From wyllys@sac.sfbay.sun.com Mon Jun 21 06:39:10 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o5LDdAUc007664 for ; Mon, 21 Jun 2010 06:39:10 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o5LDd8lE026577; Mon, 21 Jun 2010 06:39:10 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L4D0012J9X9TO00@brm-avmta-1.central.sun.com>; Mon, 21 Jun 2010 07:39:09 -0600 (MDT) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L4D009ZA9X81OC0@brm-avmta-1.central.sun.com>; Mon, 21 Jun 2010 07:39:08 -0600 (MDT) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o5LDd8V8017226; Mon, 21 Jun 2010 06:39:08 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o5LDd6aX007659; Mon, 21 Jun 2010 06:39:06 -0700 (PDT) Received: (from wyllys@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id o5LDd6tv007655; Mon, 21 Jun 2010 06:39:06 -0700 (PDT) Date: Mon, 21 Jun 2010 06:39:06 -0700 (PDT) From: Wyllys Ingersoll Subject: Kerberos Keytab Management API [PSARC/2010/229 FastTrack timeout 06/28/2010] To: PSARC-ext@sun.com Message-id: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 5312 Template Version: @(#)sac_nextcase 1.70 03/30/10 SMI This information is Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved. 1. Introduction 1.1. Project/Component Working Name: Kerberos Keytab Management API 1.2. Name of Document Author/Supplier: Author: Shawn Emery 1.3 Date of This Document: 21 June, 2010 4. Technical Description Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI This information is Copyright 2010 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Kerberos Keytab Management API 1.2. Name of Document Author/Supplier: Author: Shawn M. Emery 1.3 Date of This Document: May 28, 2010 4. Technical Description Overview -------- A new API is needed to manage Kerberos keys that are stored on client and application servers. These keys are stored in the /etc/krb5/krb5.keytab file, but the existing interfaces to manage this file is tedious. A new API is required for utilities that are responsible for managing this file, such as smbadm(1M) and kclient(1M). The API must support MT applications. This is required, given that applications such as smbd(1M) are MT and would need a way to prevent simultaneous updates to the keytab information, both in memory and by file. An abstract interface is required with only a few different calls to effectively configure a system to utilize Kerberos. The abstract interface functions will subsequently call existing function primitives in order to store/remove the system's Kerberos keys in the keytab file. An abstract interface is desired over the existing set of primitive interfaces because using said interfaces requires knowledge of the implementation. An abstract interface separates implementation details, will reduce chances of mismanagement, and will allow changes in the underlying keytab functions without changing consumers. The new abstract APIs should not be coordinated with MIT during design and code review as these interfaces are only contract private for the CIFS team. Abstracted interfaces ===================== krb5_error_code __krb5_kt_add_ad_entries(krb5_context ctx, char **svc_princs, krb5_kvno kvno, uint_t flags, char *password) where ctx is the pointer passed back from krb5_init_context where svc_princs is an array of service principal names to be added to the keytab file, terminated by a NULL pointer where kvno is the key version number of the set of service principal keys to be added where flags is the set of conditions that affects the key table entries current set of defined flags: encryption type --------------- 0x00000001 AES_SUPPORT (core set + AES-256/128 keys added) where password is the password that will be used to derive the key for the associated service principals in the keytab file Note: this function is used for adding service principals to the local /etc/krb5/krb5.keytab file when the client belongs to an AD domain. The keytab file is populated differently for an AD domain as the various service principals share the same key material, unlike MIT implementations. Note: For encryption types; the union of the enc type flag and the capabilities of the