[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

digest-md5 realm



There appears to be a conflict in draft-leach-digest-sasl-03.txt.

In Section 2.1.1, the "realm" is optional and:

  This directive is optional; if not present, the client MUST solicit
  it from the user or have been configured to use a default; a
  plausible default might be the realm supplied by the user when
  they logged in to the client system. Multiple realm directives
  are allowed.

In Section 2.1.2, the "realm" in the response is:
  The realm containing the user's account. It MUST be one of the realms
  from the "digest-challenge", if any were provided. This directive is
  required unless the server did not provide any realms; otherwise, if
  not present, or not one of the ones in the "digest-challenge",
  authentication fails.

This seems to imply that if a realm was not sent with the challenge, a
client need not reply with a realm.

I assume the realm is actually required in the response?

Thanks,
Larry