaW5kaXJlY3QgdHJ1c3QgbW9kZWwgLi4uLi4uLi4uICA5CiAgICAgICA1 LjMuIFNjYWxhYmlsaXR5IG9mIHRoZSBkaXJlY3QgdHJ1c3QgbW9kZWwgLi4uLi4uLi4uLi4u Li4uLi4uLiAxMAogICAgICAgNS40LiBFeHBvc3VyZSB0byBEb1MgQXR0YWNrcyAuLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTAKICAgICAgIDUuNS4gQ2xpZW50J3MgcGVy Zm9ybWFuY2UgLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDEwCiAgICAg ICA1LjYuIEtlcmJlcm9zIFByZS1hdXRoZW50aWNhdGlvbiBwcm9ibGVtIGluIHJvYW1pbmcg c2NlbmFyaW9zICAxMQogICAgNi4gSW1wbGVtZW50YXRpb24gY29uc2lkZXJhdGlvbnMgLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTEKICAgIDcuIElBTkEgQ29uc2lkZXJh dGlvbnMgLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDEyCiAg ICA4LiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLiAxMgogICAgOS4gQWNrbm93bGVkZ2VtZW50cyAuLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTIKICAgMTAuIFJlZmVyZW5jZXMg Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDEy CiAgICAgICAxMC4xLiBOb3JtYXRpdmUgUmVmZXJlbmNlcyAuLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLiAxMgogICAgICAgMTAuMi4gSW5mb3JtYXRpdmUgUmVmZXJlbmNl cyAuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTIKICAgQXV0aG9ycycgQWRk cmVzc2VzIC4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u IDEzCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgpTLlNha2FuZSwgZXQgYWwuICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgW1BhZ2UgM10KDApJ bnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIE5vdmVtYmVyIDIwMDkKCgoxLiAgSW50cm9kdWN0aW9uCgogICBLZXJiZXJvcyBWZXJz aW9uIDUgaXMgYSB3aWRlbHkgZGVwbG95ZWQgbWVjaGFuaXNtIHRoYXQgZW5hYmxlcyBhCiAg IHNlcnZlciB0byBhdXRoZW50aWNhdGUgYSBjbGllbnQgYmVmb3JlIGdyYW50aW5nIGl0IGFj Y2VzcyB0byBhCiAgIGNlcnRhaW4gc2VydmljZS4gIEVhY2ggY2xpZW50IGJlbG9uZ3MgdG8g YSBtYW5hZ2VkIGRvbWFpbiBjYWxsZWQKICAgcmVhbG0uICBLZXJiZXJvcyBzdXBwb3J0cyBh dXRoZW50aWNhdGlvbiB3aGVuIGEgY2xpZW50IGFuZCBhIHNlcnZlcgogICBiZWxvbmcgdG8g ZGlmZmVyZW50IHJlYWxtcy4gIFRoaXMgaXMgY2FsbGVkIGNyb3NzLXJlYWxtCiAgIGF1dGhl bnRpY2F0aW9uLgoKICAgVGhlcmUgZXhpc3Qgc2V2ZXJhbCB3YXlzIGZvciB1c2luZyBLZXJi ZXJvcyBpbiBsYXJnZSBzY2FsZQogICBkaXN0cmlidXRlZCBzeXN0ZW1zLiAgU3VjaCBpbmZy YXN0cnVjdHVyZXMgYXJlIHR5cGljYWxseSBzcGxpdCBpbnRvCiAgIHNldmVyYWwgbWFuYWdl ZCBkb21haW5zIGZvciBnZW9ncmFwaGljYWwgcmVhc29ucywgYW5kIHRvIGltcGxlbWVudAog ICBkaWZmZXJlbnQgbWFuYWdlbWVudCBwb2xpY2llcy4gIEluIG9yZGVyIHRvIGVuc3VyZSBz bW9vdGggbmV0d29yawogICBvcGVyYXRpb25zIGluIHN1Y2ggc3lzdGVtcywgYSBjb21tb24g YXV0aGVudGljYXRpb24gbWVjaGFuaXNtIGZvciB0aGUKICAgZGlmZmVyZW50IG1hbmFnZWQg ZG9tYWlucyBpcyByZXF1aXJlZC4gIFdoZW4gdXNpbmcgdGhlIEtlcmJlcm9zCiAgIGNyb3Nz LXJlYWxtIG9wZXJhdGlvbiBpbiBsYXJnZSBzY2FsZSBkaXN0cmlidXRlZCBzeXN0ZW1zIHNv bWUgaXNzdWVzCiAgIGFyaXNlLgoKICAgVGhpcyBkb2N1bWVudCBicmllZmx5IGRlc2NyaWJl cyB0aGUgS2VyYmVyb3MgVmVyc2lvbiA1IHN5c3RlbSBhbmQgaXRzCiAgIGNyb3NzLXJlYWxt IG9wZXJhdGlvbiBtb2RlLiAgVGhlbiBpdCBkZXNjcmliZXMgdHdvIGNhc2Utc3R1ZHkgc3lz dGVtcwogICB0aGF0IEtlcmJlcm9zIGNvdWxkIGJlIGFwcGxpZWQgdG8sIGFuZCBkZXNjcmli ZXMgc2V2ZW4gcmVxdWlyZW1lbnRzCiAgIGluIHRob3NlIHN5c3RlbXMgaW4gdGVybXMgYm90 aCBvZiBtYW5hZ2VtZW50IGFuZCBvcGVyYXRpb25zIHRoYXQKICAgb3V0bGluZSB2YXJpb3Vz IGNvbnN0cmFpbnRzIHdoaWNoIEtlcmJlcm9zIG9wZXJhdGlvbnMgbWlnaHQgYmUKICAgc3Vi amVjdGVkIHRvLiAgRmluYWxseSwgaXQgbGlzdHMgc2l4IGlzc3VlcyByZWxhdGVkIHRvIEtl cmJlcm9zCiAgIGNyb3NzLXJlYWxtIG9wZXJhdGlvbnMgd2hlbiBhcHBsaWVkIHRvIHRob3Nl IHN5c3RlbXMuCgogICBOb3RlIHRoYXQgdGhpcyBkb2N1bWVudCBtaWdodCBub3QgZGVzY3Jp YmUgYWxsIGlzc3VlcyByZWxhdGVkIHRvCiAgIEtlcmJlcm9zIGNyb3NzLXJlYWxtIG9wZXJh dGlvbnMuICBOZXcgaXNzdWVzIG1pZ2h0IGJlIGZvdW5kIGluIHRoZQogICBmdXR1cmUuICBJ dCBhbHNvIGRvZXMgbm90IHByb3Bvc2UgYW55IHNvbHV0aW9uIHRvIHNvbHZlIHRoZSBpc3N1 ZXMuCiAgIEZ1cnRoZXJtb3JlLCBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50IGRvZXMg bm90IG1lYW4gdGhhdCBlYWNoIG9mCiAgIHRoZSBpc3N1ZXMgaGF2ZSB0byBiZSBzb2x2ZWQg YnkgdGhlIElFVEYgbWVtYmVycy4gIERldGFpbGVkIGFuYWx5c2lzCiAgIG9mIHRoZSBpc3N1 ZXMsIHByb2JsZW0gZGVmaW5pdGlvbnMgYW5kIGV4cGxvcmF0aW9uIG9mIHBvc3NpYmxlCiAg IHNvbHV0aW9ucyBtYXkgYmUgY2FycmllZCBvdXQgYXMgc2VwYXJhdGUgd29yayBpdGVtcy4K CiAgIFRoaXMgZG9jdW1lbnQgaXMgYXNzdW1lZCB0aGF0IHRoZSByZWFkZXJzIGFyZSBmYW1p bGlhciB3aXRoIHRoZSB0ZXJtcwogICBhbmQgY29uY2VwdHMgZGVzY3JpYmVkIGluIHRoZSBL ZXJiZXJvcyBWZXJzaW9uIDUgW1JGQzQxMjBdLgoKCjIuICBLZXJiZXJvcyBTeXN0ZW0KCgoy LjEuICBLZXJiZXJvcyBiYXNpYyBvcGVyYXRpb24KCiAgIEtlcmJlcm9zIFtSRkM0MTIwXSBp cyBhIHdpZGVseSBkZXBsb3llZCBhdXRoZW50aWNhdGlvbiBzeXN0ZW0uICBUaGUKICAgYXV0 aGVudGljYXRpb24gcHJvY2VzcyBpbiBLZXJiZXJvcyBpbnZvbHZlcyBwcmluY2lwYWxzIGFu ZCBhIEtleQogICBEaXN0cmlidXRpb24gQ2VudGVyIChLREMpLiAgVGhlIHByaW5jaXBhbHMg Y2FuIGJlIHVzZXJzIG9yIHNlcnZpY2VzLgogICBFYWNoIEtEQyBtYWludGFpbnMgYSBkYXRh YmFzZSBvZiBwcmluY2lwYWxzIGFuZCBzaGFyZXMgYSBzZWNyZXQga2V5CiAgIHdpdGggZWFj aCByZWdpc3RlcmVkIHByaW5jaXBhbC4KCgoKUy5TYWthbmUsIGV0IGFsLiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDRdCgwKSW50ZXJu ZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBO b3ZlbWJlciAyMDA5CgoKICAgVGhlIGF1dGhlbnRpY2F0aW9uIHByb2Nlc3MgYWxsb3dzIGEg dXNlciB0byBhY3F1aXJlIHRoZSBuZWVkZWQKICAgY3JlZGVudGlhbHMgZnJvbSB0aGUgS0RD LiAgVGhlc2UgY3JlZGVudGlhbHMgYWxsb3cgc2VydmljZXMgdG8KICAgYXV0aGVudGljYXRl IHRoZSB1c2VycyBiZWZvcmUgZ3JhbnRpbmcgdGhlbSBhY2Nlc3MgdG8gdGhlIHJlc291cmNl cy4KICAgQW4gaW1wb3J0YW50IHBhcnQgb2YgdGhlIGNyZWRlbnRpYWxzIGFyZSBjYWxsZWQg VGlja2V0cy4gIFRoZXJlIGFyZQogICB0d28ga2luZHMgb2YgdGlja2V0czogVGlja2V0IEdy YW50aW5nIFRpY2tldCAoVEdUKSBhbmQgU2VydmljZQogICBUaWNrZXQuICBUaGUgVEdUIGlz IG9idGFpbmVkIHBlcmlvZGljYWxseSBmcm9tIHRoZSBLREMgYW5kIGhhcyBhCiAgIGxpbWl0 ZWQgbGlmZXRpbWUgYWZ0ZXIgd2hpY2ggaXQgZXhwaXJlcyBhbmQgdGhlIHVzZXIgbXVzdCBy ZW5ldyBpdC4KICAgVGhlIFRHVCBpcyB1c2VkIHRvIG9idGFpbiB0aGUgb3RoZXIga2luZCBv ZiB0aWNrZXRzOyBTZXJ2aWNlIFRpY2tldHMuCiAgIFRoZSB1c2VyIG9idGFpbnMgYSBUR1Qg ZnJvbSB0aGUgQXV0aGVudGljYXRpb24gU2VydmljZSAoQVMpLCBhCiAgIGxvZ2ljYWwgY29t cG9uZW50IG9mIHRoZSBLREMuICBUaGUgcHJvY2VzcyBvZiBvYnRhaW5pbmcgYSBUR1QgaXMK ICAgcmVmZXJyZWQgdG8gYXMgJ0FTIGV4Y2hhbmdlJy4gIFdoZW4gYSByZXF1ZXN0IGZvciBh IFRHVCBpcyBpc3N1ZWQgYnkKICAgdGhlIHVzZXIsIHRoZSBBUyByZXNwb25kcyBieSBzZW5k aW5nIGEgcmVwbHkgcGFja2V0IGNvbnRhaW5pbmcgdGhlCiAgIGNyZWRlbnRpYWxzIHdoaWNo IGNvbnNpc3RzIG9mIHRoZSBUR1QgYWxvbmcgd2l0aCBhIHJhbmRvbSBrZXkgY2FsbGVkCiAg ICdUR1MgU2Vzc2lvbiBLZXknLiAgVGhlIFRHVCBjb250YWlucyBhIHNldCBvZiBpbmZvcm1h dGlvbiBlbmNyeXB0ZWQKICAgdXNpbmcgYSBzZWNyZXQga2V5IGFzc29jaWF0ZWQgd2l0aCBh IHNwZWNpYWwgc2VydmljZSByZWZlcnJlZCB0byBhcwogICBUR1MgKFRpY2tldCBHcmFudGlu ZyBTZXJ2aWNlKS4gIFRoZSBUR1Mgc2Vzc2lvbiBrZXkgaXMgZW5jcnlwdGVkCiAgIHVzaW5n IHRoZSB1c2VyJ3Mga2V5IHNvIHRoYXQgdGhlIHVzZXIgY2FuIG9idGFpbiB0aGUgVEdTIHNl c3Npb24ga2V5CiAgIG9ubHkgaWYgc2hlIGtub3dzIHRoZSBzZWNyZXQga2V5IHNoZSBzaGFy ZXMgd2l0aCB0aGUgS0RDLiAgVGhlIFRHVAogICB0aGVuIGlzIHVzZWQgdG8gb2J0YWluIGEg U2VydmljZSBUaWNrZXRzIGZyb20gdGhlIFRpY2tldCBHcmFudGluZwogICBTZXJ2aWNlIChU R1MpLSB0aGUgc2Vjb25kIGNvbXBvbmVudCBvZiB0aGUgS0RDLiAgVGhlIHByb2Nlc3Mgb2YK ICAgb2J0YWluaW5nIHNlcnZpY2UgdGlja2V0cyBpcyByZWZlcnJlZCB0byBhcyAnVEdTIGV4 Y2hhbmdlJy4gIFRoZQogICByZXF1ZXN0IGZvciBhIHNlcnZpY2UgdGlja2V0IGNvbnNpc3Rz IG9mIGEgcGFja2V0IGNvbnRhaW5pbmcgYSBUR1QKICAgYW5kIGFuICdBdXRoZW50aWNhdG9y Jy4gIFRoZSBBdXRoZW50aWNhdG9yIGlzIGVuY3J5cHRlZCB1c2luZyB0aGUgVEdTCiAgIHNl c3Npb24ga2V5IGFuZCBjb250YWlucyB0aGUgaWRlbnRpdHkgb2YgdGhlIHVzZXIgYXMgd2Vs bCBhcyB0aW1lCiAgIHN0YW1wcyAoZm9yIHByb3RlY3Rpb24gYWdhaW5zdCByZXBsYXkgYXR0 YWNrcykuICBBZnRlciBkZWNyeXB0aW5nIHRoZQogICBUR1QgcmVjZWl2ZWQgZnJvbSB0aGUg dXNlciwgdGhlIFRHUyBleHRyYWN0cyB0aGUgVEdTIHNlc3Npb24ga2V5LgogICBVc2luZyB0 aGF0IHNlc3Npb24ga2V5LCBpdCBkZWNyeXB0cyB0aGUgQXV0aGVudGljYXRvciBhbmQKICAg YXV0aGVudGljYXRlcyB0aGUgdXNlci4gIFRoZW4sIHRoZSBUR1MgaXNzdWVzIHRoZSBjcmVk