client is used to determine the enc type set to populate the keytab file. _________ krb5_error_code __krb5_kt_remove_by_realm(krb5_context ctx, char *realm) where ctx is the pointer passed back from krb5_init_context where realm is the realm name that is matched for any keytab entries to be removed Note: if there are no entries matching realm then 0 (success) is returned _________ krb5_error_code __krb5_kt_remove_by_svcprinc(krb5_context ctx, char *svc_princ) where ctx is the pointer passed back from krb5_init_context where svc_princ is the service principal name that is matched for any keytab entries to be removed Note: if there are no entries matching svc_princ then 0 (success) is returned _________ krb5_error_code __krb5_kt_validate(krb5_context ctx, char *svc_princ, uint_t flags, boolean_t *valid) where ctx is the pointer passed back from krb5_init_context where svc_princ is the principal to be validated in the keytab file where flags is the set of conditions that affects the key table entries that the function considers valid current set of defined flags: encryption type --------------- 0x00000001 AES_SUPPORT (core set + AES-256/128 keys are valid) where valid is a boolean that is set if the svc_princ is correctly populated in the keytab file based on the flags set else valid is unset. Note: The validate function does not distinguish between having n and n-1 key sets in the keytab file. This is from the fact that AD environments will refresh old credential caches if n-1 keys are not present in the keytab file. Stability Level =============== Contract project private for both primitive and abstracted interfaces. 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From wyllys.ingersoll@oracle.com Tue Jun 29 07:49:50 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o5TEnosJ006365 for ; Tue, 29 Jun 2010 07:49:50 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o5TEnnYb014098 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 29 Jun 2010 08:49:49 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L4S003256J1I900@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 29 Jun 2010 07:49:49 -0700 (PDT) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L4S00GCU6J0V330@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 29 Jun 2010 07:49:48 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o5TEnm1R011660 for ; Tue, 29 Jun 2010 14:49:48 +0000 (GMT) Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o5TEcoMS010318 for ; Tue, 29 Jun 2010 14:49:47 +0000 (GMT) Received: from abhmt001.oracle.com by acsmt355.oracle.com with ESMTP id 382854821277822925; Tue, 29 Jun 2010 07:48:45 -0700 Received: from [10.7.251.182] (/10.7.251.182) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 29 Jun 2010 07:48:45 -0700 Date: Tue, 29 Jun 2010 10:48:43 -0400 From: Wyllys Ingersoll Subject: PSARC 2010/229 Keytab Management API To: PSARC-ext Message-id: <4C2A07CB.7090602@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt355.oracle.com [141.146.40.155] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090202.4C2A080B.017D:SCFMA4539814,ss=1,fgs=0 User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.9) Gecko/20100607 Lightning/1.0b1 Thunderbird/3.0.4 Status: RO Content-Length: 5255 On 06/24/10 21:27, Shawn Emery wrote: > On 06/24/10 04:44 PM, Glenn Barry wrote: >> >> looks good in general, a few comments: >> >> Abstracted interfaces >> ===================== >> >> >> krb5_error_code __krb5_kt_add_ad_entries(krb5_context ctx, >> char **svc_princs, krb5_kvno kvno, uint_t flags, char *password) >> **** maybe add blurb for each func like for this one cuz parts of it >> like >> '_ad_' may not be obvious: >> Add keys for service principals to krb5.keytab for an Active >> Directory client: > > Done. > >> krb5_error_code __krb5_kt_remove_by_svcprinc(krb5_context ctx, >> char *svc_princ) >> >> where ctx is the pointer passed back from krb5_init_context >> where svc_princ is the service principal name that is matched for >> any >> keytab entries to be removed >> **** partial matches and/or wildcards supported? >> **** pro/con using char * for svc_princ vs krb5_principal? > > Clarified in the beginning text. See