K5Wiki - User contributions [en]

Release Meeting Minutes

2008-08-18T16:22:59Z

Jander:

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==August 2008==

[[Release Meeting Minutes/2008-08-04 | August 4, 2008 (2008-08-04)]]

==July 2008==

[[Release Meeting Minutes/2008-07-21 | July 21, 2008 (2008-07-21)]]

[[Release Meeting Minutes/2008-07-14 | July 14, 2008 (2008-07-14)]]

[[Release Meeting Minutes/2008-07-07 | July 7, 2008 (2008-07-07)]]

==June 2008==

[[Release Meeting Minutes/2008-06-30 | June 30, 2008 (2008-06-30)]]

[[Release Meeting Minutes/2008-06-23 | June 23, 2008 (2008-06-23)]]

[[Release Meeting Minutes/2008-06-16 | June 16, 2008 (2008-06-16)]]

==May 2008==

[[Release Meeting Minutes/2008-05-19 | May 19, 2008 (2008-05-19)]]

[[Release Meeting Minutes/2008-05-12 | May 12, 2008 (2008-05-12)]]

[[Release Meeting Minutes/2008-05-05 | May 5, 2008 (2008-05-05)]]

==April 2008==
[[Release Meeting Minutes/2008-04-28 | April 28, 2008 (2008-04-28)]]

[[Release Meeting Minutes/2008-04-14 | April 14, 2008 (2008-04-14)]]

==March 2008==
[[Release Meeting Minutes/2008-03-31 |March 31, 2008 (2008-03-31)]]

[[Release Meeting Minutes/2008-03-24 |March 24, 2008 (2008-03-24)]]

[[Release Meeting Minutes/2008-03-17 |March 17, 2008 (2008-03-17)]]

[[Release Meeting Minutes/2008-03-10 |March 10, 2008 (2008-03-10)]]

==February 2008==
[[Release Meeting Minutes/2008-02-04 |February 4, 2008 (2008-02-04)]]

==January 2008==
[[Release Meeting Minutes/2008-01-28 |January 28, 2008 (2008-01-28)]]

[[Release Meeting Minutes/2008-01-07 |January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes/2007-12-17|December 17, 2007 (2007-12-17)]]

[[Release Meeting Minutes/2007-12-10|December 10, 2007 (2007-12-10)]]

Release Meeting Minutes/2008-07-07

2008-07-07T18:05:13Z

Jander: New page: Present: Alexandra, Justin, Ken, Robert, Stephen, Tom, Will Steve: lot to do through Sept. status? Tom: iprop is merged now Ken: doesn't appear to be getting any notice, deadline is abo...

Present: Alexandra, Justin, Ken, Robert, Stephen, Tom, Will

Steve: lot to do through Sept. status?

Tom: iprop is merged now

Ken: doesn't appear to be getting any notice, deadline is about 2 weeks away

Steve: definite dates will get a better response, should pick a specific deadline to encourage people to speak up

'''Ken'''

Steve: Ken preparing draft for IETF. Some time unallocated (the week before IETF). How to use it?

Ken: Maybe something will pop up from Apple. Though anything from them would need to be fast tracked. Other than that, domain name referral.

Steve: Should do more foundation work on Apple things to get a better feel for the problem space.

Ken: Though we need to wait for Apple to tell us what they want.

Steve: Ken's planned work takes him to the 3rd week of Sept.

'''lxs'''

Steve: lxs's planned work is well known

lxs: working on newer patches. sent mail to list about patches, looking for response. who to assign patches to?

Steve: assign patches to tom

lxs: not enough time to work on embedded kerberos + KIM + patches by sept. waiting on justin for krb5_cc_cursor work.

Steve: focus on KIM first

Tom: several people will want that above other things

'''Robert'''

Steve: robert?

Robert: work with putting krb things into mysql config files, though much of mysql appears hardcoded. should be working on linux platforms by end of day. also clean up, comments, review.

Steve: wrap up mysql by friday?

Robert: hoping to. a lot of testing between VMs, need to try with physical boxes.

