https://k5wiki.test.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2012-02-21 2026-05-14T17:25:40Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.test.kerberos.org/wiki?title=Release_Meeting_Minutes/2012-02-21&diff=4553&oldid=prev 2012-02-21T23:38:18Z

<p>New page: {{minutes|2012}} Will Fiveash, Carlos Garay, Thomas Hardjono, Greg Hudson, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkova, Tom Yu == krb5-1.10.1 == ;Tom: Probably first week of March. ...</p> <p><b>New page</b></p><div>{{minutes|2012}}<br /> <br /> Will Fiveash, Carlos Garay, Thomas Hardjono, Greg Hudson, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkova, Tom Yu<br /> <br /> == krb5-1.10.1 ==<br /> <br /> ;Tom: Probably first week of March. A few more patches to pull up.<br /> <br /> == Principal mapping ==<br /> <br /> ;Simo: How to map principals from a trusted realm to users local to a machine. Considering Windows PAC or POSIX PAD. Plugin?<br /> ;Greg: krb5_aname_to_lname. Could do plugin interface for 1.11; probably wouldn't take long.<br /> ;Simo: Should have been an nsswitch interface, but I wouldn't change it to that now.<br /> <br /> == kadmin scripting ==<br /> <br /> ;Greg: Get admin creds in a ccache. Then repeatedly &quot;kadmin -q&quot;. Not efficient, but works.<br /> <br /> == String attributes ==<br /> <br /> Nathaniel asks about details of string attribute encoding in TL data so he can write a KDB back end to deal with them. Greg provides.<br /> <br /> == gss_export_cred ==<br /> <br /> This is to support the GSS proxy concept.<br /> <br /> ;Greg: Only needed for stateless?<br /> ;Simo: Stateful is more vulnerable to DoS attacks. Probably encrypted because it will be given to untrusted clients.</div>

TomYu