[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: XAUTH is broken
Conclusion:
Best way is a new exchange. It will work exactly as specified in
the xauth draft, except the exchange number in the ISAKMP headers will
be a new XAUTH number instead of cfg-mode.
A clarification: XAUTH ends with a SET and an ACK type packet.
SET and ACK are used only at the end of the exchange.
This way, the XAUTH exchange is not "open-ended",
it is just "variable length".
As I am ignorant of the procedures... Who picks the number?
Jörn