'''Will'''

'''Tom'''

'''Justin'''

Release Meeting Minutes

2008-07-07T17:52:23Z

Jander:

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==July 2008==

[[Release Meeting Minutes/2008-07-07 | July 7, 2008 (2008-07-07)]]

==June 2008==

[[Release Meeting Minutes/2008-06-30 | June 30, 2008 (2008-06-30)]]

[[Release Meeting Minutes/2008-06-23 | June 23, 2008 (2008-06-23)]]

[[Release Meeting Minutes/2008-06-16 | June 16, 2008 (2008-06-16)]]

==May 2008==

[[Release Meeting Minutes/2008-05-19 | May 19, 2008 (2008-05-19)]]

[[Release Meeting Minutes/2008-05-12 | May 12, 2008 (2008-05-12)]]

[[Release Meeting Minutes/2008-05-05 | May 5, 2008 (2008-05-05)]]

==April 2008==
[[Release Meeting Minutes/2008-04-28 | April 28, 2008 (2008-04-28)]]

[[Release Meeting Minutes/2008-04-14 | April 14, 2008 (2008-04-14)]]

==March 2008==
[[Release Meeting Minutes/2008-03-31 |March 31, 2008 (2008-03-31)]]

[[Release Meeting Minutes/2008-03-24 |March 24, 2008 (2008-03-24)]]

[[Release Meeting Minutes/2008-03-17 |March 17, 2008 (2008-03-17)]]

[[Release Meeting Minutes/2008-03-10 |March 10, 2008 (2008-03-10)]]

==February 2008==
[[Release Meeting Minutes/2008-02-04 |February 4, 2008 (2008-02-04)]]

==January 2008==
[[Release Meeting Minutes/2008-01-28 |January 28, 2008 (2008-01-28)]]

[[Release Meeting Minutes/2008-01-07 |January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes/2007-12-17|December 17, 2007 (2007-12-17)]]

[[Release Meeting Minutes/2007-12-10|December 10, 2007 (2007-12-10)]]

Release Meeting Minutes/2008-06-16

2008-07-07T15:36:39Z

Jander: New page: Present: Justin, Ken, Robert, Tom, Will '''Status''' Justin: krb5_cc_* locking on schedule Will: Close, dump MT conversion - niggly details remain. Hopefully done by end of week. regard...

Present: Justin, Ken, Robert, Tom, Will

'''Status'''

Justin: krb5_cc_* locking on schedule

Will: Close, dump MT conversion - niggly details remain. Hopefully done by end of week. regarding master key rollover, need to look at schedule and update estimate.

Ken: Debugging iprop now. kdb5util create sets up log, kadminlocal propagates, kpropd crashes

Robert: mysql working, though in a rough state. kerberized server and client for windows

Tom:
* requirements gathering for dev priorities
* next - longterm roadmap for dev timelines

* client support for princ referrals needs to work better
** public functions changed behavior when princ referrals were implemented -- was a major change for afs krb folk
** ken: ran into that with iprop, failed to parse with ipc issues

* two projects touching db code, would be wise to pick which to merge ahead of time (iprop, keytab migration)
** ken, will: don't expect there to be much overlap. even if there is, it won't be difficult to fix

* doxygen-ified version of krb5.h will appear shortly for peer review.
** generated docs will also be available, probably as zipped html.
** due to time limits, mostly dictated by budget constraints, review period will be about a week.
** over 250 macros and functions

'''API'''

tom: any thoughts to new api design?

will: looked into improving dao interface

tom: db abstraction would make many proposed projects easier to implement. Also, 250 functions is a little to large for an API

ken: if we aim for something more object-oriented, 250 isn't a hard number to hit

tom: gss api also unwieldy in its own way, with functions which take a dozen params

will: would be good to break down API redesign into manageable chunks

tom: whatever we do, it would be good to align with Heimdall. want to avoid portability problems

Release Meeting Minutes

2008-07-07T14:50:13Z

Jander: /* June 2008 */

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==June 2008==

[[Release Meeting Minutes/2008-06-23 | June 23, 2008 (2008-06-23)]]

[[Release Meeting Minutes/2008-06-16 | June 16, 2008 (2008-06-16)]]

==May 2008==

[[Release Meeting Minutes/2008-05-19 | May 19, 2008 (2008-05-19)]]

[[Release Meeting Minutes/2008-05-12 | May 12, 2008 (2008-05-12)]]

[[Release Meeting Minutes/2008-05-05 | May 5, 2008 (2008-05-05)]]

==April 2008==
[[Release Meeting Minutes/2008-04-28 | April 28, 2008 (2008-04-28)]]

[[Release Meeting Minutes/2008-04-14 | April 14, 2008 (2008-04-14)]]

==March 2008==
[[Release Meeting Minutes/2008-03-31 |March 31, 2008 (2008-03-31)]]

[[Release Meeting Minutes/2008-03-24 |March 24, 2008 (2008-03-24)]]

[[Release Meeting Minutes/2008-03-17 |March 17, 2008 (2008-03-17)]]

[[Release Meeting Minutes/2008-03-10 |March 10, 2008 (2008-03-10)]]

