mm
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3710 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
171
doc/draft-foo
Normal file
171
doc/draft-foo
Normal file
@@ -0,0 +1,171 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Network Working Group Assar Westerlund
|
||||
<draft-ietf-cat-krb5-ipv6.txt> SICS
|
||||
Internet-Draft October, 1997
|
||||
Expire in six months
|
||||
|
||||
Kerberos over IPv6
|
||||
|
||||
Status of this Memo
|
||||
|
||||
This document is an Internet-Draft. Internet-Drafts are working
|
||||
documents of the Internet Engineering Task Force (IETF), its areas,
|
||||
and its working groups. Note that other groups may also distribute
|
||||
working documents as Internet-Drafts.
|
||||
|
||||
Internet-Drafts are draft documents valid for a maximum of six months
|
||||
and may be updated, replaced, or obsoleted by other documents at any
|
||||
time. It is inappropriate to use Internet- Drafts as reference
|
||||
material or to cite them other than as "work in progress."
|
||||
|
||||
To view the entire list of current Internet-Drafts, please check the
|
||||
"1id-abstracts.txt" listing contained in the Internet-Drafts Shadow
|
||||
Directories on ftp.is.co.za (Africa), ftp.nordu.net (Europe),
|
||||
munnari.oz.au (Pacific Rim), ds.internic.net (US East Coast), or
|
||||
ftp.isi.edu (US West Coast).
|
||||
|
||||
Distribution of this memo is unlimited. Please send comments to the
|
||||
<cat-ietf@mit.edu> mailing list.
|
||||
|
||||
Abstract
|
||||
|
||||
This document specifies the address types and transport types
|
||||
necessary for using Kerberos [RFC1510] over IPv6 [RFC1883].
|
||||
|
||||
Specification
|
||||
|
||||
IPv6 addresses are 128-bit (16-octet) quantities, encoded in MSB
|
||||
order. The type of IPv6 addresses is twenty-four (24).
|
||||
|
||||
The following addresses (see [RFC1884]) MUST not appear in any
|
||||
Kerberos packet:
|
||||
|
||||
the Unspecified Address
|
||||
the Loopback Address
|
||||
Link-Local addresses
|
||||
|
||||
IPv4-mapped IPv6 addresses MUST be represented as addresses of type
|
||||
2.
|
||||
|
||||
|
||||
|
||||
|
||||
Westerlund [Page 1]
|
||||
|
||||
Internet Draft Kerberos over IPv6 October, 1997
|
||||
|
||||
|
||||
Communication with the KDC over IPv6 MUST be done as in section 8.2.1
|
||||
of [RFC1510].
|
||||
|
||||
Discussion
|
||||
|
||||
[RFC1510] suggests using the address family constants in
|
||||
<sys/socket.h> from BSD. This cannot be done for IPv6 as these
|
||||
numbers have diverged and are different on different BSD-derived
|
||||
systems. [RFC2133] does not either specify a value for AF_INET6.
|
||||
Thus a value has to be decided and the implementations have to
|
||||
convert between the value used in Kerberos HostAddress and the local
|
||||
AF_INET6.
|
||||
|
||||
There are a few different address types in IPv6, see [RFC1884]. Some
|
||||
of these are used for quite special purposes and it makes no sense to
|
||||
include them in Kerberos packets.
|
||||
|
||||
It is necessary to represent IPv4-mapped addresses as Internet
|
||||
addresses (type 2) to be compatible with Kerberos implementations
|
||||
that only support IPv4.
|
||||
|
||||
Security considerations
|
||||
|
||||
This memo does not introduce any known security considerations in
|
||||
addition to those mentioned in [RFC1510].
|
||||
|
||||
References
|
||||
|
||||
[RFC1510] Kohl, J. and Neuman, C., "The Kerberos Network
|
||||
Authentication Service (V5)", RFC 1510, September 1993.
|
||||
|
||||
[RFC1883] Deering, S., Hinden, R., "Internet Protocol, Version 6
|
||||
(IPv6) Specification", RFC 1883, December 1995.
|
||||
|
||||
[RFC1884] Hinden, R., Deering, S., "IP Version 6 Addressing
|
||||
Architecture", RFC 1884, December 1995.
|
||||
|
||||
[RFC2133] Gilligan, R., Thomson, S., Bound, J., Stevens, W., "Basic
|
||||
Socket Interface Extensions for IPv6", RFC2133, April 1997.
