directory-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From plusplusjia...@apache.org
Subject svn commit: r1726740 - /directory/site/trunk/content/kerby/news.mdtext
Date Tue, 26 Jan 2016 07:14:04 GMT
Author: plusplusjiajia
Date: Tue Jan 26 07:14:04 2016
New Revision: 1726740

URL: http://svn.apache.org/viewvc?rev=1726740&view=rev
Log:
Update the news of Kerby.

Modified:
    directory/site/trunk/content/kerby/news.mdtext

Modified: directory/site/trunk/content/kerby/news.mdtext
URL: http://svn.apache.org/viewvc/directory/site/trunk/content/kerby/news.mdtext?rev=1726740&r1=1726739&r2=1726740&view=diff
==============================================================================
--- directory/site/trunk/content/kerby/news.mdtext (original)
+++ directory/site/trunk/content/kerby/news.mdtext Tue Jan 26 07:14:04 2016
@@ -4,6 +4,54 @@
 The Apache Directory team is pleased to announce the release of Apache Kerby 1.0.0-RC1, the

 first release candidate towards a 1.0 version.
 
-Apache Kerby™ is a Java Kerberos binding. It provides a rich, intuitive and interoperable
implementation, library, KDC and various facilities that integrates PKI, OTP and token (OAuth2)
as desired in modern environments such as cloud, Hadoop and mobile.
-
 Downloads are available [here](downloads.html)
+
+Apache Kerby 1.0.0-RC1 Release Note
+===================================
+
+In this release 236 JIRA issues were resolved and the following features are supported:
+
+1. Kerberos libraries:
+  - Client
+  - KDC server
+  - Kadmin
+  - Credential cache and keytab utilities
+
+2. Standalone KDC server .
+
+3. Support for various identity backends:
+  - In-memory
+  - JSON
+  - LDAP
+  - Mavibot(MVCC BTree)
+  - Zookeeper
+
+4. Embedded KDC server allows easy integration into products for unit tests or production
deployment.
+
+5. FAST/Preauthentication framework to allow popular and useful authentication mechanisms.
+
+6. Token Preauth mechanism to allow clients to request tickets using JWT tokens.
+
+7. Client can request a TGT with:
+  - User plain password credential
+  - User keyTab
+  - User token credential
+
+8. Client can request a service ticket with:
+  - user TGT credential for a server
+  - user AccessToken credential for a server
+
+9. Network support including UDP and TCP transport with two implementations:
+  - Default implementation based on the JRE without depending on other libraries.
+  - Netty based implementation for better throughput, lower latency.
+
+10. Tools:
+  - kdcinit: Initialize and prepare KDC, like choose storage type, setting up necessary principals
(tgs, kadmin) etc.
+  - kadmin: Command-line interfaces to administration system.
+  - kinit: Obtains and caches an initial ticket-granting ticket for principal.
+  - klist: Lists the Kerby principal and tickets held in a credentials cache, or the keys
held in a keytab file.
+
+11. Support for JAAS, GSSAPI and SASL frameworks that applications can leverage the authentication
mechanisms provided by Kerby.
+
+12. Building support: checking style and find bugs.
+



Mime
View raw message