ZW50aWFscwogICByZXF1ZXN0ZWQgYnkgdGhlIHVzZXIuICBUaGVzZSBjcmVkZW50aWFscyBj b25zaXN0IG9mIGEgc2VydmljZSB0aWNrZXQKICAgYW5kIGEgc2Vzc2lvbiBrZXkgdGhhdCB3 aWxsIGJlIHVzZWQgdG8gYXV0aGVudGljYXRlIHRoZSB1c2VyIHRvIHRoZQogICBkZXNpcmVk IGFwcGxpY2F0aW9uIHNlcnZpY2UuCgoKMi4yLiAgQ3Jvc3MtcmVhbG0gb3BlcmF0aW9uCgog ICBUaGUgS2VyYmVyb3MgcHJvdG9jb2wgcHJvdmlkZXMgY3Jvc3MtcmVhbG0gYXV0aGVudGlj YXRpb24KICAgY2FwYWJpbGl0aWVzLiAgVGhpcyBhbGxvd3MgdXNlcnMgdG8gb2J0YWluIHNl cnZpY2UgdGlja2V0cyB0byBhY2Nlc3MKICAgc2VydmljZXMgaW4gZm9yZWlnbiByZWFsbXMu ICBJbiBvcmRlciB0byBhY2Nlc3Mgc3VjaCBzZXJ2aWNlcywgdGhlCiAgIHVzZXJzIGZpcnN0 IGNvbnRhY3QgdGhlaXIgaG9tZSBLREMgYXNraW5nIGZvciBhIFRHVCB0aGF0IHdpbGwgYmUg dXNlZAogICB3aXRoIHRoZSBUR1Mgb2YgdGhlIGZvcmVpZ24gcmVhbG0uICBJZiB0aGVyZSBp cyBhIGRpcmVjdCB0cnVzdAogICByZWxhdGlvbnNoaXAgYmV0d2VlbiB0aGUgaG9tZSByZWFs bSBhbmQgdGhlIGZvcmVpZ24gcmVhbG0KICAgKHByYWN0aWNhbGx5IG1hdGVyaWFsaXplZCBp biBzaGFyZWQgaW50ZXItcmVhbG0ga2V5cyksIHRoZSBob21lIEtEQwogICBkZWxpdmVycyB0 aGUgcmVxdWVzdGVkIFRHVC4KCiAgIEhvd2V2ZXIsIGlmIHRoZSBob21lIHJlYWxtIGRvZXMg bm90IHNoYXJlIGludGVyLXJlYWxtIGtleXMgd2l0aCB0aGUKICAgZm9yZWlnbiByZWFsbSwg d2UgYXJlIGluIGEgc28tY2FsbGVkIGluZGlyZWN0IHRydXN0IG1vZGVsIHNpdHVhdGlvbi4K ICAgSW4gdGhpcyBzaXR1YXRpb24sIHRoZSBob21lIEtEQyB3aWxsIHByb3ZpZGUgYSBUR1Qg dGhhdCBjYW4gYmUgdXNlZAogICB3aXRoIGFuIGludGVybWVkaWFyeSBmb3JlaWduIHJlYWxt IHRoYXQgaXMgbGlrZWx5IHRvIGJlIHNoYXJpbmcKCgoKUy5TYWthbmUsIGV0IGFsLiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDVdCgwK SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBOb3ZlbWJlciAyMDA5CgoKICAgaW50ZXItcmVhbG0ga2V5cyB3aXRoIHRoZSB0YXJn ZXQgcmVhbG0uICBUaGUgY2xpZW50IGNhbiB1c2UgdGhpcwogICAnaW50ZXJtZWRpYXJ5IFRH VCcgdG8gY29tbXVuaWNhdGUgd2l0aCB0aGUgaW50ZXJtZWRpYXJ5IEtEQyB3aGljaAogICB3 aWxsIGl0ZXJhdGUgdGhlIGFjdGlvbnMgdGFrZW4gYnkgdGhlIGhvbWUgS0RDOyBJZiB0aGUg aW50ZXJtZWRpYXJ5CiAgIEtEQyBkb2VzIG5vdCBzaGFyZSBpbnRlci1yZWFsbSBrZXlzIHdp dGggdGhlIHRhcmdldCBmb3JlaWduIHJlYWxtIGl0CiAgIHdpbGwgcG9pbnQgdGhlIHVzZXIg dG8gYW5vdGhlciBpbnRlcm1lZGlhcnkgS0RDIChqdXN0IGFzIGluIHRoZSBmaXJzdAogICBl eGNoYW5nZSBiZXR3ZWVuIHRoZSB1c2VyIGFuZCBpdHMgaG9tZSBLREMpLiAgSG93ZXZlciwg aW4gdGhlIG90aGVyCiAgIGNhc2UgKHdoZW4gaXQgc2hhcmVzIGludGVyLXJlYWxtIGtleXMg d2l0aCB0aGUgdGFyZ2V0IHJlYWxtKSwgdGhlCiAgIGludGVybWVkaWFyeSBLREMgd2lsbCBp c3N1ZSBhIFRHVCB0aGF0IGNhbiBiZSB1c2VkIHdpdGggdGhlIEtEQyBvZgogICB0aGUgdGFy Z2V0IHJlYWxtLiAgQWZ0ZXIgb2J0YWluaW5nIGEgVEdUIGZvciB0aGUgZGVzaXJlZCBmb3Jl aWduCiAgIHJlYWxtLCB0aGUgY2xpZW50IHVzZXMgaXQgdG8gb2J0YWluIHNlcnZpY2UgdGlj a2V0cyBmcm9tIHRoZSBUR1Mgb2YKICAgdGhlIGZvcmVpZ24gcmVhbG0uICBGaW5hbGx5LCB0 aGUgdXNlciBhY2Nlc3NlcyB0aGUgc2VydmljZSB1c2luZyB0aGUKICAgc2VydmljZSB0aWNr ZXQuCgogICBXaGVuIHRoZSByZWFsbXMgYmVsb25nIHRvIHRoZSBzYW1lIGluc3RpdHV0aW9u LCBhIGNoYWluIG9mIHRydXN0IGNhbgogICBiZSBhdXRvbWF0aWNhbGx5IGRldGVybWluZWQg YnkgdGhlIGNsaWVudCBvciB0aGUgS0RDIGJ5IGZvbGxvd2luZyB0aGUKICAgRE5TIGRvbWFp biBoaWVyYXJjaHkgYW5kIGFzc3VtaW5nIHRoYXQgYSBwYXJlbnQgZG9tYWluIHNoYXJlcyBr ZXlzCiAgIHdpdGggYWxsIGl0cyBjaGlsZCBzdWItZG9tYWlucy4gIEhvd2V2ZXIsIHNpbmNl IHRoaXMgYXNzdW1wdGlvbiBpcwogICBub3QgYWx3YXlzIHRydWUsIGluIG1hbnkgc2l0dWF0 aW9ucywgdGhlIHRydXN0IHBhdGggbWlnaHQgaGF2ZSB0byBiZQogICBzcGVjaWZpZWQgbWFu dWFsbHkuICBTaW5jZSB0aGUgS2VyYmVyb3MgY3Jvc3MtcmVhbG0gb3BlcmF0aW9ucyB3aXRo CiAgIGluZGlyZWN0IGludGVyLXJlYWxtIHRydXN0IG1vZGVsIHJlbHkgb24gaW50ZXJtZWRp YXJ5IHJlYWxtcywgdGhlCiAgIHN1Y2Nlc3Mgb2YgdGhlIGNyb3NzLXJlYWxtIG9wZXJhdGlv biBjb21wbGV0ZWx5IGRlcGVuZHMgb24gdGhlIHJlYWxtcwogICB0aGF0IGFyZSBwYXJ0IG9m IHRoZSBhdXRoZW50aWNhdGlvbiBwYXRoLgoKCjMuICBBcHBseWluZyBDcm9zcy1SZWFsbSBL ZXJiZXJvcyBpbiBDb21wbGV4IEVudmlyb25tZW50cwoKICAgSW4gb3JkZXIgdG8gaGVscCB1 bmRlcnN0YW5kaW5nIHJlcXVpcmVtZW50cyBhbmQgcmVzdHJpY3Rpb25zIGZvcgogICBjcm9z cy1yZWFsbSBhdXRoZW50aWNhdGlvbiBvcGVyYXRpb25zLCB0aGlzIHNlY3Rpb24gZGVzY3Jp YmVzIHRoZQogICBzY2FsZSBhbmQgb3BlcmF0aW9ucyBvZiB0d28gYWN0dWFsIHN5c3RlbXMg dGhhdCBjb3VsZCBiZSBzdXBwb3J0ZWQgYnkKICAgY3Jvc3MtcmVhbG0gS2VyYmVyb3MuICBU aGUgdHdvIHN5c3RlbXMgd291bGQgYmUgbW9zdCBuYXR1cmFsbHkgYmUKICAgaW1wbGVtZW50 ZWQgdXNpbmcgZGlmZmVyZW50IHRydXN0IG1vZGVscywgd2hpY2ggd2lsbCBpbXBseSBkaWZm ZXJlbnQKICAgcmVxdWlyZW1lbnRzIGZvciBjcm9zcy1yZWFsbSBLZXJiZXJvcy4KCiAgIEhl cmVhZnRlciwgd2Ugd2lsbCBjb25zaWRlciBhbiBhY3R1YWwgcGV0cm9jaGVtaWNhbCBjb21w YW55CiAgIFtTSEVMTENIRU1dLCBhbmQgb3ZlcnZpZXcgdHdvIGV4YW1wbGVzIGFtb25nIGl0 cyBwbGFudHMuCiAgIFBldHJvY2hlbWljYWwgY29tcGFuaWVzIHByb2R1Y2UgYnVsayBwZXRy b2NoZW1pY2FscyBhbmQgZGVsaXZlciB0aGVtCiAgIHRvIGxhcmdlIGluZHVzdHJpYWwgY3Vz dG9tZXJzLiAgVGhlIGNvbXBhbnkgaW4gY29uc2lkZXJhdGlvbgogICBwb3NzZXNzZXMgNDMg cGxhbnRzIGFsbCBvdmVyIHRoZSB3b3JsZCBtYW5hZ2VkIGJ5IG9wZXJhdGlvbiBzaXRlcyBp bgogICAzNSBjb3VudHJpZXMuICBUaGlzIHNlY3Rpb24gc2hvd3MgdHdvIGV4YW1wbGVzIG9m IHRoZXNlIHBsYW50cy4KCiAgIFRoZSBmaXJzdCBleGFtcGxlIGlzIGEgcGxhbnQgZGVwbG95 aW5nIGEgY2VudHJhbGl6ZWQgc3lzdGVtIFtDU1BDXS4KICAgQ1NQQyBpcyBvcGVyYXRlZCBi eSBhIGpvaW50IGVudGVycHJpc2Ugb2YgdHdvIGNvbXBhbmllcy4gIFRoaXMgc3lzdGVtCiAg IGlzIG9uZSBvZiB0aGUgbGFyZ2VzdCBzeXN0ZW1zIG9mIHRoaXMgY29tcGFueSBpbiB0aGUg d29ybGQuICBJdCBpcwogICBsb2NhdGVkIGluIGFuIGFyZWEgb2YgMy40IHNxdWFyZSBraWxv bWV0ZXJzIGluIHRoZSBub3J0aCBjb2FzdCBvZgogICBEYXlhIEJheSwgR3Vhbmdkb25nLCBp biBzb3V0aGVhc3QgQ2hpbmEuICAzLDAwMCBuZXR3b3JrIHNlZ21lbnRzIGFyZQogICBkZXBs b3llZCBpbiB0aGUgc3lzdGVtIGFuZCAxNiwwMDAgY29udHJvbCBkZXZpY2VzIGFyZSBjb25u ZWN0ZWQgdG8KICAgbG9jYWwgYXJlYSBuZXR3b3Jrcy4gIFRoZXNlIGRldmljZXMgYmVsb25n IHRvIDkgZGlmZmVyZW50IHN1YnN5c3RlbXMuCiAgIEEgY29udHJvbCBkZXZpY2UgY2FuIGhh dmUgbWFueSBjb250cm9sIGFuZCBtb25pdG9yaW5nIHBvaW50cy4gIEluIHRoZQoKCgpTLlNh a2FuZSwgZXQgYWwuICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgW1BhZ2UgNl0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMDkKCgogICBwbGFudCBjb25zaWRl cmVkIGluIHRoaXMgZXhhbXBsZSwgdGhlcmUgYXJlIDIwMCwwMDAgY29udHJvbCBwb2ludHMg aW4KICAgYWxsLiAgVGhleSBhcmUgY29udHJvbGxlZCBieSAzIGRpZmZlcmVudCBjb250cm9s IGNlbnRlcnMuCgogICBBbm90aGVyIGV4YW1wbGUgaXMgYSBkaXN0cmlidXRlZCBzeXN0ZW0g W05BTV0uICBUaGUgTkFNIChOZWRlcmxhbmRzZQogICBBYXJkb2xpZSBNYWF0c2NoYXBwaWop IGlzIG9wZXJhdGVkIGJ5IGEgcGFydG5lcnNoaXAgY29tcGFueSBvZiB0d28KICAgZW50ZXJw cmlzZXMgdGhhdCByZXByZXNlbnQgdGhlIG9pbCBjb21wYW55LiAgVGhpcyBzeXN0ZW0gaXMg Y29tcG9zZWQKICAgb2Ygc29tZSBwbGFudHMgdGhhdCBhcmUgZ2VvZ3JhcGhpY2FsbHkgZGlz dHJpYnV0ZWQgd2l0aGluIHRoZSByYW5nZQogICBvZiA4NjMgc3F1YXJlIGtpbG9tZXRlcnMg aW4gdGhlIG5vcnRoZXJuIHBhcnQgb2YgTmV0aGVybGFuZHMuICAyNgogICBwbGFudHMsIGVh Y2ggb25lIGNhbGxlZCAiY2x1c3RlciIsIGFyZSBzY2F0dGVyZWQgaW4gdGhlIGFyZWEuICBU aGV5CiAgIGFyZSBjb25uZWN0ZWQgdG8gZWFjaCBvdGhlciBieSBhIHByaXZhdGUgQVRNIFdB Ti4gIEVhY2ggY2x1c3RlciBoYXMKICAgYXBwcm94aW1hdGVseSA1MDAtMSwwMDAgY29udHJv bCBkZXZpY2VzLiAgVGhlc2UgZGV2aWNlcyBhcmUgbWFuYWdlZAogICBieSBsb2NhbCBjb250 cm9sIGNlbnRlciBpbiBlYWNoIGNsdXN0ZXIuICBJbiB0aGUgZW50aXJlIHN5c3RlbSBvZiB0 aGUKICAgTkFNLCB0aGVyZSBhcmUgb25lIG1pbGxpb24gY29udHJvbCBwb2ludHMuCgogICBJ biB0aGUgYm90aCBleGFtcGxlcywgdGhlIGVuZCBkZXZpY2VzIGFyZSBiYXNpY2FsbHkgY29u bmVjdGVkIHRvIGEKICAgbG9jYWwgbmV0d29yayBieSBhIHR3aXN0ZWQgcGFpciBjYWJsZSwg d2l0aCBhIGxvdyBiYW5kLXdpZHRoIG9mIDMyCiAgIGticHMuICBFbmQgZGV2aWNlcyB1c2Ug YSBsb3cgY2xvY2sgQ1BVLCBmb3IgZXhhbXBsZSB0aGUgSDggW1JOU1MtSDhdCiAgIGFuZCBN MTZDIFtSTlNTLU0xNkNdLiAgRnVydGhlcm1vcmUsIHRvIHJlZHVjZSBwb3dlciBjb25zdW1w dGlvbiwgdGhlCiAgIGNsb2NrIG9uIHRoZSBDUFUgbWF5IGJlIGxvd2VyZWQuICBUaGlzIGFk anVzdG1lbnQgcmVzdHJpY3RzIHRoZQogICBhbW91bnQgb2YgdG90YWwgZW5lcmd5IGluIHRo ZSBkZXZpY2UsIHRoZXJlYnkgcmVkdWNpbmcgdGhlIHJpc2sgb2YKICAgZXhwbG9zaW9ucy4K CiAgIEEgZGV2aWNlIG9uIHRoZSBuZXR3b3JrIGNvbGxlY3RzIGRhdGEgZnJvbSBvdGhlciBk ZXZpY2VzIG1vbml0b3JpbmcKICAgdGhlIGNvbmRpdGlvbiBvZiB0aGUgc3lzdGVtLiAgVGhp cyBkYXRlIGlzIHRoZW4gdXNlZCB0byBtYWtlCiAgIGRlY2lzaW9ucyBvbiBob3cgdG8gY29u