Projects/RFC 3244

This project was completed in release 1.7.

The RFC 3244 project adds support for the Microsoft set password protocol server to MIT Kerberos. In addition, it adds support for both that protocol and the traditional kpasswd protocol over TCP. This protocol is added for better compatibility with Microsoft Windows.

No new public APIs are exposed; MIT Kerberos already contains an API for the client side of this protocol.

The only non-obvious change introduced by the implementation is kadmin/server/network.c modeled on src/kdc/network.c (raw | annotated | history). The existing kadmin server does not support TCP; it needs an event loop similar to the KDC in order to support TCP.

Review

This section documents the review of the project according to Project policy. It is divided into multiple sections. First, approvals should be listed. To list an approval type

#~~~~

on its own line. The next section is for discussion. Use standard talk page conventions. In particular, sign comments with

--~~~~

and indent replies.

Members of Krbcore raising Blocking objections should preface their comment with {{project-block}}. The member who raised the objection should remove this markup when their objection is handled.

Approvals

1. TomYu 16:53, 16 December 2008 (EST)