Re: WG Last Call: draft-ietf-sasl-gs2-02.txt

[Alexey Melnikov <alexey.melnikov@xxxxxxxxx>]

Nicolas Williams wrote:

> On Mon, Sep 04, 2006 at 04:37:26PM +0100, Alexey Melnikov wrote:
>  
>
> > Simon Josefsson wrote:
> >    
> >
> > > A maxbuf value of 0 has weird semantics -- it is a error-state, and
> > > authentication using a maxbuf=0 value with security layers should not
> > > succeed.
> > >      
> > Yes. (So is maxbuf=1)
> >    
>
> Good point!  So is maxbuf == 2, or any impractically small value.
>  
Exactly.

> Is this an error state for the framework or for the application?  I say
> the latter.
>  
It is an error case for a specific SASL mechanism.