Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: pass (hermes.apache.org: domain of aok123@bellsouth.net
 designates 205.152.59.64 as permitted sender)
Message-ID: <4274E9CA.9050202@bellsouth.net>
Date: Sun, 01 May 2005 10:38:02 -0400
From: Alex Karasulu <aok123@bellsouth.net>
User-Agent: Mozilla Thunderbird 1.0 (X11/20041206)
MIME-Version: 1.0
To: Apache Directory Developers List <dev@directory.apache.org>
Subject: Re: [kerberos] Adding kerberos to main
References: <4274E82C.6010004@bellsouth.net>
In-Reply-To: <4274E82C.6010004@bellsouth.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Alex Karasulu wrote:

> Enrique,
>
> The KerberosProtocolProvider constructor takes a KdcConfiguration and 
> a PrincipalStore argument.  I was adding support for the Kerberos 
> service to the executable.  This is to get he 0.9 release out with 
> Kerberos.  I was wondering what implementation of PrincipalStore you 
> were using.  I basically got stuck when I was instantiating 
> KerberosProtocolProvider.

Ok I just found PrincipalStoreImpl ... looks really really thin (few 
lines).  Is this sufficient?  What pattern (Command pattern?) did you 
use with this ContextOperation?

>
>
> BTW while going through the code I noticed a few things and had some 
> concerns regarding our upcoming release.
>
>
> There is barely any documentation in most of the Kerberos code.  
> Primarily referring to javadocs and a user guide.  If we are releasing 
> Kerberos we need some documentation.  In general (this goes for me 
> too) this project has to do a better job at getting Javadocs done.   
> Furthermoe we need some sort of user guide similar to the one for the 
> ldap portion of apacheds.  Here's what I'm referring to exactly:
>
>
> http://directory.apache.org/subprojects/apacheds/users/index.html
>
>
> I was asking myself how our users will be able to figure out a means 
> to configure the kerberos server.   There really is no guide at this 
> point and we're about to announce that we have a Kerberos server for 
> them inside ApacheDS.  At a bare minimum before we release we need to 
> describe all the different environment options.  WDYT?
>
> Thanks,
> Alex
>
>