You are viewing a plain text version of this content. The canonical link for it is here.
Posted to kerby@directory.apache.org by "Li, Jiajia" <ji...@intel.com> on 2016/01/18 09:47:34 UTC
RE: Status of Kerby
Hi all,
I thinks the following issues should be solved before release:
1. Clear Kerby source codes
2. Add the rc1 and rc2 apis docs under docs folder
3. Do some tests of anonymous pkinit, and refactor the code.
And some issues can be delayed and solved after RC2 release:
1. KDC is rejecting my TGS: The JIRA link: https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:)
2. Remote kadmin
...
Do you have any to add or change? Thanks
Thanks
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Thursday, December 31, 2015 3:40 PM
To: kerby@directory.apache.org
Subject: Status of Kerby
Hi all,
Sep 23, the first release 1.0.0-RC1 of Kerby was released.
>From Sep 23 to Dec 31, 82 JIRA issues were resolved, including following important features:
Features or important changes:
1. PKINIT in DH case done;
2. PKINIT in RSA case (75%);
3. Finished token support;
4. PKIX CMS/X509 support;
5. Full BER encoding support;
6. Separate Asn1 parser;
7. Dump support for Asn1;
8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
JIRAs resolved:
1. Fix tool's usage in windows
2. Define transaction API for identity backend
3. Enhance json backend to support transaction for reasonable efficiency
4. Fix some log4j warnings and issues
5. Adding ability to encrypt and sign using non-RSA keys
6. Get the verify key for signed JWT token from kdc config and signed token in tests
7. Token issuer must be trusted as one of preconfigured issuers.
8. Add support for decrypting JWT tokens in the KDC
9. kinit tool is enhanced to request a service ticket
10. Fix KinitTool doesn't work to use keytab file
11. Fix the bit manipulation functions in KrbFlags
12. Enable assembly plugin to create tar.gz and zip packages for tool-dist
13. Categorize KrbOptions by adding group info
14. Refined asn1 APIs, getting rid of the questionable encoding option
15. Allow to define explicit and implicit fields more easily for collection types
16. Added enumerated type
17. Support BER and indefinitive length encoding in ASN1
18. Cryptographic Message Syntax (CMS) support
19. X509 ASN1 types support
20. Separate token client out of KrbClient
21. Separate PKINIT client out of KrbClient
22. Supporting Asn1Any type
23. Supporting Asn1Choice type
24. Introduced Asn1Constructed for support of some primitive types using constructed encoding
25. Provide an ASN1 dumping tool for troubleshooting
26. Dumping support for built-in ASN1 types and user defined types
27. Providing an API to use some useful ASN1 functions by consolidating existing utilities
28. Support decoding of primitive but constructed encoded types
29. Separate ASN1 parser
30. Introduced Asn1Converter to convert a parsing result into an ASN1 object
31. Introduced Asn1Binder to bind a parse result to an existing ASN1 object
32. Introduced Asn1Encodeable for encode/decode methods
33. Support decoding of primitive but constructed encoded types
34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption, TokenOption, PkinitOption
35. Merge the anonymous pkinit feature from pkinit-branch
36. Load configuration content when adding the resource.
37. Enable kinit tool kdc flag options.
38. Added the graphics for teh ASN1 hierarchy
39. Add some javadocs
In process and plan to do:
1. Clean up the JIRAs
2. Update the Github website and the sub-project website
3. Check the missing Javadoc for important APIs
4. Do some tests for Kerby KDC and client tools in linux, windows, and macs
Note this is an important release with important features and quite a few of bug fixes according to user requirement and feedbacks. When this release is done, the formal 1.0.0 release will be much prepared and approaching soon.
Jiajia
RE: Status of Kerby
Posted by "Zheng, Kai" <ka...@intel.com>.
Sounds OK to me. Thanks Stefan for your message.
Regards,
Kai
-----Original Message-----
From: Stefan Seelmann [mailto:mail@stefan-seelmann.de]
Sent: Friday, February 19, 2016 4:01 PM
To: kerby@directory.apache.org
Subject: Re: Status of Kerby
Hi Kai and Jiajia,
I think it on the time that you try to handle the release process yourself :)
Kind Regards,
Stefan
On 02/19/2016 02:02 AM, Zheng, Kai wrote:
> Soft ping @Emmanuel
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Wednesday, February 17, 2016 3:04 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia for the push. It sounds good to me. For other work that wants to get into before 1.0.0, we can have more RCs if necessary.
>
> Emmanuel,
> do you have more inputs and the bandwidth for the release? If not convenient, I wonder if anyone else could help with it. Thanks.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Wednesday, February 17, 2016 2:17 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi,
> Happy Chinese Spring Festival.
>
> Is there any concern about rc2 release?
> If no, can we start the release preparation?
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Friday, January 29, 2016 1:54 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Sure, I will make it look better, thanks.
>
> Jiajia
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Friday, January 29, 2016 11:35 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> It looks fine to me. Maybe we can refine the title and text some bit?
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Friday, January 29, 2016 10:28 AM
> To: kerby@directory.apache.org; coheigea@apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
> If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit, klist ), you can do it according to this guide:
> https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README
> .md
> Welcome your feedbacks.
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Tuesday, January 26, 2016 7:52 PM
> To: kerby@directory.apache.org
> Subject: Re: Status of Kerby
>
> Looks good to me.
>
> Colm.
>
> On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
>
>> Hi all,
>>
>> Now most of the things have been finished:
>> 1. Update the github project site [DONE] 2. Update the website [DONE]
>> 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
>> some feedbacks from you.
>>
>> Thanks
>> Jiajia
>>
>>
>> -----Original Message-----
>> From: Zheng, Kai [mailto:kai.zheng@intel.com]
>> Sent: Saturday, January 23, 2016 10:46 PM
>> To: kerby@directory.apache.org
>> Subject: RE: Status of Kerby
>>
>> Hi folks,
>>
>> I just go thru the code base and cleared some codes. Most of the
>> missed are test codes.
>> Please check out recent commits for it.
>>
>> Regards,
>> Kai
>>
>> -----Original Message-----
>> From: Zheng, Kai [mailto:kai.zheng@intel.com]
>> Sent: Tuesday, January 19, 2016 8:54 AM
>> To: kerby@directory.apache.org
>> Subject: RE: Status of Kerby
>>
>> Thanks Jiajia.
>>
>> The list looks nice. Another item is to update the site. I'll clear
>> some codes and get my part done this week.
>>
>> Regards,
>> Kai
>>
>> -----Original Message-----
>> From: Li, Jiajia [mailto:jiajia.li@intel.com]
>> Sent: Monday, January 18, 2016 4:48 PM
>> To: kerby@directory.apache.org
>> Subject: RE: Status of Kerby
>>
>> Hi all,
>>
>> I thinks the following issues should be solved before release:
>> 1. Clear Kerby source codes
>> 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests
>> of anonymous pkinit, and refactor the code.
>>
>> And some issues can be delayed and solved after RC2 release:
>> 1. KDC is rejecting my TGS: The JIRA link:
>> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
>> Remote kadmin ...
>>
>> Do you have any to add or change? Thanks
>>
>> Thanks
>> Jiajia
>>
>> -----Original Message-----
>> From: Li, Jiajia [mailto:jiajia.li@intel.com]
>> Sent: Thursday, December 31, 2015 3:40 PM
>> To: kerby@directory.apache.org
>> Subject: Status of Kerby
>>
>> Hi all,
>>
>> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
>> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
>> following important features:
>>
>> Features or important changes:
>> 1. PKINIT in DH case done;
>> 2. PKINIT in RSA case (75%);
>> 3. Finished token support;
>> 4. PKIX CMS/X509 support;
>> 5. Full BER encoding support;
>> 6. Separate Asn1 parser;
>> 7. Dump support for Asn1;
>> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>>
>> JIRAs resolved:
>> 1. Fix tool's usage in windows
>> 2. Define transaction API for identity backend
>> 3. Enhance json backend to support transaction for reasonable
>> efficiency
>> 4. Fix some log4j warnings and issues
>> 5. Adding ability to encrypt and sign using non-RSA keys
>> 6. Get the verify key for signed JWT token from kdc config and signed
>> token in tests
>> 7. Token issuer must be trusted as one of preconfigured issuers.
