Difference between revisions of "Release 1.13"

Revision as of 12:23, 11 October 2013

Timeline

This is only an approximate timeline. Dates are subject to change.

• Oct. 2014 -- make release branch
• Dec. 2014 -- final release

Code quality

• Additional KDC refactoring

Developer experience

End-user experience

• Reduce DNS-related difficulties with service principal names
  • Config to disable client service principal canonicalization

Administrator experience

• Projects/Trust KDC-local name resolution

Performance

Protocol evolution

• Ticket flag to signal KDC support for resolving aliases
• Authorization data -- conditional on IETF consensus
  • Authorization data container with multiple verifiers (CAMMAC)
  • POSIX directory info in authorization data (PAD)
  • Level of Assurance in authorization data
  • Site-defined string-keyed claims in authorization data
  • X.509 attributes in authorization data
• FAST preauth sets (e.g. OTP + long-term password)