You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by pl...@apache.org on 2016/01/26 08:14:04 UTC
svn commit: r1726740 - /directory/site/trunk/content/kerby/news.mdtext
Author: plusplusjiajia
Date: Tue Jan 26 07:14:04 2016
New Revision: 1726740
URL: http://svn.apache.org/viewvc?rev=1726740&view=rev
Log:
Update the news of Kerby.
Modified:
directory/site/trunk/content/kerby/news.mdtext
Modified: directory/site/trunk/content/kerby/news.mdtext
URL: http://svn.apache.org/viewvc/directory/site/trunk/content/kerby/news.mdtext?rev=1726740&r1=1726739&r2=1726740&view=diff
==============================================================================
--- directory/site/trunk/content/kerby/news.mdtext (original)
+++ directory/site/trunk/content/kerby/news.mdtext Tue Jan 26 07:14:04 2016
@@ -4,6 +4,54 @@
The Apache Directory team is pleased to announce the release of Apache Kerby 1.0.0-RC1, the
first release candidate towards a 1.0 version.
-Apache Kerby™ is a Java Kerberos binding. It provides a rich, intuitive and interoperable implementation, library, KDC and various facilities that integrates PKI, OTP and token (OAuth2) as desired in modern environments such as cloud, Hadoop and mobile.
-
Downloads are available [here](downloads.html)
+
+Apache Kerby 1.0.0-RC1 Release Note
+===================================
+
+In this release 236 JIRA issues were resolved and the following features are supported:
+
+1. Kerberos libraries:
+ - Client
+ - KDC server
+ - Kadmin
+ - Credential cache and keytab utilities
+
+2. Standalone KDC server .
+
+3. Support for various identity backends:
+ - In-memory
+ - JSON
+ - LDAP
+ - Mavibot(MVCC BTree)
+ - Zookeeper
+
+4. Embedded KDC server allows easy integration into products for unit tests or production deployment.
+
+5. FAST/Preauthentication framework to allow popular and useful authentication mechanisms.
+
+6. Token Preauth mechanism to allow clients to request tickets using JWT tokens.
+
+7. Client can request a TGT with:
+ - User plain password credential
+ - User keyTab
+ - User token credential
+
+8. Client can request a service ticket with:
+ - user TGT credential for a server
+ - user AccessToken credential for a server
+
+9. Network support including UDP and TCP transport with two implementations:
+ - Default implementation based on the JRE without depending on other libraries.
+ - Netty based implementation for better throughput, lower latency.
+
+10. Tools:
+ - kdcinit: Initialize and prepare KDC, like choose storage type, setting up necessary principals (tgs, kadmin) etc.
+ - kadmin: Command-line interfaces to administration system.
+ - kinit: Obtains and caches an initial ticket-granting ticket for principal.
+ - klist: Lists the Kerby principal and tickets held in a credentials cache, or the keys held in a keytab file.
+
+11. Support for JAAS, GSSAPI and SASL frameworks that applications can leverage the authentication mechanisms provided by Kerby.
+
+12. Building support: checking style and find bugs.
+