https://k5wiki.test.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2011-07-12 2026-05-14T17:25:39Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.test.kerberos.org/wiki?title=Release_Meeting_Minutes/2011-07-12&diff=3905&oldid=prev 2011-08-01T19:37:18Z

<p>New page: {{minutes|2011}} Carlos Garay, Will Fiveash, Thomas Hardjono, Greg Hudson, Zhanna Tsitkova, Tom Yu ==Android== ;Carlos: Oracle staff -- mobile devices? ;Will: Was Sun employee. Probably n...</p> <p><b>New page</b></p><div>{{minutes|2011}}<br /> Carlos Garay, Will Fiveash, Thomas Hardjono, Greg Hudson, Zhanna Tsitkova, Tom Yu<br /> <br /> ==Android==<br /> ;Carlos: Oracle staff -- mobile devices?<br /> ;Will: Was Sun employee. Probably not the best person to ask. Oracle not providing employees with Apple laptops. Lenovo, Dell, Windows-based. Sun provided employees with Macs.<br /> ;Carlos: What apps do you use Kerberos to auth to?<br /> ;Will: Changing from Sun practice.Sun IT was busy doing large rollout protecting NFS homedirs with Kerberos. KDCs deployed, etc. Kerberos-authenticated SSH sessions. Hardly anyone uses telnet.<br /> ;Carlos: If I were to build Kerberos for Android, how should it look?<br /> ;Will: Make it transparent to the user.<br /> <br /> ==libss==<br /> ;Will: Last couple of weeks, a few Solaris 11 issues related to kadmin.local utility. They exec other commands. Trying to use roles-based authorization. Execution profile for users so they get elevated local privileges [when running kadmin: to install keytabs, etc.]. &quot;bang&quot;-shell escape. Those commands inherit privileges.<br /> ;Tom: libss builtin?<br /> ;Will: Yes. Someone enhanced Solaris kadmin with a pager.<br /> ;Greg: Looks like the pager stuff is built into SS. list_requests invokes a pager.<br /> ;Will: &quot;pfexec&quot;. looks through profile information to decide whether user can exec a program.</div>

TomYu