|
||||
|
||||
Author's Address
|
||||
|
||||
Assar Westerlund
|
||||
Swedish Institute of Computer Science
|
||||
Box 1263
|
||||
S-164 29 KISTA
|
||||
Sweden
|
||||
|
||||
|
||||
|
||||
|
||||
Westerlund [Page 2]
|
||||
|
||||
Internet Draft Kerberos over IPv6 October, 1997
|
||||
|
||||
|
||||
Phone: +46-8-7521526
|
||||
Fax: +46-8-7517230
|
||||
EMail: assar@sics.se
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Westerlund [Page 3]
|
||||
|
||||
136
doc/draft-foo.ms
Normal file
136
doc/draft-foo.ms
Normal file
@@ -0,0 +1,136 @@
|
||||
.pl 10.0i
|
||||
.po 0
|
||||
.ll 7.2i
|
||||
.lt 7.2i
|
||||
.nr LL 7.2i
|
||||
.nr LT 7.2i
|
||||
.ds LF Westerlund
|
||||
.ds RF [Page %]
|
||||
.ds CF
|
||||
.ds LH Internet Draft
|
||||
.ds RH October, 1997
|
||||
.ds CH Kerberos over IPv6
|
||||
.hy 0
|
||||
.ad l
|
||||
.in 0
|
||||
.ta \n(.luR
|
||||
Network Working Group Assar Westerlund
|
||||
<draft-ietf-cat-krb5-ipv6.txt> SICS
|
||||
Internet-Draft October, 1997
|
||||
Expire in six months
|
||||
|
||||
.ce
|
||||
Kerberos over IPv6
|
||||
|
||||
.ti 0
|
||||
Status of this Memo
|
||||
|
||||
.in 3
|
||||
This document is an Internet-Draft. Internet-Drafts are working
|
||||
documents of the Internet Engineering Task Force (IETF), its
|
||||
areas, and its working groups. Note that other groups may also
|
||||
distribute working documents as Internet-Drafts.
|
||||
|
||||
Internet-Drafts are draft documents valid for a maximum of six
|
||||
months and may be updated, replaced, or obsoleted by other
|
||||
documents at any time. It is inappropriate to use Internet-
|
||||
Drafts as reference material or to cite them other than as
|
||||
"work in progress."
|
||||
|
||||
To view the entire list of current Internet-Drafts, please check
|
||||
the "1id-abstracts.txt" listing contained in the Internet-Drafts
|
||||
Shadow Directories on ftp.is.co.za (Africa), ftp.nordu.net
|
||||
(Europe), munnari.oz.au (Pacific Rim), ds.internic.net (US East
|
||||
Coast), or ftp.isi.edu (US West Coast).
|
||||
|
||||
Distribution of this memo is unlimited. Please send comments to the
|
||||
<cat-ietf@mit.edu> mailing list.
|
||||
|
||||
.ti 0
|
||||
Abstract
|
||||
|
||||
.in 3
|
||||
This document specifies the address types and transport types
|
||||
necessary for using Kerberos [RFC1510] over IPv6 [RFC1883].
|
||||
|
||||
.ti 0
|
||||
Specification
|
||||
|
||||
.in 3
|
||||
IPv6 addresses are 128-bit (16-octet) quantities, encoded in MSB
|
||||
order. The type of IPv6 addresses is twenty-four (24).
|
||||
|
||||
The following addresses (see [RFC1884]) MUST not appear in any
|
||||
Kerberos packet:
|
||||
|
||||
the Unspecified Address
|
||||
.br
|
||||
the Loopback Address
|
||||
.br
|
||||
Link-Local addresses
|
||||
|
||||
IPv4-mapped IPv6 addresses MUST be represented as addresses of type 2.
|
||||
|
||||
Communication with the KDC over IPv6 MUST be done as in section
|
||||
8.2.1 of [RFC1510].
|
||||
|
||||
.ti 0
|
||||
Discussion
|
||||
|
||||
.in 3
|
||||
[RFC1510] suggests using the address family constants in
|
||||
<sys/socket.h> from BSD. This cannot be done for IPv6 as these
|
||||
numbers have diverged and are different on different BSD-derived
|
||||
systems. [RFC2133] does not either specify a value for AF_INET6.
