Minutes of the Kerberos Working Group 
54th IETF Meeting 
Yokohama Japan 
Tuesday 16 July, 2002 
13:45-14:45. 

The Kerberos working group met briefly to discuss progress on Kerberos 
clarifications and other internet drafts. Most attendees were new to the working 
group and few of those writing the documents under consideration were able to 
attend. The status of Kerberos several Internet drafts were discussed. 

(I would like to thank Cliff Neuman, for chairing the meeting and producing the 
minutes, as I was not able to attend. - D. Engert) 


Kerberos Clarifications - Status Reported by Clifford Neuman 

Section 5 revisions to Kerberos clarifications have appeared. Other changes to 
clarifications are being integrated this week and a new internet draft will be 
submitted in the week following the IETF. Several of the remaining "assignments" 
were completed since the working group meeting, and we are very close to 
closure. We will likely hold an interim meeting between now and the Atlanta IETF 
to resolve any remaining issues on clarifications and continue progress on the 
Kerberos extensions document. The date and venue of such an interim meeting will 
be discussed and announced to the working group mailing list. 

For the benefit of the attendees that had not been present at previous Kerberos 
working group meetings, Clifford Neuman presented a summary of the discussion at 
the interim meeting in February and the subsequent meeting in Minneapolis 
regarding the splitting of the internet draft into clarification and extensions, 
and the plans for moving forward. 

Kerberos Extensions 

There was no discussion of Kerberos extensions issues during the working group 
meeting. It is expected that progress will be made on extensions at any interim 
meeting, once the clarifications issues are settled. 

Internationalization 

Jeff Altman said a few words about the Stringprep Profile for Kerberos to allow 
for Internationalization. A new version of the Stringprep draft was released on 
June 24th, but there was not time to submit an update to the Kerberos profile to 
make the deadline. This will be taken care of in the next few weeks. 

PK-INIT - Status Reported by Clifford Neuman 

A new draft of PK-INIT was submitted by Brian Tung before the meeting but missed 
the deadline. A copy was sent to the mailing list and it will officially appear 
once the meeting concludes. Only minor changes were made, and progress of this 
draft is gated on Kerberos clarifications. 

Kerberos DNS 

At the editing session we agreed to update and re-issue the Kerberos DNS Locate 
draft. The draft was updated to make the Security Considerations clearer; as 
well as to add the ability to perform lookups to an as yet unimplemented KDC 
over TLS connection. 

Single Use Authentication 

Ken Hornstein mentioned that he was about to dust off the old draft on single 
use authentication and resubmit it for discussion. 

The attendees were asked for any questions or any open issues that they felt 
needed to be discussed and nothing was brought up. 

The meeting was adjourned.