>> 8. Add support for decrypting JWT tokens in the KDC
>> 9. kinit tool is enhanced to request a service ticket
>> 10. Fix KinitTool doesn't work to use keytab file
>> 11. Fix the bit manipulation functions in KrbFlags
>> 12. Enable assembly plugin to create tar.gz and zip packages for
>> tool-dist
>> 13. Categorize KrbOptions by adding group info
>> 14. Refined asn1 APIs, getting rid of the questionable encoding option
>> 15. Allow to define explicit and implicit fields more easily for
>> collection types
>> 16. Added enumerated type
>> 17. Support BER and indefinitive length encoding in ASN1
>> 18. Cryptographic Message Syntax (CMS) support
>> 19. X509 ASN1 types support
>> 20. Separate token client out of KrbClient
>> 21. Separate PKINIT client out of KrbClient
>> 22. Supporting Asn1Any type
>> 23. Supporting Asn1Choice type
>> 24. Introduced Asn1Constructed for support of some primitive types using
>> constructed encoding
>> 25. Provide an ASN1 dumping tool for troubleshooting
>> 26. Dumping support for built-in ASN1 types and user defined types
>> 27. Providing an API to use some useful ASN1 functions by consolidating
>> existing utilities
>> 28. Support decoding of primitive but constructed encoded types
>> 29. Separate ASN1 parser
>> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
>> object
>> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
>> object
>> 32. Introduced Asn1Encodeable for encode/decode methods
>> 33. Support decoding of primitive but constructed encoded types
>> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
>> TokenOption, PkinitOption
>> 35. Merge the anonymous pkinit feature from pkinit-branch
>> 36. Load configuration content when adding the resource.
>> 37. Enable kinit tool kdc flag options.
>> 38. Added the graphics for teh ASN1 hierarchy
>> 39. Add some javadocs
>>
>> In process and plan to do:
>>
>> 1. Clean up the JIRAs
>>
>> 2. Update the Github website and the sub-project website
>>
>> 3. Check the missing Javadoc for important APIs
>>
>> 4. Do some tests for Kerby KDC and client tools in linux, windows,
>> and macs
>>
>> Note this is an important release with important features and quite a
>> few of bug fixes according to user requirement and feedbacks. When
>> this release is done, the formal 1.0.0 release will be much prepared
>> and approaching soon.
>>
>>
>> Jiajia
>>
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
Re: Status of Kerby
Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
Hi Kai and Jiajia,
I think it on the time that you try to handle the release process
yourself :)
Kind Regards,
Stefan
On 02/19/2016 02:02 AM, Zheng, Kai wrote:
> Soft ping @Emmanuel
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Wednesday, February 17, 2016 3:04 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia for the push. It sounds good to me. For other work that wants to get into before 1.0.0, we can have more RCs if necessary.
>
> Emmanuel,
> do you have more inputs and the bandwidth for the release? If not convenient, I wonder if anyone else could help with it. Thanks.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Wednesday, February 17, 2016 2:17 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi,
> Happy Chinese Spring Festival.
>
> Is there any concern about rc2 release?
> If no, can we start the release preparation?
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Friday, January 29, 2016 1:54 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Sure, I will make it look better, thanks.
>
> Jiajia
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Friday, January 29, 2016 11:35 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> It looks fine to me. Maybe we can refine the title and text some bit?
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Friday, January 29, 2016 10:28 AM
> To: kerby@directory.apache.org; coheigea@apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
> If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit, klist ), you can do it according to this guide:
> https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README.md
> Welcome your feedbacks.
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Tuesday, January 26, 2016 7:52 PM
> To: kerby@directory.apache.org
> Subject: Re: Status of Kerby
>
> Looks good to me.
>
> Colm.
>
> On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
>
>> Hi all,
>>
>> Now most of the things have been finished:
>> 1. Update the github project site [DONE] 2. Update the website [DONE]
>> 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
>> some feedbacks from you.
>>
>> Thanks
>> Jiajia
>>
>>
>> -----Original Message-----
>> From: Zheng, Kai [mailto:kai.zheng@intel.com]
>> Sent: Saturday, January 23, 2016 10:46 PM
>> To: kerby@directory.apache.org
>> Subject: RE: Status of Kerby
>>
>> Hi folks,
>>
>> I just go thru the code base and cleared some codes. Most of the
>> missed are test codes.
>> Please check out recent commits for it.
>>
>> Regards,
>> Kai
>>
>> -----Original Message-----
>> From: Zheng, Kai [mailto:kai.zheng@intel.com]
>> Sent: Tuesday, January 19, 2016 8:54 AM
>> To: kerby@directory.apache.org
>> Subject: RE: Status of Kerby
>>
>> Thanks Jiajia.
>>
>> The list looks nice. Another item is to update the site. I'll clear
>> some codes and get my part done this week.
>>
>> Regards,
>> Kai
>>
>> -----Original Message-----
>> From: Li, Jiajia [mailto:jiajia.li@intel.com]
>> Sent: Monday, January 18, 2016 4:48 PM
>> To: kerby@directory.apache.org
>> Subject: RE: Status of Kerby
>>
>> Hi all,
>>
>> I thinks the following issues should be solved before release:
>> 1. Clear Kerby source codes
>> 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of
>> anonymous pkinit, and refactor the code.
>>
>> And some issues can be delayed and solved after RC2 release:
>> 1. KDC is rejecting my TGS: The JIRA link:
>> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
>> Remote kadmin ...
>>
>> Do you have any to add or change? Thanks
>>
>> Thanks
>> Jiajia
>>
>> -----Original Message-----
>> From: Li, Jiajia [mailto:jiajia.li@intel.com]
>> Sent: Thursday, December 31, 2015 3:40 PM
>> To: kerby@directory.apache.org
>> Subject: Status of Kerby
>>
>> Hi all,
>>
>> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
>> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
>> following important features:
>>
>> Features or important changes:
>> 1. PKINIT in DH case done;
>> 2. PKINIT in RSA case (75%);
>> 3. Finished token support;
>> 4. PKIX CMS/X509 support;
>> 5. Full BER encoding support;
>> 6. Separate Asn1 parser;
>> 7. Dump support for Asn1;
>> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>>
>> JIRAs resolved:
>> 1. Fix tool's usage in windows
>> 2. Define transaction API for identity backend
>> 3. Enhance json backend to support transaction for reasonable
>> efficiency
>> 4. Fix some log4j warnings and issues
>> 5. Adding ability to encrypt and sign using non-RSA keys
>> 6. Get the verify key for signed JWT token from kdc config and signed
>> token in tests
>> 7. Token issuer must be trusted as one of preconfigured issuers.
>> 8. Add support for decrypting JWT tokens in the KDC
>> 9. kinit tool is enhanced to request a service ticket
>> 10. Fix KinitTool doesn't work to use keytab file
>> 11. Fix the bit manipulation functions in KrbFlags
>> 12. Enable assembly plugin to create tar.gz and zip packages for
>> tool-dist
>> 13. Categorize KrbOptions by adding group info
>> 14. Refined asn1 APIs, getting rid of the questionable encoding option
>> 15. Allow to define explicit and implicit fields more easily for
>> collection types
>> 16. Added enumerated type
>> 17. Support BER and indefinitive length encoding in ASN1
>> 18. Cryptographic Message Syntax (CMS) support
>> 19. X509 ASN1 types support
>> 20. Separate token client out of KrbClient
>> 21. Separate PKINIT client out of KrbClient
>> 22. Supporting Asn1Any type
>> 23. Supporting Asn1Choice type
>> 24. Introduced Asn1Constructed for support of some primitive types using
>> constructed encoding
>> 25. Provide an ASN1 dumping tool for troubleshooting
>> 26. Dumping support for built-in ASN1 types and user defined types
>> 27. Providing an API to use some useful ASN1 functions by consolidating
>> existing utilities
>> 28. Support decoding of primitive but constructed encoded types
>> 29. Separate ASN1 parser
>> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
>> object
>> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
>> object
>> 32. Introduced Asn1Encodeable for encode/decode methods
>> 33. Support decoding of primitive but constructed encoded types
>> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
>> TokenOption, PkinitOption
>> 35. Merge the anonymous pkinit feature from pkinit-branch
>> 36. Load configuration content when adding the resource.
>> 37. Enable kinit tool kdc flag options.
>> 38. Added the graphics for teh ASN1 hierarchy
>> 39. Add some javadocs
>>
>> In process and plan to do:
>>
>> 1. Clean up the JIRAs
>>
>> 2. Update the Github website and the sub-project website
>>
>> 3. Check the missing Javadoc for important APIs
>>
>> 4. Do some tests for Kerby KDC and client tools in linux, windows,
>> and macs
>>
>> Note this is an important release with important features and quite a
>> few of bug fixes according to user requirement and feedbacks. When
>> this release is done, the formal 1.0.0 release will be much prepared
>> and approaching soon.
>>
>>
>> Jiajia
>>
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
RE: Status of Kerby
Posted by "Zheng, Kai" <ka...@intel.com>.
