https://k5wiki.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2015-03-10Release Meeting Minutes/2015-03-10 - Revision history2026-05-13T05:18:25ZRevision history for this page on the wikiMediaWiki 1.27.4https://k5wiki.kerberos.org/wiki?title=Release_Meeting_Minutes/2015-03-10&diff=5451&oldid=prevTomYu: New page: {{minutes|2015}} Rob Campanella, Thomas Hardjono, Greg Hudson, Ben Kaduk, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkov, Nico Williams, Tom Yu ==Larger key versions== See [[Projects/Lar...2015-03-16T20:03:28Z<p>New page: {{minutes|2015}} Rob Campanella, Thomas Hardjono, Greg Hudson, Ben Kaduk, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkov, Nico Williams, Tom Yu ==Larger key versions== See [[Projects/Lar...</p>
<p><b>New page</b></p><div>{{minutes|2015}}<br />
Rob Campanella, Thomas Hardjono, Greg Hudson, Ben Kaduk, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkov, Nico Williams, Tom Yu<br />
<br />
==Larger key versions==<br />
<br />
See [[Projects/Larger key versions]].<br />
<br />
;Greg: kvno -- thought it would be simple, but turned out harder. 8-bit in keytab and kadm5 protocol, but 16-bit in KDB. kvno 0 is a special case in the DBE stuff, and ASN.1 encoders omit it.<br />
<br />
;Nico: Your proposal seems OK. Please record keyset creation time.<br />
<br />
Some discussion; such metadata are already being considered for some KDB data model renormalization.<br />
<br />
==Solaris 10 segfault==<br />
<br />
When explicit normal salt is sent to a Solaris 10 client in PA-ETYPE-INFO2, the client can segfault.<br />
<br />
;Greg: Introduced in 1.7 but not effective until 1.11, due to some code masking the change.<br />
<br />
==gss_acquire_cred_with_password==<br />
<br />
;Greg: In the Luke Howard implementation, creds get stored to memory ccache. Made change to use default cache. Heimdal matches MIT.<br />
<br />
Nico explains about how Solaris had the same semantic as Luke originally implemented; existing MIT and Heimdal behavior is incompatible. Discussion about what constitutes a reasonable side effect in GSSAPI.<br />
<br />
Nico wants acq_cred_with_password to have the same behavior as with delegated creds.<br />
<br />
==KDC discovery==<br />
<br />
;Nathaniel: Please give feedback on the KDC service discovery draft in KITTEN.</div>TomYu