diffs below. > >> krb5_error_code __krb5_kt_validate(krb5_context ctx, >> char *svc_princ, uint_t flags, boolean_t *valid) >> **** krb5_boolean? > > I thought of this, but I didn't like how they were typically assigned > in the mech, with 0 or 1, instead of TRUE and FALSE. In any case, > I'll change them. > >> **** n/n-1 Note: this w/respect to kvno? (make that clear) > > Done. > > @@ -40,10 +40,13 @@ > ===================== > > krb5_error_code __krb5_kt_add_ad_entries(krb5_context ctx, > char **svc_princs, krb5_kvno kvno, uint_t flags, char *password) > > + Adds keys to the keytab file for a default set of service principals > + (refer to PSARC/2007/401) in an Active Directory environment. > + > where ctx is the pointer passed back from krb5_init_context > where svc_princs is an array of service principal names to be added > to the keytab file, terminated by a NULL pointer > where kvno is the key version number of the set of service principal > keys to be added > @@ -69,10 +72,13 @@ > > _________ > > krb5_error_code __krb5_kt_remove_by_realm(krb5_context ctx, char > *realm) > > + Removes all key entries in the keytab file that match the exact > realm > + name specified. > + > where ctx is the pointer passed back from krb5_init_context > where realm is the realm name that is matched for any keytab entries > to be removed > Note: if there are no entries matching realm then 0 (success) is > returned > @@ -80,10 +86,13 @@ > _________ > > krb5_error_code __krb5_kt_remove_by_svcprinc(krb5_context ctx, > char *svc_princ) > > + Removes all key entries in the keytab file that match the exact > service > + principal name specified. > + > where ctx is the pointer passed back from krb5_init_context > where svc_princ is the service principal name that is matched for > any > keytab entries to be removed > > Note: if there are no entries matching svc_princ then 0 (success) is > @@ -90,12 +99,16 @@ > returned > > _________ > > krb5_error_code __krb5_kt_validate(krb5_context ctx, > - char *svc_princ, uint_t flags, boolean_t *valid) > + char *svc_princ, uint_t flags, krb5_boolean *valid) > > + The validate function determines that the correct set of service > + principals (refer to PSARC/2007/401) exist and that this set has a > + valid set of encryption types. > + > where ctx is the pointer passed back from krb5_init_context > where svc_princ is the principal to be validated in the keytab file > where flags is the set of conditions that affects the key table > entries > that the function considers valid > current set of defined flags: > @@ -106,13 +119,13 @@ > > where valid is a boolean that is set if the svc_princ is correctly > populated in the keytab file based on the flags set else valid is > unset. > > Note: The validate function does not distinguish between having n > and > - n-1 key sets in the keytab file. This is from the fact that AD > - environments will refresh old credential caches if n-1 keys are not > - present in the keytab file. > + n-1 key version numbers (kvno) in the keytab file. This is from the > + fact that AD environments will refresh old credential caches if > kvno, > + n-1, are not present in the keytab file. > > Stability Level > =============== > > Contract project private for both primitive and abstracted > interfaces. > > Shawn. > -- >> On 06/21/10 09:57, Shawn Emery wrote: >>> On 06/21/10 08:30 AM, Mark Phalan wrote: >>>> On Mon, 2010-06-21 at 09:41 -0400, Wyllys Ingersoll wrote: >>>>> I filed the case today - PSARC 2010/229 >>>>> >>>> Shawn: >>>> Was this sent out to the i-team alias for review? I don't remember >>>> seeing it here first but it's possible I missed it. >>>> >>>> If it wasn't I think it should have been. >>> >>> I apologize for not sending this out to the i-team alias for review >>> earlier, however the design is still malleable and I still expect >>> review comments from this and other groups. >>> >>> Shawn. >>> -- >> >> > From sacadmin Tue Jun 29 07:52:16 2010 Received: from dm-sfbay-02.sfbay.sun.com (dm-sfbay-02.SFBay.Sun.COM [129.146.11.31]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o5TEqGAu006494 for ; Tue, 29 Jun 2010 07:52:16 -0700 (PDT) Received: from