Soft ping @Emmanuel
-----Original Message-----
From: Zheng, Kai [mailto:kai.zheng@intel.com]
Sent: Wednesday, February 17, 2016 3:04 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Thanks Jiajia for the push. It sounds good to me. For other work that wants to get into before 1.0.0, we can have more RCs if necessary.
Emmanuel,
do you have more inputs and the bandwidth for the release? If not convenient, I wonder if anyone else could help with it. Thanks.
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Wednesday, February 17, 2016 2:17 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Hi,
Happy Chinese Spring Festival.
Is there any concern about rc2 release?
If no, can we start the release preparation?
Thanks
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, January 29, 2016 1:54 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Sure, I will make it look better, thanks.
Jiajia
-----Original Message-----
From: Zheng, Kai [mailto:kai.zheng@intel.com]
Sent: Friday, January 29, 2016 11:35 AM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
It looks fine to me. Maybe we can refine the title and text some bit?
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, January 29, 2016 10:28 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Status of Kerby
Hi all,
If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit, klist ), you can do it according to this guide:
https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README.md
Welcome your feedbacks.
Thanks
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, January 26, 2016 7:52 PM
To: kerby@directory.apache.org
Subject: Re: Status of Kerby
Looks good to me.
Colm.
On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> Now most of the things have been finished:
> 1. Update the github project site [DONE] 2. Update the website [DONE]
> 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
> some feedbacks from you.
>
> Thanks
> Jiajia
>
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Saturday, January 23, 2016 10:46 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi folks,
>
> I just go thru the code base and cleared some codes. Most of the
> missed are test codes.
> Please check out recent commits for it.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Tuesday, January 19, 2016 8:54 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia.
>
> The list looks nice. Another item is to update the site. I'll clear
> some codes and get my part done this week.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Monday, January 18, 2016 4:48 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
>
> I thinks the following issues should be solved before release:
> 1. Clear Kerby source codes
> 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of
> anonymous pkinit, and refactor the code.
>
> And some issues can be delayed and solved after RC2 release:
> 1. KDC is rejecting my TGS: The JIRA link:
> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
> Remote kadmin ...
>
> Do you have any to add or change? Thanks
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, December 31, 2015 3:40 PM
> To: kerby@directory.apache.org
> Subject: Status of Kerby
>
> Hi all,
>
> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
> following important features:
>
> Features or important changes:
> 1. PKINIT in DH case done;
> 2. PKINIT in RSA case (75%);
> 3. Finished token support;
> 4. PKIX CMS/X509 support;
> 5. Full BER encoding support;
> 6. Separate Asn1 parser;
> 7. Dump support for Asn1;
> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>
> JIRAs resolved:
> 1. Fix tool's usage in windows
> 2. Define transaction API for identity backend
> 3. Enhance json backend to support transaction for reasonable
> efficiency
> 4. Fix some log4j warnings and issues
> 5. Adding ability to encrypt and sign using non-RSA keys
> 6. Get the verify key for signed JWT token from kdc config and signed
> token in tests
> 7. Token issuer must be trusted as one of preconfigured issuers.
> 8. Add support for decrypting JWT tokens in the KDC
> 9. kinit tool is enhanced to request a service ticket
> 10. Fix KinitTool doesn't work to use keytab file
> 11. Fix the bit manipulation functions in KrbFlags
> 12. Enable assembly plugin to create tar.gz and zip packages for
> tool-dist
> 13. Categorize KrbOptions by adding group info
> 14. Refined asn1 APIs, getting rid of the questionable encoding option
> 15. Allow to define explicit and implicit fields more easily for
> collection types
> 16. Added enumerated type
> 17. Support BER and indefinitive length encoding in ASN1
> 18. Cryptographic Message Syntax (CMS) support
> 19. X509 ASN1 types support
> 20. Separate token client out of KrbClient
> 21. Separate PKINIT client out of KrbClient
> 22. Supporting Asn1Any type
> 23. Supporting Asn1Choice type
> 24. Introduced Asn1Constructed for support of some primitive types using
> constructed encoding
> 25. Provide an ASN1 dumping tool for troubleshooting
> 26. Dumping support for built-in ASN1 types and user defined types
> 27. Providing an API to use some useful ASN1 functions by consolidating
> existing utilities
> 28. Support decoding of primitive but constructed encoded types
> 29. Separate ASN1 parser
> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
> object
> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
> object
> 32. Introduced Asn1Encodeable for encode/decode methods
> 33. Support decoding of primitive but constructed encoded types
> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
> TokenOption, PkinitOption
> 35. Merge the anonymous pkinit feature from pkinit-branch
> 36. Load configuration content when adding the resource.
> 37. Enable kinit tool kdc flag options.
> 38. Added the graphics for teh ASN1 hierarchy
> 39. Add some javadocs
>
> In process and plan to do:
>
> 1. Clean up the JIRAs
>
> 2. Update the Github website and the sub-project website
>
> 3. Check the missing Javadoc for important APIs
>
> 4. Do some tests for Kerby KDC and client tools in linux, windows,
> and macs
>
> Note this is an important release with important features and quite a
> few of bug fixes according to user requirement and feedbacks. When
> this release is done, the formal 1.0.0 release will be much prepared
> and approaching soon.
>
>
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Status of Kerby
Posted by "Zheng, Kai" <ka...@intel.com>.
Thanks Jiajia for the push. It sounds good to me. For other work that wants to get into before 1.0.0, we can have more RCs if necessary.
Emmanuel,
do you have more inputs and the bandwidth for the release? If not convenient, I wonder if anyone else could help with it. Thanks.
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Wednesday, February 17, 2016 2:17 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Hi,
Happy Chinese Spring Festival.
Is there any concern about rc2 release?
If no, can we start the release preparation?
Thanks
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, January 29, 2016 1:54 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Sure, I will make it look better, thanks.
Jiajia
-----Original Message-----
From: Zheng, Kai [mailto:kai.zheng@intel.com]
Sent: Friday, January 29, 2016 11:35 AM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
It looks fine to me. Maybe we can refine the title and text some bit?
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, January 29, 2016 10:28 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Status of Kerby
Hi all,
If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit, klist ), you can do it according to this guide:
https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README.md
Welcome your feedbacks.
Thanks
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, January 26, 2016 7:52 PM
To: kerby@directory.apache.org
Subject: Re: Status of Kerby
Looks good to me.
Colm.
On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> Now most of the things have been finished:
> 1. Update the github project site [DONE] 2. Update the website [DONE]
> 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
> some feedbacks from you.
>
> Thanks
> Jiajia
>
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Saturday, January 23, 2016 10:46 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi folks,
>
> I just go thru the code base and cleared some codes. Most of the
> missed are test codes.
> Please check out recent commits for it.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Tuesday, January 19, 2016 8:54 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia.
>
> The list looks nice. Another item is to update the site. I'll clear
> some codes and get my part done this week.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Monday, January 18, 2016 4:48 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
>
> I thinks the following issues should be solved before release:
> 1. Clear Kerby source codes
> 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of
> anonymous pkinit, and refactor the code.
>
> And some issues can be delayed and solved after RC2 release:
> 1. KDC is rejecting my TGS: The JIRA link:
> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
> Remote kadmin ...
>
> Do you have any to add or change? Thanks
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, December 31, 2015 3:40 PM
> To: kerby@directory.apache.org
> Subject: Status of Kerby
>
> Hi all,
>
> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
> following important features:
>
> Features or important changes:
> 1. PKINIT in DH case done;
> 2. PKINIT in RSA case (75%);
> 3. Finished token support;
> 4. PKIX CMS/X509 support;
> 5. Full BER encoding support;
> 6. Separate Asn1 parser;
> 7. Dump support for Asn1;
> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>
> JIRAs resolved:
> 1. Fix tool's usage in windows
> 2. Define transaction API for identity backend
> 3. Enhance json backend to support transaction for reasonable
> efficiency
> 4. Fix some log4j warnings and issues
> 5. Adding ability to encrypt and sign using non-RSA keys
> 6. Get the verify key for signed JWT token from kdc config and signed
> token in tests
> 7. Token issuer must be trusted as one of preconfigured issuers.
