From owner-freebsd-security@FreeBSD.ORG Wed Sep 4 12:07:31 2013 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id B6A87B56 for ; Wed, 4 Sep 2013 12:07:31 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from onlyone.friendlyhosting.spb.ru (onlyone.friendlyhosting.spb.ru [IPv6:2a01:4f8:131:60a2::2]) by mx1.freebsd.org (Postfix) with ESMTP id 75D282D4B for ; Wed, 4 Sep 2013 12:07:31 +0000 (UTC) Received: from lion.home.serebryakov.spb.ru (unknown [IPv6:2001:470:923f:1:7dc1:973c:6b7:22ac]) (Authenticated sender: lev@serebryakov.spb.ru) by onlyone.friendlyhosting.spb.ru (Postfix) with ESMTPSA id 053AC4AC2D; Wed, 4 Sep 2013 16:07:28 +0400 (MSK) Date: Wed, 4 Sep 2013 16:07:24 +0400 From: Lev Serebryakov X-Priority: 3 (Normal) Message-ID: <998999486.20130904160724@serebryakov.spb.ru> To: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= Subject: Re: OpenSSH, PAM and kerberos In-Reply-To: <86ob88rgba.fsf@nine.des.no> References: <86sixrwdcv.fsf@nine.des.no> <8661uj9lc6.fsf@nine.des.no> <20130902181754.GD3796@zxy.spb.ru> <867geywdfc.fsf@nine.des.no> <20130903083301.GF3796@zxy.spb.ru> <86y57euu8y.fsf@nine.des.no> <20130903093756.GG3796@zxy.spb.ru> <86ppsqutw7.fsf@nine.des.no> <998724759.20130903142637@serebryakov.spb.ru> <20130903103922.GI3796@zxy.spb.ru> <6110257289.20130903145034@serebryakov.spb.ru> <86d2oquopo.fsf@nine.des.no> <226539732.20130903154908@serebryakov.spb.ru> <8661uiujin.fsf@nine.des.no> <1734535072.20130903174359@serebryakov.spb.ru> <86vc2it2ip.fsf@nine.des.no> <1601348478.20130903182152@serebryakov.spb.ru> <86fvtludku.fsf@nine.des.no> <1289783626.20130904002038@serebryakov.spb.ru> <867gext445.fsf@nine.des.no> <86ob88rgba.fsf@nine.des.no> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org, Dmitry Morozovsky , Slawa Olhovchenkov X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Sep 2013 12:07:31 -0000 Hello, Dag-Erling. You wrote 4 =D1=81=D0=B5=D0=BD=D1=82=D1=8F=D0=B1=D1=80=D1=8F 2013 =D0=B3., = 15:12:41: DES> Dmitry Morozovsky writes: >> Maybe it would help if we would have some kind of diagram showing differ= ent=20 >> parts/phases of security- and credentials-related decision making proces= ses? DES> http://www.youtube.com/watch?v=3DiRQvrrIhq0k DES> (if I seem a little confused at times, it's because I was sick and DES> hadn't slept and had spent the previous day rewriting my presentation DES> almost from scratch) DES> I'll post it on my blog (http://blog.des.no/) later today or tomorrow DES> with a few additional comments (one of which is that Apple's security DES> framework is *not* called CDDL - that was a slip of the tongue - but t= he DES> specification really *is* 1000+ pages long) DES> I'm giving a followup presentation at EuroBSDCon 2013 in St Julians, DES> Malta in a couple of weeks, which will focus less on the problem and DES> more on the solution. Thank you! I'm regretting, I will not be at Malta :( But tickets from Russia are really expensive :( --=20 // Black Lion AKA Lev Serebryakov