dHJvbCBvdGhlciBkZXZpY2VzIHdpdGggaW5zdHJ1Y3Rpb25zCiAgIHRyYW5zbWl0dGVkIG92 ZXIgdGhlIG5ldHdvcmsuICBJZiBpdCB0YWtlcyB0aW1lIGZvciBkYXRhIHRvIHRyYXZlbAog ICB0aHJvdWdoIHRoZSBuZXR3b3JrLCBub3JtYWwgb3BlcmF0aW9ucyBjYW4gbm90IGJlIGVu c3VyZWQuICBUaGUKICAgdHJhdmVsIHRpbWUgb2YgZGF0YSBmcm9tIGEgZGV2aWNlIHRvIGFu b3RoZXIgZGV2aWNlIGluIHRoZSBib3RoCiAgIGV4YW1wbGVzIG11c3QgYmUgd2l0aGluIDEg c2Vjb25kIGF0IG1vc3QuCgogICBTb21lIHBhcnRzIG9mIHRoZSBvcGVyYXRpb25zIHN1Y2gg YXMgY29udHJvbCwgbWFpbnRlbmFuY2UsIGFuZAogICBlbnZpcm9ubWVudGFsIG1vbml0b3Jp bmcgY2FuIGJlIGNvbnNpZ25lZCB0byBhbiBleHRlcm5hbAogICBvcmdhbml6YXRpb24uICBB bHNvLCBhZ2VudHMgbWF5IGJlIGNvbnNpZ25lZCB0byB3YWxrIGFyb3VuZCB0aGUgcGxhbnQK ICAgYW5kIGNvbGxlY3QgaW5mb3JtYXRpb24gYWJvdXQgdGhlIHBsYW50IG9wZXJhdGlvbnMs IG9yIHdhdGNoIHRoZQogICBwbGFudCBmcm9tIGEgcmVtb3RlIHNpdGUuCgoKNC4gIFJlcXVp cmVtZW50cwoKICAgVGhpcyBzZWN0aW9uIHByb3ZpZGVzIGEgbGlzdCBvZiByZXF1aXJlbWVu dHMgZGVyaXZlZCBmcm9tIHRoZQogICBpbmR1c3RyaWFsIGF1dG9tYXRpb24gdXNlLWNhc2Uu ICBUaGUgcmVxdWlyZW1lbnRzIGFyZSB3cml0dGVuIGluIGEKICAgZ2VuZXJpYyBmYXNoaW9u LCBhbmQgYXJlIGFkZHJlc3NlZCB0b3dhcmRzIGZyYW1ld29ya3MgYW5kCiAgIGFyY2hpdGVj dHVyZXMgdGhhdCB1bmRlcmxpZSBLZXJiZXJvcyBjcm9zcy1yZWFsbSBvcGVyYXRpb25zLiAg VGhlIGFpbQogICBvZiB0aGVzZSByZXF1aXJlbWVudHMgaXMgdG8gcHJvdmlkZSBzb21lIGZv dW5kYXRpb25hbCBndWlkZWxpbmVzIHRvCiAgIHRoZSBmdXR1cmUgZGV2ZWxvcG1lbnRzIG9m IGNyb3NzLXJlYWxtIGZyYW1ld29yayBvciBhcmNoaXRlY3R1cmUgZm9yCiAgIEtlcmJlcm9z LgoKICAgUi0xLCBSLTIsIFItMyBhbmQgUi00IGFyZSByZWxhdGVkIHRvIHRoZSBtYW5hZ2Vt ZW50IG9mIHRoZSBkaXZpZGVkCgoKClMuU2FrYW5lLCBldCBhbC4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBbUGFnZSA3XQoMCkludGVybmV0LURy YWZ0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm92ZW1i ZXIgMjAwOQoKCiAgIHN5c3RlbS4gIFItNSwgUi02IGFuZCBSLTcgYXJlIHJlbGF0ZWQgdG8g dGhlIHJlc3RyaWN0aW9uIHRvIHN1Y2gKICAgbGFyZ2Ugc2NhbGUgaW5kdXN0cmlhbCBuZXR3 b3JrLgoKICAgUi0xICBGb3Igb3JnYW5pemF0aW9uYWwgcmVhc29ucyBhbmQgc2NhbGFiaWxp dHkgbmVlZHMsIGEgbWFuYWdlbWVudAogICAgICAgIGRvbWFpbiB0eXBpY2FsbHkgbXVzdCBi ZSBwYXJ0aXRpb25lZCBpbnRvIHR3byBvciBtb3JlIHN1Yi0KICAgICAgICBkb21haW5zIG9m IG1hbmFnZW1lbnQuICBUaGVyZWZvcmUsIGFueSBhcmNoaXRlY3R1cmUgYW5kCiAgICAgICAg aW1wbGVtZW50YXRpb24gc29sdXRpb24gdG8gdGhlIEtlcmJlcm9zIGNyb3NzLXJlYWxtIHBy b2JsZW0gbXVzdAogICAgICAgIChpKSBzdXBwb3J0IHRoZSBjYXNlIG9mIGNyb3NzLXJlYWxt IG9wZXJhdGlvbnMgYWNyb3NzIG11bHRpcGxlCiAgICAgICAgbWFuYWdlbWVudCBkb21haW5z IGFuZCAoaWkpIHN1cHBvcnQgZGVsZWdhdGlvbiBvZiBtYW5hZ2VtZW50CiAgICAgICAgYXV0 aG9yaXR5IGZyb20gb25lIGRvbWFpbiB0byBhbm90aGVyIG1hbmFnZW1lbnQgZG9tYWluLiAg VGhpcwogICAgICAgIG11c3QgYmUgcGVyZm9ybWVkIHdpdGhvdXQgYW55IGRlY3JlYXNlIGlu IHRoZSBzZWN1cml0eSBsZXZlbCBvcgogICAgICAgIHF1YWxpdHkgb2YgdGhvc2UgY3Jvc3Mt cmVhbG0gb3BlcmF0aW9ucyBhbmQgbXVzdCBub3QgZXhwb3NlCiAgICAgICAgS2VyYmVyb3Mg ZW50aXRpZXMgdG8gbmV3IHR5cGVzIG9mIGF0dGFja3MuCgogICBSLTIgIEFueSBhcmNoaXRl Y3R1cmUgYW5kIGltcGxlbWVudGF0aW9uIHNvbHV0aW9uIHRvIHRoZSBLZXJiZXJvcwogICAg ICAgIGNyb3NzLXJlYWxtIHByb2JsZW0gbXVzdCBzdXBwb3J0IHRoZSBjby1leGlzdGVuY2Ug b2YgbXVsdGlwbGUKICAgICAgICBpbmRlcGVuZGVudCBtYW5hZ2VtZW50IGRvbWFpbnMgb24g dGhlIHNhbWUgbmV0d29yay4KICAgICAgICBGdXJ0aGVybW9yZSwgaXQgbXVzdCBhbGxvdyBv cmdhbml6YXRpb25zIChjb3JyZXNwb25kaW5nIHRvCiAgICAgICAgZGlmZmVyZW50IG1hbmFn ZW1lbnQgZG9tYWlucykgdG8gZGVsZWdhdGUgdGhlIG1hbmFnZW1lbnQgb2YgYQogICAgICAg IHBhcnQgb2Ygb3IgdGhlIHRvdGFsaXR5IG9mIHRoZWlyIHN5c3RlbSBhdCBhbnkgb25lIHRp bWUuCgogICBSLTMgIEFueSBhcmNoaXRlY3R1cmUgYW5kIGltcGxlbWVudGF0aW9uIHNvbHV0 aW9uIHRvIHRoZSBLZXJiZXJvcwogICAgICAgIGNyb3NzLXJlYWxtIHByb2JsZW0gbXVzdCBh bGxvdyB0aGUgdXNlLWNhc2UgaW4gd2hpY2ggb25lIGRldmljZQogICAgICAgIG9wZXJhdGlv bmFsbHkgY29udHJvbHMgYW5vdGhlciBkZXZpY2UsIGJ1dCBlYWNoIGJlbG9uZ3MgdG8KICAg ICAgICBkaWZmZXJlbnQgbWFuYWdlbWVudCBkb21haW5zIHJlc3BlY3RpdmVseS4KCiAgIFIt NCAgQW55IGFyY2hpdGVjdHVyZSBhbmQgaW1wbGVtZW50YXRpb24gc29sdXRpb24gdG8gdGhl IEtlcmJlcm9zCiAgICAgICAgY3Jvc3MtcmVhbG0gcHJvYmxlbSBtdXN0IGFkZHJlc3MgdGhl IGZ1bmRhbWVudGFsIGRlcGxveW1lbnQgdXNlLQogICAgICAgIGNhc2UgaW4gd2hpY2ggdGhl IG1hbmFnZW1lbnQgZG9tYWluIHRyYXZlcnNlcyBnZW9ncmFwaGljCiAgICAgICAgYm91bmRh cmllcyBhbmQgbmV0d29yayB0b3BvbG9naWNhbCBib3VuZGFyaWVzLiAgSW4gcGFydGljdWxh ciwKICAgICAgICBpdCBtdXN0IGFkZHJlc3MgdGhlIGNhc2Ugd2hlcmUgZGV2aWNlcyBhcmUg Z2VvZ3JhcGhpY2FsbHkgKG9yCiAgICAgICAgdG9wb2xvZ2ljYWxseSkgcmVtb3RlLCBldmVu IHRob3VnaCB0aGV5IGJlbG9uZyB0byB0aGUgc2FtZQogICAgICAgIG1hbmFnZW1lbnQgZG9t YWluLgoKICAgUi01ICBBbnkgYXJjaGl0ZWN0dXJlIGFuZCBpbXBsZW1lbnRhdGlvbiBzb2x1 dGlvbiB0byB0aGUgS2VyYmVyb3MKICAgICAgICBjcm9zcy1yZWFsbSBwcm9ibGVtIG11c3Qg YmUgYWltZWQgYXQgcmVkdWNpbmcgb3BlcmF0aW9uYWwgYW5kCiAgICAgICAgbWFuYWdlbWVu dCBjb3N0cyBhcyBtdWNoIGFzIHBvc3NpYmxlLgoKICAgUi02ICBBbnkgYXJjaGl0ZWN0dXJl IGFuZCBpbXBsZW1lbnRhdGlvbiBzb2x1dGlvbiB0byB0aGUgS2VyYmVyb3MKICAgICAgICBj cm9zcy1yZWFsbSBwcm9ibGVtIG11c3QgYWRkcmVzcyB0aGUgKGxpbWl0ZWQpIHByb2Nlc3Np bmcKICAgICAgICBjYXBhYmlsaXRpZXMgb2YgZGV2aWNlcywgYW5kIGltcGxlbWVudGF0aW9u cyBvZiBzb2x1dGlvbnMgbXVzdAogICAgICAgIGJlIGNvbnNpZGVyZWQgdG8gYWltIGF0IGxp bWl0aW5nIG9yIHN1cHByZXNzaW5nIHBvd2VyCiAgICAgICAgY29uc3VtcHRpb24gb2Ygc3Vj aCBkZXZpY2VzLgoKICAgUi03ICBBbnkgYXJjaGl0ZWN0dXJlIGFuZCBpbXBsZW1lbnRhdGlv biBzb2x1dGlvbiB0byB0aGUgS2VyYmVyb3MKICAgICAgICBjcm9zcy1yZWFsbSBwcm9ibGVt IG11c3QgYWRkcmVzcyB0aGUgcG9zc2liaWxpdHkgb2YgbGltaXRlZAogICAgICAgIGF2YWls YWJpbGl0eSBvZiBjb21tdW5pY2F0aW9ucyBiYW5kd2lkdGggYmV0d2VlbiBkZXZpY2VzIHdp dGhpbgogICAgICAgIG9uZSBkb21haW4sIGFuZCBhbHNvIGFjcm9zcyBkb21haW5zLgoKCgpT LlNha2FuZSwgZXQgYWwuICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgW1BhZ2UgOF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMDkKCgo1LiAgSXNzdWVzCgog ICBUaGlzIHNlY3Rpb24gbGlzdHMgaXNzdWVzIGluIEtlcmJlcm9zIGNyb3NzLXJlYWxtIG9w ZXJhdGlvbnMgd2hlbgogICB1c2VkIGluIGxhcmdlIHNjYWxlIHN5c3RlbXMgc3VjaCBhcyB0 aGUgb25lcyBkZXNjcmliZWQgaW4gc2VjdGlvbiAzLAogICBhbmQgdGFraW5nIGluIGNvbnNp ZGVyYXRpb24gdGhlIHJlcXVpcmVtZW50cyBkZXNjcmliZWQgaW4gc2VjdGlvbiA0LgoKCjUu MS4gIFVucmVsaWFiaWxpdHkgb2YgYXV0aGVudGljYXRpb24gY2hhaW4KCiAgIFdoZW4gdGhl IHRydXN0IHJlbGF0aW9uc2hpcCBiZXR3ZWVuIHJlYWxtcyBmb2xsb3dzIGNoYWluIG9yCiAg IGhpZXJhcmNoaWNhbCBtb2RlbCwgdGhlIGNyb3NzLXJlYWxtIGF1dGhlbnRpY2F0aW9uIG9w ZXJhdGlvbnMgYXJlIG5vCiAgIGRlcGVuZGFibGUgc2luY2UgdGhleSBzdHJvbmdseSBkZXBl bmQgb24gaW50ZXJtZWRpYXJ5IHJlYWxtcyB0aGF0CiAgIG1pZ2h0IG5vdCBiZSB1bmRlciB0 aGUgc2FtZSBhdXRob3JpdHkuICBJZiBhbnkgb2YgdGhlIHJlYWxtcyBpbiB0aGUKICAgYXV0 aGVudGljYXRpb24gcGF0aCBpcyBub3QgYXZhaWxhYmxlLCB0aGVuIHRoZSBwcmluY2lwYWxz IG9mIHRoZSBlbmQKICAgcmVhbG1zIGNhbiBub3QgcGVyZm9ybSBjcm9zcy1yZWFsbSBvcGVy YXRpb25zLgoKICAgVGhlIGVuZC1wb2ludCByZWFsbXMgZG8gbm90IGhhdmUgZnVsbCBjb250 cm9sIGFuZCByZXNwb25zaWJpbGl0eSBvZgogICB0aGUgc3VjY2VzcyBvZiB0aGUgY3Jvc3Mt cmVhbG0gb3BlcmF0aW9ucyBldmVuIGlmIHRoZWlyIG93bgogICByZXNwZWN0aXZlIEtEQ3Mg YXJlIGZ1bGx5IGZ1bmN0aW9uYWwuICBEZXBlbmRhYmlsaXR5IG9mIGEgc3lzdGVtCiAgIGRl Y3JlYXNlcyBpZiB0aGUgc3lzdGVtIHJlbGllcyBvbiB1bmNvbnRyb2xsZWQgY29tcG9uZW50 cy4gIEVuZC1wb2ludAogICByZWFsbXMgaGF2ZSBubyB3YXkgb2Yga25vd2luZyB0aGUgYXV0 aGVudGljYXRpb24gcmVzdWx0IG9jY3VycmluZwogICB3aXRoaW4gaW50ZXJtZWRpYXJ5IHJl YWxtcy4KCiAgIFNhdGlzZnlpbmcgcmVxdWlyZW1lbnRzIFItMSBhbmQgUi0yIHdpbGwgZWxp bWluYXRlIChvciBjb25zaWRlcmFibHkKICAgZGltaW5pc2gpIHRoaXMgaXNzdWUgb2YgdGhl IHVucmVsaWFiaWxpdHkgb2YgdGhlIGF1dGhlbnRpY2F0aW9uCiAgIGNoYWluLgoKCjUuMi4g IFBvc3NpYmlsaXR5IG9mIE1JVE0gaW4gdGhlIGluZGlyZWN0IHRydXN0IG1vZGVsCgogICBF dmVyeSBLREMgaW4gdGhlIGF1dGhlbnRpY2F0aW9uIHBhdGgga25vd3MgdGhlIHNoYXJlZCBz ZWNyZXQgYmV0d2VlbgogICB0aGUgY2xpZW50IGFuZCB0aGUgcmVtYWluaW5nIEtEQ3MgaW4g dGhlIGF1dGhlbnRpY2F0aW9uIHBhdGguICBUaGlzCiAgIGFsbG93cyBhIG1hbGljaW91cyBL REMgdG8gcGVyZm9ybSBNSVRNIGF0dGFja3Mgb24gY29tbXVuaWNhdGlvbnMKICAgYmV0d2Vl