Agenda for Kerberos Workshop at MIT, Wednesday, November 13th and Thursday, November 14th

If you have meeting notes please mail them to pbh@mit.edu. I'll edit them and make them available to all.

Steve Rothwell's Meeting Notes
Composite Meeting notes

Meeting located at building E40, 1 Amherst Street, room 496.

Wednesday

Thursday

Kerberized/GSS applications

Hotel information

Directions to MIT and E40

Current list of attendees

Wednesday evening


Wednesday, November 13th

Wednesday, November 13th

Kerberos version 4 issues, Kerberos and the web, breakout sessions

8:30am - 9:00am continental breakfast (menu for the workshop)

9:00am - 9:15am Introductions

9:15am - 9:45am V4 on UNIX

MIT plans no new v4 applications at this time. Our Athena environment now uses the Cygnus v4 libraries instead of the original MIT version. What plans do people have for v4 on UNIX? Is anyone planning to port the Kclient API to UNIX or write UNIX applications to this API?

9:45am - 10:30am Kclient API

  1. Cornell update, version 1.5 vs. 1.6, plans for next release
  2. Others provide Kclient emulation, what is the plan and timeline to support the new features: Cygnus, MacLeland, Authman, Kerb95, others
  3. Known bugs or missing features
  4. Plans to deal with the end of drivers in the next MacOS

10:30am - 10:45am break

10:45am - 11:30am Discussion of multiple APIs available on Windows,

  1. (Cygnus, krbv4win, krbv4w32, kclient, kclient32, PCLeland (?), Authman, Kerb95, FTP Inc.) can we simplify the world?
  2. cache interoperability (brief, breakout session on this topic later)
  3. Problems with IsCredExpired() and krb_check_serv() functions and suggested fixes.
  4. OS/2 support?
  5. Thread safe issues?

11:30am - 12:00pm Kerberized applications

  1. what application are currently available or in progress.
  2. Putting together a common source of information for all of us.
  3. Plans for Kerberized services on MacOS and MS operating systems?

12:00pm - 1:00pm Lunch, provided by MIT.

1:00pm-2:00pm Vendor support of Kerberos?

  1. Helping vendors step into the Kerberos world.

    a) documentation,

    b) help in establishing a realm, do the academic sites get involved or do we point them to other vendors such as Cygnus?

    c) UMich CITI has provided DCE accounts for vendors looking into DCE support in the past. Do they still do this? What is the fee? Who are the contact points? Can they do this for Kerberos v4 and v5?

  2. Do we want to ask any specific vendors to add Kerberos support to specific products?

    a)What products?

    b) What Kerberos API?

    c) Funding models or sources?

2:00pm - 3:15pm Kerberos and the web

  1. Mandarin's sidecar
  2. Ksign
  3. shttp (it's dead)
  4. CMU's Minotaur and Shelob
  5. Steve Carmody's notes on this topic this includes notes on UMich's KLP.
  6. Stanford's webauth
  7. other efforts (UIUC?)


3:15pm - 3:30pm break

3:30pm-5:00pm two breakout sessions

  1. Mac programmers to talk about Mac UI issues for both v4 and v5. What are the best features from Kconfig, CNS, MacLeland, …
  2. Windows programmers to talk about cache issues 16 bit and 32 bit application support, OLE vs. Thunking, API for a cache DLL (from v5 discussions)


Thursday, November 14th

Kerberos version 5, GSS API, Kerberos and public key cryptography

8:30am - 9:00am continental breakfast

9:00am - 9:15am JGSS, UIUC's Java implementation of GSS

9:15am - 10:00am Current status of GSS API / Kerberos v5 from MIT, Cygnus, Open Vision, Microsoft.

