https://k5wiki.test.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2012-07-24 2026-05-14T17:25:43Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.test.kerberos.org/wiki?title=Release_Meeting_Minutes/2012-07-24&diff=4775&oldid=prev 2012-07-24T22:53:56Z

<p>New page: {{minutes|2012}} Will Fiveash, Thomas Hardjono, Sam Hartman, Greg Hudson, Ben Kaduk, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkov, Tom Yu ;Greg: UIDs. Token parameters. UID expands to R...</p> <p><b>New page</b></p><div>{{minutes|2012}}<br /> Will Fiveash, Thomas Hardjono, Sam Hartman, Greg Hudson, Ben Kaduk, Nathaniel McCallum, Simo Sorce, Zhanna Tsitkov, Tom Yu<br /> <br /> ;Greg: UIDs. Token parameters. UID expands to RUID. Corresponds to existing Heimdal behavior.<br /> <br /> ;Simo: Make a new EUID example.<br /> <br /> ;Sam: krb4 was more consistent about real vs effective UID (and dead wrong). [ also wants token for username ]<br /> <br /> ;Greg: Conflicting feedback on default client keytab. Will be build-configurable.<br /> <br /> ;Tom: &quot;Secrets in /var&quot; objection ... we already put KDC files in /var.<br /> <br /> ;Simo: Secure NFS... multiple daemons. App might not care, but NFS does. So clients are more numerous than acceptors.<br /> <br /> ;Sam: Default MIT ships is not that important. Linux distributions should probably agree on something.<br /> <br /> ;Greg: Response sets. Won't commit current patches yet. Will do OTP commit first. (to get concrete case as an example) Nathaniel wanted marshalling functions [ for validation etc. ] [ marshalling is in key names ]<br /> <br /> ;Greg: On composition side, it's easier. Not so much on the reading side.<br /> <br /> ;Sam: See REST APIs.<br /> <br /> ;Greg: Don't know which is best. In a higher level language, probably not a big deal. In C, it's going to be more annoying.<br /> <br /> ;Simo: Needs some standards...<br /> <br /> ;Sam: It might be easier to get MIT - Heimdal agreement with exploded.<br /> <br /> ;Nathaniel: Need ASN.1 help.<br /> <br /> ;Greg: Have some prior work that could be used. Nathaniel, we'll want fake KDC plugin for a test case.<br /> <br /> ;Greg: Default keytab. Vendors likely to override.<br /> <br /> ;Sam: Search lists.<br /> <br /> ;Greg: Allow graceful migration.<br /> <br /> ;Sam: First or last wins? Will have to revisit eventually.<br /> <br /> ;Greg: Multiple relations with same name means search.<br /> <br /> ;Sam: Could have a case where there are both user and system krb5.conf files, and user wants to override.<br /> <br /> ;Greg: Right now, first wins.<br /> <br /> ;Greg: How to specify at build time. krb5-config? Output of search list.<br /> <br /> ;Tom: Nico's policy extensibility proposal.<br /> <br /> ;Simo: What format for tl_data?<br /> <br /> ;Greg: Depends on DB back end.</div>

TomYu