> 8. Add support for decrypting JWT tokens in the KDC
> 9. kinit tool is enhanced to request a service ticket
> 10. Fix KinitTool doesn't work to use keytab file
> 11. Fix the bit manipulation functions in KrbFlags
> 12. Enable assembly plugin to create tar.gz and zip packages for
> tool-dist
> 13. Categorize KrbOptions by adding group info
> 14. Refined asn1 APIs, getting rid of the questionable encoding option
> 15. Allow to define explicit and implicit fields more easily for
> collection types
> 16. Added enumerated type
> 17. Support BER and indefinitive length encoding in ASN1
> 18. Cryptographic Message Syntax (CMS) support
> 19. X509 ASN1 types support
> 20. Separate token client out of KrbClient
> 21. Separate PKINIT client out of KrbClient
> 22. Supporting Asn1Any type
> 23. Supporting Asn1Choice type
> 24. Introduced Asn1Constructed for support of some primitive types using
> constructed encoding
> 25. Provide an ASN1 dumping tool for troubleshooting
> 26. Dumping support for built-in ASN1 types and user defined types
> 27. Providing an API to use some useful ASN1 functions by consolidating
> existing utilities
> 28. Support decoding of primitive but constructed encoded types
> 29. Separate ASN1 parser
> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
> object
> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
> object
> 32. Introduced Asn1Encodeable for encode/decode methods
> 33. Support decoding of primitive but constructed encoded types
> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
> TokenOption, PkinitOption
> 35. Merge the anonymous pkinit feature from pkinit-branch
> 36. Load configuration content when adding the resource.
> 37. Enable kinit tool kdc flag options.
> 38. Added the graphics for teh ASN1 hierarchy
> 39. Add some javadocs
>
> In process and plan to do:
>
> 1. Clean up the JIRAs
>
> 2. Update the Github website and the sub-project website
>
> 3. Check the missing Javadoc for important APIs
>
> 4. Do some tests for Kerby KDC and client tools in linux, windows,
> and macs
>
> Note this is an important release with important features and quite a
> few of bug fixes according to user requirement and feedbacks. When
> this release is done, the formal 1.0.0 release will be much prepared
> and approaching soon.
>
>
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Status of Kerby
Posted by Colm O hEigeartaigh <co...@apache.org>.
No concerns from me, please go ahead with the release.
Colm.
On Wed, Feb 17, 2016 at 6:16 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi,
> Happy Chinese Spring Festival.
>
> Is there any concern about rc2 release?
> If no, can we start the release preparation?
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Friday, January 29, 2016 1:54 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Sure, I will make it look better, thanks.
>
> Jiajia
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Friday, January 29, 2016 11:35 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> It looks fine to me. Maybe we can refine the title and text some bit?
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Friday, January 29, 2016 10:28 AM
> To: kerby@directory.apache.org; coheigea@apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
> If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit,
> klist ), you can do it according to this guide:
> https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README.md
> Welcome your feedbacks.
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
> Sent: Tuesday, January 26, 2016 7:52 PM
> To: kerby@directory.apache.org
> Subject: Re: Status of Kerby
>
> Looks good to me.
>
> Colm.
>
> On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
>
> > Hi all,
> >
> > Now most of the things have been finished:
> > 1. Update the github project site [DONE] 2. Update the website [DONE]
> > 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
> > some feedbacks from you.
> >
> > Thanks
> > Jiajia
> >
> >
> > -----Original Message-----
> > From: Zheng, Kai [mailto:kai.zheng@intel.com]
> > Sent: Saturday, January 23, 2016 10:46 PM
> > To: kerby@directory.apache.org
> > Subject: RE: Status of Kerby
> >
> > Hi folks,
> >
> > I just go thru the code base and cleared some codes. Most of the
> > missed are test codes.
> > Please check out recent commits for it.
> >
> > Regards,
> > Kai
> >
> > -----Original Message-----
> > From: Zheng, Kai [mailto:kai.zheng@intel.com]
> > Sent: Tuesday, January 19, 2016 8:54 AM
> > To: kerby@directory.apache.org
> > Subject: RE: Status of Kerby
> >
> > Thanks Jiajia.
> >
> > The list looks nice. Another item is to update the site. I'll clear
> > some codes and get my part done this week.
> >
> > Regards,
> > Kai
> >
> > -----Original Message-----
> > From: Li, Jiajia [mailto:jiajia.li@intel.com]
> > Sent: Monday, January 18, 2016 4:48 PM
> > To: kerby@directory.apache.org
> > Subject: RE: Status of Kerby
> >
> > Hi all,
> >
> > I thinks the following issues should be solved before release:
> > 1. Clear Kerby source codes
> > 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of
> > anonymous pkinit, and refactor the code.
> >
> > And some issues can be delayed and solved after RC2 release:
> > 1. KDC is rejecting my TGS: The JIRA link:
> > https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
> > Remote kadmin ...
> >
> > Do you have any to add or change? Thanks
> >
> > Thanks
> > Jiajia
> >
> > -----Original Message-----
> > From: Li, Jiajia [mailto:jiajia.li@intel.com]
> > Sent: Thursday, December 31, 2015 3:40 PM
> > To: kerby@directory.apache.org
> > Subject: Status of Kerby
> >
> > Hi all,
> >
> > Sep 23, the first release 1.0.0-RC1 of Kerby was released.
> > From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
> > following important features:
> >
> > Features or important changes:
> > 1. PKINIT in DH case done;
> > 2. PKINIT in RSA case (75%);
> > 3. Finished token support;
> > 4. PKIX CMS/X509 support;
> > 5. Full BER encoding support;
> > 6. Separate Asn1 parser;
> > 7. Dump support for Asn1;
> > 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
> >
> > JIRAs resolved:
> > 1. Fix tool's usage in windows
> > 2. Define transaction API for identity backend
> > 3. Enhance json backend to support transaction for reasonable
> > efficiency
> > 4. Fix some log4j warnings and issues
> > 5. Adding ability to encrypt and sign using non-RSA keys
> > 6. Get the verify key for signed JWT token from kdc config and
> signed
> > token in tests
> > 7. Token issuer must be trusted as one of preconfigured issuers.
> > 8. Add support for decrypting JWT tokens in the KDC
> > 9. kinit tool is enhanced to request a service ticket
> > 10. Fix KinitTool doesn't work to use keytab file
> > 11. Fix the bit manipulation functions in KrbFlags
> > 12. Enable assembly plugin to create tar.gz and zip packages for
> > tool-dist
> > 13. Categorize KrbOptions by adding group info
> > 14. Refined asn1 APIs, getting rid of the questionable encoding option
> > 15. Allow to define explicit and implicit fields more easily for
> > collection types
> > 16. Added enumerated type
> > 17. Support BER and indefinitive length encoding in ASN1
> > 18. Cryptographic Message Syntax (CMS) support
> > 19. X509 ASN1 types support
> > 20. Separate token client out of KrbClient
> > 21. Separate PKINIT client out of KrbClient
> > 22. Supporting Asn1Any type
> > 23. Supporting Asn1Choice type
> > 24. Introduced Asn1Constructed for support of some primitive types
> using
> > constructed encoding
> > 25. Provide an ASN1 dumping tool for troubleshooting
> > 26. Dumping support for built-in ASN1 types and user defined types
> > 27. Providing an API to use some useful ASN1 functions by consolidating
> > existing utilities
> > 28. Support decoding of primitive but constructed encoded types
> > 29. Separate ASN1 parser
> > 30. Introduced Asn1Converter to convert a parsing result into an ASN1
> > object
> > 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
> > object
> > 32. Introduced Asn1Encodeable for encode/decode methods
> > 33. Support decoding of primitive but constructed encoded types
> > 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
> > TokenOption, PkinitOption
> > 35. Merge the anonymous pkinit feature from pkinit-branch
> > 36. Load configuration content when adding the resource.
> > 37. Enable kinit tool kdc flag options.
> > 38. Added the graphics for teh ASN1 hierarchy
> > 39. Add some javadocs
> >
> > In process and plan to do:
> >
> > 1. Clean up the JIRAs
> >
> > 2. Update the Github website and the sub-project website
> >
> > 3. Check the missing Javadoc for important APIs
> >
> > 4. Do some tests for Kerby KDC and client tools in linux, windows,
> > and macs
> >
> > Note this is an important release with important features and quite a
> > few of bug fixes according to user requirement and feedbacks. When
> > this release is done, the formal 1.0.0 release will be much prepared
> > and approaching soon.
> >
> >
> > Jiajia
> >
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Status of Kerby
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi,
Happy Chinese Spring Festival.
Is there any concern about rc2 release?
If no, can we start the release preparation?
Thanks
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, January 29, 2016 1:54 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Sure, I will make it look better, thanks.
Jiajia
-----Original Message-----
From: Zheng, Kai [mailto:kai.zheng@intel.com]
Sent: Friday, January 29, 2016 11:35 AM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
It looks fine to me. Maybe we can refine the title and text some bit?
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, January 29, 2016 10:28 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Status of Kerby
Hi all,
If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit, klist ), you can do it according to this guide:
https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README.md
Welcome your feedbacks.
Thanks
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, January 26, 2016 7:52 PM
To: kerby@directory.apache.org
Subject: Re: Status of Kerby
Looks good to me.
Colm.
