krb5 commit: Reconfigure MIT Kerb Features doc: dont use tables
Zhanna A Tsitkova
tsitkova at MIT.EDU
Thu Jan 10 13:59:39 EST 2013
https://github.com/krb5/krb5/commit/7803d919d906547228d2fb7552d856f7b8ca07de
commit 7803d919d906547228d2fb7552d856f7b8ca07de
Author: Zhanna Tsitkov <tsitkova at mit.edu>
Date: Thu Jan 10 13:53:41 2013 -0500
Reconfigure MIT Kerb Features doc: dont use tables
Also, update references to the existing documents.
doc/admin/pkinit.rst | 2 +
doc/admin/troubleshoot.rst | 2 +
doc/mitK5features.rst | 184 ++++++++++++++++++++----------------------
doc/plugindev/ccselect.rst | 2 +
doc/plugindev/kadm5_hook.rst | 2 +
doc/plugindev/profile.rst | 2 +
doc/plugindev/pwqual.rst | 2 +
7 files changed, 100 insertions(+), 96 deletions(-)
diff --git a/doc/admin/pkinit.rst b/doc/admin/pkinit.rst
index 0ec8fb6..a87eb66 100644
--- a/doc/admin/pkinit.rst
+++ b/doc/admin/pkinit.rst
@@ -1,3 +1,5 @@
+.. _pkinit:
+
PKINIT configuration
====================
diff --git a/doc/admin/troubleshoot.rst b/doc/admin/troubleshoot.rst
index 3e1cbd6..5c275d8 100644
--- a/doc/admin/troubleshoot.rst
+++ b/doc/admin/troubleshoot.rst
@@ -1,6 +1,8 @@
Troubleshooting
===============
+.. _trace_logging:
+
Trace logging
-------------
diff --git a/doc/mitK5features.rst b/doc/mitK5features.rst
index 79e8a94..38cf92e 100644
--- a/doc/mitK5features.rst
+++ b/doc/mitK5features.rst
@@ -16,42 +16,36 @@ http://web.mit.edu/kerberos
Quick facts
-----------
- ========================================= ========================== ====================================================
- License :ref:`mitK5license`
- Latest stable version http://web.mit.edu/kerberos/krb5-1.11/
- Supported versions - http://web.mit.edu/kerberos/krb5-1.10/
- - http://web.mit.edu/kerberos/krb5-1.9/
- Release cycle 9--12 months
- Supported platforms \/ OS distributions Windows (KfW 4.0)
- - Windows 7
- - Vista
- - XP
- Solaris
- - SPARC
- - x86_64/x86
- GNU/Linux
- - Debian x86_64/x86
- - Ubuntu x86_64/x86
- - RedHat x86_64/x86
- BSD
- - NetBSD x86_64/x86
- Crypto backends - builtin - MIT Kerberos native crypto library
- - OpenSSL 1.0\+ - http://www.openssl.org
- - NSS 3.12.9\+ - Mozilla's Network Security Services \
- http://www.mozilla.org/projects/security/pki/nss
- Database backends - LDAP
- - DB2
- krb4 support < 1.8
- DES support configurable :ref:`retiring-des`
- ========================================= ========================== ====================================================
+License - :ref:`mitK5license`
+
+Releases:
+ - Latest stable: http://web.mit.edu/kerberos/krb5-1.11/
+ - Supported: http://web.mit.edu/kerberos/krb5-1.10/ http://web.mit.edu/kerberos/krb5-1.9/
+ - Release cycle: 9 -- 12 months
+
+Supported platforms \/ OS distributions:
+ - Windows (KfW 4.0): Windows 7, Vista, XP
+ - Solaris: SPARC, x86_64/x86
+ - GNU/Linux: Debian x86_64/x86, Ubuntu x86_64/x86, RedHat x86_64/x86
+ - BSD: NetBSD x86_64/x86
+
+Crypto backends:
+ - builtin - MIT Kerberos native crypto library
+ - OpenSSL (1.0\+) - http://www.openssl.org
+ - NSS (3.12.9\+) - http://www.mozilla.org/projects/security/pki/nss
+
+Database backends: LDAP, DB2
+
+krb4 support: Kerberos 5 release < 1.8
+
+DES support: configurable (See :ref:`retiring-des`)
Interoperability
----------------
-Microsoft
-~~~~~~~~~
+`Microsoft`
-Starting from version 1.7:
+Starting from release 1.7:
* Follow client principal referrals in the client library when
obtaining initial tickets.
@@ -80,78 +74,76 @@ Starting from version 1.7:
permitted by KDC policy.
-Starting from version 1.8:
+Starting from release 1.8:
* Microsoft Services for User (S4U) compatibility
-Heimdal
-~~~~~~~
+`Heimdal`
-* Support for reading Heimdal database starting from version 1.8
+* Support for reading Heimdal database starting from release 1.8
Feature list
------------
- ===================================================== ========= ============================================
- \ Available Additional information
- ===================================================== ========= ============================================
- Credentials delegation 1.7 :rfc:`5896`
- Cross-realm authentication and referrals 1.7 :rfc:`6806`
- Master key migration 1.7 http://k5wiki.kerberos.org/wiki/Projects/Master_Key_Migration
- PKINIT 1.7 :rfc:`4556`
- Anonymous PKINIT 1.8 :rfc:`6112`
- Constrained delegation 1.8 http://k5wiki.kerberos.org/wiki/Projects/ConstrainedDelegation
- IAKERB 1.8 http://tools.ietf.org/html/draft-ietf-krb-wg-iakerb-02
- Heimdal bridge plugin for KDC backend 1.8
- GSS-API S4U extensions 1.8 http://msdn.microsoft.com/en-us/library/cc246071
- GSS-API naming extensions 1.8 :rfc:`6680`
- GSS-API extensions for storing delegated credentials 1.8 :rfc:`5588`
- Advance warning on password expiry 1.9
- Camellia encryption (CTS-CMAC mode) 1.9 :rfc:`6803`
- KDC support for SecurID preauthentication 1.9 http://k5wiki.kerberos.org/wiki/Projects/SecurID_SAM_support
- kadmin over IPv6 1.9
- Trace logging 1.9 http://k5wiki.kerberos.org/wiki/Projects/Trace_logging
- GSSAPI/KRB5 multi-realm support
- Plugin to test password quality 1.9 http://k5wiki.kerberos.org/wiki/Projects/Password_quality_pluggable_interface
- Plugin to synchronize password changes 1.9
- Parallel KDC 1.9
- GSS-API extentions for SASL GS2 bridge 1.9 :rfc:`5801` :rfc:`5587` http://k5wiki.kerberos.org/wiki/Projects/GS2
- Purging old keys 1.9
- Naming extensions for delegation chain 1.9
- Password expiration API 1.9
- Windows client support (build-only) 1.9
- Zero configuration
- IPv6 support in iprop
- Plugin interface for configuration 1.10 http://k5wiki.kerberos.org/wiki/Projects/Pluggable_configuration
- Credentials for multiple identities 1.10 http://k5wiki.kerberos.org/wiki/Projects/Client_principal_selection
- Client support for FAST OTP 1.11 :rfc:`6560`
- GSS-API extensions for credential locations 1.11 http://k5wiki.kerberos.org/wiki/Projects/Credential_Store_extensions
- Responder mechanism 1.11 http://k5wiki.kerberos.org/wiki/Projects/Responder \
- http://k5wiki.kerberos.org/wiki/Projects/Password_response_item
- ===================================================== ========= ============================================
-
-\
- Pre-auth mechanisms
-
- ============================= ======= ====================================================
- PW-SALT :rfc:`4120#section-5.2.7.3`
- ENC-TIMESTAMP :rfc:`4120#section-5.2.7.2`
- SAM-2
- FAST negotiation framework 1.8 :rfc:`6113`
- PKINIT with FAST on client 1.10 :rfc:`6113`
- PKINIT :rfc:`4556`
- FX-COOKIE :rfc:`6113#section-5.2`
- S4U-X509-USER 1.8 http://msdn.microsoft.com/en-us/library/cc246091
- ============================= ======= ====================================================
-
-\
- PRNG
-
- =============== ========= ==============================================
- modularity 1.9
- Yarrow PRNG < 1.10
