> Conceptually, you could think of it that way. I think of it
> as with a modern RADIUS server, the state attribute defines
> the session, so by sending the appropriate state attribute we
> continue the appropriate session. Just as a state attribute
> (HTTP cookies) continue HTTP sessions.
So I think the GSS acceptor needs to create the state (and not the
RADIUS server, as with the RADIUS State attribute), which probably means
inventing a new RADIUS attribute for this data. I'm guessing, but I
suppose the binary serialisation might be any length?
josh.
JANET(UK) is a trading name of The JNT Association, a company limited
by guarantee which is registered in England under No. 2881024
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG
|