On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> Now most of the things have been finished:
> 1. Update the github project site [DONE] 2. Update the website [DONE]
> 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
> some feedbacks from you.
>
> Thanks
> Jiajia
>
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Saturday, January 23, 2016 10:46 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi folks,
>
> I just go thru the code base and cleared some codes. Most of the
> missed are test codes.
> Please check out recent commits for it.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Tuesday, January 19, 2016 8:54 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia.
>
> The list looks nice. Another item is to update the site. I'll clear
> some codes and get my part done this week.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Monday, January 18, 2016 4:48 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
>
> I thinks the following issues should be solved before release:
> 1. Clear Kerby source codes
> 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of
> anonymous pkinit, and refactor the code.
>
> And some issues can be delayed and solved after RC2 release:
> 1. KDC is rejecting my TGS: The JIRA link:
> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
> Remote kadmin ...
>
> Do you have any to add or change? Thanks
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, December 31, 2015 3:40 PM
> To: kerby@directory.apache.org
> Subject: Status of Kerby
>
> Hi all,
>
> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
> following important features:
>
> Features or important changes:
> 1. PKINIT in DH case done;
> 2. PKINIT in RSA case (75%);
> 3. Finished token support;
> 4. PKIX CMS/X509 support;
> 5. Full BER encoding support;
> 6. Separate Asn1 parser;
> 7. Dump support for Asn1;
> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>
> JIRAs resolved:
> 1. Fix tool's usage in windows
> 2. Define transaction API for identity backend
> 3. Enhance json backend to support transaction for reasonable
> efficiency
> 4. Fix some log4j warnings and issues
> 5. Adding ability to encrypt and sign using non-RSA keys
> 6. Get the verify key for signed JWT token from kdc config and signed
> token in tests
> 7. Token issuer must be trusted as one of preconfigured issuers.
> 8. Add support for decrypting JWT tokens in the KDC
> 9. kinit tool is enhanced to request a service ticket
> 10. Fix KinitTool doesn't work to use keytab file
> 11. Fix the bit manipulation functions in KrbFlags
> 12. Enable assembly plugin to create tar.gz and zip packages for
> tool-dist
> 13. Categorize KrbOptions by adding group info
> 14. Refined asn1 APIs, getting rid of the questionable encoding option
> 15. Allow to define explicit and implicit fields more easily for
> collection types
> 16. Added enumerated type
> 17. Support BER and indefinitive length encoding in ASN1
> 18. Cryptographic Message Syntax (CMS) support
> 19. X509 ASN1 types support
> 20. Separate token client out of KrbClient
> 21. Separate PKINIT client out of KrbClient
> 22. Supporting Asn1Any type
> 23. Supporting Asn1Choice type
> 24. Introduced Asn1Constructed for support of some primitive types using
> constructed encoding
> 25. Provide an ASN1 dumping tool for troubleshooting
> 26. Dumping support for built-in ASN1 types and user defined types
> 27. Providing an API to use some useful ASN1 functions by consolidating
> existing utilities
> 28. Support decoding of primitive but constructed encoded types
> 29. Separate ASN1 parser
> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
> object
> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
> object
> 32. Introduced Asn1Encodeable for encode/decode methods
> 33. Support decoding of primitive but constructed encoded types
> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
> TokenOption, PkinitOption
> 35. Merge the anonymous pkinit feature from pkinit-branch
> 36. Load configuration content when adding the resource.
> 37. Enable kinit tool kdc flag options.
> 38. Added the graphics for teh ASN1 hierarchy
> 39. Add some javadocs
>
> In process and plan to do:
>
> 1. Clean up the JIRAs
>
> 2. Update the Github website and the sub-project website
>
> 3. Check the missing Javadoc for important APIs
>
> 4. Do some tests for Kerby KDC and client tools in linux, windows,
> and macs
>
> Note this is an important release with important features and quite a
> few of bug fixes according to user requirement and feedbacks. When
> this release is done, the formal 1.0.0 release will be much prepared
> and approaching soon.
>
>
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Status of Kerby
Posted by "Li, Jiajia" <ji...@intel.com>.
Sure, I will make it look better, thanks.
Jiajia
-----Original Message-----
From: Zheng, Kai [mailto:kai.zheng@intel.com]
Sent: Friday, January 29, 2016 11:35 AM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
It looks fine to me. Maybe we can refine the title and text some bit?
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, January 29, 2016 10:28 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Status of Kerby
Hi all,
If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit, klist ), you can do it according to this guide:
https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README.md
Welcome your feedbacks.
Thanks
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, January 26, 2016 7:52 PM
To: kerby@directory.apache.org
Subject: Re: Status of Kerby
Looks good to me.
Colm.
On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> Now most of the things have been finished:
> 1. Update the github project site [DONE] 2. Update the website [DONE]
> 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
> some feedbacks from you.
>
> Thanks
> Jiajia
>
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Saturday, January 23, 2016 10:46 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi folks,
>
> I just go thru the code base and cleared some codes. Most of the
> missed are test codes.
> Please check out recent commits for it.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Tuesday, January 19, 2016 8:54 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia.
>
> The list looks nice. Another item is to update the site. I'll clear
> some codes and get my part done this week.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Monday, January 18, 2016 4:48 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
>
> I thinks the following issues should be solved before release:
> 1. Clear Kerby source codes
> 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of
> anonymous pkinit, and refactor the code.
>
> And some issues can be delayed and solved after RC2 release:
> 1. KDC is rejecting my TGS: The JIRA link:
> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
> Remote kadmin ...
>
> Do you have any to add or change? Thanks
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, December 31, 2015 3:40 PM
> To: kerby@directory.apache.org
> Subject: Status of Kerby
>
> Hi all,
>
> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
> following important features:
>
> Features or important changes:
> 1. PKINIT in DH case done;
> 2. PKINIT in RSA case (75%);
> 3. Finished token support;
> 4. PKIX CMS/X509 support;
> 5. Full BER encoding support;
> 6. Separate Asn1 parser;
> 7. Dump support for Asn1;
> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>
> JIRAs resolved:
> 1. Fix tool's usage in windows
> 2. Define transaction API for identity backend
> 3. Enhance json backend to support transaction for reasonable
> efficiency
> 4. Fix some log4j warnings and issues
> 5. Adding ability to encrypt and sign using non-RSA keys
> 6. Get the verify key for signed JWT token from kdc config and signed
> token in tests
> 7. Token issuer must be trusted as one of preconfigured issuers.
> 8. Add support for decrypting JWT tokens in the KDC
> 9. kinit tool is enhanced to request a service ticket
> 10. Fix KinitTool doesn't work to use keytab file
> 11. Fix the bit manipulation functions in KrbFlags
> 12. Enable assembly plugin to create tar.gz and zip packages for
> tool-dist
> 13. Categorize KrbOptions by adding group info
> 14. Refined asn1 APIs, getting rid of the questionable encoding option
> 15. Allow to define explicit and implicit fields more easily for
> collection types
> 16. Added enumerated type
> 17. Support BER and indefinitive length encoding in ASN1
> 18. Cryptographic Message Syntax (CMS) support
> 19. X509 ASN1 types support
> 20. Separate token client out of KrbClient
> 21. Separate PKINIT client out of KrbClient
> 22. Supporting Asn1Any type
> 23. Supporting Asn1Choice type
> 24. Introduced Asn1Constructed for support of some primitive types using
> constructed encoding
> 25. Provide an ASN1 dumping tool for troubleshooting
> 26. Dumping support for built-in ASN1 types and user defined types
> 27. Providing an API to use some useful ASN1 functions by consolidating
> existing utilities
> 28. Support decoding of primitive but constructed encoded types
> 29. Separate ASN1 parser
> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
> object
> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
> object
> 32. Introduced Asn1Encodeable for encode/decode methods
> 33. Support decoding of primitive but constructed encoded types
> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
> TokenOption, PkinitOption
> 35. Merge the anonymous pkinit feature from pkinit-branch
> 36. Load configuration content when adding the resource.
> 37. Enable kinit tool kdc flag options.
> 38. Added the graphics for teh ASN1 hierarchy
> 39. Add some javadocs
>
> In process and plan to do:
>
> 1. Clean up the JIRAs
>
> 2. Update the Github website and the sub-project website
>
> 3. Check the missing Javadoc for important APIs
>
> 4. Do some tests for Kerby KDC and client tools in linux, windows,
> and macs
>
> Note this is an important release with important features and quite a
> few of bug fixes according to user requirement and feedbacks. When
> this release is done, the formal 1.0.0 release will be much prepared
> and approaching soon.
>
>
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Status of Kerby
Posted by "Zheng, Kai" <ka...@intel.com>.
It looks fine to me. Maybe we can refine the title and text some bit?