==February 2008==
[[Release Meeting Minutes/2008-02-04 |February 4, 2008 (2008-02-04)]]

==January 2008==
[[Release Meeting Minutes/2008-01-28 |January 28, 2008 (2008-01-28)]]

[[Release Meeting Minutes/2008-01-07 |January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes/2007-12-17|December 17, 2007 (2007-12-17)]]

[[Release Meeting Minutes/2007-12-10|December 10, 2007 (2007-12-10)]]

Release Meeting Minutes

2008-07-07T14:22:37Z

Jander: /* June 2008 */

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==June 2008==

[[Release Meeting Minutes/2008-06-23 | June 23, 2008 (2008-06-23)]]

[[Release Meeting Minutes/2008-06-16 | June 23, 2008 (2008-06-16)]]

==May 2008==

[[Release Meeting Minutes/2008-05-19 | May 19, 2008 (2008-05-19)]]

[[Release Meeting Minutes/2008-05-12 | May 12, 2008 (2008-05-12)]]

[[Release Meeting Minutes/2008-05-05 | May 5, 2008 (2008-05-05)]]

==April 2008==
[[Release Meeting Minutes/2008-04-28 | April 28, 2008 (2008-04-28)]]

[[Release Meeting Minutes/2008-04-14 | April 14, 2008 (2008-04-14)]]

==March 2008==
[[Release Meeting Minutes/2008-03-31 |March 31, 2008 (2008-03-31)]]

[[Release Meeting Minutes/2008-03-24 |March 24, 2008 (2008-03-24)]]

[[Release Meeting Minutes/2008-03-17 |March 17, 2008 (2008-03-17)]]

[[Release Meeting Minutes/2008-03-10 |March 10, 2008 (2008-03-10)]]

==February 2008==
[[Release Meeting Minutes/2008-02-04 |February 4, 2008 (2008-02-04)]]

==January 2008==
[[Release Meeting Minutes/2008-01-28 |January 28, 2008 (2008-01-28)]]

[[Release Meeting Minutes/2008-01-07 |January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes/2007-12-17|December 17, 2007 (2007-12-17)]]

[[Release Meeting Minutes/2007-12-10|December 10, 2007 (2007-12-10)]]

Release Meeting Minutes/2008-03-10

2008-03-17T21:34:14Z

Jander: Restoring accidentally overwritten content.

'''Minutes of weekly release meeting for 2008-03-10:'''

Will Fiveash: Researching Ken's design on master key enctype migration. Saw Steve's email about a doc writer, curious to know more.

Elizabeth Stone (the doc writer): Still getting acclimated. Reading source code and HP VMS docs.

Will: Wondering what the documentation priorities will be? Saw email on KC list "Preliminary List of Best Practices", seemed mostly admin related.

Elizabeth: Focusing on APIs first.

Alexis: Our API docs are our weakest area.

Elizabeth: Also, writing a guide on the wiki for people new to the Kerberos Consortium.

Will: /etc/authorization on OS X to kinit at login/screensaver?

Alexis: Works, but is very particular about syntax. Incorrect syntax makes the login process fail. Syntax changes with each version of OS X; may be hard to google for your particular needs.

Will: Will take to list for all to learn from the experience.

Release Meeting Minutes/2008-03-17

2008-03-17T21:32:52Z

Jander: Putting 3-17-08 minutes in right place

'''Minutes of weekly release meeting for 2008-03-17:'''

'''Project status'''

Tom mech glue behind
Alexis blocked
Justin behind
Elizabeth Stone not currently tracked in system

'''2 tech writers'''

Elizabeth working on dev docs, API
Consultant working on white papers, best practices

'''Master enc type'''

Will Fiveash: Have enough to finish design and implement. Ken's design on master key enctype migration is a good base.

Sam Hartman: Is this was only keystash part of project?

Will: Thought this was a full project.

Sam: Keystash part would be independently useful, and would serve as an introduction to this process.

Will: Willing to work in incremental steps. Worried about process overhead of being part of 2 projects, Sun and MIT.

Sam: Would be useful datapoints to learn from.

Will: Will see how it works out.

'''Minutes on k5wiki'''

Sam: Minutes on k5wiki need to be linked to from main page.

Release Meeting Minutes/2008-03-10

2008-03-17T21:32:17Z

Jander: Adding minutes from 3-17-08 meeting.

