Release 1.8

This is the feature set for the krb5-1.8 release. This page organizes the goals by the "guiding principles" listed in the roadmap.

Timeline

This is only an approximate timeline.

• 2009-10-06 -- "halfway point" feature and integration test
• 2010-01-04 -- make release branch
• 2010-03-01 -- final release

Code quality

• Move toward test-driven development
• Increase conformance to coding style
  • See Coding style/Transition strategies
  • "The great reindent"
  • Selective refactoring

Modularity

• Crypto modularity
• Move toward improved KDB interface
• Improved API for verifying and interrogating authorization data

Performance

• Investigate and remedy repeatedly-reported performance bottlenecks.
• Encryption performance

End-user experience

• Reduce DNS dependence
  • Love's ccache auxiliary data proposal allows client library to track whether a KDC supports service principal referrals.

Administrator experience

• Disable DES by default (1.8)
• More versatile crypto configuration, to simplify migration away from DES
• Lockout for repeated login failures
• HDBBridge so an MIT KDC can read a Heimdal database

Protocol evolution

• FAST enhancements
• S4U2Self/S4U2Proxy
• Anonymous PKINIT