https://k5wiki.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2013-01-29 2026-04-22T10:34:23Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.kerberos.org/wiki?title=Release_Meeting_Minutes/2013-01-29&diff=5056&oldid=prev 2013-01-30T21:14:07Z

<p>New page: {{minutes|2013}} David Benjamin, Greg Hudson, Ben Kaduk, Simo Sorce, Zhanna Tsitkov, Tom Yu Tom is having trouble with kadmin/$host again in tests/dejagnu. ;Simo: getaddrinfo fails? ;S...</p> <p><b>New page</b></p><div>{{minutes|2013}}<br /> <br /> David Benjamin, Greg Hudson, Ben Kaduk, Simo Sorce, Zhanna Tsitkov, Tom Yu<br /> <br /> Tom is having trouble with kadmin/$host again in tests/dejagnu.<br /> <br /> ;Simo: getaddrinfo fails?<br /> <br /> ;Simo: Python krb5 wrappers. Quite bad. get_cc_name with DIR ccache causes problems. Might see more complaints from people who assume ccaches are always FILE ccaches.<br /> <br /> ;Tom: Can we do anything other than education to try to help?<br /> <br /> ;Simo: Only reason to get file path is to copy file etc.<br /> <br /> ;Greg: KDC name types -- prefer to make &quot;is_referral&quot; correctly flag referral, but that would clear forwardable flag on returned ticket for direct cross-realm unless ok-as-delegate flag set on principal, but only for S4U2Self.<br /> <br /> ;Ben: Remove compile-time DNS lookup conditionals (ifdefs).<br /> <br /> ;Greg: ifdefs needed for non-WSHelper builds on Windows. ... probably OK [ we bundle WSHelper now on Windows ]<br /> <br /> ;Simo: Cross-realm using S4U2Proxy? Auth_signticket?<br /> <br /> ;Greg: Probably work with target realm [ allowed-to-delegate-to in LDAP backend ] intermediate and target not in same realm. Microsoft didn't originally allow this. They later added deleg-from attribute.<br /> <br /> ;Tom: Two possible ways: (1) intermediate service gets cross-realm TGT for itself, then does S4U2Proxy against target realm. (2) intermediate service does S4U2Proxy against its own realm, then does normal cross-realm while impersonating the client.<br /> <br /> Some talk about The Plan (RDNS problems).<br /> <br /> ;Greg: We should more strongly recommend that people set &quot;rdns=false&quot;.</div>

TomYu