Re: CUI reloaded

[Tomasz Wolniewicz <twoln@xxxxxx>]

stefan.winter@xxxxxxxxxx wrote:
> The only thing to consider is the MUST regarding Accounting packets: 
> When a CUI for a user has been negotiated, the Accounting packets MUST 
> include the CUI.
I would look at it in another way. "the Accounting packets MUST include 
the CUI" - fine, but if there are NO accounting packets sent, then we 
are not violating anything. And we have agreed some time ago that 
sending accounting information to IdP makes little sense and in addition 
violates user's privacy. Therefore I would not worry about it. In the 
Telco setting this is different, as the IdP is interested in billing the 
user and has the right to have the accounting information (I guess), but 
as we gave no business gathering this information in eduroam, it should 
not be sent by the SP in the first place.

If there is a reason to do Accounting, then indeed the CUI MUST be sent 
and this definitely would be a problem. Still I would say DO NOT send 
Accounting.

Yours
Tomasz


--
Tomasz Wolniewicz    
         twoln@xxxxxx        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576