From K5Wiki

This is the feature set for the krb5-1.8 release. This page organizes the goals by the "guiding principles" listed in the roadmap.

Contents 1 Timeline 2 Code quality 3 Modularity 4 Performance 5 End-user experience 6 Administrator experience 7 Protocol evolution

[edit] Timeline

This is only an approximate timeline.

• 2009-10-06 -- "halfway point" feature and integration test
• 2010-01-04 -- make release branch
• 2010-03-01 -- final release

[edit] Code quality

• Move toward test-driven development
• Increase conformance to coding style
  • See Coding style/Transition strategies
  • "The great reindent"
  • Selective refactoring

[edit] Modularity

• Crypto modularity
• Move toward improved KDB interface
• Improved API for verifying and interrogating authorization data

[edit] Performance

• Investigate and remedy repeatedly-reported performance bottlenecks.
• Encryption performance

[edit] End-user experience

• Reduce DNS dependence
  • Love's ccache auxiliary data proposal allows client library to track whether a KDC supports service principal referrals.

[edit] Administrator experience

• Disable DES by default (1.8)
• More versatile crypto configuration, to simplify migration away from DES
• Lockout for repeated login failures
• HDBBridge so an MIT KDC can read a Heimdal database

[edit] Protocol evolution

• FAST enhancements
• S4U2Self/S4U2Proxy
• Anonymous PKINIT