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Friday, January 29, 2016 10:28 AM
To: kerby@directory.apache.org; coheigea@apache.org
Subject: RE: Status of Kerby
Hi all,
If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit, klist ), you can do it according to this guide:
https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README.md
Welcome your feedbacks.
Thanks
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, January 26, 2016 7:52 PM
To: kerby@directory.apache.org
Subject: Re: Status of Kerby
Looks good to me.
Colm.
On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> Now most of the things have been finished:
> 1. Update the github project site [DONE] 2. Update the website [DONE]
> 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
> some feedbacks from you.
>
> Thanks
> Jiajia
>
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Saturday, January 23, 2016 10:46 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi folks,
>
> I just go thru the code base and cleared some codes. Most of the
> missed are test codes.
> Please check out recent commits for it.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Tuesday, January 19, 2016 8:54 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia.
>
> The list looks nice. Another item is to update the site. I'll clear
> some codes and get my part done this week.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Monday, January 18, 2016 4:48 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
>
> I thinks the following issues should be solved before release:
> 1. Clear Kerby source codes
> 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of
> anonymous pkinit, and refactor the code.
>
> And some issues can be delayed and solved after RC2 release:
> 1. KDC is rejecting my TGS: The JIRA link:
> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
> Remote kadmin ...
>
> Do you have any to add or change? Thanks
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, December 31, 2015 3:40 PM
> To: kerby@directory.apache.org
> Subject: Status of Kerby
>
> Hi all,
>
> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
> following important features:
>
> Features or important changes:
> 1. PKINIT in DH case done;
> 2. PKINIT in RSA case (75%);
> 3. Finished token support;
> 4. PKIX CMS/X509 support;
> 5. Full BER encoding support;
> 6. Separate Asn1 parser;
> 7. Dump support for Asn1;
> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>
> JIRAs resolved:
> 1. Fix tool's usage in windows
> 2. Define transaction API for identity backend
> 3. Enhance json backend to support transaction for reasonable
> efficiency
> 4. Fix some log4j warnings and issues
> 5. Adding ability to encrypt and sign using non-RSA keys
> 6. Get the verify key for signed JWT token from kdc config and signed
> token in tests
> 7. Token issuer must be trusted as one of preconfigured issuers.
> 8. Add support for decrypting JWT tokens in the KDC
> 9. kinit tool is enhanced to request a service ticket
> 10. Fix KinitTool doesn't work to use keytab file
> 11. Fix the bit manipulation functions in KrbFlags
> 12. Enable assembly plugin to create tar.gz and zip packages for
> tool-dist
> 13. Categorize KrbOptions by adding group info
> 14. Refined asn1 APIs, getting rid of the questionable encoding option
> 15. Allow to define explicit and implicit fields more easily for
> collection types
> 16. Added enumerated type
> 17. Support BER and indefinitive length encoding in ASN1
> 18. Cryptographic Message Syntax (CMS) support
> 19. X509 ASN1 types support
> 20. Separate token client out of KrbClient
> 21. Separate PKINIT client out of KrbClient
> 22. Supporting Asn1Any type
> 23. Supporting Asn1Choice type
> 24. Introduced Asn1Constructed for support of some primitive types using
> constructed encoding
> 25. Provide an ASN1 dumping tool for troubleshooting
> 26. Dumping support for built-in ASN1 types and user defined types
> 27. Providing an API to use some useful ASN1 functions by consolidating
> existing utilities
> 28. Support decoding of primitive but constructed encoded types
> 29. Separate ASN1 parser
> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
> object
> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
> object
> 32. Introduced Asn1Encodeable for encode/decode methods
> 33. Support decoding of primitive but constructed encoded types
> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
> TokenOption, PkinitOption
> 35. Merge the anonymous pkinit feature from pkinit-branch
> 36. Load configuration content when adding the resource.
> 37. Enable kinit tool kdc flag options.
> 38. Added the graphics for teh ASN1 hierarchy
> 39. Add some javadocs
>
> In process and plan to do:
>
> 1. Clean up the JIRAs
>
> 2. Update the Github website and the sub-project website
>
> 3. Check the missing Javadoc for important APIs
>
> 4. Do some tests for Kerby KDC and client tools in linux, windows,
> and macs
>
> Note this is an important release with important features and quite a
> few of bug fixes according to user requirement and feedbacks. When
> this release is done, the formal 1.0.0 release will be much prepared
> and approaching soon.
>
>
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Status of Kerby
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi all,
If you want to do some testing of tools(kdcinit, start-kdc, kadmin, kinit, klist ), you can do it according to this guide:
https://github.com/apache/directory-kerby/blob/trunk/kerby-dist/README.md
Welcome your feedbacks.
Thanks
Jiajia
-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, January 26, 2016 7:52 PM
To: kerby@directory.apache.org
Subject: Re: Status of Kerby
Looks good to me.
Colm.
On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> Now most of the things have been finished:
> 1. Update the github project site [DONE] 2. Update the website [DONE]
> 3. Clear and clean some code [DONE] 4. Do more tests [ON GOING] Hope
> some feedbacks from you.
>
> Thanks
> Jiajia
>
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Saturday, January 23, 2016 10:46 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi folks,
>
> I just go thru the code base and cleared some codes. Most of the
> missed are test codes.
> Please check out recent commits for it.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Tuesday, January 19, 2016 8:54 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia.
>
> The list looks nice. Another item is to update the site. I'll clear
> some codes and get my part done this week.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Monday, January 18, 2016 4:48 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
>
> I thinks the following issues should be solved before release:
> 1. Clear Kerby source codes
> 2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of
> anonymous pkinit, and refactor the code.
>
> And some issues can be delayed and solved after RC2 release:
> 1. KDC is rejecting my TGS: The JIRA link:
> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
> Remote kadmin ...
>
> Do you have any to add or change? Thanks
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, December 31, 2015 3:40 PM
> To: kerby@directory.apache.org
> Subject: Status of Kerby
>
> Hi all,
>
> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including
> following important features:
>
> Features or important changes:
> 1. PKINIT in DH case done;
> 2. PKINIT in RSA case (75%);
> 3. Finished token support;
> 4. PKIX CMS/X509 support;
> 5. Full BER encoding support;
> 6. Separate Asn1 parser;
> 7. Dump support for Asn1;
> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>
> JIRAs resolved:
> 1. Fix tool's usage in windows
> 2. Define transaction API for identity backend
> 3. Enhance json backend to support transaction for reasonable
> efficiency
> 4. Fix some log4j warnings and issues
> 5. Adding ability to encrypt and sign using non-RSA keys
> 6. Get the verify key for signed JWT token from kdc config and signed
> token in tests
> 7. Token issuer must be trusted as one of preconfigured issuers.
> 8. Add support for decrypting JWT tokens in the KDC
> 9. kinit tool is enhanced to request a service ticket
> 10. Fix KinitTool doesn't work to use keytab file
> 11. Fix the bit manipulation functions in KrbFlags
> 12. Enable assembly plugin to create tar.gz and zip packages for
> tool-dist
> 13. Categorize KrbOptions by adding group info
> 14. Refined asn1 APIs, getting rid of the questionable encoding option
> 15. Allow to define explicit and implicit fields more easily for
> collection types
> 16. Added enumerated type
> 17. Support BER and indefinitive length encoding in ASN1
> 18. Cryptographic Message Syntax (CMS) support
> 19. X509 ASN1 types support
> 20. Separate token client out of KrbClient
> 21. Separate PKINIT client out of KrbClient
> 22. Supporting Asn1Any type
> 23. Supporting Asn1Choice type
> 24. Introduced Asn1Constructed for support of some primitive types using
> constructed encoding
> 25. Provide an ASN1 dumping tool for troubleshooting
> 26. Dumping support for built-in ASN1 types and user defined types
> 27. Providing an API to use some useful ASN1 functions by consolidating
> existing utilities
> 28. Support decoding of primitive but constructed encoded types
> 29. Separate ASN1 parser
> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
> object
> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
> object
> 32. Introduced Asn1Encodeable for encode/decode methods
> 33. Support decoding of primitive but constructed encoded types
> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
> TokenOption, PkinitOption
> 35. Merge the anonymous pkinit feature from pkinit-branch
> 36. Load configuration content when adding the resource.
> 37. Enable kinit tool kdc flag options.
> 38. Added the graphics for teh ASN1 hierarchy
> 39. Add some javadocs
>
> In process and plan to do:
>
> 1. Clean up the JIRAs
>
> 2. Update the Github website and the sub-project website
>
> 3. Check the missing Javadoc for important APIs
>
> 4. Do some tests for Kerby KDC and client tools in linux, windows,
> and macs
>
> Note this is an important release with important features and quite a
> few of bug fixes according to user requirement and feedbacks. When
> this release is done, the formal 1.0.0 release will be much prepared
> and approaching soon.