biB0aGUgY2xpZW50IGFuZCBhbnkgS0RDIGluIHRoZSByZW1haW5pbmcgYXV0aGVudGljYXRp b24gY2hhaW4uCiAgIEEgbWFsaWNpb3VzIEtEQyBhbHNvIG1heSBsZWFybiB0aGUgc2Vydmlj ZSBzZXNzaW9uIGtleSB0aGF0IGlzIHVzZWQKICAgdG8gcHJvdGVjdCB0aGUgY29tbXVuaWNh dGlvbiBiZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHRoZSBhY3R1YWwKICAgYXBwbGljYXRpb24g c2VydmljZS4gIEl0IGNhbiB0aGVuIHVzZSB0aGlzIGtleSB0byBwZXJmb3JtIGEgTUlUTQog ICBhdHRhY2suCgogICBJbiBbU1BFQ0NST1NTXSwgdGhlIGF1dGhvcnMgaGF2ZSBhbmFseXpl ZCB0aGUgY3Jvc3MtcmVhbG0gb3BlcmF0aW9ucwogICBpbiBLZXJiZXJvcyBhbmQgcHJvdmlk ZWQgZm9ybWFsIHByb29mIG9mIHRoZSBpc3N1ZSBkaXNjdXNzZWQgaW4gdGhpcwogICBzZWN0 aW9uLgoKICAgU2F0aXNmeWluZyByZXF1aXJlbWVudHMgUi0xIGFuZCBSLTIgd2lsbCBlbGlt aW5hdGUgKG9yIGNvbnNpZGVyYWJseQogICBkaW1pbmlzaCkgdGhpcyBpc3N1ZSBvZiBNSVRN IGF0dGFja3MgYnkgaW50ZXJtZWRpYXRlIEtEQ3MgaW4gdGhlCiAgIGluZGlyZWN0IHRydXN0 IG1vZGVsLgoKCgoKClMuU2FrYW5lLCBldCBhbC4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBbUGFnZSA5XQoMCkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm92ZW1iZXIgMjAwOQoK CjUuMy4gIFNjYWxhYmlsaXR5IG9mIHRoZSBkaXJlY3QgdHJ1c3QgbW9kZWwKCiAgIEluIHRo ZSBkaXJlY3QgdHJ1c3QgcmVsYXRpb25zaGlwIG1vZGVsLCB0aGUgcmVhbG1zIGludm9sdmVk IGluIHRoZQogICBjcm9zcy1yZWFsbSBvcGVyYXRpb25zIHNoYXJlIGtleXMgYW5kIHRoZWly IHJlc3BlY3RpdmUgVEdTIHByaW5jaXBhbHMKICAgYXJlIHJlZ2lzdGVyZWQgaW4gZWFjaCBv dGhlcidzIEtEQy4gIEVhY2ggcmVhbG0gbXVzdCBtYWludGFpbiBrZXlzCiAgIHdpdGggYWxs IGZvcmVpZ24gcmVhbG1zIHRoYXQgaXQgaW50ZXJhY3RzIHdpdGguICBUaGlzIGNhbiBiZWNv bWUgYQogICBjdW1iZXJzb21lIHRhc2sgYW5kIG1heSBpbmNyZWFzZSBtYWludGVuYW5jZSBj b3N0cyB3aGVuIHRoZSBudW1iZXIgb2YKICAgcmVhbG1zIGluY3JlYXNlcy4KCiAgIFNhdGlz ZnlpbmcgcmVxdWlyZW1lbnRzIFItMSwgUi0yIGFuZCBSLTUgd2lsbCBlbGltaW5hdGUgKG9y CiAgIGNvbnNpZGVyYWJseSBkaW1pbmlzaCkgdGhpcyBpc3N1ZSBvZiBzY2FsYWJpbGl0eSBv ZiB0aGUgaW5kaXJlY3QKICAgdHJ1c3QgbW9kZWwuCgoKNS40LiAgRXhwb3N1cmUgdG8gRG9T IEF0dGFja3MKCiAgIE9uZSBvZiB0aGUgYXNzdW1wdGlvbnMgbWFkZSB3aGVuIGFsbG93aW5n IHRoZSBjcm9zcy1yZWFsbSBvcGVyYXRpb24KICAgaW4gS2VyYmVyb3MgaXMgdGhhdCB1c2Vy cyBjYW4gY29tbXVuaWNhdGUgd2l0aCBLRENzIGxvY2F0ZWQgaW4gcmVtb3RlCiAgIHJlYWxt cy4gIFRoaXMgcHJhY3RpY2UgaW50cm9kdWNlcyBzZWN1cml0eSB0aHJlYXRzIGJlY2F1c2Ug S0RDcyBhcmUKICAgb3BlbiB0byB0aGUgcHVibGljIG5ldHdvcmsuICBBZG1pbmlzdHJhdG9y cyBtYXkgdGhpbmsgb2YgcmVzdHJpY3RpbmcKICAgdGhlIGFjY2VzcyB0byB0aGUgS0RDIHRv IHRoZSB0cnVzdGVkIHJlYWxtcyBvbmx5LiAgSG93ZXZlciwgdGhpcwogICBhcHByb2FjaCBp cyBub3Qgc2NhbGFibGUgYW5kIGRvZXMgbm90IHJlYWxseSBwcm90ZWN0IHRoZSBLREMuCiAg IEluZGVlZCwgd2hlbiB0aGUgcmVtb3RlIHJlYWxtcyBoYXZlIHNldmVyYWwgSVAgcHJlZml4 ZXMgKGUuZy4gY29udHJvbAogICBjZW50ZXJzIG9yIG91dHNvdXJjaW5nIGNvbXBhbmllcywg bG9jYXRlZCB3b3JsZCB3aWRlKSwgdGhlbiB0aGUKICAgYWRtaW5pc3RyYXRvciBvZiB0aGUg bG9jYWwgS0RDIG11c3QgY29sbGVjdCB0aGUgbGlzdCBvZiBwcmVmaXhlcyB0aGF0CiAgIGJl bG9uZyB0byB0aGVzZSBvcmdhbml6YXRpb24uICBUaGUgZmlsdGVyaW5nIHJ1bGVzIG11c3Qg dGhlbgogICBleHBsaWNpdGx5IGFsbG93IHRoZSBpbmNvbWluZyB0cmFmZmljIGZyb20gYW55 IGhvc3QgdGhhdCBiZWxvbmdzIHRvCiAgIG9uZSBvZiB0aGVzZSBwcmVmaXhlcy4gIFRoaXMg bWFrZXMgdGhlIGFkbWluaXN0cmF0b3IncyB0YXNrcyBtb3JlCiAgIGNvbXBsaWNhdGVkIGFu ZCBwcm9uZSB0byBodW1hbiBlcnJvcnMuICBBbmQgYWxzbywgdGhlIG1haW50ZW5hbmNlCiAg IGNvc3QgaW5jcmVhc2VzLiAgT24gdGhlIG90aGVyIGhhbmQsIHdoZW4gYSByYW5nZSBvZiBl eHRlcm5hbCBJUAogICBhZGRyZXNzZXMgYXJlIGFsbG93ZWQgdG8gY29tbXVuaWNhdGUgd2l0 aCB0aGUgS0RDIHRoZW4gdGhlIHJpc2sgb2YKICAgYmVjb21pbmcgdGFyZ2V0IHRvIGF0dGFj a3MgZnJvbSByZW1vdGUgbWFsaWNpb3VzIHVzZXJzIGluY3JlYXNlcy4KCiAgIFNhdGlzZnlp bmcgcmVxdWlyZW1lbnRzIFItMSwgUi0zLCBSLTQgYW5kIFItNSB3aWxsIGVsaW1pbmF0ZSAo b3IKICAgY29uc2lkZXJhYmx5IGRpbWluaXNoKSB0aGlzIGlzc3VlIG9mIGV4cG9zdXJlIHRv IERvUyBhdHRhY2tzLgoKCjUuNS4gIENsaWVudCdzIHBlcmZvcm1hbmNlCgogICBJbiBLZXJi ZXJvcyBjcm9zcy1yZWFsbSBvcGVyYXRpb25zLCBjbGllbnRzIGhhdmUgdG8gcGVyZm9ybSBU R1MKICAgZXhjaGFuZ2VzIHdpdGggYWxsIHRoZSBLRENzIGluIHRoZSB0cnVzdCBwYXRoLCBp bmNsdWRpbmcgdGhlIGhvbWUgS0RDCiAgIGFuZCB0aGUgdGFyZ2V0IEtEQy4gIEEgVEdTIGV4 Y2hhbmdlIHJlcXVpcmVzIGNyeXB0b2dyYXBoaWMgb3BlcmF0aW9ucwogICBhbmQgbWF5IGNv bnN1bWUgYSBsYXJnZSBhbW91bnQgb2YgcHJvY2Vzc2luZyB0aW1lIGVzcGVjaWFsbHkgd2hl biB0aGUKICAgY2xpZW50IGhhcyBsaW1pdGVkIGNvbXB1dGF0aW9uYWwgY2FwYWJpbGl0aWVz LiAgQXMgYSByZXN1bHQsIHRoZQogICBvdmVyaGVhZCBvZiBLZXJiZXJvcyBjcm9zcy1yZWFs bSBleGNoYW5nZXMgbWF5IGdyb3dzIGludG8KICAgdW5hY2NlcHRhYmxlIGRlbGF5cy4KCiAg IFdlIHBvcnRlZCB0aGUgTUlUIEtlcmJlcm9zIGxpYnJhcnkgKHZlcnNpb24gMS4yLjQpLCBp bXBsZW1lbnRlZCBhCgoKClMuU2FrYW5lLCBldCBhbC4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDEwXQoMCkludGVybmV0LURyYWZ0ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm92ZW1iZXIgMjAw OQoKCiAgIEtlcmJlcm9zIGNsaWVudCBvbiBvdXIgb3JpZ2luYWwgYm9hcmQgd2l0aCBIOCAo MTYtYml0LCAyME1IeiksIGFuZAogICBtZWFzdXJlZCB0aGUgcHJvY2VzcyB0aW1lIG9mIGVh Y2ggS2VyYmVyb3MgbWVzc2FnZSBbS1JCSU1QTF0uICBJdAogICB0YWtlcyAxOTUgbWlsbGlz ZWNvbmRzIHRvIHBlcmZvcm0gYSBUR1MgZXhjaGFuZ2Ugd2l0aCB0aGUgb24tYm9hcmQKICAg SC9XIGNyeXB0byBlbmdpbmUuICBJbmRlZWQsIHRoaXMgcmVzdWx0IHNlZW1zIHJlYXNvbmFi bGUgdG8gdGhlCiAgIHJlcXVpcmVtZW50IG9mIHRoZSByZXNwb25zZSB0aW1lIGZvciB0aGUg Y29udHJvbCBuZXR3b3JrLiAgSG93ZXZlciwKICAgd2UgZGlkIG5vdCBtb2RpZnkgdGhlIGNs b2NrIHNwZWVkIG9mIHRoZSBIOCBkdXJpbmcgb3VyIG1lYXN1cmVtZW50LgogICBUaGUgcHJv Y2Vzc2luZyB0aW1lIG11c3QgYmUgc2xvd2VyIGluIGEgYWN0dWFsIGVudmlyb25tZW50IGJl Y2F1c2UgSDgKICAgaXMgdXNlZCB3aXRoIGxvd2VyZWQgY2xvY2sgc3BlZWQgaW4gc3VjaCBz eXN0ZW0uICBXaXRoIHN1Y2ggZGV2aWNlcywKICAgdGhlIGRlbGF5cyBjYW4gZ3JvdyB0byB1 bmFjY2VwdGFibGUgZGVsYXlzIHdoZW4gdGhlIG51bWJlciBvZgogICBpbnRlcm1lZGlhcnkg cmVhbG1zIGluY3JlYXNlcy4KCiAgIFNhdGlzZnlpbmcgcmVxdWlyZW1lbnRzIFItMSwgUi0y LCBSLTYgYW5kIFItNyB3aWxsIGVsaW1pbmF0ZSAob3IKICAgY29uc2lkZXJhYmx5IGRpbWlu aXNoKSB0aGlzIGlzc3VlIHJlbGF0aW5nIHRvIHRoZSBjbGllbnQncwogICBwZXJmb3JtYW5j ZS4KCgo1LjYuICBLZXJiZXJvcyBQcmUtYXV0aGVudGljYXRpb24gcHJvYmxlbSBpbiByb2Ft aW5nIHNjZW5hcmlvcwoKICAgSW4gcm9hbWluZyBzY2VuYXJpb3MsIHRoZSBjbGllbnQgbmVl ZHMgdG8gY29udGFjdCBoZXIgaG9tZSBLREMgdG8KICAgb2J0YWluIGEgY3Jvc3MtcmVhbG0g VEdUIGZvciB0aGUgbG9jYWwgKG9yIHZpc2l0ZWQpIHJlYWxtLiAgSG93ZXZlciwKICAgdGhl IHBvbGljeSBvZiB0aGUgbmV0d29yayBhY2Nlc3MgcHJvdmlkZXJzIG9yIHRoZSBnYXRld2F5 IGluIHRoZQogICBsb2NhbCBuZXR3b3JrIHVzdWFsbHkgZG9lcyBub3QgYWxsb3cgY2xpZW50 cyB0byBjb21tdW5pY2F0ZSB3aXRoCiAgIGhvc3RzIGluIHRoZSBJbnRlcm5ldCB1bmxlc3Mg dGhleSBwcm92aWRlIHZhbGlkIGF1dGhlbnRpY2F0aW9uCiAgIGNyZWRlbnRpYWxzLiAgSW4g dGhpcyBtYW5uZXIsIHRoZSBjbGllbnQgZW5jb3VudGVycyBhIGNoaWNrZW4tYW5kLWVnZwog ICBwcm9ibGVtIHdoZXJlIHR3byByZXNvdXJjZXMgYXJlIGludGVyZGVwZW5kZW50OyB0aGUg SW50ZXJuZXQKICAgY29ubmVjdGlvbiBpcyBuZWVkZWQgdG8gY29udGFjdCB0aGUgaG9tZSBL REMgYW5kIGZvciBvYnRhaW5pbmcKICAgY3JlZGVudGlhbHMsIGFuZCBvbiB0aGUgb3RoZXIg aGFuZCwgdGhlIEludGVybmV0IGNvbm5lY3Rpb24gaXMgb25seQogICBncmFudGVkIGZvciBj bGllbnRzIHdobyBoYXZlIHZhbGlkIGNyZWRlbnRpYWxzLiAgQXMgYSByZXN1bHQsIHRoZQog ICBLZXJiZXJvcyBwcm90b2NvbCBjYW4gbm90IGJlIHVzZWQgYXMgaXQgaXMgZm9yIGF1dGhl bnRpY2F0aW5nIHJvYW1pbmcKICAgY2xpZW50cyByZXF1ZXN0aW5nIG5ldHdvcmsgYWNjZXNz LgoKICAgU2F0aXNmeWluZyByZXF1aXJlbWVudHMgUi0zIGFuZCBSLTQgd2lsbCBlbGltaW5h dGUgKG9yIGNvbnNpZGVyYWJseQogICBkaW1pbmlzaCkgdGhpcyByb2FtaW5nLXJlbGF0ZWQg aXNzdWUgcGVydGFpbmluZyB0byBLZXJiZXJvcyBwcmUtCiAgIGF1dGhlbnRpY2F0aW9uLgoK CjYuICBJbXBsZW1lbnRhdGlvbiBjb25zaWRlcmF0aW9ucwoKICAgVGhpcyBkb2N1bWVudCBk ZXNjcmliZXMgaXNzdWVzIG9mIHRoZSBjcm9zcy1yZWFsbSBvcGVyYXRpb24uICBUaGVyZQog ICBhcmUgaW1wb3J0YW50IG1hdHRlcnMgdG8gYmUgY29uc2lkZXJlZCwgd2hlbiBkZXNpZ25p bmcgYW5kCiAgIGltcGxlbWVudGluZyBzb2x1dGlvbnMgZm9yIHRoZXNlIGlzc3Vlcy4gIFNv bHV0aW9uIG11c3Qgbm90IGludHJvZHVjZQogICBuZXcgcHJvYmxlbXMuICBBbnkgc29sdXRp b24gc2hvdWxkIHVzZSBleGlzdGluZyBjb21wb25lbnRzIG9yCiAgIHByb3RvY29scyBhcyBt dWNoIGFzIHBvc3NpYmxlLCBhbmQgaXQgc2hvdWxkIGF2b2lkIGludHJvZHVjaW5nCiAgIGRl