https://k5wiki.test.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2012-02-14 2026-05-14T17:25:41Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.test.kerberos.org/wiki?title=Release_Meeting_Minutes/2012-02-14&diff=4550&oldid=prev 2012-02-20T20:31:44Z

<p>New page: {{minutes|2012}} Will Fiveash, Carlos Garay, Thomas Hardjono, Greg Hudson, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkova, Tom Yu == DLL Hell == ;Greg: Use -Bgroup or RTLD_DEEPBIND on L...</p> <p><b>New page</b></p><div>{{minutes|2012}}<br /> Will Fiveash, Carlos Garay, Thomas Hardjono, Greg Hudson, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkova, Tom Yu<br /> <br /> == DLL Hell ==<br /> <br /> ;Greg: Use -Bgroup or RTLD_DEEPBIND on Linux<br /> ;Will: sshd on Solaris links gss but dlopens krb5. no RTLD_GROUP in libpam source on Solaris.<br /> ;Greg: RTLD_GROUP is unfriendly to module developers; they have to do extra work.<br /> ;Tom: Could try making glibc devs fix it.<br /> ;Simo: SSSD only depends on libc. Pipes to other stuff.<br /> ;Tom: Document this mess?<br /> ;Greg: Maybe on the wiki.<br /> ;Tom: Could clean up my minimal test case to demo problem.<br /> <br /> ;Will: Where is RTLD_GROUP checked?<br /> ;Tom: If dlfcn.h has it, we assume it works.<br /> <br /> == krb5-1.11 planning ==<br /> <br /> ;Greg: Preauth sets? No existing plan for 1.11. 3 pieces:<br /> :* FAST cookies<br /> :* Flexible KDC configuration for preauth requirements per principal<br /> :* Actual preauth sets<br /> ;Greg: OTP uses the armor key as reply key. In some ways this is weaker than SAM2 with password.<br /> ;Nathaniel: collect-pin / do-not-collect-pin / separate-pin-required. Separate means 2 prompts. Insert into otp-pin / otp-value fields. collect-pin -- PIN will always be part of key generation. Think PIN should always be included.</div>

TomYu