Subject: Re: OID for a Kerberos principal name in an X509 subject DN?

From: [email-masked]
Date: Wed, 11 Sep 2002 14:22:58 -0400

at
 09/11/2002 02:19:20 PM,
	Serialize complete at 09/11/2002 02:19:20 PM
Sender: [email-masked]

This is a multipart message in MIME format.
--=_alternative 0064E66485256C31_=
Content-Type: text/plain; charset="US-ASCII"

How about the pk-init recommendation of 1.3.6.1.5.2.2 (krb5PrincipalName)

See 
http://www.ietf.org/proceedings/01dec/I-D/draft-ietf-cat-kerberos-pk-init-15.txt

M.

> 
> Is there a correct OID to use for including a Kerberos principal name
> in a DN?  Is it one of
> 
>    1.2.840.113554.1.2.2.1 - gss-krb5-nt-principal-name
>       (...mit infosys gssapi krb5 krb5_name)
> or
>    1.3.6.1.5.6.4 - gss-api-exported-name
> 
> or something completely different?

--=_alternative 0064E66485256C31_=
Content-Type: text/html; charset="US-ASCII"

<br><font size=2><tt>How about the pk-init recommendation of 1.3.6.1.5.2.2
(krb5PrincipalName)</tt></font>
<br>
<br><font size=2><tt>See
http://www.ietf.org/proceedings/01dec/I-D/draft-ietf-cat-kerberos-pk-init-15.txt</tt></font>
<br><font size=2><tt><br>
M.</tt></font>
<br><font size=2><tt><br>
&gt; <br>
&gt; Is there a correct OID to use for including a Kerberos principal name<br>
&gt; in a DN? &nbsp;Is it one of<br>
&gt; <br>
&gt; &nbsp; &nbsp;1.2.840.113554.1.2.2.1 - gss-krb5-nt-principal-name<br>
&gt; &nbsp; &nbsp; &nbsp; (...mit infosys gssapi krb5 krb5_name)<br>
&gt; or<br>
&gt; &nbsp; &nbsp;1.3.6.1.5.6.4 - gss-api-exported-name<br>
&gt; <br>
&gt; or something completely different?<br>
</tt></font>
--=_alternative 0064E66485256C31_=--