ZmluaXRpb25zIG9mIG5ldyBjb21wb25lbnRzLiAgSXQgc2hvdWxkIG5vdCByZXF1aXJlIG5l dyBjaGFuZ2VzIHRvCiAgIGV4aXN0aW5nIGRlcGxveWVkIGNsaWVudHMsIGFuZCBpdCBzaG91 bGQgbm90IGluZmx1ZW5jZSB0aGUgY2xpZW50CiAgIGNvZGUtYmFzZSBhcyBtdWNoIGFzIHBv c3NpYmxlLiAgQmVjYXVzZSBhIEtEQyBpcyBhIHNpZ25pZmljYW50IHNlcnZlcgogICBpbiBh biBpbmZvcm1hdGlvbiBzeXN0ZW0gYmFzZWQgb24gS2VyYmVyb3MuICBOZXcgYnVyZGVuIG9u IHRoZSBLREMKICAgc2hvdWxkIGJlIG1pbmltYWwuICBTb2x1dGlvbnMgbXVzdCB0YWtlIHRo ZXNlIHRyYWRlb2ZmcyBhbmQgdGhlCgoKClMuU2FrYW5lLCBldCBhbC4gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDExXQoMCkludGVybmV0 LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm92 ZW1iZXIgMjAwOQoKCiAgIHJlcXVpcmVtZW50cyBpbnRvIGNvbnNpZGVyYXRpb24uICBPbiB0 aGUgb3RoZXIgaGFuZCwgc29sdXRpb25zIGFyZQogICBub3QgcmVxdWlyZWQgdG8gc29sdmUg YWxsIHRoZSBpc3N1ZXMgbGlzdGVkIGluIHRoaXMgZG9jdW1lbnQgYXQgb25jZS4KCgo3LiAg SUFOQSBDb25zaWRlcmF0aW9ucwoKICAgVGhpcyBkb2N1bWVudCBtYWtlcyBubyByZXF1ZXN0 IG9mIElBTkEuCgoKOC4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zCgogICBUaGlzIGRvY3Vt ZW50IGNsYXJpZmllcyB0aGUgaXNzdWVzIG9mIHRoZSBjcm9zcy1yZWFsbSBvcGVyYXRpb24g b2YKICAgdGhlIEtlcmJlcm9zIFYgc3lzdGVtLCB3aGljaCBpbmNsdWRlIHNlY3VyaXR5IGlz c3VlcyB0byBiZQogICBjb25zaWRlcmVkLiAgU2VlIFNlY3Rpb24gNS4xLCA1LjIsIDUuMyBh bmQgNS40IGZvciBmdXJ0aGVyIGRldGFpbHMuCgoKOS4gIEFja25vd2xlZGdlbWVudHMKCiAg IFRoZSBhdXRob3JzIGFyZSBncmF0ZWZ1bCB0byBOb2J1byBPa2FiZSwgS2F6dW5vcmkgTWl5 YXphd2EsIGFuZAogICBBdHN1c2hpIElub3VlLiAgVGhleSBnYXZlIHVzIGxvdHMgb2YgY29t bWVudHMgYW5kIHN1Z2dlc3Rpb25zIHRvIHRoaXMKICAgZG9jdW1lbnQgZnJvbSB0aGUgZWFy bHkgc3RhZ2UuICBOaWNvbGFzIFdpbGxpYW1zLCBDaGFza2llbCBHcnVuZG1hbgogICBhbmQg TG92ZSBIb3JucXVpc3QgQXN0cmFuZCBnYXZlIHZhbHVhYmxlIHN1Z2dlc3Rpb25zIGFuZCBj b3JyZWN0aW9ucy4KICAgVGhvbWFzIEhhcmRqb25vIGRldm90ZWQgbXVjaCB3b3JrIGFuZCBo ZWxwZWQgdG8gaW1wcm92ZSB0aGlzCiAgIGRvY3VtZW50LiAgRmluYWxseSwgdGhlIGF1dGhv cnMgdGhhbmsgdG8gSmVmZnJleSBIdXR6ZWxtYW4uICBIZSBnYXZlCiAgIHVzIGEgbG90IG9m IHN1Z2dlc3Rpb25zIGZvciBjb21wbGV0aW9uIG9mIHRoaXMgZG9jdW1lbnQuCgoKMTAuICBS ZWZlcmVuY2VzCgoKMTAuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzCgogICBbUkZDNDEyMF0g ICAgIE5ldW1hbiwgQy4sIFl1LCBULiwgSGFydG1hbiwgUy4sIGFuZCBLLiBSYWVidXJuLCAi VGhlCiAgICAgICAgICAgICAgICAgS2VyYmVyb3MgTmV0d29yayBBdXRoZW50aWNhdGlvbiBT ZXJ2aWNlIChWNSkiLCBSRkMKICAgICAgICAgICAgICAgICA0MTIwLCBKdWx5IDIwMDUuCgoK MTAuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMKCiAgIFtDU1BDXSAgICAgICAgaHR0cDov L3d3dy5zaGVsbGNoZW1pY2Fscy5jb20vbmV3cy8xLDEwOTgsNzItbmV3c19pZD0KICAgICAg ICAgICAgICAgICA1MzEsMDAuaHRtbAoKICAgW0tSQklNUExdICAgICAiQSBQcm90b3R5cGUg b2YgYSBTZWN1cmUgQXV0b25vbW91cyBCb290c3RyYXAgTWVjaGFuaXNtCiAgICAgICAgICAg ICAgICAgZm9yIENvbnRyb2wgTmV0d29ya3MiLCBOb2J1byBPa2FiZSwgU2hvaWNoaSBTYWth bmUsCiAgICAgICAgICAgICAgICAgTWFzYWhpcm8gSXNoaXlhbWEsIEF0c3VzaGkgSW5vdWUg YW5kIEhpcm9zaGkgRXNha2ksCiAgICAgICAgICAgICAgICAgU0FJTlQsIHBwLiA1Ni02Miwg SUVFRSBDb21wdXRlciBTb2NpZXR5LCAyMDA2LgoKCgoKClMuU2FrYW5lLCBldCBhbC4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDEyXQoM CkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgTm92ZW1iZXIgMjAwOQoKCiAgIFtOQU1dICAgICAgICAgaHR0cDovL3d3dy5uYW0u bmwvCgogICBbUk5TUy1IOF0gICAgIGh0dHA6Ly93d3cucmVuZXNhcy5jb20vZm13ay5qc3A/ Y250PWg4X2ZhbWlseV9sYW5kaW5nLgogICAgICAgICAgICAgICAgIGpzcCZmcD0vcHJvZHVj dHMvbXB1bWN1L2g4X2ZhbWlseS8KCiAgIFtSTlNTLU0xNkNdICAgaHR0cDovL3d3dy5yZW5l c2FzLmNvbS9mbXdrLmpzcD9jbnQ9bTE2Y19mYW1pbHlfbGFuZGkKICAgICAgICAgICAgICAg ICBuZy5qc3AmZnA9L3Byb2R1Y3RzL21wdW1jdS9tMTZjX2ZhbWlseS8KCiAgIFtTSEVMTENI RU1dICAgaHR0cDovL3d3dy5zaGVsbGNoZW1pY2Fscy5jb20vaG9tZS8xLDEwOTgsLTEsMDAu aHRtbAoKICAgW1NQRUNDUk9TU10gICBJLiBDZXJ2ZXNhdG8gYW5kIEEuIEphZ2dhcmQgYW5k IEEuIFNjZWRyb3YgYW5kIEMuCiAgICAgICAgICAgICAgICAgV2Fsc3RhZCwgIlNwZWNpZnlp bmcgS2VyYmVyb3MgNSBDcm9zcy1SZWFsbQogICAgICAgICAgICAgICAgIEF1dGhlbnRpY2F0 aW9uIiwgRmlmdGggV29ya3Nob3Agb24gSXNzdWVzIGluIHRoZSBUaGVvcnkKICAgICAgICAg ICAgICAgICBvZiBTZWN1cml0eSwgSmFuIDIwMDUuCgpBdXRob3JzJyBBZGRyZXNzZXMKCiAg IFNob2ljaGkgU2FrYW5lCiAgIFlva29nYXdhIEVsZWN0cmljIENvcnBvcmF0aW9uCiAgIDIt OS0zMiBOYWthY2hvLCBNdXNhc2hpbm8tc2hpLAogICBUb2t5byAgMTgwLTg3NTAgSmFwYW4K ICAgRS1tYWlsOiBTaG91aWNoaS5TYWthbmVAanAueW9rb2dhd2EuY29tCgoKICAgS2VuJ2lj aGkgS2FtYWRhCiAgIFlva29nYXdhIEVsZWN0cmljIENvcnBvcmF0aW9uCiAgIDItOS0zMiBO YWthY2hvLCBNdXNhc2hpbm8tc2hpLAogICBUb2t5byAgMTgwLTg3NTAgSmFwYW4KICAgRS1t YWlsOiBLZW4taWNoaS5LYW1hZGFAanAueW9rb2dhd2EuY29tCgoKICAgU2FiZXIgWnJlbGxp CiAgIFlva29nYXdhIEVsZWN0cmljIENvcnBvcmF0aW9uCiAgIDItOS0zMiBOYWthY2hvLCBN dXNhc2hpbm8tc2hpLAogICBUb2t5byAgMTgwLTg3NTAgSmFwYW4KICAgRS1tYWlsOiBTYWJl ci5acmVsbGlAanAueW9rb2dhd2EuY29tCgoKICAgTWFzYWhpcm8gSXNoaXlhbWEKICAgVG9z aGliYSBDb3Jwb3JhdGlvbgogICAxLCBrb211a2FpLXRvc2hpYmEtY2hvLCBTYWl3YWkta3Us CiAgIEthd2FzYWtpICAyMTItODU4MiBKYXBhbgogICBFLW1haWw6IG1hc2FoaXJvQGlzbC5y ZGMudG9zaGliYS5jby5qcAoKCgoKCgoKClMuU2FrYW5lLCBldCBhbC4gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDEzXQoMCg== --------------080204010408090509050906 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg --------------080204010408090509050906-- From krb-wg-archive@lists.ietf.org Wed Nov 18 07:46:27 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E583628C0FE for ; Wed, 18 Nov 2009 07:46:27 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Wed, 18 Nov 2009 07:46:26 -0800 (PST) Received: from ppp-58-10-87-142.revip2.asianet.co.th (ppp-58-10-87-142.revip2.asianet.co.th [58.10.87.142]) by core3.amsl.com (Postfix) with ESMTP id 8733A28C0FD for ; Wed, 18 Nov 2009 07:46:22 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091118154622.8733A28C0FD@core3.amsl.com> Date: Wed, 18 Nov 2009 07:46:22 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Epuhasoq. All rights reserved.
From krb-wg-archive@lists.ietf.org Wed Nov 18 08:52:26 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5C7A93A67C0 for ; Wed, 18 Nov 2009 08:52:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -50.144 X-Spam-Level: X-Spam-Status: No, score=-50.144 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HELO_EQ_TELESP=1.245, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_NJABL_PROXY=1.643, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, SARE_RECV_SPAM_DOMN02=1.666, TVD_RCVD_IP=1.931, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9GduUd6jUfzT for ; Wed, 18 Nov 2009 08:52:24 -0800 (PST) Received: from 189-68-45-102.dsl.telesp.net.br (189-68-45-102.dsl.telesp.net.br [189.68.45.102]) by core3.amsl.com (Postfix) with ESMTP id A0B8C3A67D2 for ; Wed, 18 Nov 2009 08:52:20 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091118165221.A0B8C3A67D2@core3.amsl.com> Date: Wed, 18 Nov 2009 08:52:20 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 11, Issue 21 | November 18, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Emeefaneli ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Wed Nov 18 10:12:07 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4AC303A677E for ; Wed, 18 Nov 2009 10:12:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -24.077 X-Spam-Level: X-Spam-Status: No, score=-24.077 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OnFLLzsLvxQB for ; Wed, 18 Nov 2009 10:12:05 -0800 (PST) Received: from 189-55-181-53-nd.cpe.vivax.com.br (189-55-181-53-nd.cpe.vivax.com.br [189.55.181.53]) by core3.amsl.com (Postfix) with ESMTP id 755F53A6834 for ; Wed, 18 Nov 2009 10:12:02 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091118181202.755F53A6834@core3.amsl.com> Date: Wed, 18 Nov 2009 10:12:02 -0800 (PST) News
Trouble viewing these images? See the online version of this e-mail.

