Release Meeting Minutes/2012-02-21
From K5Wiki
< Release Meeting Minutes
Revision as of 18:38, 21 February 2012 by TomYu (talk | contribs) (New page: {{minutes|2012}} Will Fiveash, Carlos Garay, Thomas Hardjono, Greg Hudson, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkova, Tom Yu == krb5-1.10.1 == ;Tom: Probably first week of March. ...)
Will Fiveash, Carlos Garay, Thomas Hardjono, Greg Hudson, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkova, Tom Yu
krb5-1.10.1
- Tom
- Probably first week of March. A few more patches to pull up.
Principal mapping
- Simo
- How to map principals from a trusted realm to users local to a machine. Considering Windows PAC or POSIX PAD. Plugin?
- Greg
- krb5_aname_to_lname. Could do plugin interface for 1.11; probably wouldn't take long.
- Simo
- Should have been an nsswitch interface, but I wouldn't change it to that now.
kadmin scripting
- Greg
- Get admin creds in a ccache. Then repeatedly "kadmin -q". Not efficient, but works.
String attributes
Nathaniel asks about details of string attribute encoding in TL data so he can write a KDB back end to deal with them. Greg provides.
gss_export_cred
This is to support the GSS proxy concept.
- Greg
- Only needed for stateless?
- Simo
- Stateful is more vulnerable to DoS attacks. Probably encrypted because it will be given to untrusted clients.
