https://k5wiki.test.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2011-11-01 2026-05-14T17:25:39Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.test.kerberos.org/wiki?title=Release_Meeting_Minutes/2011-11-01&diff=4295&oldid=prev 2011-11-03T17:06:47Z

<p>New page: {{minutes|2011}} Jozsef Doczi, Will Fiveash, Thomas Hardjono, Greg Hudson, Simo Sorce, Zhanna Tsitkova, Tom Yu ==GSS proxy== ;Simo: Updates about GSS proxy. ;Simo: At conference, lots of...</p> <p><b>New page</b></p><div>{{minutes|2011}}<br /> Jozsef Doczi, Will Fiveash, Thomas Hardjono, Greg Hudson, Simo Sorce, Zhanna Tsitkova, Tom Yu<br /> <br /> ==GSS proxy==<br /> <br /> ;Simo: Updates about GSS proxy.<br /> ;Simo: At conference, lots of people have some problems that could use GSS proxy. Linux-NFS, Solaris. gssd. Linux-NFS wants to clean up its gssd interfaces. Multiple apps that have to share the same keytab; people want to isolate them from using the key directly. Maybe ssh-agent-like: proxy all the way back to the original client. Agreeing on protocol would make things easier.<br /> ;Tom: Solaris gssd?<br /> ;Simo: Solaris version of gssd is more advanced. Trying to organize some conference calls.<br /> ;Simo: Nico is also interested. Only way to use same protocol everywhere is to use rpcgen etc.<br /> ;Tom: Rather not adopt an intermediate TIRPC (e.g. Linux-NFS version). The one in Solaris might have better async and thread support.<br /> ;Simo: Trying to do sooner rather than later. Also discuss with Nico how/where to hack things into mechglue.<br /> <br /> ==Interop followup==<br /> <br /> ;Simo: Glad Greg found the AES preauth thing.<br /> ;Greg: Uncovered some interop issues and straight-up bugs.<br /> ;Will: Found a couple of issues...<br /> ;Tom: Diffie-Hellman pkinit interop issue.<br /> ;Will: When tracking interop-related bugs, maybe label as interop issues in RT.<br /> ;Simo: International hostnames in principals?<br /> ;Greg: No obvious answer. e.g., what does IE do w.r.t. host lookups in DNS? vs in SSPI? Your resources for experiments are probably better.<br /> ;Simo: Will ask around.<br /> <br /> ==krb5-1.10==<br /> <br /> ;Tom: Have branch, alpha snapshot...</div>

TomYu