Re: [Emu] EAP, RADIUS, UTF-8, RFC 4282 and SASLPREP: the interop nightmare

[Stefan Winter]

Hi,

>  * User-Name in GUI: some cyrillic letters
>  * encoded on wire: all transcribed to the same symbol "?" in
> ISO-8859-15 or similar encoding (which is not very helpful!)
>
> To get to the cyrillic letters, I installed multi-language support and
> complex IMEs, i.e. everything I could find in System Settings, thinking
> that it may help the system to move to UTF-8 encodings."
>
> [BA] What version of Windows was this?  XP?  Vista? 
>   

Ah, sorry: XP SP3.

> Stefan Winter said:
>
> "So... if for MS-CHAPv2, the behaviour for non-ASCII is unspecified, then
> it's alright for it to transscribe unexpected input to whatever
> character it likes. So not the supplicant is to blame, but rather the
> fact of life that MS-CHAPv2 lives in an ASCII world.
>
> Hmmm... is an update to 2759 in any way feasible? Considering its
> deployed base that appears difficult at best."
>
> [BA] I'm trying to understand why the ASCII limitation exists in the first
> place. 
> Presumably there are security protocols out there that utilize UTF-8 encoded
> usernames 
> or  NAIs (perhaps after some normalization procedure), right? 
>   

I don't have any insight on the amount of use of non-ASCII NAIs. For
eduroam I can say: no usage known, and from last week on I will heavily
discourage anyone from deploying that until the situation gets better.

Greetings,

Stefan

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la 
Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

___
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu

Re: [Emu] EAP, RADIUS, UTF-8, RFC 4282 and SASLPREP: the interop nightmare

[Alan DeKok]

Bernard Aboba wrote:
> "  The CUI is often created as "[EMAIL PROTECTED]".  i.e. based off of the
> User-Name.  So it's worth double-checking the effects of changing
> User-Name on all down-stream uses."
> 
> Presumably the hash can be calculated on UTF-8 as well as ASCII, no? 

  Yes.  If the "example.com" portion is interpreted by any party, it has
to be dealt with the same as the corresponding portion of the User-Name.

  Alan DeKok.
___
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu