Difference between revisions of "Release 1.12"
From K5Wiki
(One intermediate revision by the same user not shown) | |||
Line 7: | Line 7: | ||
== Code quality == |
== Code quality == |
||
− | |||
− | * Additional KDC refactoring |
||
== Developer experience == |
== Developer experience == |
||
− | * [[Projects/Local |
+ | * [[Projects/Local authorization pluggable interface]] |
− | * |
+ | * [[Projects/Host-realm pluggable interface]] |
+ | * [[Projects/GSS IOV MIC API]] |
||
== End-user experience == |
== End-user experience == |
||
− | |||
− | * Reduce DNS-related difficulties with service principal names |
||
== Administrator experience == |
== Administrator experience == |
||
− | * [[Projects/Trust_KDC-local_name_resolution]] |
||
* [[Projects/Policy refcount elimination]] |
* [[Projects/Policy refcount elimination]] |
||
* [[Projects/OTPOverRADIUS]] |
* [[Projects/OTPOverRADIUS]] |
||
+ | * [[Projects/Principals without keys]] |
||
+ | * [[Projects/Keyring collection cache]] |
||
== Performance == |
== Performance == |
||
− | * AES-NI support for built-in crypto back end |
+ | * [[Projects/AES-NI Support|AES-NI support]] for built-in crypto back end |
== Protocol evolution == |
== Protocol evolution == |
||
− | |||
− | * Ticket flag to signal KDC support for resolving aliases |
||
− | * Authorization data -- conditional on IETF consensus |
||
− | ** Authorization data container with multiple verifiers (CAMMAC) |
||
− | ** POSIX directory info in authorization data (PAD) |
||
− | ** Level of Assurance in authorization data |
||
− | ** Site-defined string-keyed claims in authorization data |
||
− | ** X.509 attributes in authorization data |
||
− | * FAST preauth sets (e.g. OTP + long-term password) |
Latest revision as of 12:18, 11 October 2013
Contents
Timeline
This is only an approximate timeline. Dates are subject to change.
- Oct. 2013 -- make release branch
- Dec. 2013 -- final release
Code quality
Developer experience
- Projects/Local authorization pluggable interface
- Projects/Host-realm pluggable interface
- Projects/GSS IOV MIC API
End-user experience
Administrator experience
- Projects/Policy refcount elimination
- Projects/OTPOverRADIUS
- Projects/Principals without keys
- Projects/Keyring collection cache
Performance
- AES-NI support for built-in crypto back end