Subject: Proposed Resolution to Issue

From: Bernard Aboba <[email-masked]>
Date: Thu, 3 Jan 2008 09:07:16 -0800

FYI.  Here are the proposed changes to RFC 5090 to address the problems that Mike found in Appendix A. 
> Subject: RE: AUTH48 [SG]: RFC 5090 <draft-ietf-radext-rfc4590bis-02.txt> NOW AVAILABLE> Date: Thu, 3 Jan 2008 17:07:13 +0200> From: [email-masked]> To: [email-masked]; [email-masked]> CC: [email-masked]; [email-masked]; [email-masked]; [email-masked]; [email-masked]; [email-masked]; [email-masked]> > Here are corrections to the examples as per David's input. I hope this> will put all of the outstanding issues to rest so that we can all sign> off on the document. > > There are essentially 2 corrections. In each example, the response> should be changed in two places.> > On page 24, change:> > > A->B> > INVITE sip:[email-masked] SIP/2.0> Proxy-Authorization: Digest algorithm="md5",nonce="3bada1a0"> ,realm="example.com"> ,response="7679b84a560835846ec553174dbabb69"> ,uri="sip:[email-masked]",username="12345678"> ,qop=auth,algorithm=MD5> ,cnonce="56593a80,nc="00000001"> > From: <sip:[email-masked]>> To: <sip:[email-masked]>> > > B->C> > Code = Access-Request (1)> Packet identifier = 0x7d (125)> Length = 221> Authenticator = F5E55840E324AA49D216D9DBD069807D> NAS-IP-Address = 192.0.2.38> NAS-Port = 5> User-Name = 12345678> Digest-Method = INVITE> Digest-URI = sip:[email-masked]> Digest-Realm = example.com> Digest-Qop = auth> Digest-Algorithm = MD5> Digest-CNonce = 56593a80> Digest-Nonce = 3bada1a0> Digest-Nonce-Count = 00000001> Digest-Response = 7679b84a560835846ec553174dbabb69> Digest-Username = 12345678> SIP-AOR = sip:[email-masked]> Message-Authenticator = BD037498E8385878A46ECF4D5F8D2B48> > > To> > A->B> > INVITE sip:[email-masked] SIP/2.0> Proxy-Authorization: Digest algorithm="md5",nonce="3bada1a0"> ,realm="example.com"> ,response="756933f735fcd93f90a4bbdd5467f263"> ,uri="sip:[email-masked]",username="12345678"> ,qop=auth,algorithm=MD5> ,cnonce="56593a80,nc="00000001"> > From: <sip:[email-masked]>> To: <sip:[email-masked]>> > > B->C> > Code = Access-Request (1)> Packet identifier = 0x7d (125)> Length = 221> Authenticator = F5E55840E324AA49D216D9DBD069807D> NAS-IP-Address = 192.0.2.38> NAS-Port = 5> User-Name = 12345678> Digest-Method = INVITE> Digest-URI = sip:[email-masked]> Digest-Realm = example.com> Digest-Qop = auth> Digest-Algorithm = MD5> Digest-CNonce = 56593a80> Digest-Nonce = 3bada1a0> Digest-Nonce-Count = 00000001> Digest-Response = 756933f735fcd93f90a4bbdd5467f263> Digest-Username = 12345678> SIP-AOR = sip:[email-masked]> Message-Authenticator = BD037498E8385878A46ECF4D5F8D2B48> > > And on page 26, change> > > > A->B> > GET /index.html HTTP/1.1> Authorization: Digest algorithm=MD5,qop=auth,nonce="a3086ac8"> ,nc="00000001",cnonce="56593a78"> ,realm="example.com"> ,response="ba623217b5ec024d30c4aaef9d8494de"> ,uri="/index.html",username="12345678"> > B->C> > Code = Access-Request (1)> Packet identifier = 0x7f (127)> Length = 176> Authenticator = F5E55840E324AA49D216D9DBD069807F> NAS-IP-Address = 192.0.2.38> NAS-Port = 5> User-Name = 12345678> Digest-Method = GET> Digest-URI = /index.html> Digest-Realm = example.com> Digest-Qop = auth> Digest-Algorithm = MD5> Digest-CNonce = 56593a80> Digest-Nonce = a3086ac8> Digest-Nonce-Count = 00000001> Digest-Response = ba623217b5ec024d30c4aaef9d8494de> Digest-Username = 12345678> Message-Authenticator = C360BFCEDFFBCE893469E802013DA5AA> > > To> > > > A->B> > GET /index.html HTTP/1.1> Authorization: Digest algorithm=MD5,qop=auth,nonce="a3086ac8"> ,nc="00000001",cnonce="56593a78"> ,realm="example.com"> ,response=" a4fac45c27a30f4f244c54a2e99fa117"> ,uri="/index.html",username="12345678"> > B->C> > Code = Access-Request (1)> Packet identifier = 0x7f (127)> Length = 176> Authenticator = F5E55840E324AA49D216D9DBD069807F> NAS-IP-Address = 192.0.2.38> NAS-Port = 5> User-Name = 12345678> Digest-Method = GET> Digest-URI = /index.html> Digest-Realm = example.com> Digest-Qop = auth> Digest-Algorithm = MD5> Digest-CNonce = 56593a80> Digest-Nonce = a3086ac8> Digest-Nonce-Count = 00000001> Digest-Response = a4fac45c27a30f4f244c54a2e99fa117> Digest-Username = 12345678> Message-Authenticator = C360BFCEDFFBCE893469E802013DA5AA> > > > > Thanks to David and group.> > Baruch> >