https://k5wiki.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2013-07-09 2026-04-22T09:03:10Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.kerberos.org/wiki?title=Release_Meeting_Minutes/2013-07-09&diff=5160&oldid=prev 2013-07-10T18:58:51Z

<p>New page: {{minutes|2013}} Will Fiveash, Greg Hudson, Ben Kaduk, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkov, Tom Yu ;Greg: (to Nathaniel) think we&#039;re done. Maybe one more thing. Simo propose...</p> <p><b>New page</b></p><div>{{minutes|2013}}<br /> <br /> Will Fiveash, Greg Hudson, Ben Kaduk, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkov, Tom Yu<br /> <br /> ;Greg: (to Nathaniel) think we're done. Maybe one more thing.<br /> <br /> Simo proposes negative cache for service principals in GSS.<br /> <br /> ;Ben: There's a long 30-second timeout on ssh if the target doesn't support GSS.<br /> <br /> ;Greg: It was making ~120 queries. Domain walk. Multiple KDC lookups etc.<br /> <br /> ;Simo: Firefox falls back on NTLM. Each img does a new GSS attempt. Long timeouts.<br /> <br /> Maybe negative cache should have a short timeout? a few seconds?<br /> <br /> ;Greg: Not more than 5 seconds.<br /> <br /> ;Greg: Probably won't be able to do this in time for 1.12.<br /> <br /> ;Simo: Red Hat might be interested in process-backed ccache.<br /> <br /> Some discussion about strategies -- doors, dbus, etc. Some challenges with things like sudo.<br /> <br /> ;Simo: Might find someone at Red Hat to do it.<br /> <br /> ;Simo: GSS/NTLM. Can't use MIT crypto; used OpenSSL instead. Not exported. No Unicode support.<br /> <br /> ;Zhanna: Why OpenSSL and not NSS?<br /> <br /> ;Simo: Needed MD4.</div>

TomYu