logo_kerberos.gif

Release Meeting Minutes/2010-01-19

From K5Wiki
< Release Meeting Minutes
Revision as of 12:38, 26 January 2010 by TomYu (talk | contribs) (New page: Simo Sorce, Will Fiveash, Sam Hartman, Robert Releya, Zhanna Tsitkova, Greg Hudson, Steve Buckley, Thomas Hardjono, Tom Yu ;Greg: libkadm5 SONAME changes done; caused a Heisenbug somehow....)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Simo Sorce, Will Fiveash, Sam Hartman, Robert Releya, Zhanna Tsitkova, Greg Hudson, Steve Buckley, Thomas Hardjono, Tom Yu

Greg
libkadm5 SONAME changes done; caused a Heisenbug somehow. Not repeated.
Greg
Got a report that master key migration from 1.4 to 1.7 caused problems. Found that kvno of master key is zero. Will Fiveash's code assumes kvno=1.

[DES migration and AFS interactions]

Sam
  • really bad error message from KDC
  • dance of com_err libraries
  • new API to make aklog work

Doug Engert had some pkinit success and wrote it up on the mailing list. We talk about some smart card details. OpenSC. OpenCT. Recent standards make things mostly just work, at least for USB readers.

Zhanna
audit plugin?
Will
some auditing calls alrady in OpenSolaris krb5
Simo(?)
pluggable interface can go to syslog, to an audit database, etc.

We generally agree that stringifying things too early can cause problems, so don't do that.