Subject: Re: Use of authorization identity

From: "Raif S. Naffah" <[email-masked]>
Date: Tue, 05 Jun 2001 19:46:26 +1000

At 02:26 PM 6/4/01 -0700, John Gardiner Myers wrote:

>"Raif S. Naffah" wrote:
> > of course.  but this is not the issue.  the issue, is how a protocole
> > passes the contents of the authorization-id to a mechanism...

the keyword here is passes. not "internally repesent" as you mentioned in 
your message, or any other situation.

for mechanisms to be inter-operable between different implementations, and 
inter-changeable between protocols, the authorization id has to be passed 
from a protocol to a mechanism in a programming language, and an encoding 
neutral way.

octet sequences are such an alternative; strings are not.

(i'll pass on the discussion about Java-CORBA-C).

cheers;
rsn