Release Meeting Minutes

2008-03-17T20:43:20Z

Jander:

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==March 2008==
[[Release Meeting Minutes/2008-03-17 |March 17, 2008 (2008-03-17)]]

[[Release Meeting Minutes/2008-03-10 |March 10, 2008 (2008-03-10)]]

==February 2008==
[[Release Meeting Minutes/2008-02-04 |February 4, 2008 (2008-02-04)]]

==January 2008==
[[Release Meeting Minutes/2008-01-28 |January 28, 2008 (2008-01-28)]]

[[Release Meeting Minutes/2008-01-07 |January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes/2007-12-17|December 17, 2007 (2007-12-17)]]

[[Release Meeting Minutes/2007-12-10|December 10, 2007 (2007-12-10)]]

Release Meeting Minutes

2008-03-17T20:43:05Z

Jander:

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==March 2008==
[[Release Meeting Minutes/2008-03-17 |March 17, 2008 (2008-03-17)]]
[[Release Meeting Minutes/2008-03-10 |March 10, 2008 (2008-03-10)]]

==February 2008==
[[Release Meeting Minutes/2008-02-04 |February 4, 2008 (2008-02-04)]]

==January 2008==
[[Release Meeting Minutes/2008-01-28 |January 28, 2008 (2008-01-28)]]

[[Release Meeting Minutes/2008-01-07 |January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes/2007-12-17|December 17, 2007 (2007-12-17)]]

[[Release Meeting Minutes/2007-12-10|December 10, 2007 (2007-12-10)]]

Release Meeting Minutes/2008-03-10

2008-03-10T21:52:42Z

Jander: New page: '''Minutes of weekly release meeting for 2008-03-10:''' Will Fiveash: Researching Ken's design on master key enctype migration. Saw Steve's email about a doc writer, curious to know more....

Release Meeting Minutes

2008-03-10T21:36:03Z

Jander: Adding link for March 10 meeting

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==March 2008==
[[Release Meeting Minutes/2008-03-10 |March 10, 2008 (2008-03-10)]]

==February 2008==
[[Release Meeting Minutes/2008-02-04 |February 4, 2008 (2008-02-04)]]

==January 2008==
[[Release Meeting Minutes/2008-01-28 |January 28, 2008 (2008-01-28)]]

[[Release Meeting Minutes/2008-01-07 |January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes/2007-12-17|December 17, 2007 (2007-12-17)]]

[[Release Meeting Minutes/2007-12-10|December 10, 2007 (2007-12-10)]]

Release Meeting Minutes

2008-01-15T19:47:42Z

Jander:

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==January 2008==
[[Release Meeting Minutes/2008-01-07 |January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes/2007-12-10|December 10, 2007 (2007-12-10)]]

Release Meeting Minutes

2008-01-15T19:46:54Z

Jander: Meeting Minutes moved to Release Meeting Minutes

Public minutes of Kerberos Consortium Release Meetings arranged in reverse chronological order:

==January 2008==
[[Release Meeting Minutes 2008-01-07|January 7, 2008 (2008-01-07)]]

==December 2007==
[[Release Meeting Minutes 2007-12-10|December 10, 2007 (2007-12-10)]]

Meeting Minutes

2008-01-15T19:46:54Z

Jander: Meeting Minutes moved to Release Meeting Minutes

#REDIRECT [[Release Meeting Minutes]]

Release Meeting Minutes/2008-01-07

2008-01-15T19:46:18Z

Jander: Release Meeting Minutes 2008-01-07 moved to Release Meeting Minutes/2008-01-07

Minutes of weekly release meeting for 1/7/2008 3:30PM EST

'''Public access to meeting minutes'''

Wyl: meeting minutes to be public or not?

Sam: want them to be that way eventually, excluding confidential information

Wyl: important that changes in state between public and confidential information should be made clear to all during meetings.

'''Release status update'''

Sam: would like Sun to suggest people to do code review of krb trunk. MIT looking to help them define what to look for.

Kevin: CCAPI. Debugging client server interactions. Been communicating with lxs for help. Feels good
about current state of project. Was able to reuse RPC code.

Tom: made progress on mechglue last week, additional work remains.

Sam: Tom should put fuller mechglue proposal onto k5wiki to get outside input.

Everyone's mostly up-to-date in Daptiv, MIT's project tracking system.

No one else brought up issues re: their release status

'''Wyllys: LDAP traversal / DAO layer issue'''

Tom: there for crash recovery (ex: berkeley db can cause data loss). It provides the possibility of salvaging more data in case of inconsistencies.

Wyl: DAO interface needs more backends

Sam: think that exists

Wyl: query mech?

Sam: very berkeley db specific. trying to preserve CLI.

Wyl: problems re incremental propagation. wants to query backend "do you support this?"

