Mailing-List: contact kerby-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: kerby@directory.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <8D5F7E3237B3ED47B84CF187BB17B66611CC8A4B@SHSMSX152.ccr.corp.intel.com>
References: 
 <8D5F7E3237B3ED47B84CF187BB17B66611CC8733@SHSMSX152.ccr.corp.intel.com>
	<1328025171.4506746.1447982563984.JavaMail.zimbra@psu.edu>
	<8D5F7E3237B3ED47B84CF187BB17B66611CC8822@SHSMSX152.ccr.corp.intel.com>
	<8D5F7E3237B3ED47B84CF187BB17B66611CC8A4B@SHSMSX152.ccr.corp.intel.com>
Date: Fri, 20 Nov 2015 07:25:41 -0500
Message-ID: 
 <CAJEX5oumy-_3Eb-efuMXHkSiRDXAezhfUu8Oomx6Xrq_ndpKYA@mail.gmail.com>
Subject: RE: Categorize KrbOption by adding group info
From: Marc Boorshtein <mboorshtein@gmail.com>
To: kerby@directory.apache.org
Content-Type: multipart/alternative; boundary=001a1139b12e54b9960524f7f9d5

--001a1139b12e54b9960524f7f9d5
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

That's awesome, thanks Kai. I've been tied up on another project (getting
myvd integrated with apacheds-2.0.0-m20) but I'm hoping to dive back in
this weekend

Thanks
Marc
On Nov 20, 2015 1:25 AM, "Zheng, Kai" <kai.zheng@intel.com> wrote:

> Steve and Marc,
>
> It's done, along with some other things. Please update to the latest code=
s.
> 1. Added group to options and pick kdc flag related ones by group;
> 2. Added requested some kdc flags, like RENEWABLE, RENEWABLE_OK and etc.;
> 3. Not only for AS_REQ/TGT, but also for TGS_REQ/SGT;
> 4. Some refactoring.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Friday, November 20, 2015 9:53 AM
> To: kerby@directory.apache.org; Steve Moyer <smoyer@psu.edu>
> Subject: RE: Categorize KrbOption by adding group info
>
> Don't worry, I'll take this.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Steve Moyer [mailto:smoyer@psu.edu]
> Sent: Friday, November 20, 2015 9:23 AM
> To: kerby@directory.apache.org
> Subject: Re: Categorize KrbOption by adding group info
>
> I like the idea of groups in KrbOption ... it felt a little too dangerous
> simply matching names but matched names and the appropriate group should =
be
> safe.
>
> I might get to this change tomorrow but I'm working on another related
> project at the moment.
>
> Steve
>
> --
>
> =E2=80=9CThe mark of the immature man is that he wants to die nobly for a=
 cause,
> while the mark of the mature man is that he wants to live humbly for one.=
=E2=80=9D
> - Wilhelm Stekel
>
> ----- Original Message -----
> From: "Zheng, Kai" <kai.zheng@intel.com>
> To: kerby@directory.apache.org
> Sent: Thursday, November 19, 2015 7:44:48 PM
> Subject: Categorize KrbOption by adding group info
>
> Hi Steve,
>
> Ref. https://issues.apache.org/jira/browse/DIRKRB-458 you're going to add
> about 15 KDC flags into KrbOption. As we discussed it sounds reasonable.
> Now here I'm considering it may be good to categorize them or easily
> identify them as 'kdc flags', thus it would be much elegant to pick them =
up
> and transform them to KdcRequest. How about adding a 'group' field to the
> KrbOption enum? It could be done while you make the changes or we can do =
it
> separately. Thanks.
>
> Also welcome any others' feedback. Thanks.
>
> Regards,
> Kai
>

--001a1139b12e54b9960524f7f9d5--