]> git.ipfire.org Git - thirdparty/krb5.git/commitdiff
Document 1.12 changes in MIT Kerberos Features doc
authorZhanna Tsitkov <tsitkova@mit.edu>
Fri, 14 Feb 2014 21:17:47 +0000 (16:17 -0500)
committerTom Yu <tlyu@mit.edu>
Wed, 16 Dec 2015 19:16:39 +0000 (14:16 -0500)
(cherry picked from commit 5489cb326bc5b13c9dcb0f76228cc964dd9fdb5d)

ticket: 8328 (new)
version_fixed: 1.12.5
status: resolved

doc/admin/otp.rst
doc/appdev/gssapi.rst
doc/mitK5features.rst

index 0abd5ff83744e2307f32fc53fac0f1af1e4a1aa5..4eded4156d451400b07382ef7d385e32a380725c 100644 (file)
@@ -1,3 +1,5 @@
+.. _otp_preauth:
+
 OTP Preauthentication
 =====================
 
index d79f87d7f55ec55e75ace0ab9c887506573eb42f..05e4059f26d61b0759f2a6c0718dc2aaf01fc2ba 100644 (file)
@@ -420,6 +420,7 @@ pre-existing pointer and length for a modifiable region of data)::
     /* Decrypted data is in iov[1].buffer, pointing to a subregion of
      * token. */
 
+.. _gssapi_mic_token:
 
 IOV MIC tokens
 --------------
index fa1ec7e140ed30fc002b35f318d48236d2d44f0e..63cd4673ea2f2e9226297d48f234fed183608714 100644 (file)
@@ -19,8 +19,8 @@ Quick facts
 License - :ref:`mitK5license`
 
 Releases:
-    - Latest stable: http://web.mit.edu/kerberos/krb5-1.11/
-    - Supported: http://web.mit.edu/kerberos/krb5-1.10/
+    - Latest stable: http://web.mit.edu/kerberos/krb5-1.12/
+    - Supported: http://web.mit.edu/kerberos/krb5-1.11/
     - Release cycle: 9 -- 12 months
 
 Supported platforms \/ OS distributions:
@@ -130,6 +130,17 @@ Release 1.11
  -   GSS-API extensions for credential locations
  -   Responder mechanism
 
+Release 1.12
+ -   Plugin to control krb5_aname_to_localname and krb5_kuserok behavior   :ref:`localauth_plugin`
+ -   Plugin to control hostname-to-realm mappings and the default realm    :ref:`hostrealm_plugin`
+ -   GSSAPI extensions for constructing MIC tokens using IOV lists         :ref:`gssapi_mic_token`
+ -   Principal may refer to nonexistent policies `Policy Refcount project <http://k5wiki.kerberos.org/wiki/Projects/Policy_refcount_elimination>`_
+ -   Support for having no long-term keys for a principal `Principals Without Keys project <http://k5wiki.kerberos.org/wiki/Projects/Principals_without_keys>`_
+ -   Collection support to the KEYRING credential cache type on Linux :ref:`ccache_definition`
+ -   FAST OTP preauthentication module for the KDC which uses RADIUS to validate OTP token values :ref:`otp_preauth`
+ -   Experimental Audit plugin for KDC processing `Audit project <http://k5wiki.kerberos.org/wiki/Projects/Audit>`_
+
+
 `Pre-authentication mechanisms`
 
 - PW-SALT                                         :rfc:`4120#section-5.2.7.3`
@@ -140,6 +151,7 @@ Release 1.11
 - PKINIT                                          :rfc:`4556`
 - FX-COOKIE                                       :rfc:`6113#section-5.2`
 - S4U-X509-USER                (release 1.8)      http://msdn.microsoft.com/en-us/library/cc246091
+- OTP                          (release 1.12)     :ref:`otp_preauth`
 
 `PRNG`