https://k5wiki.test.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2011-01-04 2026-05-14T17:25:42Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.test.kerberos.org/wiki?title=Release_Meeting_Minutes/2011-01-04&diff=3743&oldid=prev 2011-01-10T21:32:35Z

<p>New page: {{minutes|2011}} Thomas Hardjono, Greg Hudson, Tom Yu, Zhanna Tsitkova, Sam Hartman, Will Fiveash Some questions on &lt;code&gt;#kerberos&lt;/code&gt; IRC, kpasswd IPv6 privacy addresses, NAT, etc. ...</p> <p><b>New page</b></p><div>{{minutes|2011}}<br /> Thomas Hardjono, Greg Hudson, Tom Yu, Zhanna Tsitkova, Sam Hartman, Will Fiveash<br /> <br /> Some questions on &lt;code&gt;#kerberos&lt;/code&gt; IRC, kpasswd IPv6 privacy addresses, NAT, etc. Some discussion about directional address transition.<br /> <br /> === krb5-1.9 patch release priorities ===<br /> <br /> ;Greg: export_sec_context bug (Arlene Berry) high priority.<br /> <br /> ;Tom: SAP? initiator-specific?<br /> <br /> ;Sam: Yes. Think about running SAP gsstest program. Some fairly serious 1.8 bugs are just beginning to surface.<br /> <br /> === krb5-1.10 planning ===<br /> <br /> ;Greg: Previously mentioned: Localization. Kernel subset. Pluggable configuration.<br /> <br /> ;Sam: libkdc. Referrals (including IETF work). PKINIT hash agility. More automation around anonymous pkinit to enable OTP and general security improvements.<br /> <br /> ;Greg: Auto-populate ccache (from keytabs, anon-PKINIT).<br /> <br /> ;Greg: Might end up knowing KDC supports FAST, unable to use because client was misled about anon-PKINIT support.<br /> <br /> ;Sam: If you assume keytab keys are strong, not hard on client.<br /> <br /> ;Greg: Did we fix FAST PKINIT?<br /> <br /> ;Sam: Thought we fixed in 1.8. (along with anon-PKINIT)<br /> <br /> ;Greg: A comment in the code implies it's disabled.<br /> <br /> ;Greg: Kernel subset: maybe not full drop-in (file moves, etc.), but build system changes to identify subset files and check dependencies.<br /> <br /> ;Sam: Make it easy to use an arbitrary crypto library for that... people want to use kernel crypto library, etc.<br /> <br /> ;Tom: Apple 64-bit &lt;code&gt;#pragma pack&lt;/code&gt; issue.<br /> <br /> ;Sam: It's complicated.</div>

TomYu