https://k5wiki.kerberos.org/wiki?title=Release_Meeting_Minutes/2011-11-01&feed=atom&action=historyRelease Meeting Minutes/2011-11-01 - Revision history2024-03-28T21:42:11ZRevision history for this page on the wikiMediaWiki 1.27.4https://k5wiki.kerberos.org/wiki?title=Release_Meeting_Minutes/2011-11-01&diff=4295&oldid=prevTomYu: New page: {{minutes|2011}} Jozsef Doczi, Will Fiveash, Thomas Hardjono, Greg Hudson, Simo Sorce, Zhanna Tsitkova, Tom Yu ==GSS proxy== ;Simo: Updates about GSS proxy. ;Simo: At conference, lots of...2011-11-03T17:06:47Z<p>New page: {{minutes|2011}} Jozsef Doczi, Will Fiveash, Thomas Hardjono, Greg Hudson, Simo Sorce, Zhanna Tsitkova, Tom Yu ==GSS proxy== ;Simo: Updates about GSS proxy. ;Simo: At conference, lots of...</p>
<p><b>New page</b></p><div>{{minutes|2011}}<br />
Jozsef Doczi, Will Fiveash, Thomas Hardjono, Greg Hudson, Simo Sorce, Zhanna Tsitkova, Tom Yu<br />
<br />
==GSS proxy==<br />
<br />
;Simo: Updates about GSS proxy.<br />
;Simo: At conference, lots of people have some problems that could use GSS proxy. Linux-NFS, Solaris. gssd. Linux-NFS wants to clean up its gssd interfaces. Multiple apps that have to share the same keytab; people want to isolate them from using the key directly. Maybe ssh-agent-like: proxy all the way back to the original client. Agreeing on protocol would make things easier.<br />
;Tom: Solaris gssd?<br />
;Simo: Solaris version of gssd is more advanced. Trying to organize some conference calls.<br />
;Simo: Nico is also interested. Only way to use same protocol everywhere is to use rpcgen etc.<br />
;Tom: Rather not adopt an intermediate TIRPC (e.g. Linux-NFS version). The one in Solaris might have better async and thread support.<br />
;Simo: Trying to do sooner rather than later. Also discuss with Nico how/where to hack things into mechglue.<br />
<br />
==Interop followup==<br />
<br />
;Simo: Glad Greg found the AES preauth thing.<br />
;Greg: Uncovered some interop issues and straight-up bugs.<br />
;Will: Found a couple of issues...<br />
;Tom: Diffie-Hellman pkinit interop issue.<br />
;Will: When tracking interop-related bugs, maybe label as interop issues in RT.<br />
;Simo: International hostnames in principals?<br />
;Greg: No obvious answer. e.g., what does IE do w.r.t. host lookups in DNS? vs in SSPI? Your resources for experiments are probably better.<br />
;Simo: Will ask around.<br />
<br />
==krb5-1.10==<br />
<br />
;Tom: Have branch, alpha snapshot...</div>TomYu