logo_kerberos.gif

Release 1.13

From K5Wiki
Revision as of 12:23, 11 October 2013 by TomYu (talk | contribs) (New page: == Timeline == This is only an approximate timeline. Dates are subject to change. * Oct. 2014 -- make release branch * Dec. 2014 -- final release == Code quality == * Additional KDC re...)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Timeline

This is only an approximate timeline. Dates are subject to change.

  • Oct. 2014 -- make release branch
  • Dec. 2014 -- final release

Code quality

  • Additional KDC refactoring

Developer experience

End-user experience

  • Reduce DNS-related difficulties with service principal names
    • Config to disable client service principal canonicalization

Administrator experience

Performance

Protocol evolution

  • Ticket flag to signal KDC support for resolving aliases
  • Authorization data -- conditional on IETF consensus
    • Authorization data container with multiple verifiers (CAMMAC)
    • POSIX directory info in authorization data (PAD)
    • Level of Assurance in authorization data
    • Site-defined string-keyed claims in authorization data
    • X.509 attributes in authorization data
  • FAST preauth sets (e.g. OTP + long-term password)
Retrieved from "https://k5wiki.kerberos.org./wiki?title=Release_1.13&oldid=5226"