>
>
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Status of Kerby
Posted by Colm O hEigeartaigh <co...@apache.org>.
Looks good to me.
Colm.
On Tue, Jan 26, 2016 at 8:27 AM, Li, Jiajia <ji...@intel.com> wrote:
> Hi all,
>
> Now most of the things have been finished:
> 1. Update the github project site [DONE]
> 2. Update the website [DONE]
> 3. Clear and clean some code [DONE]
> 4. Do more tests [ON GOING]
> Hope some feedbacks from you.
>
> Thanks
> Jiajia
>
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Saturday, January 23, 2016 10:46 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi folks,
>
> I just go thru the code base and cleared some codes. Most of the missed
> are test codes.
> Please check out recent commits for it.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Zheng, Kai [mailto:kai.zheng@intel.com]
> Sent: Tuesday, January 19, 2016 8:54 AM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Thanks Jiajia.
>
> The list looks nice. Another item is to update the site. I'll clear some
> codes and get my part done this week.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Monday, January 18, 2016 4:48 PM
> To: kerby@directory.apache.org
> Subject: RE: Status of Kerby
>
> Hi all,
>
> I thinks the following issues should be solved before release:
> 1. Clear Kerby source codes
> 2. Add the rc1 and rc2 apis docs under docs folder
> 3. Do some tests of anonymous pkinit, and refactor the code.
>
> And some issues can be delayed and solved after RC2 release:
> 1. KDC is rejecting my TGS: The JIRA link:
> https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2.
> Remote kadmin ...
>
> Do you have any to add or change? Thanks
>
> Thanks
> Jiajia
>
> -----Original Message-----
> From: Li, Jiajia [mailto:jiajia.li@intel.com]
> Sent: Thursday, December 31, 2015 3:40 PM
> To: kerby@directory.apache.org
> Subject: Status of Kerby
>
> Hi all,
>
> Sep 23, the first release 1.0.0-RC1 of Kerby was released.
> From Sep 23 to Dec 31, 82 JIRA issues were resolved, including following
> important features:
>
> Features or important changes:
> 1. PKINIT in DH case done;
> 2. PKINIT in RSA case (75%);
> 3. Finished token support;
> 4. PKIX CMS/X509 support;
> 5. Full BER encoding support;
> 6. Separate Asn1 parser;
> 7. Dump support for Asn1;
> 8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
>
> JIRAs resolved:
> 1. Fix tool's usage in windows
> 2. Define transaction API for identity backend
> 3. Enhance json backend to support transaction for reasonable
> efficiency
> 4. Fix some log4j warnings and issues
> 5. Adding ability to encrypt and sign using non-RSA keys
> 6. Get the verify key for signed JWT token from kdc config and signed
> token in tests
> 7. Token issuer must be trusted as one of preconfigured issuers.
> 8. Add support for decrypting JWT tokens in the KDC
> 9. kinit tool is enhanced to request a service ticket
> 10. Fix KinitTool doesn't work to use keytab file
> 11. Fix the bit manipulation functions in KrbFlags
> 12. Enable assembly plugin to create tar.gz and zip packages for
> tool-dist
> 13. Categorize KrbOptions by adding group info
> 14. Refined asn1 APIs, getting rid of the questionable encoding option
> 15. Allow to define explicit and implicit fields more easily for
> collection types
> 16. Added enumerated type
> 17. Support BER and indefinitive length encoding in ASN1
> 18. Cryptographic Message Syntax (CMS) support
> 19. X509 ASN1 types support
> 20. Separate token client out of KrbClient
> 21. Separate PKINIT client out of KrbClient
> 22. Supporting Asn1Any type
> 23. Supporting Asn1Choice type
> 24. Introduced Asn1Constructed for support of some primitive types using
> constructed encoding
> 25. Provide an ASN1 dumping tool for troubleshooting
> 26. Dumping support for built-in ASN1 types and user defined types
> 27. Providing an API to use some useful ASN1 functions by consolidating
> existing utilities
> 28. Support decoding of primitive but constructed encoded types
> 29. Separate ASN1 parser
> 30. Introduced Asn1Converter to convert a parsing result into an ASN1
> object
> 31. Introduced Asn1Binder to bind a parse result to an existing ASN1
> object
> 32. Introduced Asn1Encodeable for encode/decode methods
> 33. Support decoding of primitive but constructed encoded types
> 34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption,
> TokenOption, PkinitOption
> 35. Merge the anonymous pkinit feature from pkinit-branch
> 36. Load configuration content when adding the resource.
> 37. Enable kinit tool kdc flag options.
> 38. Added the graphics for teh ASN1 hierarchy
> 39. Add some javadocs
>
> In process and plan to do:
>
> 1. Clean up the JIRAs
>
> 2. Update the Github website and the sub-project website
>
> 3. Check the missing Javadoc for important APIs
>
> 4. Do some tests for Kerby KDC and client tools in linux, windows,
> and macs
>
> Note this is an important release with important features and quite a few
> of bug fixes according to user requirement and feedbacks. When this release
> is done, the formal 1.0.0 release will be much prepared and approaching
> soon.
>
>
> Jiajia
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Status of Kerby
Posted by "Li, Jiajia" <ji...@intel.com>.
Hi all,
Now most of the things have been finished:
1. Update the github project site [DONE]
2. Update the website [DONE]
3. Clear and clean some code [DONE]
4. Do more tests [ON GOING]
Hope some feedbacks from you.
Thanks
Jiajia
-----Original Message-----
From: Zheng, Kai [mailto:kai.zheng@intel.com]
Sent: Saturday, January 23, 2016 10:46 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Hi folks,
I just go thru the code base and cleared some codes. Most of the missed are test codes.
Please check out recent commits for it.
Regards,
Kai
-----Original Message-----
From: Zheng, Kai [mailto:kai.zheng@intel.com]
Sent: Tuesday, January 19, 2016 8:54 AM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Thanks Jiajia.
The list looks nice. Another item is to update the site. I'll clear some codes and get my part done this week.
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Monday, January 18, 2016 4:48 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Hi all,
I thinks the following issues should be solved before release:
1. Clear Kerby source codes
2. Add the rc1 and rc2 apis docs under docs folder
3. Do some tests of anonymous pkinit, and refactor the code.
And some issues can be delayed and solved after RC2 release:
1. KDC is rejecting my TGS: The JIRA link: https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2. Remote kadmin ...
Do you have any to add or change? Thanks
Thanks
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Thursday, December 31, 2015 3:40 PM
To: kerby@directory.apache.org
Subject: Status of Kerby
Hi all,
Sep 23, the first release 1.0.0-RC1 of Kerby was released.
>From Sep 23 to Dec 31, 82 JIRA issues were resolved, including following important features:
Features or important changes:
1. PKINIT in DH case done;
2. PKINIT in RSA case (75%);
3. Finished token support;
4. PKIX CMS/X509 support;
5. Full BER encoding support;
6. Separate Asn1 parser;
7. Dump support for Asn1;
8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
JIRAs resolved:
1. Fix tool's usage in windows
2. Define transaction API for identity backend
3. Enhance json backend to support transaction for reasonable efficiency
4. Fix some log4j warnings and issues
5. Adding ability to encrypt and sign using non-RSA keys
6. Get the verify key for signed JWT token from kdc config and signed token in tests
7. Token issuer must be trusted as one of preconfigured issuers.
8. Add support for decrypting JWT tokens in the KDC
9. kinit tool is enhanced to request a service ticket
10. Fix KinitTool doesn't work to use keytab file
11. Fix the bit manipulation functions in KrbFlags
12. Enable assembly plugin to create tar.gz and zip packages for tool-dist
13. Categorize KrbOptions by adding group info
14. Refined asn1 APIs, getting rid of the questionable encoding option
15. Allow to define explicit and implicit fields more easily for collection types
16. Added enumerated type
17. Support BER and indefinitive length encoding in ASN1
18. Cryptographic Message Syntax (CMS) support
19. X509 ASN1 types support
20. Separate token client out of KrbClient
21. Separate PKINIT client out of KrbClient
22. Supporting Asn1Any type
23. Supporting Asn1Choice type
24. Introduced Asn1Constructed for support of some primitive types using constructed encoding
25. Provide an ASN1 dumping tool for troubleshooting
26. Dumping support for built-in ASN1 types and user defined types
27. Providing an API to use some useful ASN1 functions by consolidating existing utilities
28. Support decoding of primitive but constructed encoded types
29. Separate ASN1 parser
30. Introduced Asn1Converter to convert a parsing result into an ASN1 object
31. Introduced Asn1Binder to bind a parse result to an existing ASN1 object
32. Introduced Asn1Encodeable for encode/decode methods
33. Support decoding of primitive but constructed encoded types
34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption, TokenOption, PkinitOption
35. Merge the anonymous pkinit feature from pkinit-branch
36. Load configuration content when adding the resource.
37. Enable kinit tool kdc flag options.
38. Added the graphics for teh ASN1 hierarchy
39. Add some javadocs
In process and plan to do:
1. Clean up the JIRAs
2. Update the Github website and the sub-project website
3. Check the missing Javadoc for important APIs
4. Do some tests for Kerby KDC and client tools in linux, windows, and macs
Note this is an important release with important features and quite a few of bug fixes according to user requirement and feedbacks. When this release is done, the formal 1.0.0 release will be much prepared and approaching soon.