sca-ea-mail-3.sun.com (sca-ea-mail-3.Sun.COM [192.18.43.21]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o5TEqFJL026403 for ; Tue, 29 Jun 2010 07:52:15 -0700 (PDT) Received: from rcsinet15.oracle.com (rcsinet15.oracle.com [148.87.113.117]) by sca-ea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o5TEqF6V010274 for ; Tue, 29 Jun 2010 14:52:15 GMT Received: from acsmt353.oracle.com (acsmt353.oracle.com [141.146.40.153]) by rcsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o5TElu5J019418 for ; Tue, 29 Jun 2010 14:52:11 GMT Received: from abhmt021.oracle.com by acsmt355.oracle.com with ESMTP id 366205201277823122; Tue, 29 Jun 2010 07:52:02 -0700 Received: from [10.7.251.182] (/10.7.251.182) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 29 Jun 2010 07:52:02 -0700 Message-ID: <4C2A0890.80609@oracle.com> Date: Tue, 29 Jun 2010 10:52:00 -0400 From: Wyllys Ingersoll User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.9) Gecko/20100607 Lightning/1.0b1 Thunderbird/3.0.4 MIME-Version: 1.0 To: PSARC@sac.sfbay.sun.com Subject: PSARC 2010/229 Keytab Management API Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Source-IP: acsmt353.oracle.com [141.146.40.153] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090207.4C2A089C.0072:SCFMA4539814,ss=1,fgs=0 Status: RO Content-Length: 158 This case still needs a +1 from an ARC member. Can someone take a quick look and lend some support? http://sac.eng/arc/PSARC/2010/229/ thanks, Wyllys From sebastien.roy@oracle.com Wed Jun 30 09:21:16 2010 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o5UGLGfx029332 for ; Wed, 30 Jun 2010 09:21:16 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o5UGLFRY002531 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 30 Jun 2010 09:21:16 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L4U00A015FF6O00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 30 Jun 2010 10:21:15 -0600 (MDT) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L4U00MQ65FEZX70@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 30 Jun 2010 10:21:14 -0600 (MDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o5UGLDvO028331; Wed, 30 Jun 2010 16:21:13 +0000 (GMT) Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o5UDXgMA019447; Wed, 30 Jun 2010 16:21:12 +0000 (GMT) Received: from abhmt019.oracle.com by acsmt354.oracle.com with ESMTP id 370444651277914773; Wed, 30 Jun 2010 09:19:33 -0700 Received: from [129.148.174.103] (/129.148.174.103) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 30 Jun 2010 09:19:32 -0700 Date: Wed, 30 Jun 2010 12:19:31 -0400 From: Sebastien Roy Subject: Re: Kerberos Keytab Management API [PSARC/2010/229 FastTrack timeout 06/28/2010] In-reply-to: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> To: Wyllys Ingersoll Cc: PSARC-ext@sun.com Message-id: <4C2B6E93.7030208@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt355.oracle.com [141.146.40.155] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090203.4C2B6EF9.0068:SCFMA4539814,ss=1,fgs=0 References: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.9) Gecko/20100607 Lightning/1.0b1 Thunderbird/3.0.4 Status: RO Content-Length: 215 A couple of quick questions: 1. What is the release binding? 2. I assume that this is a C API. What library does it live in? If it's a new library, where does it live and as part of what package? Thanks, -Seb From shawn.emery@oracle.com Wed Jun 30 15:31:20 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o5UMVJoC013875 for ; Wed, 30 Jun 2010 15:31:19 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o5UMVJHB039233 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 30 Jun 2010 16:31:19 -0600 (MDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L4U00J0HMK7XB00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 30 Jun 2010 16:31:19 -0600 (MDT) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L4U000PGMK73A90@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 30 Jun 2010 16:31:19 -0600 (MDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o5UMVIjL000059; Wed, 30 Jun 2010 22:31:18 +0000 (GMT) Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o5UMVGbD031176; Wed, 30 Jun 2010 22:31:16 +0000 (GMT) Received: from abhmt018.oracle.com by acsmt354.oracle.com with ESMTP id 371645331277936978; Wed, 30 Jun 2010 15:29:38 -0700 Received: from [10.17.153.102] (/166.137.137.205) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 30 Jun 2010 15:29:37 -0700 Date: Wed, 30 Jun 2010 18:29:35 -0400 From: Shawn Emery Subject: Re: Kerberos Keytab Management API [PSARC/2010/229 FastTrack timeout 06/28/2010] In-reply-to: <4C2B6E93.7030208@oracle.com> To: Sebastien Roy Cc: Wyllys Ingersoll , "PSARC-ext@sun.com" Message-id: <18110B50-5F65-49F8-8BCF-CF5EAF38927C@oracle.com> MIME-version: 1.0 X-Mailer: iPhone Mail (8A293) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt355.oracle.com [141.146.40.155] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A0B0209.4C2BC5B5.01C8:SCFMA4539814,ss=1,fgs=0 References: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> <4C2B6E93.7030208@oracle.com> Status: RO Content-Length: 459 On Jun 30, 2010, at 12:19 PM, Sebastien Roy wrote: > A couple of quick questions: > > 1. What is the release binding? It follows the CIFS project, which I don't know off the top of my head. > 2. I assume that this is a C API. What library does it live Yes, it resides in the preexisting usr/lib/gss/mech_krb5.so.1. Shawn. -- > in? If it's a new library, where does it live and as part of what package? > > Thanks, > -Seb From Nicolas.Williams@oracle.com Wed Jun 30 15:35:29 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o5UMZTW3013911 for ; Wed, 30 Jun 2010 15:35:29 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o5UMZTmV019284 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 30 Jun 2010 15:35:29 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L4U00K09MR5CT00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 30 Jun 2010 16:35:29 -0600 (MDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L4U000HHMR43EA0@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 30 Jun 2010 16:35:28 -0600 (MDT) Received: from rcsinet13.oracle.com (rcsinet13.oracle.com [148.87.113.125]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o5UMZRtU018299; Wed, 30 Jun 2010 22:35:27 +0000 (GMT) Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by rcsinet13.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o5UEqBZr000849; Wed, 30 Jun 2010 22:35:26 +0000 (GMT) Received: from abhmt021.oracle.com by acsmt354.oracle.com with ESMTP id 371660231277937326; Wed, 30 Jun 2010 15:35:26 -0700 Received: from oracle.com (/129.153.128.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 30 Jun 2010 15:35:25 -0700 Date: Wed, 30 Jun 2010 17:37:33 -0500 From: Nicolas Williams Subject: Re: Kerberos Keytab Management API [PSARC/2010/229 FastTrack timeout 06/28/2010] In-reply-to: <18110B50-5F65-49F8-8BCF-CF5EAF38927C@oracle.com> To: Shawn Emery Cc: Sebastien Roy , Wyllys Ingersoll , "PSARC-ext@sun.com" Message-id: <20100630223732.GC14528@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt355.oracle.com [141.146.40.155] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090201.4C2BC6AF.00C9:SCFMA4539814,ss=1,fgs=0 References: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> <4C2B6E93.7030208@oracle.com> <18110B50-5F65-49F8-8BCF-CF5EAF38927C@oracle.com> User-Agent: Mutt/1.5.20 (2010-03-02) Status: RO Content-Length: 650 On Wed, Jun 30, 2010 at 06:29:35PM -0400, Shawn Emery wrote: > > > On Jun 30, 2010, at 12:19 PM, Sebastien Roy wrote: > > > A couple of quick questions: > > > > 1. What is the release binding? > > It follows the CIFS project, which I don't know off the top of my head. > > > 2. I assume that this is a C API. What library does it live > > Yes, it resides in the preexisting usr/lib/gss/mech_krb5.so.1. Does libkrb5 have filters on it? If not then I don't see the need for the __ symbol prefix. After all, one cannot link with mech_krb5 using -l... Isn't that enough of a clue that the API is private? Nico -- From shawn.emery@oracle.com Wed Jun 30 16:47:21 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o5UNlKNu015661 for ; Wed, 30 Jun 2010 16:47:20 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o5UNlKmN016826 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 30 Jun 2010 16:47:20 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L4U00K0BQ2W9700@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 30 Jun 2010 16:47:20 -0700 (PDT) Received: from sca-ea-mail-3.sun.com ([192.18.43.