Subject: empty authzid in draft-ietf-sasl-plain-02.txt

From: Hallvard B Furuseth <[email-masked]>
Date: Wed, 1 Oct 2003 15:49:40 +0200

draft-ietf-sasl-plain-02.txt says that

  The client leaves
  the authorization identity empty if it wishes the server to derive the
  authorization identity from the provided authentication identity.

and

  Note that the parameters provided to the Authorize function are not
  prepared.

so I think the pseudo-code for empty authzid should say
          authzid = DeriveAuthzid(authcid);
and not
          authzid = DeriveAuthzid(pAuthcid);

-- 
Hallvard