Dear krb-wg-archive@lists.ietf.org can't view this element? Press here to unlock it
 

© 1999-2009 Lqgyin, Inc.
This e-mail was sent to krb-wg-archive@lists.ietf.org.

Click here to unsubscribe
From krb-wg-archive@lists.ietf.org Wed Nov 18 16:10:02 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 126E93A6A2B for ; Wed, 18 Nov 2009 16:10:02 -0800 (PST) X-Quarantine-ID: <8UVkCsalykpX> X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Wed, 18 Nov 2009 16:10:00 -0800 (PST) Received: from dslb-094-223-110-098.pools.arcor-ip.net (dslb-092-078-248-010.pools.arcor-ip.net [92.78.248.10]) by core3.amsl.com (Postfix) with ESMTP id 2E63A3A6886 for ; Wed, 18 Nov 2009 16:09:59 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091119001000.2E63A3A6886@core3.amsl.com> Date: Wed, 18 Nov 2009 16:09:59 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Ymicav. All rights reserved.
From krb-wg-archive@lists.ietf.org Wed Nov 18 17:11:43 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4E5603A6A8B for ; Wed, 18 Nov 2009 17:11:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -77.706 X-Spam-Level: X-Spam-Status: No, score=-77.706 tagged_above=-999 required=5 tests=[BAYES_99=3.5, HELO_DYNAMIC_HCC=4.295, HELO_EQ_MINDSPRING=0.45, HELO_EQ_MODEMCABLE=0.768, HOST_EQ_MINDSPRING=2.2, HOST_EQ_MODEMCABLE=1.368, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, TVD_SPACE_RATIO=2.219, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LbOuecIQ5yBT for ; Wed, 18 Nov 2009 17:11:42 -0800 (PST) Received: from user-38q44bj.cable.mindspring.com (user-38q44bj.cable.mindspring.com [209.162.17.115]) by core3.amsl.com (Postfix) with ESMTP id 96C1A3A69B8 for ; Wed, 18 Nov 2009 17:11:41 -0800 (PST) From: Kenisha To: "krb-wg-archive" Subject: Hey krb-wg-archive Content-Type: text/plain; Mime-Version: 1.0 Message-Id: <20091119011141.96C1A3A69B8@core3.amsl.com> Date: Wed, 18 Nov 2009 17:11:41 -0800 (PST) Your final rate http://members.chello.hu/nemeth.zoltan19/hot.html From krb-wg-archive@lists.ietf.org Wed Nov 18 18:29:16 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D53F83A67B0 for ; Wed, 18 Nov 2009 18:29:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -46.945 X-Spam-Level: X-Spam-Status: No, score=-46.945 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bp05OQreuETi for ; Wed, 18 Nov 2009 18:29:15 -0800 (PST) Received: from 201-0-169-5.dial-up.telesp.net.br (201-0-169-5.dial-up.telesp.net.br [201.0.169.5]) by core3.amsl.com (Postfix) with ESMTP id E75EA3A685E for ; Wed, 18 Nov 2009 18:29:14 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091119022914.E75EA3A685E@core3.amsl.com> Date: Wed, 18 Nov 2009 18:29:14 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 OYGY Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Wed Nov 18 18:34:52 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CFCF63A6ABA for ; Wed, 18 Nov 2009 18:34:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -46.945 X-Spam-Level: X-Spam-Status: No, score=-46.945 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JmTXQx8iGOve for ; Wed, 18 Nov 2009 18:34:51 -0800 (PST) Received: from 201-0-169-5.dial-up.telesp.net.br (201-0-169-5.dial-up.telesp.net.br [201.0.169.5]) by core3.amsl.com (Postfix) with ESMTP id D9B333A6A01 for ; Wed, 18 Nov 2009 18:34:50 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091119023450.D9B333A6A01@core3.amsl.com> Date: Wed, 18 Nov 2009 18:34:50 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 EPAYZISIOG Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Thu Nov 19 04:23:54 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 668263A6918 for ; Thu, 19 Nov 2009 04:23:54 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Thu, 19 Nov 2009 04:23:53 -0800 (PST) Received: from 200-219-71-143.ggs6102.3g.brasiltelecom.net.br (200-219-73-142.ggs6102.3g.brasiltelecom.net.br [200.219.73.142]) by core3.amsl.com (Postfix) with ESMTP id 2E8233A6816 for ; Thu, 19 Nov 2009 04:23:51 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091119122352.2E8233A6816@core3.amsl.com> Date: Thu, 19 Nov 2009 04:23:51 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Jdibemeg. All rights reserved.
From krb-wg-archive@lists.ietf.org Thu Nov 19 04:57:13 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 379C23A6917 for ; Thu, 19 Nov 2009 04:57:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -27.287 X-Spam-Level: X-Spam-Status: No, score=-27.287 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, TVD_RCVD_IP=1.931, TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8io-ybsOyl82 for ; Thu, 19 Nov 2009 04:57:12 -0800 (PST) Received: from 190-82-186-178.adsl.tie.cl (190-82-156-155.adsl.tie.cl [190.82.156.155]) by core3.amsl.com (Postfix) with ESMTP id 6E3A63A67CF for ; Thu, 19 Nov 2009 04:57:07 -0800 (PST) From: Chantelle To: "krb-wg-archive" Subject: User krb-wg-archive Content-Type: text/plain; Mime-Version: 1.0 Message-Id: <20091119125708.6E3A63A67CF@core3.amsl.com> Date: Thu, 19 Nov 2009 04:57:07 -0800 (PST) Still studying? http://210.1.20.7/noknang_rn/hot.html From krb-wg-archive@lists.ietf.org Thu Nov 19 12:06:39 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 13C9728C101 for ; Thu, 19 Nov 2009 12:06:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -28.191 X-Spam-Level: X-Spam-Status: No, score=-28.191 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, NUMERIC_HTTP_ADDR=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zFiffabUQUfj for ; Thu, 19 Nov 2009 12:06:33 -0800 (PST) Received: from 93-41-32-17.ip79.fastwebnet.it (93-41-32-17.ip79.fastwebnet.it [93.41.32.17]) by core3.amsl.com (Postfix) with ESMTP id ED4623A6860 for ; Thu, 19 Nov 2009 12:06:31 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091119200631.ED4623A6860@core3.amsl.com> Date: Thu, 19 Nov 2009 12:06:31 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 AOPUD Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Fri Nov 20 02:42:00 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A4B533A6AB2 for ; Fri, 20 Nov 2009 02:42:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -65.491 X-Spam-Level: X-Spam-Status: No, score=-65.491 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR=2.426, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aM+Jwqnm8pGF for ; Fri, 20 Nov 2009 02:41:58 -0800 (PST) Received: from triband-mum-59.183.160.84.mtnl.net.in (triband-mum-59.183.160.84.mtnl.net.in [59.183.160.84]) by core3.amsl.com (Postfix) with ESMTP id 598393A6A67 for ; Fri, 20 Nov 2009 02:41:57 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091120104157.598393A6A67@core3.amsl.com> Date: Fri, 20 Nov 2009 02:41:57 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 25, Issue 35 | November 18, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Uyqimegee ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Fri Nov 20 03:42:51 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 694DB3A6A89 for ; Fri, 20 Nov 2009 03:42:51 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Fri, 20 Nov 2009 03:42:50 -0800 (PST) Received: from ael154.internetdsl.tpnet.pl (ael154.internetdsl.tpnet.pl [83.16.115.154]) by core3.amsl.com (Postfix) with ESMTP id 679163A6922 for ; Fri, 20 Nov 2009 03:42:49 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091120114249.679163A6922@core3.amsl.com> Date: Fri, 20 Nov 2009 03:42:49 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Ydilo. All rights reserved.
From krb-wg-archive@lists.ietf.org Fri Nov 20 12:04:25 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C63D43A698D for ; Fri, 20 Nov 2009 12:04:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -40.627 X-Spam-Level: X-Spam-Status: No, score=-40.627 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_SE=0.35, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UoTQBPAX-2D2 for ; Fri, 20 Nov 2009 12:04:24 -0800 (PST) Received: from 152-202-96-87.cust.blixtvik.se (152-202-96-87.cust.blixtvik.se [87.96.202.152]) by core3.amsl.com (Postfix) with ESMTP id 8C6C93A6873 for ; Fri, 20 Nov 2009 12:04:23 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091120200423.8C6C93A6873@core3.amsl.com> Date: Fri, 20 Nov 2009 12:04:23 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 CYRASUIWU Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Fri Nov 20 18:09:45 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 14E0E28C187 for ; Fri, 20 Nov 2009 18:09:45 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Fri, 20 Nov 2009 18:09:43 -0800 (PST) Received: from bzq-79-179-18-108.red.bezeqint.net (bzq-79-179-18-108.red.bezeqint.net [79.179.18.108]) by core3.amsl.com (Postfix) with ESMTP id CE2F528C18C for ; Fri, 20 Nov 2009 18:09:42 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091121020942.CE2F528C18C@core3.amsl.com> Date: Fri, 20 Nov 2009 18:09:42 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Fife. All rights reserved.
From krb-wg-archive@lists.ietf.org Sat Nov 21 13:06:12 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4D1003A696E for ; Sat, 21 Nov 2009 13:06:12 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Sat, 21 Nov 2009 13:06:10 -0800 (PST) Received: from dslc-082-083-140-232.pools.arcor-ip.net (dslc-082-083-140-232.pools.arcor-ip.net [82.83.140.232]) by core3.amsl.com (Postfix) with ESMTP id 2B50C3A6778 for ; Sat, 21 Nov 2009 13:06:09 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091121210610.2B50C3A6778@core3.amsl.com> Date: Sat, 21 Nov 2009 13:06:09 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Ycupoazi. All rights reserved.
From krb-wg-archive@lists.ietf.org Sat Nov 21 21:02:03 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3E2D23A6809 for ; Sat, 21 Nov 2009 21:02:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -25.174 X-Spam-Level: X-Spam-Status: No, score=-25.174 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DYNAMIC=1.144, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, SARE_RECV_SPAM_DOMN0b=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qwhef0DRnyXn for ; Sat, 21 Nov 2009 21:02:00 -0800 (PST) Received: from 118-171-10-114.dynamic.hinet.net (118-171-10-114.dynamic.hinet.net [118.171.10.114]) by core3.amsl.com (Postfix) with ESMTP id 67AAF3A65A5 for ; Sat, 21 Nov 2009 21:02:00 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091122050200.67AAF3A65A5@core3.amsl.com> Date: Sat, 21 Nov 2009 21:02:00 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 30, Issue 18 | November 18, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Rubobo ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Sat Nov 21 21:25:45 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A0F73A67D8 for ; Sat, 21 Nov 2009 21:25:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -29.097 X-Spam-Level: X-Spam-Status: No, score=-29.097 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XKSJswlbh5VF for ; Sat, 21 Nov 2009 21:25:44 -0800 (PST) Received: from 89-96-100-7.ip11.fastwebnet.it (89-96-100-7.ip11.fastwebnet.it [89.96.100.7]) by core3.amsl.com (Postfix) with ESMTP id 6DB833A67A4 for ; Sat, 21 Nov 2009 21:25:43 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091122052543.6DB833A67A4@core3.amsl.com> Date: Sat, 21 Nov 2009 21:25:43 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 OSOLYXOEF Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Sun Nov 22 20:20:22 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5DC3E3A6827 for ; Sun, 22 Nov 2009 20:20:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -22.333 X-Spam-Level: X-Spam-Status: No, score=-22.333 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DSL=1.129, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8hJXw54OZM0G for ; Sun, 22 Nov 2009 20:20:21 -0800 (PST) Received: from adsl196-64-211-217-196.adsl196-15.iam.net.ma (adsl196-64-211-217-196.adsl196-15.iam.net.ma [196.217.211.64]) by core3.amsl.com (Postfix) with ESMTP id D35753A6896 for ; Sun, 22 Nov 2009 20:20:15 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091123042016.D35753A6896@core3.amsl.com> Date: Sun, 22 Nov 2009 20:20:15 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
To open this image, click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 YFYITUZ Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Mon Nov 23 00:54:47 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3276B3A698F for ; Mon, 23 Nov 2009 00:54:47 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Mon, 23 Nov 2009 00:54:40 -0800 (PST) Received: from host15-56-static.28-79-b.business.telecomitalia.it (host15-56-static.28-79-b.business.telecomitalia.it [79.28.56.15]) by core3.amsl.com (Postfix) with ESMTP id 974513A693F for ; Mon, 23 Nov 2009 00:54:39 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091123085439.974513A693F@core3.amsl.com> Date: Mon, 23 Nov 2009 00:54:39 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Iqhuto. All rights reserved.
From krb-wg-archive@lists.ietf.org Mon Nov 23 10:59:57 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BC3C73A69CC for ; Mon, 23 Nov 2009 10:59:57 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Mon, 23 Nov 2009 10:59:56 -0800 (PST) Received: from ppp-124-121-118-229.revip2.asianet.co.th (ppp-124-121-118-229.revip2.asianet.co.th [124.121.118.229]) by core3.amsl.com (Postfix) with ESMTP id B963E3A6806 for ; Mon, 23 Nov 2009 10:59:55 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091123185955.B963E3A6806@core3.amsl.com> Date: Mon, 23 Nov 2009 10:59:55 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Uto. All rights reserved.
From krb-wg-archive@lists.ietf.org Mon Nov 23 12:57:29 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9C4DD3A688A for ; Mon, 23 Nov 2009 12:57:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -41.54 X-Spam-Level: X-Spam-Status: No, score=-41.54 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_EQ_DSL=1.129, HELO_EQ_HU=1.35, HOST_EQ_HU=1.245, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hyB2stiokEkO for ; Mon, 23 Nov 2009 12:57:27 -0800 (PST) Received: from 239-128.adsl.pool.ew.hu (239-128.adsl.pool.ew.hu [193.226.239.128]) by core3.amsl.com (Postfix) with ESMTP id A4B923A67E7 for ; Mon, 23 Nov 2009 12:57:25 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091123205725.A4B923A67E7@core3.amsl.com> Date: Mon, 23 Nov 2009 12:57:25 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 19, Issue 64 | November 24, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Iha ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Mon Nov 23 13:52:30 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9FB6F28C1C3 for ; Mon, 23 Nov 2009 13:52:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -25.053 X-Spam-Level: X-Spam-Status: No, score=-25.053 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DYNAMIC=1.144, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, NUMERIC_HTTP_ADDR=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uSqRyVm7mGUe for ; Mon, 23 Nov 2009 13:52:29 -0800 (PST) Received: from h10.12.23.98.dynamic.ip.windstream.net (h10.12.23.98.dynamic.ip.windstream.net [98.23.12.10]) by core3.amsl.com (Postfix) with ESMTP id 065293A6951 for ; Mon, 23 Nov 2009 13:52:28 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091123215229.065293A6951@core3.amsl.com> Date: Mon, 23 Nov 2009 13:52:28 -0800 (PST) News
Trouble viewing these images? See the online version of this e-mail.