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L4U00JZVQ2U6M50@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 30 Jun 2010 16:47:18 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by sca-ea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o5UNlICt010854; Wed, 30 Jun 2010 23:47:18 +0000 (GMT) Received: from acsmt354.oracle.com (acsmt354.oracle.com [141.146.40.154]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o5UMdcBc019186; Wed, 30 Jun 2010 23:47:16 +0000 (GMT) Received: from abhmt018.oracle.com by acsmt353.oracle.com with ESMTP id 371837411277941624; Wed, 30 Jun 2010 16:47:04 -0700 Received: from [10.17.153.102] (/166.137.137.205) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 30 Jun 2010 16:47:04 -0700 Date: Wed, 30 Jun 2010 19:46:43 -0400 From: Shawn Emery Subject: Re: Kerberos Keytab Management API [PSARC/2010/229 FastTrack timeout 06/28/2010] In-reply-to: <20100630223732.GC14528@oracle.com> To: Nicolas Williams Cc: Sebastien Roy , Wyllys Ingersoll , "PSARC-ext@sun.com" Message-id: <90DA882F-1E09-493F-8383-3690645845D9@oracle.com> MIME-version: 1.0 X-Mailer: iPhone Mail (8A293) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt354.oracle.com [141.146.40.154] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090203.4C2BD785.009F:SCFMA4539814,ss=1,fgs=0 References: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> <4C2B6E93.7030208@oracle.com> <18110B50-5F65-49F8-8BCF-CF5EAF38927C@oracle.com> <20100630223732.GC14528@oracle.com> Status: RO Content-Length: 1069 On Jun 30, 2010, at 6:37 PM, Nicolas Williams wrote: > On Wed, Jun 30, 2010 at 06:29:35PM -0400, Shawn Emery wrote: >> >> >> On Jun 30, 2010, at 12:19 PM, Sebastien Roy wrote: >> >>> A couple of quick questions: >>> >>> 1. What is the release binding? >> >> It follows the CIFS project, which I don't know off the top of my head. >> >>> 2. I assume that this is a C API. What library does it live >> >> Yes, it resides in the preexisting usr/lib/gss/mech_krb5.so.1. > > Does libkrb5 have filters on it? No, there are other functions that are not being exported by libkrb5 that the CIFS team have contracts for. > If not then I don't see the need for the __ symbol prefix. After all, > one cannot link with mech_krb5 using -l... Isn't that enough of a clue > that the API is private? If prefer to keep them with the current prefix as the plan is to migrate to public interfaces if theses functions end up being useful to other applications, with the indicator being the dropped prefix. Shawn. -- From sebastien.roy@oracle.com Thu Jul 1 08:45:48 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o61Fjl8h026982 for ; Thu, 1 Jul 2010 08:45:47 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o61Fji4x050882 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 1 Jul 2010 09:45:47 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L4V00317YGBLF00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 01 Jul 2010 08:45:47 -0700 (PDT) Received: from sca-ea-mail-4.sun.com ([192.18.43.22]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L4V00J6OYGAT690@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 01 Jul 2010 08:45:46 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by sca-ea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o61FjkPp022479; Thu, 01 Jul 2010 15:45:46 +0000 (GMT) Received: from acsmt354.oracle.com (acsmt354.oracle.com [141.146.40.154]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o5UM6lB6010564; Thu, 01 Jul 2010 15:45:45 +0000 (GMT) Received: from abhmt007.oracle.com by acsmt354.oracle.com with ESMTP id 374427241277999134; Thu, 01 Jul 2010 08:45:34 -0700 Received: from [129.148.174.103] (/129.148.174.103) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 01 Jul 2010 08:45:33 -0700 Date: Thu, 01 Jul 2010 11:45:32 -0400 From: Sebastien Roy Subject: Re: Kerberos Keytab Management API [PSARC/2010/229 FastTrack timeout 06/28/2010] In-reply-to: <18110B50-5F65-49F8-8BCF-CF5EAF38927C@oracle.com> To: Shawn Emery Cc: Wyllys Ingersoll , "PSARC-ext@sun.com" Message-id: <4C2CB81C.3030102@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt354.oracle.com [141.146.40.154] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090207.4C2CB829.016F:SCFMA4539814,ss=1,fgs=0 References: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> <4C2B6E93.7030208@oracle.com> <18110B50-5F65-49F8-8BCF-CF5EAF38927C@oracle.