krb5-1.9-beta2 is available

Tom Yu tlyu at MIT.EDU
Sat Dec 4 00:06:54 EST 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

MIT krb5-1.9-beta2 is now available for download from

         http://web.mit.edu/kerberos/dist/testing.html

The main MIT Kerberos web page is

         http://web.mit.edu/kerberos/

Please send comments to the krbdev list.  This is beta release
intended to be the code freeze for the 1.9 release.  The final release
will probably occur in the next two weeks.  The README file contains a
more extensive list of changes.

Changes since 1.9-beta1 include fixes for MITKRB5-SA-2010-007,
changing Camellia cipher suite to CTS-CMAC instead of CCM, and some
Windows build fixes.

Major changes in 1.9
- --------------------

Code quality:

* Python-based testing framework
* DAL cleanup

Developer experience:

* NSS crypto back end
* PRNG modularity
* Fortuna-like PRNG

Performance:

* Account lockout performance improvements

Administrator experience:

* Trace logging
* Plugin interface for password sync
* Plugin interface for password quality checks
* Configuration file validator
* KDC support for SecurID preauthentication

Protocol evolution:

* IAKERB
* Camellia encryption (experimental; disabled by default)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (SunOS)

iEYEARECAAYFAkz5zHEACgkQSO8fWy4vZo4ikQCgiFDmOTpeYJKZPT5885U00x0k
cyYAnjfNFChSOpL0XVro6+kbgNdm/UDc
=2xLR
-----END PGP SIGNATURE-----



More information about the krbdev mailing list