- Fortuna PRNG 1.9 http://www.schneier.com/book-practical.html
- OS PRNG 1.10 OS's native PRNG
- =============== ========= ==============================================
+For more information on the specific project see http://k5wiki.kerberos.org/wiki/Projects
+
+Release 1.7
+ - Credentials delegation :rfc:`5896`
+ - Cross-realm authentication and referrals :rfc:`6806`
+ - Master key migration
+ - PKINIT :rfc:`4556` :ref:`pkinit`
+
+Release 1.8
+ - Anonymous PKINIT :rfc:`6112` :ref:`anonymous_pkinit`
+ - Constrained delegation
+ - IAKERB http://tools.ietf.org/html/draft-ietf-krb-wg-iakerb-02
+ - Heimdal bridge plugin for KDC backend
+ - GSS-API S4U extensions http://msdn.microsoft.com/en-us/library/cc246071
+ - GSS-API naming extensions :rfc:`6680`
+ - GSS-API extensions for storing delegated credentials :rfc:`5588`
+
+Release 1.9
+ - Advance warning on password expiry
+ - Camellia encryption (CTS-CMAC mode) :rfc:`6803`
+ - KDC support for SecurID preauthentication
+ - kadmin over IPv6
+ - Trace logging :ref:`trace_logging`
+ - GSSAPI/KRB5 multi-realm support
+ - Plugin to test password quality :ref:`pwqual`
+ - Plugin to synchronize password changes :ref:`kadm5_hook`
+ - Parallel KDC
+ - GSS-API extentions for SASL GS2 bridge :rfc:`5801` :rfc:`5587`
+ - Purging old keys
+ - Naming extensions for delegation chain
+ - Password expiration API
+ - Windows client support (build-only)
+ - IPv6 support in iprop
+
+Release 1.10
+ - Plugin interface for configuration :ref:`profile`
+ - Credentials for multiple identities :ref:`ccselect`
+
+Release 1.11
+ - Client support for FAST OTP :rfc:`6560`
+ - GSS-API extensions for credential locations
+ - Responder mechanism
+
+`Pre-authentication mechanisms`
+
+- PW-SALT :rfc:`4120#section-5.2.7.3`
+- ENC-TIMESTAMP :rfc:`4120#section-5.2.7.2`
+- SAM-2
+- FAST negotiation framework (release 1.8) :rfc:`6113`
+- PKINIT with FAST on client (release 1.10) :rfc:`6113`
+- PKINIT :rfc:`4556`
+- FX-COOKIE :rfc:`6113#section-5.2`
+- S4U-X509-USER (release 1.8) http://msdn.microsoft.com/en-us/library/cc246091
+
+`PRNG`
+
+- modularity (release 1.9)
+- Yarrow PRNG (release < 1.10)
+- Fortuna PRNG (release 1.9) http://www.schneier.com/book-practical.html
+- OS PRNG (release 1.10) OS's native PRNG
diff --git a/doc/plugindev/ccselect.rst b/doc/plugindev/ccselect.rst
index 00133d9..814d774 100644
--- a/doc/plugindev/ccselect.rst
+++ b/doc/plugindev/ccselect.rst
@@ -1,3 +1,5 @@
+.. _ccselect:
+
Credential cache selection interface (ccselect)
===============================================
diff --git a/doc/plugindev/kadm5_hook.rst b/doc/plugindev/kadm5_hook.rst
index 01d330e..48d27a9 100644
--- a/doc/plugindev/kadm5_hook.rst
+++ b/doc/plugindev/kadm5_hook.rst
@@ -1,3 +1,5 @@
+.. _kadm5_hook:
+
KADM5 hook interface (kadm5_hook)
=================================
diff --git a/doc/plugindev/profile.rst b/doc/plugindev/profile.rst
index 7dbfdbf..91d7af2 100644
--- a/doc/plugindev/profile.rst
+++ b/doc/plugindev/profile.rst
@@ -1,3 +1,5 @@
+.. _profile:
+
Configuration interface (profile)
=================================
diff --git a/doc/plugindev/pwqual.rst b/doc/plugindev/pwqual.rst
index a981e79..441095c 100644
--- a/doc/plugindev/pwqual.rst
+++ b/doc/plugindev/pwqual.rst
@@ -1,3 +1,5 @@
+.. _pwqual:
+
Password quality interface (pwqual)
===================================
More information about the cvs-krb5
mailing list