|
||||
Thus a value has to be decided and the implementations have to convert
|
||||
between the value used in Kerberos HostAddress and the local AF_INET6.
|
||||
|
||||
There are a few different address types in IPv6, see [RFC1884]. Some
|
||||
of these are used for quite special purposes and it makes no sense to
|
||||
include them in Kerberos packets.
|
||||
|
||||
It is necessary to represent IPv4-mapped addresses as Internet
|
||||
addresses (type 2) to be compatible with Kerberos implementations that
|
||||
only support IPv4.
|
||||
|
||||
.ti 0
|
||||
Security considerations
|
||||
|
||||
.in 3
|
||||
This memo does not introduce any known security considerations in
|
||||
addition to those mentioned in [RFC1510].
|
||||
|
||||
.ti 0
|
||||
References
|
||||
|
||||
.in 3
|
||||
[RFC1510] Kohl, J. and Neuman, C., "The Kerberos Network
|
||||
Authentication Service (V5)", RFC 1510, September 1993.
|
||||
|
||||
[RFC1883] Deering, S., Hinden, R., "Internet Protocol, Version 6
|
||||
(IPv6) Specification", RFC 1883, December 1995.
|
||||
|
||||
[RFC1884] Hinden, R., Deering, S., "IP Version 6 Addressing
|
||||
Architecture", RFC 1884, December 1995.
|
||||
|
||||
[RFC2133] Gilligan, R., Thomson, S., Bound, J., Stevens, W., "Basic
|
||||
Socket Interface Extensions for IPv6", RFC2133, April 1997.
|
||||
|
||||
.ti 0
|
||||
Author's Address
|
||||
|
||||
Assar Westerlund
|
||||
.br
|
||||
Swedish Institute of Computer Science
|
||||
.br
|
||||
Box 1263
|
||||
.br
|
||||
S-164 29 KISTA
|
||||
.br
|
||||
Sweden
|
||||
|
||||
Phone: +46-8-7521526
|
||||
.br
|
||||
Fax: +46-8-7517230
|
||||
.br
|
||||
EMail: assar@sics.se
|
||||
171
doc/standardisation/draft-foo
Normal file
171
doc/standardisation/draft-foo
Normal file
@@ -0,0 +1,171 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Network Working Group Assar Westerlund
|
||||
<draft-ietf-cat-krb5-ipv6.txt> SICS
|
||||
Internet-Draft October, 1997
|
||||
Expire in six months
|
||||
|
||||
Kerberos over IPv6
|
||||
|
||||
Status of this Memo
|
||||
|
||||
This document is an Internet-Draft. Internet-Drafts are working
|
||||
documents of the Internet Engineering Task Force (IETF), its areas,
|
||||
and its working groups. Note that other groups may also distribute
|
||||
working documents as Internet-Drafts.
|
||||
|
||||
Internet-Drafts are draft documents valid for a maximum of six months
|
||||
and may be updated, replaced, or obsoleted by other documents at any
|
||||
time. It is inappropriate to use Internet- Drafts as reference
|
||||
material or to cite them other than as "work in progress."
|
||||
|
||||
To view the entire list of current Internet-Drafts, please check the
|
||||
"1id-abstracts.txt" listing contained in the Internet-Drafts Shadow
|
||||
Directories on ftp.is.co.za (Africa), ftp.nordu.net (Europe),
|
||||
munnari.oz.au (Pacific Rim), ds.internic.net (US East Coast), or
|
||||
ftp.isi.edu (US West Coast).
|
||||
|
||||
Distribution of this memo is unlimited. Please send comments to the
|
||||
<cat-ietf@mit.edu> mailing list.
|
||||
|
||||
Abstract
|
||||
|
||||
This document specifies the address types and transport types
|
||||
necessary for using Kerberos [RFC1510] over IPv6 [RFC1883].
|
||||
|
||||
Specification
|
||||
|
||||
IPv6 addresses are 128-bit (16-octet) quantities, encoded in MSB
|
||||
order. The type of IPv6 addresses is twenty-four (24).
|
||||
|
||||
The following addresses (see [RFC1884]) MUST not appear in any
|
||||
Kerberos packet:
|
||||
|
||||
the Unspecified Address
|
||||
the Loopback Address
|
||||
Link-Local addresses
|
||||
|
||||
IPv4-mapped IPv6 addresses MUST be represented as addresses of type
|
||||
2.