Jiajia
RE: Status of Kerby
Posted by "Zheng, Kai" <ka...@intel.com>.
Hi folks,
I just go thru the code base and cleared some codes. Most of the missed are test codes.
Please check out recent commits for it.
Regards,
Kai
-----Original Message-----
From: Zheng, Kai [mailto:kai.zheng@intel.com]
Sent: Tuesday, January 19, 2016 8:54 AM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Thanks Jiajia.
The list looks nice. Another item is to update the site. I'll clear some codes and get my part done this week.
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Monday, January 18, 2016 4:48 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Hi all,
I thinks the following issues should be solved before release:
1. Clear Kerby source codes
2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of anonymous pkinit, and refactor the code.
And some issues can be delayed and solved after RC2 release:
1. KDC is rejecting my TGS: The JIRA link: https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2. Remote kadmin ...
Do you have any to add or change? Thanks
Thanks
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Thursday, December 31, 2015 3:40 PM
To: kerby@directory.apache.org
Subject: Status of Kerby
Hi all,
Sep 23, the first release 1.0.0-RC1 of Kerby was released.
>From Sep 23 to Dec 31, 82 JIRA issues were resolved, including following important features:
Features or important changes:
1. PKINIT in DH case done;
2. PKINIT in RSA case (75%);
3. Finished token support;
4. PKIX CMS/X509 support;
5. Full BER encoding support;
6. Separate Asn1 parser;
7. Dump support for Asn1;
8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
JIRAs resolved:
1. Fix tool's usage in windows
2. Define transaction API for identity backend
3. Enhance json backend to support transaction for reasonable efficiency
4. Fix some log4j warnings and issues
5. Adding ability to encrypt and sign using non-RSA keys
6. Get the verify key for signed JWT token from kdc config and signed token in tests
7. Token issuer must be trusted as one of preconfigured issuers.
8. Add support for decrypting JWT tokens in the KDC
9. kinit tool is enhanced to request a service ticket
10. Fix KinitTool doesn't work to use keytab file
11. Fix the bit manipulation functions in KrbFlags
12. Enable assembly plugin to create tar.gz and zip packages for tool-dist
13. Categorize KrbOptions by adding group info
14. Refined asn1 APIs, getting rid of the questionable encoding option
15. Allow to define explicit and implicit fields more easily for collection types
16. Added enumerated type
17. Support BER and indefinitive length encoding in ASN1
18. Cryptographic Message Syntax (CMS) support
19. X509 ASN1 types support
20. Separate token client out of KrbClient
21. Separate PKINIT client out of KrbClient
22. Supporting Asn1Any type
23. Supporting Asn1Choice type
24. Introduced Asn1Constructed for support of some primitive types using constructed encoding
25. Provide an ASN1 dumping tool for troubleshooting
26. Dumping support for built-in ASN1 types and user defined types
27. Providing an API to use some useful ASN1 functions by consolidating existing utilities
28. Support decoding of primitive but constructed encoded types
29. Separate ASN1 parser
30. Introduced Asn1Converter to convert a parsing result into an ASN1 object
31. Introduced Asn1Binder to bind a parse result to an existing ASN1 object
32. Introduced Asn1Encodeable for encode/decode methods
33. Support decoding of primitive but constructed encoded types
34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption, TokenOption, PkinitOption
35. Merge the anonymous pkinit feature from pkinit-branch
36. Load configuration content when adding the resource.
37. Enable kinit tool kdc flag options.
38. Added the graphics for teh ASN1 hierarchy
39. Add some javadocs
In process and plan to do:
1. Clean up the JIRAs
2. Update the Github website and the sub-project website
3. Check the missing Javadoc for important APIs
4. Do some tests for Kerby KDC and client tools in linux, windows, and macs
Note this is an important release with important features and quite a few of bug fixes according to user requirement and feedbacks. When this release is done, the formal 1.0.0 release will be much prepared and approaching soon.
Jiajia
RE: Status of Kerby
Posted by "Zheng, Kai" <ka...@intel.com>.
Thanks Jiajia.
The list looks nice. Another item is to update the site. I'll clear some codes and get my part done this week.
Regards,
Kai
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Monday, January 18, 2016 4:48 PM
To: kerby@directory.apache.org
Subject: RE: Status of Kerby
Hi all,
I thinks the following issues should be solved before release:
1. Clear Kerby source codes
2. Add the rc1 and rc2 apis docs under docs folder 3. Do some tests of anonymous pkinit, and refactor the code.
And some issues can be delayed and solved after RC2 release:
1. KDC is rejecting my TGS: The JIRA link: https://issues.apache.org/jira/browse/DIRKRB-472(Marc reported:) 2. Remote kadmin ...
Do you have any to add or change? Thanks
Thanks
Jiajia
-----Original Message-----
From: Li, Jiajia [mailto:jiajia.li@intel.com]
Sent: Thursday, December 31, 2015 3:40 PM
To: kerby@directory.apache.org
Subject: Status of Kerby
Hi all,
Sep 23, the first release 1.0.0-RC1 of Kerby was released.
>From Sep 23 to Dec 31, 82 JIRA issues were resolved, including following important features:
Features or important changes:
1. PKINIT in DH case done;
2. PKINIT in RSA case (75%);
3. Finished token support;
4. PKIX CMS/X509 support;
5. Full BER encoding support;
6. Separate Asn1 parser;
7. Dump support for Asn1;
8. Separate KrbClient, KrbTokenClient, and KrbPkinitClient APIs
JIRAs resolved:
1. Fix tool's usage in windows
2. Define transaction API for identity backend
3. Enhance json backend to support transaction for reasonable efficiency
4. Fix some log4j warnings and issues
5. Adding ability to encrypt and sign using non-RSA keys
6. Get the verify key for signed JWT token from kdc config and signed token in tests
7. Token issuer must be trusted as one of preconfigured issuers.
8. Add support for decrypting JWT tokens in the KDC
9. kinit tool is enhanced to request a service ticket
10. Fix KinitTool doesn't work to use keytab file
11. Fix the bit manipulation functions in KrbFlags
12. Enable assembly plugin to create tar.gz and zip packages for tool-dist
13. Categorize KrbOptions by adding group info
14. Refined asn1 APIs, getting rid of the questionable encoding option
15. Allow to define explicit and implicit fields more easily for collection types
16. Added enumerated type
17. Support BER and indefinitive length encoding in ASN1
18. Cryptographic Message Syntax (CMS) support
19. X509 ASN1 types support
20. Separate token client out of KrbClient
21. Separate PKINIT client out of KrbClient
22. Supporting Asn1Any type
23. Supporting Asn1Choice type
24. Introduced Asn1Constructed for support of some primitive types using constructed encoding
25. Provide an ASN1 dumping tool for troubleshooting
26. Dumping support for built-in ASN1 types and user defined types
27. Providing an API to use some useful ASN1 functions by consolidating existing utilities
28. Support decoding of primitive but constructed encoded types
29. Separate ASN1 parser
30. Introduced Asn1Converter to convert a parsing result into an ASN1 object
31. Introduced Asn1Binder to bind a parse result to an existing ASN1 object
32. Introduced Asn1Encodeable for encode/decode methods
33. Support decoding of primitive but constructed encoded types
34. Break down KrbOption into 4 ones: KrbOption, KrbKdcOption, TokenOption, PkinitOption
35. Merge the anonymous pkinit feature from pkinit-branch
36. Load configuration content when adding the resource.
37. Enable kinit tool kdc flag options.
38. Added the graphics for teh ASN1 hierarchy
39. Add some javadocs
In process and plan to do:
1. Clean up the JIRAs
2. Update the Github website and the sub-project website
3. Check the missing Javadoc for important APIs
4. Do some tests for Kerby KDC and client tools in linux, windows, and macs
Note this is an important release with important features and quite a few of bug fixes according to user requirement and feedbacks. When this release is done, the formal 1.0.0 release will be much prepared and approaching soon.
Jiajia