File: [local] / src / kerberosV / Attic / README (download)
Revision 1.13, Wed Jul 11 09:14:36 2001 UTC (22 years, 11 months ago) by hin
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE, OPENBSD_3_0 Changes since 1.12: +7 -0 lines
Added todo about kstash and library cleanup
|
Maintainer
==========
Please contact <hin@openbsd.org> if you have questions or problems.
Status of the code
==================
This code is currently beta quality code, but seems to work quite well.
Heimdal is used by several large University and Commercial sites.
Building
========
The kerberosV directory is now fully a part of the buildsystem, and a
regular "make build" process is the correct way to compile it.
The krb5.conf and krb5.keytab files have recently been moved to
/etc/kerberosV directory. If you've previously used this code you should
move those files.
Documentation
=============
Some documentation is available in the `heimdal' info-page, but it is currently
quite incomplete. A number of manpages for library functions are also
available.
BSD Auth
========
There's also a BSD Authentication login script in src/libexec/login_krb5,
but they are not enabled by default. Refer to login.conf(5), login(1),
login_krb5(8) and login_krb5-or-pwd(8) for more information on how to
enable them.
TODO
====
Things todo, in no particular order:
- Make sure to not try krb5 auth when no ticket exists. (same goes for krb4)
(i think this is actually ok, but it needs to be verified.)
- Password quality checks in kpasswdd
- krb5-config script
- kx, kxd
- rxtelnet, rxterm
- pop-server and push
- rsh, rshd
- ssh and sshd
- Test what happens for a user not using kerberos
- Test all combinations of compat stuff between client, kdc and server
- Slave propagation k5->k5 and k4->k5
- Test and document how to upgrade a realm from k4 to k5
- Test compatibility with other k5 implementations, for example MIT and
Windows 2000, and document any caveats or tricks
- Logging
- Manpages are missing for many library functions, as well as a few
programs. So we should document them and give back to the Heimdal project.
- Fix /etc/rc and companions
- Example configuration installed when system is installed
- GSS-API support in our ftp client and server
- Figure out how to deal with kstash
- Reduce the number of libraries in kerberosV as well as kerberosIV,
kerberosV:
libasn1, libkadm5clnt, libkadm5srv, libhdb -> libkrb5
kerberosIV:
libacl, libkadm, libkdb -> libkrb
- Unify libroken, and put libsl and libcom_err in libroken