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.9) Gecko/20100607 Lightning/1.0b1 Thunderbird/3.0.4 Status: RO Content-Length: 810 On 06/30/10 06:29 PM, Shawn Emery wrote: > On Jun 30, 2010, at 12:19 PM, Sebastien Roy wrote: > >> A couple of quick questions: >> >> 1. What is the release binding? > > It follows the CIFS project, which I don't know off the top of my head. I don't see how CIFS is relevant to the release binding of this case, it's just a potential consumer of the interfaces introduced. The release binding simply indicates the kind of release the case would hypothetically be applicable to given the level of change introduced. Since this case introduces no incompatible changes, then Patch binding would theoretically be appropriate (hint). >> 2. I assume that this is a C API. What library does it live > > Yes, it resides in the preexisting usr/lib/gss/mech_krb5.so.1. > Okay. -Seb From shawn.emery@oracle.com Sat Jul 3 23:10:16 2010 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o646AGYd014438 for ; Sat, 3 Jul 2010 23:10:16 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o646AFDw023157 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Sat, 3 Jul 2010 23:10:16 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L5000C0VRT3OZ00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Sun, 04 Jul 2010 00:10:15 -0600 (MDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L50003UWRST54C0@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Sun, 04 Jul 2010 00:10:05 -0600 (MDT) Received: from rcsinet15.oracle.com (rcsinet15.oracle.com [148.87.113.117]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o646A4ep010340; Sun, 04 Jul 2010 06:10:04 +0000 (GMT) Received: from acsmt354.oracle.com (acsmt354.oracle.com [141.146.40.154]) by rcsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o646A3DQ007537; Sun, 04 Jul 2010 06:10:03 +0000 (GMT) Received: from abhmt021.oracle.com by acsmt353.oracle.com with ESMTP id 380122091278223739; Sat, 03 Jul 2010 23:08:59 -0700 Received: from [129.150.48.15] (/129.150.48.15) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Sat, 03 Jul 2010 23:08:58 -0700 Date: Sun, 04 Jul 2010 00:08:52 -0600 From: Shawn Emery Subject: Re: Kerberos Keytab Management API [PSARC/2010/229 FastTrack timeout 06/28/2010] In-reply-to: <4C2CB81C.3030102@oracle.com> To: Sebastien Roy Cc: Wyllys Ingersoll , "PSARC-ext@sun.com" Message-id: <4C302574.7040201@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt354.oracle.com [141.146.40.154] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090209.4C3025BC.002B:SCFMA4539814,ss=1,fgs=0 References: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> <4C2B6E93.7030208@oracle.com> <18110B50-5F65-49F8-8BCF-CF5EAF38927C@oracle.com> <4C2CB81C.3030102@oracle.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.2.4) Gecko/20100610 Lightning/1.0b2 Thunderbird/3.1 Status: RO Content-Length: 3375 I've made updates based on Sebastien and Nico comments: @@ -37,11 +37,11 @@ code review as these interfaces are only contract private for the CIFS team. Abstracted interfaces ===================== - krb5_error_code __krb5_kt_add_ad_entries(krb5_context ctx, + krb5_error_code krb5_kt_add_ad_entries(krb5_context ctx, char **svc_princs, krb5_kvno kvno, uint_t flags, char *password) Adds keys to the keytab file for a default set of service principals (refer to PSARC/2007/401) in an Active Directory environment. @@ -70,11 +70,11 @@ capabilities of the client is used to determine the enc type set to populate the keytab file. _________ - krb5_error_code __krb5_kt_remove_by_realm(krb5_context ctx, char *realm) + krb5_error_code krb5_kt_remove_by_realm(krb5_context ctx, char *realm) Removes all key entries in the keytab file that match