|
||||
|
||||
|
||||
|
||||
|
||||
Westerlund [Page 1]
|
||||
|
||||
Internet Draft Kerberos over IPv6 October, 1997
|
||||
|
||||
|
||||
Communication with the KDC over IPv6 MUST be done as in section 8.2.1
|
||||
of [RFC1510].
|
||||
|
||||
Discussion
|
||||
|
||||
[RFC1510] suggests using the address family constants in
|
||||
<sys/socket.h> from BSD. This cannot be done for IPv6 as these
|
||||
numbers have diverged and are different on different BSD-derived
|
||||
systems. [RFC2133] does not either specify a value for AF_INET6.
|
||||
Thus a value has to be decided and the implementations have to
|
||||
convert between the value used in Kerberos HostAddress and the local
|
||||
AF_INET6.
|
||||
|
||||
There are a few different address types in IPv6, see [RFC1884]. Some
|
||||
of these are used for quite special purposes and it makes no sense to
|
||||
include them in Kerberos packets.
|
||||
|
||||
It is necessary to represent IPv4-mapped addresses as Internet
|
||||
addresses (type 2) to be compatible with Kerberos implementations
|
||||
that only support IPv4.
|
||||
|
||||
Security considerations
|
||||
|
||||
This memo does not introduce any known security considerations in
|
||||
addition to those mentioned in [RFC1510].
|
||||
|
||||
References
|
||||
|
||||
[RFC1510] Kohl, J. and Neuman, C., "The Kerberos Network
|
||||
Authentication Service (V5)", RFC 1510, September 1993.
|
||||
|
||||
[RFC1883] Deering, S., Hinden, R., "Internet Protocol, Version 6
|
||||
(IPv6) Specification", RFC 1883, December 1995.
|
||||
|
||||
[RFC1884] Hinden, R., Deering, S., "IP Version 6 Addressing
|
||||
Architecture", RFC 1884, December 1995.
|
||||
|
||||
[RFC2133] Gilligan, R., Thomson, S., Bound, J., Stevens, W., "Basic
|
||||
Socket Interface Extensions for IPv6", RFC2133, April 1997.
|
||||
|
||||
Author's Address
|
||||
|
||||
Assar Westerlund
|
||||
Swedish Institute of Computer Science
|
||||
Box 1263
|
||||
S-164 29 KISTA
|
||||
Sweden
|
||||
|
||||
|
||||
|
||||
|
||||
Westerlund [Page 2]
|
||||
|
||||
Internet Draft Kerberos over IPv6 October, 1997
|
||||
|
||||
|
||||
Phone: +46-8-7521526
|
||||
Fax: +46-8-7517230
|
||||
EMail: assar@sics.se
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Westerlund [Page 3]
|
||||
|
||||
136
doc/standardisation/draft-foo.ms
Normal file
136
doc/standardisation/draft-foo.ms
Normal file
@@ -0,0 +1,136 @@
|
||||
.pl 10.0i
|
||||
.po 0
|
||||
.ll 7.2i
|
||||
.lt 7.2i
|
||||
.nr LL 7.2i
|
||||
.nr LT 7.2i
|
||||
.ds LF Westerlund
|
||||
.ds RF [Page %]
|
||||
.ds CF
|
||||
.ds LH Internet Draft
|
||||
.ds RH October, 1997
|
||||
.ds CH Kerberos over IPv6
|
||||
.hy 0
|
||||
.ad l
|
||||
.in 0
|
||||
.ta \n(.luR
|
||||
Network Working Group Assar Westerlund
|
||||
<draft-ietf-cat-krb5-ipv6.txt> SICS
|
||||
Internet-Draft October, 1997
|
||||
Expire in six months
|
||||
|
||||
.ce
|
||||
Kerberos over IPv6
|
||||
|
||||
.ti 0
|
||||
Status of this Memo
|
||||
|
||||
.in 3
|
||||
This document is an Internet-Draft. Internet-Drafts are working
|
||||
documents of the Internet Engineering Task Force (IETF), its
|
||||
areas, and its working groups. Note that other groups may also
|
||||
distribute working documents as Internet-Drafts.
