[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
digest-md5 realm
There appears to be a conflict in draft-leach-digest-sasl-03.txt.
In Section 2.1.1, the "realm" is optional and:
This directive is optional; if not present, the client MUST solicit
it from the user or have been configured to use a default; a
plausible default might be the realm supplied by the user when
they logged in to the client system. Multiple realm directives
are allowed.
In Section 2.1.2, the "realm" in the response is:
The realm containing the user's account. It MUST be one of the realms
from the "digest-challenge", if any were provided. This directive is
required unless the server did not provide any realms; otherwise, if
not present, or not one of the ones in the "digest-challenge",
authentication fails.
This seems to imply that if a realm was not sent with the challenge, a
client need not reply with a realm.
I assume the realm is actually required in the response?
Thanks,
Larry