Annotation of src/kerberosV/README, Revision 1.13
1.11 hin 1: Maintainer
2: ==========
1.1 hin 3:
1.11 hin 4: Please contact <hin@openbsd.org> if you have questions or problems.
1.1 hin 5:
1.7 hin 6:
7: Status of the code
8: ==================
9:
1.11 hin 10: This code is currently beta quality code, but seems to work quite well.
11: Heimdal is used by several large University and Commercial sites.
1.7 hin 12:
13:
14: Building
15: ========
16:
1.11 hin 17: The kerberosV directory is now fully a part of the buildsystem, and a
18: regular "make build" process is the correct way to compile it.
1.2 hin 19:
1.9 hin 20: The krb5.conf and krb5.keytab files have recently been moved to
21: /etc/kerberosV directory. If you've previously used this code you should
22: move those files.
23:
1.1 hin 24:
1.7 hin 25: Documentation
26: =============
27:
28: Some documentation is available in the `heimdal' info-page, but it is currently
29: quite incomplete. A number of manpages for library functions are also
30: available.
31:
32:
1.8 hin 33: BSD Auth
34: ========
35:
36: There's also a BSD Authentication login script in src/libexec/login_krb5,
1.11 hin 37: but they are not enabled by default. Refer to login.conf(5), login(1),
38: login_krb5(8) and login_krb5-or-pwd(8) for more information on how to
39: enable them.
1.8 hin 40:
41:
1.7 hin 42: TODO
43: ====
1.1 hin 44:
45: Things todo, in no particular order:
46:
47: - Make sure to not try krb5 auth when no ticket exists. (same goes for krb4)
1.7 hin 48: (i think this is actually ok, but it needs to be verified.)
1.9 hin 49: - Password quality checks in kpasswdd
1.3 hin 50: - krb5-config script
51: - kx, kxd
52: - rxtelnet, rxterm
53: - pop-server and push
54: - rsh, rshd
1.1 hin 55: - ssh and sshd
56: - Test what happens for a user not using kerberos
57: - Test all combinations of compat stuff between client, kdc and server
58: - Slave propagation k5->k5 and k4->k5
1.3 hin 59: - Test and document how to upgrade a realm from k4 to k5
1.1 hin 60: - Test compatibility with other k5 implementations, for example MIT and
1.3 hin 61: Windows 2000, and document any caveats or tricks
1.1 hin 62: - Logging
1.3 hin 63: - Manpages are missing for many library functions, as well as a few
64: programs. So we should document them and give back to the Heimdal project.
65: - Fix /etc/rc and companions
66: - Example configuration installed when system is installed
1.9 hin 67: - GSS-API support in our ftp client and server
1.13 ! hin 68: - Figure out how to deal with kstash
! 69: - Reduce the number of libraries in kerberosV as well as kerberosIV,
! 70: kerberosV:
! 71: libasn1, libkadm5clnt, libkadm5srv, libhdb -> libkrb5
! 72: kerberosIV:
! 73: libacl, libkadm, libkdb -> libkrb
! 74: - Unify libroken, and put libsl and libcom_err in libroken