logo_kerberos.gif

Release Meeting Minutes/2012-02-07

From K5Wiki
Jump to: navigation, search


Nalin Dahyabhai, Will Fiveash, Thomas Hardjono, Greg Hudson, Simo Sorce, Zhanna Tsitkova, Tom Yu

Release planning

Greg
Will, is localization support sufficient for Solaris drop-in?
Will
Drop-in is easier if things are in userland only.
Greg
Sample kernel integration using lucid context.
Will
Kernel code must be lint-clean... we use PKCS11 etc, so no MIT crypto primitives (which lint could complain about)
Tom
Kernel bits in ON and user bits not?
Will
Some code is shared. We don't want duplications.
Tom
FAST OTP
Greg
Deleting stuff -- Apple PKINIT. KIM. Credential selection in 1.10 is simpler than KIM, but lacks hints. Maybe in the future we'd look at it.
Tom
draft-9 PKINIT? What needs it?
Greg
Windows 2000
Nalin
Server 2003
Greg
Our code probably doesn't interop.
Nalin
works as PKINIT client
Tom
So needs a lot of research.
Simo
GSS proxy... to init as well as accept context. No way without mutexes etc.
Greg
import_cred
Tom
GSS mostly lacks a cred set or name set thing. Default cred or default name behavior is the exception.
Simo
GSS proxy interposing in mechglue?