Wiki?

[Jeff Blaine]

Well, let me be clear here.  This would not be "my" wiki.
I (solely me) have a minute reward for any effort I put
into it.

It just seemed to me that there's a LOT of information
that is incredibly scattered.  If nobody else is likely
to contribute, then the hell with it.  I'm not going to
spend the hours to share my notes if nobody else will
offer some of their time.

So, I appreciate you giving me a heads up warning that
"it aint gonna happen."  Sad, but okay.

For instance, the seemingly simple task of...

   - implementing an MIT KDC under Solaris 9
   - finding and establishing a working Kerberos PAM module
     for Solaris 9 that can auth to modern MIT KDC

resulted in:

Notes: 4 pages of very valuable personal notes documenting every
        dead end and solution I hit

Bug: http://mailman.mit.edu/pipermail/kerberos/2007-January/010999.html
      Submitted and fixed by developer

Doc: http://mailman.mit.edu/pipermail/kerberos/2007-January/011000.html
      Submitted as bug and fixed by developer.  Excellent explanation
      provided in thread.

Doc: 2 Other "bugs" reported that were not posted to list.

Bug: http://mailman.mit.edu/pipermail/kerberos/2007-January/011005.html
      Submitted and fixed by developer

Doc: http://mailman.mit.edu/pipermail/kerberos/2007-January/011012.html
      Great explanation of 'host' principal history and reasoning

Sun Bug: http://mailman.mit.edu/pipermail/kerberos/2007-January/011023.html

Michael B Allen wrote:
> On Wed, 17 Jan 2007 13:27:33 -0500
> Jeff Blaine <jblaine at kickflop.net> wrote:
> 
>> My strong inclination would be to see it all in one spot.
>> IMO, the History and Protocol are pretty well documented
>> already.
>>
>> * History
>> * Protocol
>> * Implementations
>> *** MIT
>> ***** Notes!
>> *** Heimdal
>> ****** Notes!
>> *** Microsoft
>> ****** Notes!
>> * 3rd Party Information
>> *** GSSAPI Notes
>> *** Kerberos-related PAM modules
>> ****** Russ Alberry's
>> ****** Red Hat's Sourceforge version (1.x)
>> ****** The "other" Red Hat version (2.x)
>> *** ETC ETC
>> * Some other topic
>> ...
> 
> Well you could try to create a page in Wikipedia. Just make sure you
> call it something like off-the-beaten-path like Kerberos_Notes or
> Kerberos_Supplemental so that it's not confused with real "pedia" type
> articles. And make sure you have a local copy in case one of the more
> religious moderators kills it.
> 
> However, finding a host is a minor detail. Writing good content is the
> hard part. If you do a shallow review or you're just trying to "organize"
> existing documentation and think that the experts will pop in and correct
> it and fill in the details, don't waste your time. Ain't gonna happen.
> 
> Personally, if I were doing this, I would start by watching the lists
> and take notes locally with good detailed explainations of common
> issues. After I had 5 or 10 good detailed focused topics I would put up
> a very simple HTML page and use it to find a host.
> 
> For example, someone had a problem that resulted in a long thread on
> the mod_auth_kerb list. They had used the /crypto DES-CBC-MD5 option
> to MS' ktpass.exe but WITHOUT /DesOnly. So the keytab had a DES key but
> the account didn't have the "Use DES encryption types for this account"
> flag on. The result was the "Failed to find ... in keytab" error because
> the enctypes didn't match. That is the level of detail you need to make
> your wiki worthwhile.
> 
> Mike
> 
>> Michael B Allen wrote:
>>> On Wed, 17 Jan 2007 12:12:06 -0500
>>> Jeff Blaine <jblaine at kickflop.net> wrote:
>>>
>>>> Is there a Wiki for Kerberos info?  It seems to me that it
>>>> would be awful useful for keeping tabs on quite a bit of
>>>> information that is buried in these mailing list archives.
>>> Protocol oriented stuff would be ok in the wireshark.org
>>> wiki. Historical/theoretical stuff would be ok at wikipedia.  Heimdal was
>>> talking about setting one up but I think it will be for Heimdal oriented
>>> stuff.
>>>
>>> Mike
>>>
> 
>