Return-Path: Delivered-To: apmail-incubator-directory-cvs-archive@www.apache.org Received: (qmail 67133 invoked from network); 1 Dec 2004 13:15:17 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 1 Dec 2004 13:15:16 -0000 Received: (qmail 92767 invoked by uid 500); 1 Dec 2004 13:15:05 -0000 Delivered-To: apmail-incubator-directory-cvs-archive@incubator.apache.org Received: (qmail 92571 invoked by uid 500); 1 Dec 2004 13:15:02 -0000 Mailing-List: contact directory-cvs-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: directory-dev@incubator.apache.org Delivered-To: mailing list directory-cvs@incubator.apache.org Received: (qmail 92553 invoked by uid 99); 1 Dec 2004 13:15:02 -0000 X-ASF-Spam-Status: No, hits=-10.0 required=10.0 tests=ALL_TRUSTED,NO_REAL_NAME X-Spam-Check-By: apache.org Received: from minotaur.apache.org (HELO minotaur.apache.org) (209.237.227.194) by apache.org (qpsmtpd/0.28) with SMTP; Wed, 01 Dec 2004 05:14:59 -0800 Received: (qmail 66843 invoked by uid 65534); 1 Dec 2004 13:14:57 -0000 Date: 1 Dec 2004 13:14:57 -0000 Message-ID: <20041201131457.66834.qmail@minotaur.apache.org> From: erodriguez@apache.org To: directory-cvs@incubator.apache.org Subject: svn commit: r109338 - /incubator/directory/kerberos/trunk/xdocs /incubator/directory/kerberos/trunk/xdocs/index.xml /incubator/directory/kerberos/trunk/xdocs/navigation.xml /incubator/directory/kerberos/trunk/xdocs/news.xml /incubator/directory/kerberos/trunk/xdocs/roadmap.xml MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Author: erodriguez Date: Wed Dec 1 05:14:57 2004 New Revision: 109338 URL: http://svn.apache.org/viewcvs?view=rev&rev=109338 Log: Added: incubator/directory/kerberos/trunk/xdocs/ incubator/directory/kerberos/trunk/xdocs/index.xml incubator/directory/kerberos/trunk/xdocs/navigation.xml incubator/directory/kerberos/trunk/xdocs/news.xml incubator/directory/kerberos/trunk/xdocs/roadmap.xml Added: incubator/directory/kerberos/trunk/xdocs/index.xml Url: http://svn.apache.org/viewcvs/incubator/directory/kerberos/trunk/xdocs/index.xml?view=auto&rev=109338 ============================================================================== --- (empty file) +++ incubator/directory/kerberos/trunk/xdocs/index.xml Wed Dec 1 05:14:57 2004 @@ -0,0 +1,36 @@ + + + + Enrique Rodriguez + Overview + + + +
+

Apache Kerberos is a Java implementation of the + RFC 1510 Kerberos V5 Network Authentication Service. Kerberos provides a means of verifying the identities of principals, +(users or services) on an unprotected network. While generally thought of as a +single-sign-on technology, Kerberos' true strength is in authenticating users without ever sending their password over the network. Kerberos is designed for use on open (untrusted) networks, so operates under the assumption that packets traveling along the network can be read, modified, and inserted at will.

+ +

Kerberos is named for the three-headed dog that guards the gates to Hades. The three heads are the client, the Kerberos server, and the network service being accessed.

+ +

Apache Kerberos is implemented as a protocol plugin for the Apache Directory server. As a plugin, Kerberos leverages Apache SEDA for front-end services and the Apache Eve read-optimized backing store via JNDI for persistent directory services.

