shika
Uploaded by
6 SLIDES
168 VIEWS
60LIKES

Revised RADIUS Attributes for Improved Authentication

DESCRIPTION

This document proposes updates to RADIUS attributes for better authentication protocols. Various errors and clarifications are addressed to enhance the overall security. Tables updated to reflect necessary changes.

1 / 6

Download Presentation

Revised RADIUS Attributes for Improved Authentication

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. RFC 4590bis Wednesday, March 21, 2007 draft-ietf-radext-rfc4590bis-00.txt Wolfgang Beck IETF 68 Prague

  2. Issue 196 • Table 1 makes User-Name mandatory • User-Name is not necessary to obtain a nonce • replace ‚‘1‘ with ‚‘0-1‘ in table 1

  3. Issue 205, IANA Error • Digest-Nextnonce/Digest-Response-Auth have different values in text and table 2 • 106 Digest-Response-Auth • 107 Digest-Nextnonce

  4. Issue 206 • Table 1 made Digest-Method optional • State attribute usage was not clear • make Digest-Method mandatory • add a State attribute line and some clarifying text to Table 1

  5. Issue 218 • Addition of Accounting-Request entries in the attribute table: Access- Access- Access- Access- Acct- Request Accept Reject Challenge Req # Attribute 0-1 0 0 0 0-1 1 User-Name 0-1 0 0 1 0 24 State [4] 1 1 1 1 0-1 80 Message-Authenticator 0-1 0 0 0 0 103 Digest-Response 0-1 0 0 1 0-1 104 Digest-Realm 0-1 0 0 1 0 105 Digest-Nonce 0 0-1 0 0 0 106 Digest-Response-Auth [1][2] 0 0-1 0 0 0 107 Digest-Nextnonce 1 0 0 0 0-1 108 Digest-Method 0-1 0 0 0 0-1 109 Digest-URI 0-1 0 0 0+ 0-1 110 Digest-Qop 0-1 0 0 0-1 0-1 111 Digest-Algorithm [3] 0-1 0 0 0 0 112 Digest-Entity-Body-Hash 0-1 0 0 0 0 113 Digest-CNonce 0-1 0 0 0 0 114 Digest-Nonce-Count 0-1 0 0 0 0-1 115 Digest-Username 0-1 0 0 0-1 0 116 Digest-Opaque 0+ 0+ 0 0+ 0 117 Digest-Auth-Param 0-1 0 0 0 0 118 Digest-AKA-Auts 0 0 0 0+ 0-1 119 Digest-Domain 0 0 0 0-1 0 120 Digest-Stale 0 0-1 0 0 0 121 Digest-HA1 [1][2] 0-1 0 0 0 0 122 SIP-AOR

  6. Feedback?

More Related