Return-Path: X-Original-To: apmail-directory-commits-archive@www.apache.org Delivered-To: apmail-directory-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 7227718912 for ; Tue, 26 Jan 2016 07:14:06 +0000 (UTC) Received: (qmail 74389 invoked by uid 500); 26 Jan 2016 07:14:06 -0000 Delivered-To: apmail-directory-commits-archive@directory.apache.org Received: (qmail 74343 invoked by uid 500); 26 Jan 2016 07:14:06 -0000 Mailing-List: contact commits-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@directory.apache.org Delivered-To: mailing list commits@directory.apache.org Received: (qmail 74334 invoked by uid 99); 26 Jan 2016 07:14:06 -0000 Received: from Unknown (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 26 Jan 2016 07:14:06 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id CADC9C206A for ; Tue, 26 Jan 2016 07:14:05 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.799 X-Spam-Level: * X-Spam-Status: No, score=1.799 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, KAM_LAZY_DOMAIN_SECURITY=1, RP_MATCHES_RCVD=-0.001] autolearn=disabled Received: from mx1-us-west.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id hJp7BaUp4PbL for ; Tue, 26 Jan 2016 07:14:05 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-us-west.apache.org (ASF Mail Server at mx1-us-west.apache.org) with ESMTP id 3E7A020522 for ; Tue, 26 Jan 2016 07:14:05 +0000 (UTC) Received: from svn01-us-west.apache.org (svn.apache.org [10.41.0.6]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id A658BE043F for ; Tue, 26 Jan 2016 07:14:04 +0000 (UTC) Received: from svn01-us-west.apache.org (localhost [127.0.0.1]) by svn01-us-west.apache.org (ASF Mail Server at svn01-us-west.apache.org) with ESMTP id 8DACF3A027B for ; Tue, 26 Jan 2016 07:14:04 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r1726740 - /directory/site/trunk/content/kerby/news.mdtext Date: Tue, 26 Jan 2016 07:14:04 -0000 To: commits@directory.apache.org From: plusplusjiajia@apache.org X-Mailer: svnmailer-1.0.9 Message-Id: <20160126071404.8DACF3A027B@svn01-us-west.apache.org> Author: plusplusjiajia Date: Tue Jan 26 07:14:04 2016 New Revision: 1726740 URL: http://svn.apache.org/viewvc?rev=1726740&view=rev Log: Update the news of Kerby. Modified: directory/site/trunk/content/kerby/news.mdtext Modified: directory/site/trunk/content/kerby/news.mdtext URL: http://svn.apache.org/viewvc/directory/site/trunk/content/kerby/news.mdtext?rev=1726740&r1=1726739&r2=1726740&view=diff ============================================================================== --- directory/site/trunk/content/kerby/news.mdtext (original) +++ directory/site/trunk/content/kerby/news.mdtext Tue Jan 26 07:14:04 2016 @@ -4,6 +4,54 @@ The Apache Directory team is pleased to announce the release of Apache Kerby 1.0.0-RC1, the first release candidate towards a 1.0 version. -Apache Kerby™ is a Java Kerberos binding. It provides a rich, intuitive and interoperable implementation, library, KDC and various facilities that integrates PKI, OTP and token (OAuth2) as desired in modern environments such as cloud, Hadoop and mobile. - Downloads are available [here](downloads.html) + +Apache Kerby 1.0.0-RC1 Release Note +=================================== + +In this release 236 JIRA issues were resolved and the following features are supported: + +1. Kerberos libraries: + - Client + - KDC server + - Kadmin + - Credential cache and keytab utilities + +2. Standalone KDC server . + +3. Support for various identity backends: + - In-memory + - JSON + - LDAP + - Mavibot(MVCC BTree) + - Zookeeper + +4. Embedded KDC server allows easy integration into products for unit tests or production deployment. + +5. FAST/Preauthentication framework to allow popular and useful authentication mechanisms. + +6. Token Preauth mechanism to allow clients to request tickets using JWT tokens. + +7. Client can request a TGT with: + - User plain password credential + - User keyTab + - User token credential + +8. Client can request a service ticket with: + - user TGT credential for a server + - user AccessToken credential for a server + +9. Network support including UDP and TCP transport with two implementations: + - Default implementation based on the JRE without depending on other libraries. + - Netty based implementation for better throughput, lower latency. + +10. Tools: + - kdcinit: Initialize and prepare KDC, like choose storage type, setting up necessary principals (tgs, kadmin) etc. + - kadmin: Command-line interfaces to administration system. + - kinit: Obtains and caches an initial ticket-granting ticket for principal. + - klist: Lists the Kerby principal and tickets held in a credentials cache, or the keys held in a keytab file. + +11. Support for JAAS, GSSAPI and SASL frameworks that applications can leverage the authentication mechanisms provided by Kerby. + +12. Building support: checking style and find bugs. +