Sam: agrees that would be good, but not right for something this berkeley db specific. overkill

Wyl: Sun's incremental propagation isn't reasonable to use with an ldap backend

Sam: thought it was backend independent

Wyl: think there's an issue with locking. Will look into it.

Sam: But yes, query mech does seem reasonable.

Wyl: Might bring up on krbdev.

Sam: an example of why everyone needs to be involved in project reviews. involved at a point where everyone's concerns can be addressed

Wyl: or just define general principles on interface stability

Sam: Any interface stability principle will need a procedure for breaking an interface. There's always a question of what happens when two sets of code can't handle the same interface, requiring breaking. Agrees there should have been a better, more involved review.

Wyl: Or code review to catch that regression.

Sam: aware of changes, decided to accept them (not happy, but accepting the code was the best option, even with regressions/changes). If there was a better interface policy, would've been able to follow it. ABI and CLI stability are exactly what the Consortium needs to do.

Meeting end 3:56

Release Meeting Minutes 2008-01-07

2008-01-15T19:46:18Z

Jander: Release Meeting Minutes 2008-01-07 moved to Release Meeting Minutes/2008-01-07

#REDIRECT [[Release Meeting Minutes/2008-01-07]]

Release Meeting Minutes/2007-12-10

2008-01-15T19:46:08Z

Jander: Release Meeting Minutes 2007-12-10 moved to Release Meeting Minutes/2007-12-10

Attendees:
* Steve Buckley
* Sam Hartman
* Justin Anderson
* Tom Yu
* Kevin Koch - today's minute taker
* Will Fiveash
* Asanka Herath
* Ken Raeburn
* Alexis Ellwood

Will start sending meeting minutes.

3 agenda items from Sam: k5wiki, alleged security vulnerabilities, release status

No other agenda items put forward.

Proposed wiki

SH: No positive votes offline or online; looking for a positive vote now.

KK: Yes,

SB: No.

SB: looks at it as a collaboration tool. Features not available or harder to do in mediawiki.

EG: access control, passwords. Early access to consortium members only. Doesn't want two wikis or some other tool used; one is better.

SH: Other comments have been positive. This is intended to be a development management tool. ~15 minutes to set up. Dangerous to attach ancillary requirements to a project.

KK clarifies: you're talking about Steve's requirements? Yes. How to proceed?

SB: Sizeable budget. Give more thought to finding tools.

KK clarifies: 15 minutes meant low overhead. OK to use specialized tools for specialized jobs.

SH: Strong statement, somewhat agree.

SB/TY: static pages for protected content.

KK asks if there are wikis with password protection?

SH: Yes, but mediawiki has features he wanted. KK: So mediawiki has features you deemed more important?

SH: Yes.

SB: What is decision process?

SH: Not yet decided.

SB: Table?

SH: No, not more rounds.

KK: nothing wrong with specialized tools.

SB: Need a way to deliver to consortium members.

SH: proposes OK except blocking objection from SB.

Gentoo security bugs reported from China

TY: alleged FTP vulnerability; TY asked for details. Yes bug, but irrelevant. Only triggered by modified code. Uninited variable accessible only if AUTH_TYPE string not KERBEROS_V4 or GSSAPI.

SH: Other issues?

TY: Minor bugs. Kdb library - only triggered by fclose failure. Only run by administrator; if fclose failure, you have much bigger problems. Another failure can only happen if malloc failure at exactly the right time. Another with highly unlikely scenario.

TY asked why bugs not reported to Kerberos team first?

Reply was that we didn't respond, then they posted to Gentoo.

SH: need to respond.

TY: We don't consider them worthy of an advisory.

Release status

SH: Accounts for Sun on Daptiv PPM? SB: anything else for them to look at yet?

SH: status? KR, JA need to put in subtasks.

SH to WF: where are we on key<???> Project?

WF: basically nothing; fighting fires, .

SH: waiting on MIT?

WF: No.

Ended at 4:03.

Release Meeting Minutes 2007-12-10

2008-01-15T19:46:08Z

Jander: Release Meeting Minutes 2007-12-10 moved to Release Meeting Minutes/2007-12-10

#REDIRECT [[Release Meeting Minutes/2007-12-10]]

Release Meeting Minutes/2008-01-07

2008-01-15T19:30:52Z

Jander: New page: Minutes of weekly release meeting for 1/7/2008 3:30PM EST '''Public access to meeting minutes''' Wyl: meeting minutes to be public or not? Sam: want them to be that way eventually, exc...

Release Meeting Minutes/2007-12-10

2008-01-15T19:28:02Z

Jander: Creating page

Release Meeting Minutes

2008-01-15T19:11:34Z

Jander: Creating basic minutes page.