the exact realm name specified. where ctx is the pointer passed back from krb5_init_context @@ -83,11 +83,11 @@ Note: if there are no entries matching realm then 0 (success) is returned _________ - krb5_error_code __krb5_kt_remove_by_svcprinc(krb5_context ctx, + krb5_error_code krb5_kt_remove_by_svcprinc(krb5_context ctx, char *svc_princ) Removes all key entries in the keytab file that match the exact service principal name specified. @@ -98,11 +98,11 @@ Note: if there are no entries matching svc_princ then 0 (success) is returned _________ - krb5_error_code __krb5_kt_validate(krb5_context ctx, + krb5_error_code krb5_kt_validate(krb5_context ctx, char *svc_princ, uint_t flags, krb5_boolean *valid) The validate function determines that the correct set of service principals (refer to PSARC/2007/401) exist and that this set has a valid set of encryption types. @@ -126,12 +126,14 @@ n-1, are not present in the keytab file. Stability Level =============== - Contract project private for both primitive and abstracted interfaces. + Contract project private for interfaces. + The release binding is micro/patch. + 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack Shawn. -- On 07/ 1/10 09:45 AM, Sebastien Roy wrote: > On 06/30/10 06:29 PM, Shawn Emery wrote: >> On Jun 30, 2010, at 12:19 PM, Sebastien >> Roy wrote: >> >>> A couple of quick questions: >>> >>> 1. What is the release binding? >> >> It follows the CIFS project, which I don't know off the top of my head. > > I don't see how CIFS is relevant to the release binding of this case, > it's just a potential consumer of the interfaces introduced. The > release binding simply indicates the kind of release the case would > hypothetically be applicable to given the level of change introduced. > Since this case introduces no incompatible changes, then Patch binding > would theoretically be appropriate (hint). > >>> 2. I assume that this is a C API. What library does it live >> >> Yes, it resides in the preexisting usr/lib/gss/mech_krb5.so.1. >> > > Okay. > > -Seb > From sebastien.roy@oracle.com Wed Jul 7 09:23:47 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o67GNlY1025581 for ; Wed, 7 Jul 2010 09:23:47 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o67GNkdS025330 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 7 Jul 2010 10:23:47 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L570030N47MRS00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 07 Jul 2010 09:23:46 -0700 (PDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L5700JDQ47L7840@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 07 Jul 2010 09:23:45 -0700 (PDT) Received: from rcsinet13.oracle.com (rcsinet13.oracle.com [148.87.113.125]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o67GNeul028769; Wed, 07 Jul 2010 16:23:41 +0000 (GMT) Received: from acsmt353.oracle.com (acsmt353.oracle.com [141.146.40.153]) by rcsinet13.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o67CjYwn013906; Wed, 07 Jul 2010 16:23:39 +0000 (GMT) Received: from abhmt001.oracle.com by acsmt354.oracle.com with ESMTP id 406519491278519792; Wed, 07 Jul 2010 09:23:12 -0700 Received: from [129.148.174.103] (/129.148.174.103) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 07 Jul 2010 09:23:11 -0700 Date: Wed, 07 Jul 2010 12:23:09 -0400 From: Sebastien Roy Subject: Re: Kerberos Keytab Management API [PSARC/2010/229 FastTrack timeout 06/28/2010] In-reply-to: <4C302574.7040201@oracle.com> To: Shawn Emery Cc: Wyllys Ingersoll , "PSARC-ext@sun.com" Message-id: <4C34A9ED.6040102@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt353.oracle.com [141.146.40.153] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090208.4C34AA0C.01B5:SCFMA4539814,ss=1,fgs=0 References: <201006211339.o5LDd6tv007655@sac.sfbay.sun.com> <4C2B6E93.7030208@oracle.com> <18110B50-5F65-49F8-8BCF-CF5EAF38927C@oracle.com> <4C2CB81C.3030102@oracle.com> <4C302574.7040201@oracle.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.9) Gecko/20100607 Lightning/1.0b1 Thunderbird/3.0.4 Status: RO Content-Length: 112 On 07/ 4/10 02:08 AM, Shawn Emery wrote: > > I've made updates based on Sebastien and Nico comments: > +1 -Seb