Dear krb-wg-archive@lists.ietf.org can't view this element? Press here to unlock it
 

© 1999-2009 Lyc, Inc.
This e-mail was sent to krb-wg-archive@lists.ietf.org.

Click here to unsubscribe
From krb-wg-archive@lists.ietf.org Mon Nov 23 19:38:07 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 400CC3A69F7 for ; Mon, 23 Nov 2009 19:38:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -42.262 X-Spam-Level: X-Spam-Status: No, score=-42.262 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_ALMOST_IP=5.417, FH_HOST_ALMOST_IP=1.889, FH_HOST_EQ_DYNAMICIP=2.177, GB_I_LETTER=-2, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_DYNAMIC=1.144, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eB1sZ5foezin for ; Mon, 23 Nov 2009 19:38:05 -0800 (PST) Received: from 163.Red-83-34-176.dynamicIP.rima-tde.net (128.Red-83-38-192.dynamicIP.rima-tde.net [83.38.192.128]) by core3.amsl.com (Postfix) with ESMTP id 610483A69F4 for ; Mon, 23 Nov 2009 19:38:03 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091124033803.610483A69F4@core3.amsl.com> Date: Mon, 23 Nov 2009 19:38:03 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
Page loaded without image? Click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 FUBI Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Tue Nov 24 07:00:21 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7790E3A6A7F for ; Tue, 24 Nov 2009 07:00:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.206 X-Spam-Level: X-Spam-Status: No, score=-15.206 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HELO_EQ_DYNAMIC=1.144, HELO_EQ_IP_ADDR=1.119, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_NUMERIC_HELO=2.067, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2eEWTLtBFZUr for ; Tue, 24 Nov 2009 07:00:15 -0800 (PST) Received: from 189.114.162.18.dynamic.adsl.gvt.net.br (189.114.162.18.dynamic.adsl.gvt.net.br [189.114.162.18]) by core3.amsl.com (Postfix) with ESMTP id BBF5E3A67F4 for ; Tue, 24 Nov 2009 07:00:14 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091124150014.BBF5E3A67F4@core3.amsl.com> Date: Tue, 24 Nov 2009 07:00:14 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 29, Issue 56 | November 24, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Ofyzaj ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Tue Nov 24 11:32:22 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6E8723A6767 for ; Tue, 24 Nov 2009 11:32:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.487 X-Spam-Level: X-Spam-Status: No, score=-9.487 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HELO_EQ_TELESP=1.245, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, SARE_RECV_SPAM_DOMN02=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yh1VoHc6Cl7H for ; Tue, 24 Nov 2009 11:32:16 -0800 (PST) Received: from 189-46-94-35.dsl.telesp.net.br (189-46-94-35.dsl.telesp.net.br [189.46.94.35]) by core3.amsl.com (Postfix) with ESMTP id 856873A6819 for ; Tue, 24 Nov 2009 11:32:07 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091124193207.856873A6819@core3.amsl.com> Date: Tue, 24 Nov 2009 11:32:07 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
Page loaded without image? Click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 TAQIBAUVAD Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Tue Nov 24 13:50:52 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1789A3A6819 for ; Tue, 24 Nov 2009 13:50:52 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Tue, 24 Nov 2009 13:50:45 -0800 (PST) Received: from 188.4.248.109.dsl.dyn.forthnet.gr (188.4.248.109.dsl.dyn.forthnet.gr [188.4.248.109]) by core3.amsl.com (Postfix) with ESMTP id A01393A6821 for ; Tue, 24 Nov 2009 13:50:44 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091124215044.A01393A6821@core3.amsl.com> Date: Tue, 24 Nov 2009 13:50:44 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Egjvyt. All rights reserved.
From krb-wg-archive@lists.ietf.org Tue Nov 24 15:02:25 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 36DEE3A67AF for ; Tue, 24 Nov 2009 15:02:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -64.053 X-Spam-Level: X-Spam-Status: No, score=-64.053 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DSL=1.129, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1VI-7ZQXq9xl for ; Tue, 24 Nov 2009 15:02:18 -0800 (PST) Received: from host-84-223-74-240.cust-adsl.tiscali.it (host-84-223-74-240.cust-adsl.tiscali.it [84.223.74.240]) by core3.amsl.com (Postfix) with ESMTP id EDE2F3A67DF for ; Tue, 24 Nov 2009 15:02:09 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091124230209.EDE2F3A67DF@core3.amsl.com> Date: Tue, 24 Nov 2009 15:02:09 -0800 (PST) News
Trouble viewing these images? See the online version of this e-mail.

Dear krb-wg-archive@lists.ietf.org can't view this element? Press here to unlock it
 

© 1999-2009 Qqsaw, Inc.
This e-mail was sent to krb-wg-archive@lists.ietf.org.

Click here to unsubscribe
From krb-wg-archive@lists.ietf.org Wed Nov 25 03:44:00 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4148E3A68C8 for ; Wed, 25 Nov 2009 03:44:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -30.957 X-Spam-Level: X-Spam-Status: No, score=-30.957 tagged_above=-999 required=5 tests=[BAYES_99=3.5, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_EQ_DSL=1.129, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, NUMERIC_HTTP_ADDR=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2WOa0UiJ3CCU for ; Wed, 25 Nov 2009 03:43:58 -0800 (PST) Received: from bl7-230-163.dsl.telepac.pt (bl7-230-163.dsl.telepac.pt [85.240.230.163]) by core3.amsl.com (Postfix) with ESMTP id 98FBD3A6886 for ; Wed, 25 Nov 2009 03:43:57 -0800 (PST) From: Official VIAGRA (R) Store To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive 75% 0FF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091125114357.98FBD3A6886@core3.amsl.com> Date: Wed, 25 Nov 2009 03:43:57 -0800 (PST) FREE Shipping - NO Sales Tax
Trouble viewing this message? Just click here.
 
 
 
Page loaded without image? Click here
 
 
 
Click here to read about our Privacy Policy.
Click here to unsubscribe from our newsletter.

(c) 2008-2009 PERASETY Inc.
All rights reserved
From krb-wg-archive@lists.ietf.org Wed Nov 25 06:45:40 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 64F433A6ACB for ; Wed, 25 Nov 2009 06:45:40 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Wed, 25 Nov 2009 06:45:38 -0800 (PST) Received: from dslb-088-071-072-061.pools.arcor-ip.net (dslb-088-071-072-061.pools.arcor-ip.net [88.71.72.61]) by core3.amsl.com (Postfix) with ESMTP id 02CA03A6ACD for ; Wed, 25 Nov 2009 06:45:37 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091125144538.02CA03A6ACD@core3.amsl.com> Date: Wed, 25 Nov 2009 06:45:37 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Gjso. All rights reserved.
From krb-wg-archive@lists.ietf.org Wed Nov 25 13:50:40 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3F8033A6B8F for ; Wed, 25 Nov 2009 13:50:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -51.243 X-Spam-Level: X-Spam-Status: No, score=-51.243 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DSL=1.129, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5rO393FfPqxs for ; Wed, 25 Nov 2009 13:50:37 -0800 (PST) Received: from adsl-99-34-37-17.dsl.irvnca.sbcglobal.net (adsl-99-34-37-17.dsl.irvnca.sbcglobal.net [99.34.37.17]) by core3.amsl.com (Postfix) with ESMTP id D656D3A6B8E for ; Wed, 25 Nov 2009 13:50:36 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091125215036.D656D3A6B8E@core3.amsl.com> Date: Wed, 25 Nov 2009 13:50:36 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 32, Issue 31 | November 24, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Mame ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Wed Nov 25 18:50:40 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3AA983A6975 for ; Wed, 25 Nov 2009 18:50:40 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Wed, 25 Nov 2009 18:50:38 -0800 (PST) Received: from ppp-124-120-178-166.revip2.asianet.co.th (ppp-124-120-178-166.revip2.asianet.co.th [124.120.178.166]) by core3.amsl.com (Postfix) with ESMTP id 1EB733A67C1 for ; Wed, 25 Nov 2009 18:50:37 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091126025038.1EB733A67C1@core3.amsl.com> Date: Wed, 25 Nov 2009 18:50:37 -0800 (PST) Newsletter
Can't see everything? Visit online version here.

Graphics displaying turned off. Click to see the picture

About Us | Unsubscribe | Privacy Policy | Terms of Use

Copyright © 1998-2009 Usjx. All rights reserved.
From krb-wg-archive@lists.ietf.org Thu Nov 26 01:35:44 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ADB4A3A692A for ; Thu, 26 Nov 2009 01:35:44 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Thu, 26 Nov 2009 01:35:43 -0800 (PST) Received: from chello084113002252.12.14.vie.surfer.at (chello084113002252.12.14.vie.surfer.at [84.113.2.252]) by core3.amsl.com (Postfix) with ESMTP id BCC473A6989 for ; Thu, 26 Nov 2009 01:35:42 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091126093542.BCC473A6989@core3.amsl.com> Date: Thu, 26 Nov 2009 01:35:42 -0800 (PST) Pfizer ® Newsletter
If you have images disabled or have trouble viewing this message, please click here.
 

Can't load this image? Click to try again

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Cjuq Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Thu Nov 26 15:23:06 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8FCDD3A67AC for ; Thu, 26 Nov 2009 15:23:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.369 X-Spam-Level: X-Spam-Status: No, score=-17.369 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765, HELO_DYNAMIC_IPADDR=2.426, HTML_IMAGE_ONLY_24=1.552, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1PGGs2IEkBRi for ; Thu, 26 Nov 2009 15:23:05 -0800 (PST) Received: from host20.190-226-43.telecom.net.ar (host20.190-226-43.telecom.net.ar [190.226.43.20]) by core3.amsl.com (Postfix) with ESMTP id 6D3FF3A68F5 for ; Thu, 26 Nov 2009 15:23:04 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091126232304.6D3FF3A68F5@core3.amsl.com> Date: Thu, 26 Nov 2009 15:23:04 -0800 (PST) News Today
Trouble viewing this mail? Read it online

No graphics displayed? Click here
 

The e-mail address is krb-wg-archive@lists.ietf.org
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy

Copyright Qgyeb Inc. All rights reserved.

From krb-wg-archive@lists.ietf.org Fri Nov 27 04:24:59 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E72FF3A69A0 for ; Fri, 27 Nov 2009 04:24:59 -0800 (PST) X-Quarantine-ID: <6Hb9Sr0-FHLk> X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Fri, 27 Nov 2009 04:24:53 -0800 (PST) Received: from chello089173158002.chello.sk (chello089173158002.chello.sk [89.173.158.2]) by core3.amsl.com (Postfix) with ESMTP id 992973A69AE for ; Fri, 27 Nov 2009 04:24:50 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091127122451.992973A69AE@core3.amsl.com> Date: Fri, 27 Nov 2009 04:24:50 -0800 (PST) Pfizer ® Newsletter
If you have images disabled or have trouble viewing this message, please click here.
 

Can't load this image? Click to try again

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Agqufuhir Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Fri Nov 27 20:56:11 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 708EA3A6846 for ; Fri, 27 Nov 2009 20:56:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.283 X-Spam-Level: X-Spam-Status: No, score=-16.283 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR=2.426, HTML_IMAGE_ONLY_28=1.561, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aQ2zsZT26yKr for ; Fri, 27 Nov 2009 20:56:04 -0800 (PST) Received: from ppp-58-8-235-236.revip2.asianet.co.th (ppp-58-8-235-236.revip2.asianet.co.th [58.8.235.236]) by core3.amsl.com (Postfix) with ESMTP id 0C4153A672E for ; Fri, 27 Nov 2009 20:56:03 -0800 (PST) From: (c) VIAGRA (tm) Store To: krb-wg-archive@lists.ietf.org Subject: Personal 75% OFF to krb-wg-archive@lists.ietf.org. Pfizer. Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Message-Id: <20091128045604.0C4153A672E@core3.amsl.com> Date: Fri, 27 Nov 2009 20:56:03 -0800 (PST) Webletter
Having trouble viewing images? Click here to view as a webpage.
 
