Release 1.8

From K5Wiki
Revision as of 22:09, 30 December 2009 by Sbuckley (talk | contribs) (Administrator experience)

Jump to: navigation, search

This is the preliminary proposed goal set for the krb5-1.8 release. Please provide comments on the krbdev list. This page organizes the goals by the "guiding principles" listed in the roadmap.


This is only an approximate timeline.

  • 2009-10-06 -- "halfway point" feature and integration test
  • 2010-01-04 -- make release branch
  • 2010-03-01 -- final release

Code quality



End-user experience

  • Reduce DNS dependence
    • Love's ccache auxiliary data proposal allows client library to track whether a KDC supports service principal referrals.

Administrator experience

  • Disable DES by default (1.8)
  • More versatile crypto configuration, to simplify migration away from DES
  • Lockout for repeated login failures

Protocol evolution