Difference between revisions of "Release Meeting Minutes/2010-11-23"

Latest revision as of 18:19, 3 January 2011

Greg Hudson, Thomas Hardjono, Tom Yu, Zhanna Tsitkova, Simo Sorce, Sam Hartman

anon-pkinit issue.

Greg: start new conversation on krb-wg about authorization issue, e.g. whether KDC policy can restrict what tickets it issues -- already exists for things like requires_preauth

Greg: add text excepting anonymous from standard ticket issuance/authorization model [ look whether anonymous creation of host principals really makes sense where a site tightly controls what principals exist because some services accept any authentication as authorization ]

Greg: new proposal: knob to allow local TGS only with anon client, to ease deployment of FAST

Revision as of 12:30, 30 November 2010 (view source) TomYu (talk \| contribs) (New page: Greg Hudson, Thomas Hardjono, Tom Yu, Zhanna Tsitkova, Simo Sorce, Sam Hartman anon-pkinit issue. ;Greg: start new conversation on krb-wg about authorization issue, e.g. whether KDC poli...)		Latest revision as of 18:19, 3 January 2011 (view source) TomYu (talk \| contribs)
Line 1:		Line 1:
		+	{{minutes\|2010}}
	Greg Hudson, Thomas Hardjono, Tom Yu, Zhanna Tsitkova, Simo Sorce, Sam Hartman		Greg Hudson, Thomas Hardjono, Tom Yu, Zhanna Tsitkova, Simo Sorce, Sam Hartman