|
||||
|
||||
Internet-Drafts are draft documents valid for a maximum of six
|
||||
months and may be updated, replaced, or obsoleted by other
|
||||
documents at any time. It is inappropriate to use Internet-
|
||||
Drafts as reference material or to cite them other than as
|
||||
"work in progress."
|
||||
|
||||
To view the entire list of current Internet-Drafts, please check
|
||||
the "1id-abstracts.txt" listing contained in the Internet-Drafts
|
||||
Shadow Directories on ftp.is.co.za (Africa), ftp.nordu.net
|
||||
(Europe), munnari.oz.au (Pacific Rim), ds.internic.net (US East
|
||||
Coast), or ftp.isi.edu (US West Coast).
|
||||
|
||||
Distribution of this memo is unlimited. Please send comments to the
|
||||
<cat-ietf@mit.edu> mailing list.
|
||||
|
||||
.ti 0
|
||||
Abstract
|
||||
|
||||
.in 3
|
||||
This document specifies the address types and transport types
|
||||
necessary for using Kerberos [RFC1510] over IPv6 [RFC1883].
|
||||
|
||||
.ti 0
|
||||
Specification
|
||||
|
||||
.in 3
|
||||
IPv6 addresses are 128-bit (16-octet) quantities, encoded in MSB
|
||||
order. The type of IPv6 addresses is twenty-four (24).
|
||||
|
||||
The following addresses (see [RFC1884]) MUST not appear in any
|
||||
Kerberos packet:
|
||||
|
||||
the Unspecified Address
|
||||
.br
|
||||
the Loopback Address
|
||||
.br
|
||||
Link-Local addresses
|
||||
|
||||
IPv4-mapped IPv6 addresses MUST be represented as addresses of type 2.
|
||||
|
||||
Communication with the KDC over IPv6 MUST be done as in section
|
||||
8.2.1 of [RFC1510].
|
||||
|
||||
.ti 0
|
||||
Discussion
|
||||
|
||||
.in 3
|
||||
[RFC1510] suggests using the address family constants in
|
||||
<sys/socket.h> from BSD. This cannot be done for IPv6 as these
|
||||
numbers have diverged and are different on different BSD-derived
|
||||
systems. [RFC2133] does not either specify a value for AF_INET6.
|
||||
Thus a value has to be decided and the implementations have to convert
|
||||
between the value used in Kerberos HostAddress and the local AF_INET6.
|
||||
|
||||
There are a few different address types in IPv6, see [RFC1884]. Some
|
||||
of these are used for quite special purposes and it makes no sense to
|
||||
include them in Kerberos packets.
|
||||
|
||||
It is necessary to represent IPv4-mapped addresses as Internet
|
||||
addresses (type 2) to be compatible with Kerberos implementations that
|
||||
only support IPv4.
|
||||
|
||||
.ti 0
|
||||
Security considerations
|
||||
|
||||
.in 3
|
||||
This memo does not introduce any known security considerations in
|
||||
addition to those mentioned in [RFC1510].
|
||||
|
||||
.ti 0
|
||||
References
|
||||
|
||||
.in 3
|
||||
[RFC1510] Kohl, J. and Neuman, C., "The Kerberos Network
|
||||
Authentication Service (V5)", RFC 1510, September 1993.
|
||||
|
||||
[RFC1883] Deering, S., Hinden, R., "Internet Protocol, Version 6
|
||||
(IPv6) Specification", RFC 1883, December 1995.
|
||||
|
||||
[RFC1884] Hinden, R., Deering, S., "IP Version 6 Addressing
|
||||
Architecture", RFC 1884, December 1995.
|
||||
|
||||
[RFC2133] Gilligan, R., Thomson, S., Bound, J., Stevens, W., "Basic
|
||||
Socket Interface Extensions for IPv6", RFC2133, April 1997.
|
||||
|
||||
.ti 0
|
||||
Author's Address
|
||||
|
||||
Assar Westerlund
|
||||
.br
|
||||
Swedish Institute of Computer Science
|
||||
.br
|
||||
Box 1263
|
||||
.br
|
||||
S-164 29 KISTA
|
||||
.br
|
||||
Sweden
|
||||
|
||||
Phone: +46-8-7521526
|
||||
.br
|
||||
Fax: +46-8-7517230
|
||||
.br
|
||||
EMail: assar@sics.se
|
||||
Reference in New Issue
Block a user