10:30am - 10:45 break

10:45 am - 12:00pm Kerberos v5 interoperability issues:

  1. v4 support,
  2. interoperability with a DCE environment, Note: Steve Carmody of Brown recommends looking at the ESnet final report
  3. Application vendor interoperability (SAP vs. Oracle vs. PowerBuilder vs. Locus …)

12:00pm - 1:00pm lunch, provided by MIT

1:00pm - 1:30pm NT Graphical Identification and Authentication DLL (GINA) , (multiple GINAs?, what sites have already written a GINA? SUN's PAM (Pluggable Authentication Modules)

1:30pm - 3:00pm Kerberos and public key infrastructures

  1. Using Kerberos to obtain X.509 client certificates
  2. Other efforts
  3. browser issues with this work, e.g. Jeff's work supports Netscape but does not work with Internet Explorer because IE is using an ActiveX API that we don't have documentation for.

3:00pm - 3:15 break

3:15pm - 4:00pm Higher level APIs to lower the cost to enter the GSS world

  1. OV has been working on C++ wrappers
  2. Will this group cooperate to create an API or wrappers that will cover most of the GSS API programming tasks that application developers need to do?
  3. Improved sample applications with source code.

4:00pm - 5:00pm What work is currently being done?

  1. What applications are available
  2. What applications are being worked on
  3. What documentation is available
  4. What documentation needs to be done (and who is willing to fund it)
  5. cache API, feedback from the breakout session
  6. getting v4 and v5 tickets with a single login on the Mac and PCs.


MIT will not be providing dinner on either night of the workshop. We expect that we will arrange reservations for those attendees wishing to dine together as a group.

The workshop will take place in room E40-496 which is located in 1 Amherst Street. For those of you that have visited us in the past that is the same building that DCNS used to be in, but it has a new elevated walkway connecting it to one of the Sloan buildings.

Hotel Accommodations

Hey, from the phone calls and email we've been getting the recommended hotels are booked solid. Try looking at Boston area lodgings for a wider selection. Good luck on the rates.

A reduced rate for visitors to MIT is available at the Hyatt Regency, Marriott, and Sonesta hotels in Cambridge and at several Boston hotels, depending on the season. Visitors must request the MIT rate when reserving a room and when registering. Bed and breakfast accommodations are also available through numerous local and area agencies.

The Marriott is the closest hotel to E40. From the Sonesta it is easy to pick up the Galleria / Kendall free shuttle bus and get within one block of E40. The Hyatt Regency is about a 20 minute walk away from E40.

Boston Marriot Cambridge (617) 494-6600 Royal Sonnesta (617) 491-3600 Hyatt Regency (800) 233-1234 ( I don't have the Cambridge Hyatt number.)

Current rate information

                              Normal rate|  MIT rate
Hyatt Regency   800-233-1234       230   |* quoted only if 10+ rooms guar.
Marriott        800-228-9290       229   |  199 -  4 rooms left
Royal Sonesta   617-491-3600       --- sold out 13-14 November -------


Directions to MIT and E40


1 Amherst Street off Kendall Square     FAX: 617-258-8736
MAIL address: MIT E40-300
              77 Massachusetts Avenue
              Cambridge MA 02139-4307 USA

DIRECTIONS from Logan Airport or from Downtown Boston:

TAXI:  US$25- from Logan, 20-40 minutes (depending on time of day)
       US$10  from downtown Boston
    in either case, tell taxi you wish to go to 
       1 Amherst Street between Hayward & Wadsworth off Kendall Square,
         across Longfellow Bridge from Boston

AUTO: on Charles River opposite downtown Boston; 
      Memorial Drive parallels river;  on Memorial Drive, 
        Eastbound from  Massachusetts Avenue (Harvard) Bridge/ or
        Westbound from  Cambridge Street (Longfellow)  Bridge:
  first possible turn: onto Wadsworth Street; first left onto Amherst Street; 
            -- car parking is a nightmare --
         Building E40 at #1 Amherst Street.  elevator to 3rd floor