+ +

Apache Kerberos, in conjunction with SEDA and Eve, provides an easy-to-use yet fully-featured network authentication service. As implemented within Apache Directory, Apache Kerberos will provide: +

    +
  • Authentication service (RFC 1510)
    • +
  • Ticket-granting service (RFC 1510)
    • +
  • Password-changing service (RFC 3244)
    • +
  • JMX remote management (JSR 160, JSR 28)
    • +
  • Optional LDAP management (Eve)
    • +
  • Standard schema, such as krb5-kdc and the DCE krbsch07 (Eve)
    • +
  • UDP and TCP Support (SEDA)
    • +
  • Traffic throttling (SEDA)
    • +
  • Overload shielding (SEDA)
    • +
  • Easy POJO embeddability for containers such as Geronimo, JBoss, and OSGi
    • +
+

+
+ + + Added: incubator/directory/kerberos/trunk/xdocs/navigation.xml Url: http://svn.apache.org/viewcvs/incubator/directory/kerberos/trunk/xdocs/navigation.xml?view=auto&rev=109338 ============================================================================== --- (empty file) +++ incubator/directory/kerberos/trunk/xdocs/navigation.xml Wed Dec 1 05:14:57 2004 @@ -0,0 +1,34 @@ + + + + Kerberos + + + + + + + + + + + + + + + + + + + + + + + + + + Added: incubator/directory/kerberos/trunk/xdocs/news.xml Url: http://svn.apache.org/viewcvs/incubator/directory/kerberos/trunk/xdocs/news.xml?view=auto&rev=109338 ============================================================================== --- (empty file) +++ incubator/directory/kerberos/trunk/xdocs/news.xml Wed Dec 1 05:14:57 2004 @@ -0,0 +1,40 @@ + + + + Enrique Rodriguez + News and Status + + + + +
+ + + +

+ We're currently focusing on bringing the documentation up-to-date and + setting up an overall roadmap. Thanks to Vincent Tence for the help. +

+ +
+ +
+ +

+ We're refactoring Kerberos to improve the code readability, bring the codebase more in line +with the rest of the Directory project, and to make better use of the SEDA framework.

+

+Currently implemented features include: +

    +
  • Authentication service (RFC 1510)
    • +
  • Ticket-granting service (RFC 1510)
    • +
  • Password-changing service (RFC 3244)
  • +
  • DES encryption systems (RFC 1510)
    • +
  • Triple-DES (DES3) encryption systems
    • +
  • Standard schema, such as krb5-kdc and the DCE krbsch07 (Eve)
    • +
+

+
+ + + Added: incubator/directory/kerberos/trunk/xdocs/roadmap.xml Url: http://svn.apache.org/viewcvs/incubator/directory/kerberos/trunk/xdocs/roadmap.xml?view=auto&rev=109338 ============================================================================== --- (empty file) +++ incubator/directory/kerberos/trunk/xdocs/roadmap.xml Wed Dec 1 05:14:57 2004 @@ -0,0 +1,68 @@ + + + + Enrique Rodriguez + Roadmap + + + + +
+ + + +

+

    +
  • Authentication service (RFC 1510)
    • +
  • Ticket-granting service (RFC 1510)
    • +
  • DES encryption systems (RFC 1510)
    • +
  • Multi-threaded UDP frontend
    • +
+

+ + + +

+

    +
  • krb5-kdc Schema support using OpenLDAP
    • +
  • SASL-GSSAPI-protected binding and searching using OpenLDAP
    • +
  • Triple-DES (DES3) encryption systems
    • +
  • Password-changing service (RFC 3244)
    • +
+

+ + + +

+

    +
  • Pre-authentication support (RFC 1510)
    • +
  • UDP and TCP Support (SEDA)
    • +
  • Traffic throttling (SEDA)
    • +
  • Overload shielding (SEDA)
    • +
+

+ + + +

+

    +
  • Optional LDAP management (Eve)
    • +
  • JMX remote management (JSR 160, JSR 28)
    • +
  • Easy POJO embeddability for containers such as Geronimo, JBoss, and OSGi
    • +
+

+ + + +

+

    +
  • 2-Factor (hardware) authentication
    • +
  • Cross-realm (trust relationship) operation
    • +
  • Additional encryption systems
    • +
+

+ +
+ + +