Release 1.11

Timeline

This is only an approximate timeline. Dates are subject to change.

• Oct. 2012 -- make release branch
• Dec. 2012 -- final release

Code quality

• Improve ASN.1 support code
• Refactor parts of KDC

Developer experience

• Use default keytab for gss_init_sec_context
• Interposition for GSS mechglue
• Documentation consolidation
• gss_export_cred (useful for async GSS proxy) -- expecting contribution

End-user experience

• Documentation consolidation

Administrator experience

• Projects/Trust KDC-local name resolution
• FAST OTP client in libkrb5 (maybe excluding second-level plugins hardware OTP tokens)
• Documentation consolidation

Protocol evolution

• Authorization data container with multiple verifiers
• POSIX directory info in authorization data (PAD)
• Level of Assurance in authorization data
• Site-defined string-keyed claims in authorization data
• X.509 attributes in authorization data
• FAST preauth sets (e.g. OTP + long-term password)