Volume 9, Issue 40 | November 28, 2009

Try this link, if this picture's unavailable
Manage My E–mail Subscriptions

If you would like to cancel your subscription, please click here.
If you would prefer to stop receiving all e–mail from us, please click here.

Privacy Statement
See our privacy policy for additional information.

Cok ©1998-2009, All rights reserved.
From krb-wg-archive@lists.ietf.org Sat Nov 28 02:03:40 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CA7C83A69D8 for ; Sat, 28 Nov 2009 02:03:40 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Sat, 28 Nov 2009 02:03:34 -0800 (PST) Received: from adg11.neoplus.adsl.tpnet.pl (adg11.neoplus.adsl.tpnet.pl [83.25.84.11]) by core3.amsl.com (Postfix) with ESMTP id 6923A3A69D6 for ; Sat, 28 Nov 2009 02:03:33 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091128100333.6923A3A69D6@core3.amsl.com> Date: Sat, 28 Nov 2009 02:03:33 -0800 (PST) Pfizer ® Newsletter
If you have images disabled or have trouble viewing this message, please click here.
 

Can't load this image? Click to try again

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Adilqdudao Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Sat Nov 28 10:35:49 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1093A3A6904 for ; Sat, 28 Nov 2009 10:35:49 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Approved Resel[...] X-Spam-Flag: NO X-Spam-Score: -32.879 X-Spam-Level: X-Spam-Status: No, score=-32.879 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, HTML_IMAGE_ONLY_16=1.526, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_SBL=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uHzYWpgKaX6q for ; Sat, 28 Nov 2009 10:35:48 -0800 (PST) Received: from 93-46-41-22.ip105.fastwebnet.it (93-46-41-22.ip105.fastwebnet.it [93.46.41.22]) by core3.amsl.com (Postfix) with ESMTP id AD5A43A68D8 for ; Sat, 28 Nov 2009 10:35:47 -0800 (PST) From: Pfizer ® Approved Reseller To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org gets 80% Off on all Pfizer products MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091128183547.AD5A43A68D8@core3.amsl.com> Date: Sat, 28 Nov 2009 10:35:47 -0800 (PST) Newsletter
This message contains graphics. If you do not see the graphics  click here to view.

Image's missing here? Click!

Sent to: krb-wg-archive@lists.ietf.org.

About us | Unsubscribe | Privacy

© 2009 Gew.
All rights reserved.
From krb-wg-archive@lists.ietf.org Sun Nov 29 03:45:42 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 92C073A68D4 for ; Sun, 29 Nov 2009 03:45:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -27.913 X-Spam-Level: X-Spam-Status: No, score=-27.913 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395, HOST_EQ_STATIC=1.172, HTML_IMAGE_ONLY_24=1.552, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jUwqfel3o1ve for ; Sun, 29 Nov 2009 03:45:41 -0800 (PST) Received: from 74-206-4-208.static-ip.m.telepacific.net (74-206-4-208.static-ip.m.telepacific.net [74.206.4.208]) by core3.amsl.com (Postfix) with ESMTP id F35F73A68CB for ; Sun, 29 Nov 2009 03:45:40 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091129114540.F35F73A68CB@core3.amsl.com> Date: Sun, 29 Nov 2009 03:45:40 -0800 (PST) News Today
Trouble viewing this mail? Read it online

No graphics displayed? Click here
 

The e-mail address is krb-wg-archive@lists.ietf.org
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy

Copyright Nymov Inc. All rights reserved.

From krb-wg-archive@lists.ietf.org Sun Nov 29 07:57:22 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C86733A68FD for ; Sun, 29 Nov 2009 07:57:22 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Customer Servi[...] X-Spam-Flag: NO X-Spam-Score: -6.754 X-Spam-Level: X-Spam-Status: No, score=-6.754 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_CPE=0.5, HELO_EQ_MODEMCABLE=0.768, HOST_EQ_CPE=0.979, HOST_EQ_MODEMCABLE=1.368, HTML_IMAGE_ONLY_20=1.546, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RDNS_DYNAMIC=0.1, SARE_UNI=0.591, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D06AVvqkFEwe for ; Sun, 29 Nov 2009 07:57:21 -0800 (PST) Received: from cpe-77.38.6.18.cable.t-1.si (cpe-77.38.6.18.cable.t-1.si [77.38.6.18]) by core3.amsl.com (Postfix) with ESMTP id 5E62B3A68A8 for ; Sun, 29 Nov 2009 07:57:20 -0800 (PST) From: Pfizer ® Customer Service To: krb-wg-archive@lists.ietf.org Subject: Special offer krb-wg-archive@lists.ietf.org receive 70% OFF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091129155720.5E62B3A68A8@core3.amsl.com> Date: Sun, 29 Nov 2009 07:57:20 -0800 (PST) Pfizer ® 80% OFF
If you cannot see the images, please click here
Image krb-wg-archive

About us   Unsubscribe   Forward   Privacy

(c) 2001-2009 Duyqeauxy Inc., All rights reserved.
From krb-wg-archive@lists.ietf.org Sun Nov 29 08:01:29 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 16A4B3A6965 for ; Sun, 29 Nov 2009 08:01:29 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Sun, 29 Nov 2009 08:01:27 -0800 (PST) Received: from dslb-084-057-110-135.pools.arcor-ip.net (dslb-084-057-110-135.pools.arcor-ip.net [84.57.110.135]) by core3.amsl.com (Postfix) with ESMTP id DB3723A6963 for ; Sun, 29 Nov 2009 08:01:26 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091129160126.DB3723A6963@core3.amsl.com> Date: Sun, 29 Nov 2009 08:01:26 -0800 (PST) Pfizer ® Newsletter
If you have images disabled or have trouble viewing this message, please click here.
 

Can't load this image? Click to try again

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Eqoh Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Mon Nov 30 03:34:59 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DA7593A68C3 for ; Mon, 30 Nov 2009 03:34:59 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Online Shop ; Mon, 30 Nov 2009 03:34:58 -0800 (PST) Received: from edm202.internetdsl.tpnet.pl (edm202.internetdsl.tpnet.pl [83.14.194.202]) by core3.amsl.com (Postfix) with ESMTP id 4E0A53A6891 for ; Mon, 30 Nov 2009 03:34:57 -0800 (PST) From: VIAGRA ® Online Shop To: krb-wg-archive@lists.ietf.org Subject: Valued customer krb-wg-archive@lists.ietf.org 80% OFF on Pfizer. Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 Message-Id: <20091130113457.4E0A53A6891@core3.amsl.com> Date: Mon, 30 Nov 2009 03:34:57 -0800 (PST) Newsletter
If you're having trouble viewing this email, see it online the Web.

If you're having trouble viewing this image, click here

 

Unsubscribe | Change Email Address | Update Email Preferences | Privacy Policy | Customer Service

Copyright © 2008 Etu. All Rights Reserved.

From krb-wg-archive@lists.ietf.org Mon Nov 30 08:54:23 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A3FE3A67F2 for ; Mon, 30 Nov 2009 08:54:23 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Customer Servi[...] X-Spam-Flag: NO X-Spam-Score: -25.189 X-Spam-Level: X-Spam-Status: No, score=-25.189 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_20=1.546, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_UNI=0.591, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N0oN1VT8AUrc for ; Mon, 30 Nov 2009 08:54:21 -0800 (PST) Received: from 201-14-148-167.fnsce703.dsl.brasiltelecom.net.br (201-41-239-228.fnsce703.dsl.brasiltelecom.net.br [201.41.239.228]) by core3.amsl.com (Postfix) with ESMTP id 7A01B3A6831 for ; Mon, 30 Nov 2009 08:54:19 -0800 (PST) From: Pfizer ® Customer Service To: krb-wg-archive@lists.ietf.org Subject: Special offer krb-wg-archive@lists.ietf.org receive 70% OFF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091130165420.7A01B3A6831@core3.amsl.com> Date: Mon, 30 Nov 2009 08:54:19 -0800 (PST) Pfizer ® 80% OFF
If you cannot see the images, please click here
Image krb-wg-archive

About us   Unsubscribe   Forward   Privacy

(c) 2001-2009 Hycaw Inc., All rights reserved.
From ietf-krb-wg-bounces@lists.anl.gov Mon Nov 30 12:29:38 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E83063A697E for ; Mon, 30 Nov 2009 12:29:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.995 X-Spam-Level: X-Spam-Status: No, score=-5.995 tagged_above=-999 required=5 tests=[AWL=0.603, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dYpLg7+BJLfk for ; Mon, 30 Nov 2009 12:29:38 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 0FFFF3A6979 for ; Mon, 30 Nov 2009 12:29:38 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 245D21A; Mon, 30 Nov 2009 14:29:31 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id EBBED2D; Mon, 30 Nov 2009 14:29:26 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 92AB580E33; Mon, 30 Nov 2009 14:29:26 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id B420780E32 for ; Mon, 30 Nov 2009 14:29:24 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id AE6701A; Mon, 30 Nov 2009 14:29:24 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id AAF6229 for ; Mon, 30 Nov 2009 14:29:24 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id A62071A for ; Mon, 30 Nov 2009 14:29:24 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 8E9AC7CC05F; Mon, 30 Nov 2009 14:29:24 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30880-02; Mon, 30 Nov 2009 14:29:24 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 6EA357CC05D for ; Mon, 30 Nov 2009 14:29:24 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmYAAGO5E0sSBwdQkGdsb2JhbACQUgGLJQEBAQEJCQwHEwWuMYUqiE2EMQQ X-IronPort-AV: E=Sophos;i="4.47,316,1257141600"; d="scan'208";a="34200527" Received: from biscayne-one-station.mit.edu ([18.7.7.80]) by mailgateway.anl.gov with ESMTP; 30 Nov 2009 14:29:24 -0600 Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id nAUKSvfP029277 for ; Mon, 30 Nov 2009 15:28:57 -0500 (EST) Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id nAUKTTO4021135 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Mon, 30 Nov 2009 15:29:30 -0500 (EST) Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id nAUKTFLT029627; Mon, 30 Nov 2009 15:29:15 -0500 (EST) To: ietf-krb-wg@anl.gov From: Tom Yu Date: Mon, 30 Nov 2009 15:29:15 -0500 Message-ID: Lines: 41 MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.42 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: [Ietf-krb-wg] review of assignments in draft-ietf-krb-wg-preauth-framework-15 X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov I've done a quick check of the preauth and typed-data numbers that we're about to turn over to IANA in draft-ietf-krb-wg-preauth-framework-15 against the database that I have been keeping. There are only a few minor issues. Are there any volunteers to double-check my work? I can give you a dump of database if you like. Missing, but we might not care: patype|42|pa-as-req|1510ter|complete AS-REQ in padata|| Missing, and we should probably include: tdtype|109|TD_DH_PARAMETERS|rfc4556 3.1.2||| tdtype|111|TD-CMS-DIGEST-ALGORITHMS|draft-ietf-krb-wg-pkinit-alg-agility||| tdtype|112|TD-CERT-DIGEST-ALGORITHMS|draft-ietf-krb-wg-pkinit-alg-agility||| These conflict with FAST or MS-KILE, but have been dealt with in a revised OTP draft: patype|131|PA_OTP_CHALLENGE|draft-ietf-krb-wg-otp-preauth||| patype|132|PA_OTP_REQUEST|draft-ietf-krb-wg-otp-preauth||| patype|133|PA_OTP_CONFIRM|draft-ietf-krb-wg-otp-preauth||| patype|134|PA_OTP_PIN_CHANGE|draft-ietf-krb-wg-otp-preauth||| This conflicts with FAST, but Larry has made a new assignment (which is not reflected in a published version of anon): patype|135|PA_PKINIT_KX|draft-ietf-krb-wg-anon||| This conflicts with FAST, but Larry has made a new assignment (which is not reflected in a published version of pku2u): patype|136|PA_PKU2U_NAME|draft-zhu-pku2u||| These conflict with MS-KILE and FAST, but Larry has made new assignments. A recent snapshot of Heimdal has the new numbers, but I haven't checked whether old Heimdal releases have the old numbers: patype|130|pa-epak-as-req|reserved||lha external auth?|2 patype|137|pa-epak-as-rep|reserved||lha external auth?| _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Mon Nov 30 13:27:20 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A74093A682C for ; Mon, 30 Nov 2009 13:27:20 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Mon, 30 Nov 2009 13:27:18 -0800 (PST) Received: from nat4.trans.net.pl (nat4.trans.net.pl [195.248.254.4]) by core3.amsl.com (Postfix) with ESMTP id E5F3A3A6867 for ; Mon, 30 Nov 2009 13:27:17 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091130212717.E5F3A3A6867@core3.amsl.com> Date: Mon, 30 Nov 2009 13:27:17 -0800 (PST) Pfizer ® Newsletter
If you have images disabled or have trouble viewing this message, please click here.
 

Can't load this image? Click to try again

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Femqp Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Mon Nov 30 16:46:54 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E1EEC28C17F for ; Mon, 30 Nov 2009 16:46:54 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Approved Resel[...] X-Spam-Flag: NO X-Spam-Score: -2.929 X-Spam-Level: X-Spam-Status: No, score=-2.929 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_I_LETTER=-2, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HELO_EQ_TELESP=1.245, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_16=1.526, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_RECV_SPAM_DOMN02=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_SBL=20, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FG4ztnqNXMab for ; Mon, 30 Nov 2009 16:46:54 -0800 (PST) Received: from 200-153-179-152.dsl.telesp.net.br (200-153-179-152.dsl.telesp.net.br [200.153.179.152]) by core3.amsl.com (Postfix) with ESMTP id 7A40128C174 for ; Mon, 30 Nov 2009 16:46:53 -0800 (PST) From: Pfizer ® Approved Reseller To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org gets 80% Off on all Pfizer products MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091201004653.7A40128C174@core3.amsl.com> Date: Mon, 30 Nov 2009 16:46:53 -0800 (PST) Newsletter
This message contains graphics. If you do not see the graphics  click here to view.

Image's missing here? Click!

Sent to: krb-wg-archive@lists.ietf.org.

About us | Unsubscribe | Privacy

© 2009 Sajueez.
All rights reserved.
From krb-wg-archive@lists.ietf.org Mon Nov 30 23:32:25 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 96A643A6B16 for ; Mon, 30 Nov 2009 23:32:25 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Mon, 30 Nov 2009 23:32:24 -0800 (PST) Received: from gra53.internetdsl.tpnet.pl (gra53.internetdsl.tpnet.pl [83.3.182.53]) by core3.amsl.com (Postfix) with ESMTP id 86B9D28C1CD for ; Mon, 30 Nov 2009 23:32:13 -0800 (PST) From: VIAGRA ® Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091201073213.86B9D28C1CD@core3.amsl.com> Date: Mon, 30 Nov 2009 23:32:13 -0800 (PST) Pfizer ® Newsletter
If you have images disabled or have trouble viewing this message, please click here.
 

Can't load this image? Click to try again

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Jdacqweqhal Inc., All rights reserved.