Re: X-auth attribute formats?

[Will Price <wprice@xxxxxxxxxxx>]

Ari Huttunen wrote:
> 
> Is it the understanding that XAUTH-USER-NAME, XAUTH-USER-PASSWORD, etc.
> attributes MUST be null-terminated? XAUTH-CHALLENGE would *NOT* be
> NULL terminated?

Where are you getting the idea that any of them should be null terminated?
I don't think any of them should, and I don't see it in the draft either.
The attribute includes a size, so there is no need to null terminate.

One early mistake I made was actually converting the challenge to an ASCII
hex string like "0x0A0B0C" because that's what it looked like in the draft
and it says "variable ASCII". Silly me. The challenge is a series of
binary bytes.  Again though, no null termination.


> Similarly, MUST User-Name and User-Password be NULL terminated when
> sent to/from a RADIUS server?

That I don't know. 


-- 

Will Price, Director of Engineering
PGP Security, Inc.
a division of Network Associates, Inc.