some mit k5 1.9 patches
Marcus Watts
mdw at umich.edu
Fri Dec 17 02:15:49 EST 2010
So following are 5 patches I used to build beta3.
1. patch list
2. patch details
3. known concerns
____ 1. patch list
These are updated patches a couple of which are similar to patches
for the production build (of kerberos 1.6.3 for the UMICH.EDU realm).
Others are for experimental use, or for other reasons.
krb5-1.9b2-logts1.patch
krb5-1.9b2-db2open1.patch
krb5-1.9b2-desmd5.patch
krb5-1.9b2-rename1.patch
krb5-1.9b2-kpropd1.patch
____ 2. patch details
krb5-1.9b2-logts1.patch
/afs/umich.edu/group/itd/build/mdw/krb5.15x/patches/krb5-1.9b2-logts1.patch
local enhancement
similar to production umich.edu change
allow timestamps in logfile names, such as
[logging] kdc = FILE:/var/log/krb5kdc.log.%Y%m%d
krb5-1.9b2-db2open1.patch
/afs/umich.edu/group/itd/build/mdw/krb5.15x/patches/krb5-1.9b2-db2open1.patch
incomplete feature - of general use?
support
kdb5_util dump { -rev | -backwards }
which seems to have been left out of some past upgrade. I had
a test kerberos realm go sick one day.
krb5-1.9b2-desmd5.patch
/afs/umich.edu/group/itd/build/mdw/krb5.15x/patches/krb5-1.9b2-desmd5.patch
incomplete feature - obselete
implement the KRB5_KDB_SUPPORT_DESMD5 attribute on principals.
krb5-1.9b2-rename1.patch
/afs/umich.edu/group/itd/build/mdw/krb5.15x/patches/krb5-1.9b2-rename1.patch
local enhancement
similar to production umich.edu change
ability to rename a principal.
krb5-1.9b2-kpropd1.patch
/afs/umich.edu/group/itd/build/mdw/krb5.15x/patches/krb5-1.9b2-kpropd1.patch
local enhancement
kpropd: -n flag.
I still run kadmind|krb5kdc and now kpropd out of bosserver.
____ 3. known concerns
Password quality checking. The password quality plugin interface
provided here is significantly simplified. I don't know
if that's an issue yet.
microsoft canonicalization patch. I never came up with a good
way to test this..
The replication logic is probably the biggest concern around here,
incomplete (can't promote slave db to be master because
not all attributes are replicated.)
not timely. is still polling based: pull semantics.
-Marcus Watts
More information about the krbdev
mailing list