krb5-1.12-beta1 is available
Tom Yu
tlyu at MIT.EDU
Tue Nov 12 10:42:52 EST 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MIT krb5-1.12-beta1 is now available for download from
http://web.mit.edu/kerberos/dist/testing.html
The main MIT Kerberos web page is
http://web.mit.edu/kerberos/
Please send comments to the krbdev list. The final release will
probably occur in mid-December. The README file contains a more
extensive list of changes.
Major changes in 1.12 (2013-11-08)
==================================
Additional background information on these changes may be found at
http://k5wiki.kerberos.org/wiki/Release_1.12
and
http://k5wiki.kerberos.org/wiki/Category:Release_1.12_projects
Developer experience:
* Add a plugin interface to control krb5_aname_to_localname and
krb5_kuserok behavior.
* Add a plugin interface to control hostname-to-realm mappings and the
default realm.
* Add GSSAPI extensions for constructing MIC tokens using IOV lists.
Administrator experience:
* Principal entries may now refer to the names of policies which do
not exist as policy objects in the database. Policy objects may now
be deleted whether or not principals reference their names. A
principal which references a nonexistent policy name will behave as
if it does not reference a policy.
* Add support for having no long-term keys for a principal. This can
be useful if the principal is only intended to be used with PKINIT
or OTP preauthentication.
* Add collection support to the KEYRING credential cache type on
Linux, and add support for persistent user keyrings and larger
credentials on systems which support them.
* Add a FAST OTP preauthentication module for the KDC which uses
RADIUS to validate OTP token values.
* Add an experimental pluggable interface for auditing KDC
processing. This interface may change in a backwards-incompatible
way in a future release.
Performance:
* The AES-based encryption types will use AES-NI instructions when
possible for improved performance.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (SunOS)
iQEVAwUBUoJMhBUCTNN0nXiJAQIe/gf7BYHMibWReQDDDFj7/cE6LJCnbpdAyA7p
V14Sl+pPtW64ee2IAkDelF3Vf9OKDKf51XrTUTbOSRAW44lcTmFEWlbhetvl9QkB
DNH7C3fFqqqji6FJCixSc1JVvlCTA4PQ3AMUYmDJxNiV4589LCrDvU9x/ITV8dOB
PhiMFuSi0MJTadxBRnqrdL7XS41PVIPDzjvUy+Df6QAOVBrfIoaX5Pf3RGYbmlZD
Ct9kqSpeps9c94No5ZGw/GTY903+rIZcwbWaUvxNJSELyRLdwY2nTv4Ikrxolv2D
Q88+U70HU1NZsEpLlJOTKzNpNiVINplma9Pp1CvEpKytzbfUBLP61g==
=FK+0
-----END PGP SIGNATURE-----
More information about the krbdev
mailing list