Subject: RE: [Isms] securityName

From: "Salowey, Joe" <[email-masked]>
Date: Mon, 25 Jul 2005 16:24:31 -0700

> 
> > The authorized mapping rules between authenticated identity and 
> > security name can be maintained locally or remotely.
> 
> What do you mean when you say "remotely"?
>
[Joe] The binding between an authenticated identity and a securityName
can either be rooted in locally maintained information or from a third
party.  For example a AAA server may return the security name to be used
with the result of the authentication. It is also possible to have the
binding originated by a third party and maintained by the entity
referred to by the security name if authentication mechanism allows (for
example a field in a certificate or kerberos ticket).   

> /js
> 
> -- 
> Juergen Schoenwaelder		    International University Bremen
> <http://www.eecs.iu-bremen.de/>	    P.O. Box 750 561, 
> 28725 Bremen, Germany
> 

_______________________________________________
Isms mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/isms