Re: transfering files between *.debian.org hosts

2008-08-31 Thread Russ Allbery
Mike Hommey <[EMAIL PROTECTED]> writes: > I would say as Russ. Plus the fact that apparently, it currently doesn't > work (see bug #496933). I'm not sure what's wrong in that bug, but Kerberos authentication in Iceweasel (3.0.1-1) is working fine for me. I'd notice immediately if it stopped work

Re: transfering files between *.debian.org hosts

2008-08-31 Thread Russ Allbery
Martin Zobel-Helas <[EMAIL PROTECTED]> writes: > Most Debian Machines run no stable kernels, thus we would run into that > problem. Also many machines running with static kernels. Would that be a > problem for OpenAFS? OpenAFS is fine with static kernels as long as dynamic modules are not disable

Update on 'chairs' within the Stable Release Team

2008-08-31 Thread Martin Zobel-Helas
Hi, this mail is to let you know that Philipp Kern ([EMAIL PROTECTED]) is now full Stable Release Manager and that he will coordinating next point releases. I myself step back from the post as SRM due to [1], but will stay around as SRM wizard for a while. Greetings Martin Zobel-Helas [1] [E

Addition to DSA team

2008-08-31 Thread Peter Palfrader
Hi, this is to let you know that we in DSA have invited Martin Zobel-Helas to join us. Fortunately for us he accepted, so with a bit of luck we can now go back to doing nothing and let the rookie do all the work. Cheers, weasel signature.asc Description: Digital signature

Re: transfering files between *.debian.org hosts (was: people.debian.org to move to ravel)

2008-08-31 Thread Steve McIntyre
On Sun, Aug 31, 2008 at 11:19:45AM +0200, Peter Palfrader wrote: >On Sat, 30 Aug 2008, Steve Langasek wrote: > >> Having your inter-host file transfers sandboxed, such that you have to log >> in to the host on each end in order to get the files copied to the place you >> want them, would be a serio

Re: transfering files between *.debian.org hosts (was: people.debian.org to move to ravel)

2008-08-31 Thread Matthew Johnson
On Sat Aug 30 16:43, Steve Langasek wrote: > This is obviously an *incredibly* bad idea for anyone to do if they actually > care about the security of the Debian systems. But we're already talking > about hard policy changes to stop users from doing things they shouldn't do > in the first place (=

Re: transfering files between *.debian.org hosts

2008-08-31 Thread Bastian Blank
On Sat, Aug 30, 2008 at 06:19:32PM -0700, Russ Allbery wrote: > Well, having your browser spontaneously authenticate you to any system > keyed in your local realm or in a realm with which you have cross-realm > trust is something of a leak of personal information. This may change in the future. Th

Re: transfering files between *.debian.org hosts (was: people.debian.org to move to ravel)

2008-08-31 Thread Bastian Blank
On Sat, Aug 30, 2008 at 10:54:59PM -0700, Steve Langasek wrote: > On Sun, Aug 31, 2008 at 01:16:32AM +0200, Bastian Blank wrote: > > Negotiate auth does not provide confidentiality or integrity protection > > different to the normal use of kerberos. > Well, ok, but you're negotiating *authenticatio

Re: transfering files between *.debian.org hosts (was: people.debian.org to move to ravel)

2008-08-31 Thread Peter Palfrader
On Sat, 30 Aug 2008, Steve Langasek wrote: > Well, the underlying premise here is, of course, that certain routinely > useful capabilities need to be taken out of the hands of the users because > they won't use them responsibly[1]. > But we're alrea

Re: transfering files between *.debian.org hosts (was: people.debian.org to move to ravel)

2008-08-31 Thread Mike Hommey
On Sat, Aug 30, 2008 at 03:01:00PM -0700, Steve Langasek wrote: > On Sat, Aug 30, 2008 at 06:48:57PM +0200, Wouter Verhelst wrote: > > > + once we have a krb realm we could maybe also use it for other > > > stuff like all those web services that require logins. How > > >

Re: transfering files between *.debian.org hosts

2008-08-31 Thread Martin Zobel-Helas
Hi, On Sat Aug 30, 2008 at 18:17:27 -0700, Russ Allbery wrote: > A bigger problem at the kernel level is that the kernel APIs change > constantly and have not infrequently had various GPL-only tags added that > force OpenAFS into annoying workarounds (it is released under the IBM > Public License