From wyllys@ardbeg.sfbay.sun.com Tue Jul 28 14:23:54 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n6SLNr7s014145 for ; Tue, 28 Jul 2009 14:23:53 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n6SLNHl7021313 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 28 Jul 2009 22:23:52 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KNI00M03GRQQW00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 28 Jul 2009 14:23:50 -0700 (PDT) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KNI00MB2GRP3300@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 28 Jul 2009 14:23:49 -0700 (PDT) Received: from ardbeg.sfbay.sun.com (ardbeg.SFBay.Sun.COM [10.5.240.18]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n6SLNnaw064243; Tue, 28 Jul 2009 14:23:49 -0700 (PDT) Received: from ardbeg.sfbay.sun.com (localhost [127.0.0.1]) by ardbeg.sfbay.sun.com (8.14.3+Sun/8.14.3) with ESMTP id n6SLGJ9g001691; Tue, 28 Jul 2009 14:16:19 -0700 (PDT) Received: (from wyllys@localhost) by ardbeg.sfbay.sun.com (8.14.3+Sun/8.14.3/Submit) id n6SLGIkW001687; Tue, 28 Jul 2009 14:16:18 -0700 (PDT) Date: Tue, 28 Jul 2009 14:16:18 -0700 (PDT) From: Wyllys Ingersoll Subject: Kerberos V5 PAC API [PSARC/2009/418 FastTrack timeout 08/04/2009] To: PSARC-ext@sun.com Cc: glenn.barry@sun.com Message-id: <200907282116.n6SLGIkW001687@ardbeg.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 5528 I am sponsoring the following fast track for Glenn Barry. Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI This information is Copyright 2009 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Kerberos V5 PAC API 1.2. Name of Document Author/Supplier: Author: Glenn Barry 1.3 Date of This Document: 28 July, 2009 4. Technical Description Template Version: @(#)sac_nextcase 1.55 08/11/04 SMI 1. Introduction 1.1. Project/Component Working Name: Kerberos V5 PAC API 1.2. Name of Document Author/Supplier: Author: Glenn Barry 1.3 Date of This Document: July, 2009 4. Technical Description ABSTRACT -------- This case will expose the Kerberos V5 (aka krb5) PAC (Privilege Attribute Certificate) API via a resync with MIT Kerberos 1.7. This will allow native krb5 applications to decode and access the PAC part of the Kerberos ticket used by Windows-based protocols and systems. This case introduces several new entry points into the libkrb5 and libgss libraries and additions to header files krb5.h and gssapi_ext.h. Also, man page updates will be provided. BACKGROUND ---------- The OpenSolaris Kerberos functionality is currently based on MIT Kerberos V5 1.6.3 and is available to applications via libkrb5(3LIB) and libgss(3LIB). The MIT Kerberos team recently released v1.7 which contains support for the PAC which is a Microsoft Kerberos extension to include authorization data (i.e. global group membership). This PAC API facilitates interopability with Windows networking protocols such as CIFS (Common Internet File System) which is a protocol for remote file access. CONSUMERS --------- - OpenSolaris CIFS PROPOSAL -------- We propose: - the following additions to libkrb5(3LIB): struct krb5_pac_data; typedef struct krb5_pac_data *krb5_pac; krb5_error_code KRB5_CALLCONV krb5_pac_add_buffer (krb5_context context, krb5_pac pac, krb5_ui_4 type, const krb5_data *data); void KRB5_CALLCONV krb5_pac_free (krb5_context context, krb5_pac pac); krb5_error_code KRB5_CALLCONV krb5_pac_get_buffer (krb5_context context, krb5_pac pac, krb5_ui_4 type, krb5_data *data); krb5_error_code KRB5_CALLCONV krb5_pac_get_types (krb5_context context, krb5_pac pac, size_t *len, krb5_ui_4 **types); krb5_error_code KRB5_CALLCONV krb5_pac_init (krb5_context context, krb5_pac *pac); krb5_error_code KRB5_CALLCONV krb5_pac_parse (krb5_context context, const void *ptr, size_t len, krb5_pac *pac); krb5_error_code KRB5_CALLCONV krb5_pac_verify (krb5_context context, const krb5_pac pac, krb5_timestamp authtime, krb5_const_principal principal, const krb5_keyblock *server, const krb5_keyblock *privsvr); #define KRB5_AUTHDATA_WIN2K_PAC 128 krb5_error_code KRB5_CALLCONV krb5_decode_authdata_container(krb5_context context, krb5_authdatatype type, const krb5_authdata *container, krb5_authdata ***authdata); krb5_error_code KRB5_CALLCONV krb5_encode_authdata_container(krb5_context context, krb5_authdatatype type, krb5_authdata * const*authdata, krb5_authdata ***container); - the following new GSS-API extensions to libgss(3LIB): /* * GGF (Global Grid Forum) extensions */ typedef struct gss_buffer_set_desc_struct { size_t count; gss_buffer_desc *elements; } gss_buffer_set_desc, *gss_buffer_set_t; #define GSS_C_NO_BUFFER_SET ((gss_buffer_set_t) 0) OM_uint32 gss_create_empty_buffer_set (OM_uint32 * /*minor_status*/, gss_buffer_set_t * /*buffer_set*/); OM_uint32 gss_add_buffer_set_member (OM_uint32 * /*minor_status*/, const gss_buffer_t /*member_buffer*/, gss_buffer_set_t * /*buffer_set*/); OM_uint32 gss_release_buffer_set (OM_uint32 * /*minor_status*/, gss_buffer_set_t * /*buffer_set*/); OM_uint32 gss_inquire_sec_context_by_oid (OM_uint32 * /*minor_status*/, const gss_ctx_id_t /*context_handle*/, const gss_OID /*desired_object*/, gss_buffer_set_t * /*data_set*/); Desired Object OIds: extern const gss_OID GSS_C_INQ_SSPI_SESSION_KEY; Returns a buffer set with the first member containing the session key for SSPI compatibility. The optional second member contains an OID identifying the session key type. DOCUMENTATION ------------- - We will provide updates to man pages libkrb5(3LIB) and libgss(3LIB). - We will not provide detailed documentation of this new API but will provide a pointer to it at MIT as it becomes available. NOTES ----- - MIT Kerberos PAC project page http://k5wiki.kerberos.org/wiki/Projects/PAC_and_principal_APIs - Windows 2000 PAC Information Internet Draft http://ietfreport.isoc.org/idref/draft-brezak-win2k-krb-authz/ INTERFACE STABILITY AND RELEASE BINDINGS ---------------------------------------- Interface Stability Release Binding New API in libkrb5(3LIB) External micro/patch New API in libgss(3LIB) External micro/patch 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From gdamore@sun.com Tue Jul 28 14:27:48 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n6SLRlM8014310 for ; Tue, 28 Jul 2009 14:27:47 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n6SLRcZP012881 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 29 Jul 2009 05:27:46 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KNI00001GY9H500@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Tue, 28 Jul 2009 14:27:45 -0700 (PDT) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KNI00MJXGY93300@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Tue, 28 Jul 2009 14:27:45 -0700 (PDT) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n6SLRjsj001386 for ; Tue, 28 Jul 2009 14:27:45 -0700 (PDT) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KNI00A00GY1GX00@fe-sfbay-10.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Tue, 28 Jul 2009 14:27:45 -0700 (PDT) Received: from [192.168.251.11] ([unknown] [76.93.15.33]) by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KNI0090ZGY83VF0@fe-sfbay-10.sun.com>; Tue, 28 Jul 2009 14:27:44 -0700 (PDT) Date: Tue, 28 Jul 2009 14:27:44 -0700 From: "Garrett D'Amore" Subject: Re: Kerberos V5 PAC API [PSARC/2009/418 FastTrack timeout 08/04/2009] In-reply-to: <200907282116.n6SLGIkW001687@ardbeg.sfbay.sun.com> Sender: Garrett.Damore@sun.com To: Wyllys Ingersoll Cc: PSARC-ext@sun.com, glenn.barry@sun.com Message-id: <4A6F6D50.6060408@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907282116.n6SLGIkW001687@ardbeg.