logo_kerberos.gif

Release Meeting Minutes/2012-11-27

From K5Wiki
Jump to: navigation, search


Greg Hudson, Ben Kaduk, Simo Sorce, Zhanna Tsitkov, Tom Yu

Some discussion about Sphinx HTML output size being large. Simo says Samba has split large documentation out of main tar file.

Tom
Simo, PAD etc.?
Simo
Maybe week before Christmas. Maybe also in break.
Greg
Interop issues (Simo's from Microsoft interop event)?
Simo
Classic things already discussed... case insensitivity, kinit complains about case change in realm name.
Simo
How to treat realm as case-insensitive
Greg
Dispatch has to pick a realm; could complicate multi-realm KDC processes.
Greg
What might break further on?

...

Simo
Claims-based Windows stuff. FAST to tie machine identity to user identity.

[ This seems like the "compound identity" stuff we've heard from Microsoft people before. ]

Simo
Windows don't allow PAC on postdated tickets. Should we do the same?
Simo
client@REALM1 does AS-REQ to REALM2, gets "principal unknown" instead of "wrong realm".
Tom
Remember only one realm name field in AS-REQ.
Simo
kadmin/changepw can be gotten by TGS-REQ if KDC is AD.