MBTA (Public Transit): US$.85 (correct change) from Airport 30 mins.
        free shuttle bus to MBTA (Subway) entrance; then
        BLUE Line 5 stops inbound to Government Center; then
        GREEN Line 1 stop West to Park Street; then
        RED Line 2 stops North to Kendall Square;  (30 minutes total)
           cross Main Street, walk one block to end of Hayward Street.
           You are at 1 Amherst Street

If the above is confusing, or if I can provide further direction, please let me
know; we look forward to welcoming you to MIT.
     David J. Hogarth 
     MIT DCNS E40-315
     1 Amherst Street
     voice: 617-253-1514
       fax: 617-258-8736
    e-mail: davidh@mit.edu


 Boston's streets were originally cowpaths, from which the city evolved; no
Charles l'Enfant to give us a rational city; and the oldest subway system in the
USA started as 4 competing and incompatible private companies.
  Yes, do call once in Boston; I can tailor directions to you.
  With that preamble, I add to my prior directions to get you to Bldg. 11

  Now to MIT's idiosyncracy: all of our buildings are known by #, not name. 
Thus,  E40 (at the eastern end of the campus); bldg. 11 is 
 just slightly west of the epicenter of the Campus, which is the major
dome visible from the Charles River.  The auto and subway directions are as
given in my last posting.

 By TAXI, tell the driver you want 77 Massachusetts Avenue, Cambridge, which is
at the second traffic light after crossing the Charles River on the Harvard
Bridge from Boston at Mass. Ave.  

 Entering MIT at 77 Mass. Ave., you're at the infinite corridor, which goes the
full length of MIT's central campus, parallel to the Charles River; just beyond
the entrance lobby (Bldg. 7),  take your first corridor left; at the end of the
corridor, take the elevator to the 3rd floor; from there,  E40 is a 10-minute
walk due East.

 Now an experiment; does the following diagram help or confuse?    
            Cheers, David Hogarth

Boston____Harvard___Cambridge
Mass Ave   Bridge   77 Mass Ave            ___
          )  )      |-|                     ^
          C  R      | |                     |
          h  i      | |                     |
          a  v    Bldg 11                   |
          r  e      | |                     |
          l  r      MIT                   1 mile
          e         Dome                    |
          s         | |                     |
                    | |                     |
    W               | |                     |
  S--->N            |_|                     |
    E                    Bldg. E40        _ v _
Boston__Longfellow___Main Street  
Charles  Bridge      MBTA Kendall Square
Circle
- ------------------------------end


Menu

All meals & snacks are essentially self-serve buffets, and BTW prepared
in a Kosher kitchen & delivered kosher, what a person eats will be governed by
their aim and taste.  The proposed menus follow.

Each day - food for 50, with some differences between the two days:
  At each function: paper plates cups/ k/f/s napkins

Ready to serve at 8:30 am on buffet table: 
  Continental Bkfst:
    Orange juice/ bottled variety of fruit juice & spring water
    Fruit platter
    Bagels, muffins, bkfst pastry
                butter, cream cheese, jam
    Coffee, Hot Water, Teabags, Inst. Coffee packets
                sugar, fake sugar, half&half

Ready at 10:30 am on slider:
  Morning snack:
    Bagels, muffins, bkfst pastry
    Fresh coffee, hot water, teabags, Inst.Coff. packets
                sugar, fake sugar, half&half

Ready to serve at 12:00 am on buffet table: 
  Buffet sandwich luncheon:
     variety of breads, bagels, buns
     variety of meats, tuna, egg, veggies
       garnish of lettuce, tomato, pickles, mayo, mustard, butter
     pasta salad, potato salad, veg. salad
     canned soda & tonic, bottled fruit juice, spring water, coffee
     Dessert (what?)     

Ready at 3:15 am on slider:
  Afternoon snack:
    Cookies, brownies, whole fruits (apples, grapes ?), etc.
    Canned & bottled soda/ juice/ tonic

All food service done 3:45

Open Vision has volunteered to host a dinner buffet on Wednesday evening. More details will be provided at the workshop.