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.18 (X11/20081201) Status: RO Content-Length: 6261 Wyllys Ingersoll wrote: > I am sponsoring the following fast track for Glenn Barry. > > > Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI > This information is Copyright 2009 Sun Microsystems > 1. Introduction > 1.1. Project/Component Working Name: > Kerberos V5 PAC API > 1.2. Name of Document Author/Supplier: > Author: Glenn Barry > 1.3 Date of This Document: > 28 July, 2009 > 4. Technical Description > Template Version: @(#)sac_nextcase 1.55 08/11/04 SMI > > 1. Introduction > 1.1. Project/Component Working Name: > Kerberos V5 PAC API > 1.2. Name of Document Author/Supplier: > Author: Glenn Barry > 1.3 Date of This Document: > July, 2009 > 4. Technical Description > > ABSTRACT > -------- > > This case will expose the Kerberos V5 (aka krb5) PAC (Privilege > Attribute Certificate) API via a resync with MIT Kerberos 1.7. This > will allow native krb5 applications to decode and access the PAC part > of the Kerberos ticket used by Windows-based protocols and systems. > > This case introduces several new entry points into the libkrb5 and > libgss libraries and additions to header files krb5.h and > gssapi_ext.h. Also, man page updates will be provided. > > BACKGROUND > ---------- > > The OpenSolaris Kerberos functionality is currently based on MIT > Kerberos V5 1.6.3 and is available to applications via libkrb5(3LIB) > and libgss(3LIB). The MIT Kerberos team recently released v1.7 which > contains support for the PAC which is a Microsoft Kerberos extension > to include authorization data (i.e. global group membership). This > PAC API facilitates interopability with Windows networking protocols > such as CIFS (Common Internet File System) which is a protocol for > remote file access. > > > CONSUMERS > --------- > > - OpenSolaris CIFS > > PROPOSAL > -------- > > We propose: > > - the following additions to libkrb5(3LIB): > > struct krb5_pac_data; > typedef struct krb5_pac_data *krb5_pac; > > krb5_error_code KRB5_CALLCONV > krb5_pac_add_buffer > (krb5_context context, > krb5_pac pac, > krb5_ui_4 type, > const krb5_data *data); > > void KRB5_CALLCONV > krb5_pac_free > (krb5_context context, > krb5_pac pac); > > krb5_error_code KRB5_CALLCONV > krb5_pac_get_buffer > (krb5_context context, > krb5_pac pac, > krb5_ui_4 type, > krb5_data *data); > > krb5_error_code KRB5_CALLCONV > krb5_pac_get_types > (krb5_context context, > krb5_pac pac, > size_t *len, > krb5_ui_4 **types); > > krb5_error_code KRB5_CALLCONV > krb5_pac_init > (krb5_context context, > krb5_pac *pac); > > krb5_error_code KRB5_CALLCONV > krb5_pac_parse > (krb5_context context, > const void *ptr, > size_t len, > krb5_pac *pac); > > krb5_error_code KRB5_CALLCONV > krb5_pac_verify > (krb5_context context, > const krb5_pac pac, > krb5_timestamp authtime, > krb5_const_principal principal, > const krb5_keyblock *server, > const krb5_keyblock *privsvr); > > > #define KRB5_AUTHDATA_WIN2K_PAC 128 > > krb5_error_code KRB5_CALLCONV > krb5_decode_authdata_container(krb5_context context, > krb5_authdatatype type, > const krb5_authdata *container, > krb5_authdata ***authdata); > krb5_error_code KRB5_CALLCONV > krb5_encode_authdata_container(krb5_context context, > krb5_authdatatype type, > krb5_authdata * const*authdata, > krb5_authdata ***container); > > > - the following new GSS-API extensions to libgss(3LIB): > > /* > * GGF (Global Grid Forum) extensions > */ > typedef struct gss_buffer_set_desc_struct { > size_t count; > gss_buffer_desc *elements; > } gss_buffer_set_desc, *gss_buffer_set_t; > > #define GSS_C_NO_BUFFER_SET ((gss_buffer_set_t) 0) > > OM_uint32 gss_create_empty_buffer_set > (OM_uint32 * /*minor_status*/, > gss_buffer_set_t * /*buffer_set*/); > > OM_uint32 gss_add_buffer_set_member > (OM_uint32 * /*minor_status*/, > const gss_buffer_t /*member_buffer*/, > gss_buffer_set_t * /*buffer_set*/); > > OM_uint32 gss_release_buffer_set > (OM_uint32 * /*minor_status*/, > gss_buffer_set_t * /*buffer_set*/); > > OM_uint32 gss_inquire_sec_context_by_oid > (OM_uint32 * /*minor_status*/, > const gss_ctx_id_t /*context_handle*/, > const gss_OID /*desired_object*/, > gss_buffer_set_t * /*data_set*/); > > Desired Object OIds: > extern const gss_OID GSS_C_INQ_SSPI_SESSION_KEY; > Returns a buffer set with the first member containing the > session key for SSPI compatibility. The optional second > member contains an OID identifying the session key type. > > > DOCUMENTATION > ------------- > > - We will provide updates to man pages libkrb5(3LIB) and libgss(3LIB). > > - We will not provide detailed documentation of this new API but will > provide a pointer to it at MIT as it becomes available. > > > NOTES > ----- > > - MIT Kerberos PAC project page > http://k5wiki.kerberos.org/wiki/Projects/PAC_and_principal_APIs > > - Windows 2000 PAC Information Internet Draft > http://ietfreport.isoc.org/idref/draft-brezak-win2k-krb-authz/ > > INTERFACE STABILITY AND RELEASE BINDINGS > ---------------------------------------- > > Interface Stability Release Binding > > New API in libkrb5(3LIB) External micro/patch > New API in libgss(3LIB) External micro/patch > External is no longer a valid stability classification. Please choose from: Volatile, Uncommitted, Committed. I suspect Uncommitted is what you really want. But that depends on how much change is happening. Its also hard to justify Uncommitted (IMO) without having at least *some* documentation for the interfaces. - Garrett > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > ON > 6.5. ARC review type: FastTrack > > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > ON > 6.5. ARC review type: FastTrack > 6.6. ARC Exposure: open > > From Wyllys.Ingersoll@sun.com Tue Jul 28 14:34:40 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n6SLYdp0014375 for ; Tue, 28 Jul 2009 14:34:40 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n6SLYYYc028084 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 28 Jul 2009 22:34:39 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KNI00103H9PV400@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 28 Jul 2009 14:34:37 -0700 (PDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KNI00MJ9H9P2P00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 28 Jul 2009 14:34:37 -0700 (PDT) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n6SLYbmR010608 for ; Tue, 28 Jul 2009 21:34:37 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KNI00K00GYSVG00@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 28 Jul 2009 15:34:37 -0600 (MDT) Received: from [192.168.1.50] (pool-173-72-133-94.clppva.fios.verizon.net [173.72.133.94]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KNI007NXH91MUC0@mail-amer.sun.com>; Tue, 28 Jul 2009 15:34:14 -0600 (MDT) Date: Tue, 28 Jul 2009 17:34:13 -0400 From: Wyllys Ingersoll Subject: Re: Kerberos V5 PAC API [PSARC/2009/418 FastTrack timeout 08/04/2009] In-reply-to: <4A6F6D50.6060408@sun.com> Sender: Wyllys.Ingersoll@sun.com To: "Garrett D'Amore" Cc: Wyllys Ingersoll , PSARC-ext@sun.com, Glenn.Barry@sun.com Message-id: <4A6F6ED5.6090501@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907282116.n6SLGIkW001687@ardbeg.sfbay.sun.com> <4A6F6D50.6060408@sun.com> User-Agent: Thunderbird 2.0.0.21 (X11/20090323) Status: RO Content-Length: 774 Garrett D'Amore wrote: >> INTERFACE STABILITY AND RELEASE BINDINGS >> ---------------------------------------- >> >> Interface Stability Release Binding >> >> New API in libkrb5(3LIB) External micro/patch >> New API in libgss(3LIB) External micro/patch >> > > External is no longer a valid stability classification. Please choose > from: > > Volatile, Uncommitted, Committed. > > I suspect Uncommitted is what you really want. But that depends on how > much change is happening. Its also hard to justify Uncommitted (IMO) > without having at least *some* documentation for the interfaces. > > - Garrett > I was just about to sent out another message - the man pages are in the case directory (new, old, and diffs). -Wyllys From Glenn.Barry@sun.com Tue Jul 28 17:09:37 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n6T09aAU023624 for ; Tue, 28 Jul 2009 17:09:36 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n6T09VgU028950; Wed, 29 Jul 2009 08:09:32 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KNI00A01OFV4000@nwk-avmta-1.sfbay.Sun.COM>; Tue, 28 Jul 2009 17:09:31 -0700 (PDT) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.63]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KNI00MZWOFV3570@nwk-avmta-1.sfbay.Sun.COM>; Tue, 28 Jul 2009 17:09:31 -0700 (PDT) Received: from [10.7.251.3] (punchin-client-10-7-251-3.SFBay.Sun.COM [10.7.251.3]) by jurassic-x4600.sfbay.sun.com (8.14.3+Sun/8.14.3) with ESMTP id n6T09UQS874921; Tue, 28 Jul 2009 17:09:30 -0700 (PDT) Date: Tue, 28 Jul 2009 17:09:30 -0700 From: Glenn Barry Subject: Re: Kerberos V5 PAC API [PSARC/2009/418 FastTrack timeout 08/04/2009] In-reply-to: <4A6F6ED5.6090501@sun.com> To: Wyllys Ingersoll Cc: "Garrett D'Amore" , Wyllys Ingersoll , PSARC-ext@sun.com Message-id: <4A6F933A.9020404@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907282116.n6SLGIkW001687@ardbeg.sfbay.sun.com> <4A6F6D50.6060408@sun.com> <4A6F6ED5.6090501@sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 876 Wyllys Ingersoll wrote: > Garrett D'Amore wrote: > > >>> INTERFACE STABILITY AND RELEASE BINDINGS >>> ---------------------------------------- >>> >>> Interface Stability Release Binding >>> >>> New API in libkrb5(3LIB) External micro/patch >>> New API in libgss(3LIB) External micro/patch >>> >>> >> External is no longer a valid stability classification. Please choose >> from: >> >> Volatile, Uncommitted, Committed. >> will do, thanks. >> I suspect Uncommitted is what you really want. But that depends on how >> much change is happening. Its also hard to justify Uncommitted (IMO) >> without having at least *some* documentation for the interfaces. >> >> - Garrett >> >> > > I was just about to sent out another message - the man pages are in the > case directory (new, old, and diffs). > > -Wyllys > From Glenn.Barry@sun.com Tue Aug 4 15:18:03 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n74MI3JA020001 for ; Tue, 4 Aug 2009 15:18:03 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n74MI2eV029273; Tue, 4 Aug 2009 15:18:02 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KNV00I03HXKA700@nwk-avmta-1.sfbay.Sun.COM>; Tue, 04 Aug 2009 15:17:44 -0700 (PDT) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.59]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KNV005KLHXJL570@nwk-avmta-1.sfbay.Sun.COM>; Tue, 04 Aug 2009 15:17:43 -0700 (PDT) Received: from [10.7.251.3] (punchin-client-10-7-251-3.SFBay.Sun.COM [10.7.251.3]) by jurassic-x4600.sfbay.sun.com (8.14.3+Sun/8.14.3) with ESMTP id n74MHhEt297240; Tue, 04 Aug 2009 15:17:43 -0700 (PDT) Date: Tue, 04 Aug 2009 15:17:43 -0700 From: Glenn Barry Subject: Re: Kerberos V5 PAC API [PSARC/2009/418 FastTrack timeout 08/04/2009] In-reply-to: <4A6F933A.9020404@sun.com> To: Wyllys Ingersoll Cc: "Garrett D'Amore" , PSARC-ext@sun.com Message-id: <4A78B387.8050408@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907282116.n6SLGIkW001687@ardbeg.sfbay.sun.com> <4A6F6D50.6060408@sun.com> <4A6F6ED5.6090501@sun.com> <4A6F933A.9020404@sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 1146 Glenn Barry wrote: > Wyllys Ingersoll wrote: >> Garrett D'Amore wrote: >> >> >>>> INTERFACE STABILITY AND RELEASE BINDINGS >>>> ---------------------------------------- >>>> >>>> Interface Stability Release Binding >>>> >>>> New API in libkrb5(3LIB) External micro/patch >>>> New API in libgss(3LIB) External micro/patch >>>> >>> External is no longer a valid stability classification. Please choose >>> from: >>> >>> Volatile, Uncommitted, Committed. >>> > After some discussion within the Solaris Kerberos team, we've decided to go with Volatile. It seems appropriate here as it's a brand new API and controlled by the MIT Kerberos distro team. We'll update the case dir. > will do, thanks. > >>> I suspect Uncommitted is what you really want. But that depends on how >>> much change is happening. Its also hard to justify Uncommitted (IMO) >>> without having at least *some* documentation for the interfaces. >>> >>> - Garrett >>> >>> >> >> I was just about to sent out another message - the man pages are in the >> case directory (new, old, and diffs). >> >> -Wyllys >> > From gdamore@sun.com Tue Aug 4 16:12:35 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n74NCYoP000361 for ; Tue, 4 Aug 2009 16:12:34 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n74NCLqk009997 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 5 Aug 2009 00:12:33 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KNV00203KGWQI00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 04 Aug 2009 16:12:32 -0700 (PDT) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KNV005WJKGVLA90@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 04 Aug 2009 16:12:31 -0700 (PDT) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n74NCVkK008090 for ; Tue, 04 Aug 2009 16:12:31 -0700 (PDT) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KNV00900KFZTK00@fe-sfbay-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 04 Aug 2009 16:12:31 -0700 (PDT) Received: from [192.168.251.11] ([unknown] [76.93.15.33]) by fe-sfbay-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KNV0051IKGVQY90@fe-sfbay-09.sun.com>; Tue, 04 Aug 2009 16:12:31 -0700 (PDT) Date: Tue, 04 Aug 2009 16:12:31 -0700 From: "Garrett D'Amore" Subject: Re: Kerberos V5 PAC API [PSARC/2009/418 FastTrack timeout 08/04/2009] In-reply-to: <4A78B387.8050408@sun.com> Sender: Garrett.Damore@sun.com To: Glenn Barry Cc: Wyllys Ingersoll , PSARC-ext@sun.com Message-id: <4A78C05F.1090006@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907282116.n6SLGIkW001687@ardbeg.sfbay.sun.com> <4A6F6D50.6060408@sun.com> <4A6F6ED5.6090501@sun.com> <4A6F933A.9020404@sun.com> <4A78B387.8050408@sun.com> User-Agent: Thunderbird 2.0.0.18 (X11/20081201) Status: RO Content-Length: 1291 Glenn Barry wrote: > Glenn Barry wrote: >> Wyllys Ingersoll wrote: >>> Garrett D'Amore wrote: >>> >>> >>>>> INTERFACE STABILITY AND RELEASE BINDINGS >>>>> ---------------------------------------- >>>>> >>>>> Interface Stability Release Binding >>>>> >>>>> New API in libkrb5(3LIB) External micro/patch >>>>> New API in libgss(3LIB) External micro/patch >>>>> >>>> External is no longer a valid stability classification. Please choose >>>> from: >>>> >>>> Volatile, Uncommitted, Committed. >>>> >> > > After some discussion within the Solaris Kerberos team, we've decided > to go with Volatile. It seems appropriate here as it's a brand new > API and controlled by the MIT Kerberos distro team. > > We'll update the case dir. Sounds good. With that I'm satisfied, and will grant a +1 -- Garrett > >> will do, thanks. >> >>>> I suspect Uncommitted is what you really want. But that depends on how >>>> much change is happening. Its also hard to justify Uncommitted (IMO) >>>> without having at least *some* documentation for the interfaces. >>>> >>>> - Garrett >>>> >>>> >>> >>> I was just about to sent out another message - the man pages are in the >>> case directory (new, old, and diffs). >>> >>> -Wyllys >>> >> >