logo_kerberos.gif

Release Meeting Minutes/2012-12-11

From K5Wiki
Jump to: navigation, search


Thomas Hardjono, Greg Hudson, Ben Kaduk, Simo Sorce, Zhanna Tsitkov, Tom Yu

Tom
1.11 -- some patches to pull up. Some docs yet to be finished.

OTP RADIUS

Nathaniel
Greg's changes... done. "algorithm" vs "alg".
Greg
ordering of OTP configuration subsections. Intended to work with zeroconf. Default Unix-domain socket.
Nathaniel
Companion RADIUS server.
Nathaniel
Reuse of requires_hw_preauth flag... in zeroconf. Would it be converted to use companion RADIUS?

Policy extensions

Shawn
Can extract interface design, proposal etc. admin side. Which intermediate principals allowed to receive from. e.g., name-value pairs as argument to add_pol:
 add_policy pname ticktes_from=[list of allowed intermediates]
Shawn
Probably would start implementation if we have consensus for defining interface through kadmin.

Coverity

Simo
Coverity etc.?
Greg
Used Coverity for ~4yrs. Cut defects in 50%. Lots of false positives. Better at identifying bugs in new code than in old code.