Uploaded image for project: 'Directory Kerberos'
  1. Directory Kerberos
  2. DIRKRB-102

[Apache Kerby] A dedicated Kerberos project

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:

      Description

      As discussed in the community, we're going to create a dedicated Kerberos project based on Haox project codebase (https://github.com/drankye/haox) incorporating and consolidating the existing Kerberos functionalities in ApacheDS. The long term goal is to establish a first class Kerberos implementation in Java for the Apache world targeting today's environments in cloud, Hadoop and mobile. It will provides rich, intuitive and interoperable library and facilities that integrate multiple authentication mechanisms including PKI, OTP and token (OAuth) as desired in above mentioned modern environments.It will also implement a KDC server that can integrate various identity back ends including simple memory database, SQL database and LDAP server by dynamic plugin and loading approach, which allows it to be utilized in various contexts and scenarios.

      This serves as the master JIRA to track all the related tasks for the new sub project. With the fundamental aspects and tasks resolved, we would go to next phase targeting an Apache TLP project, as we agreed in the discussion.

        Attachments

          Issue Links

          1.
          Import Haox project codebase Sub-task Resolved Kai Zheng
          2.
          Clean up and clear the codes, clarifying any IP concerned codes Sub-task Resolved Kai Zheng
          3.
          Adding the missing Javadoc Sub-task Open Emmanuel L├ęcharny
          4.
          Adding more tests Sub-task Open Lin Chen
          5.
          Adding the documentation Sub-task Open Emmanuel L├ęcharny
          6.
          Building the web site Sub-task Closed Jiajia Li
          7.
          We need a logo for the subproject Sub-task Resolved Unassigned
          8.
          Refine the IdentityService/Backend API for KDC Sub-task Resolved Kai Zheng
          9.
          Completing the implementation of DES related encryption types Sub-task Resolved Kai Zheng
          10.
          MIT Kerberos configuration format support Sub-task Resolved Lin Chen
          11.
          Add tests for Kerberos message codecs Sub-task Open Lin Chen
          12.
          Get rid of the external dependency to not-so-commons-ssl library Sub-task Resolved Kai Zheng
          13.
          Enhance KrbClient to respect krb5.conf file Sub-task Resolved Lin Chen
          14.
          Enhance KDC Server to respect kdc.conf file Sub-task Resolved Lin Chen
          15.
          Enhance credential cache utility to support latest cache format Sub-task Open Kai Zheng
          16.
          Implementing Ldap identity backend for KDC server Sub-task Resolved Xu Yaning
          17.
          Implementing cross-realm support Sub-task Closed Unassigned
          18.
          Implementing preauth/FAST framework Sub-task Resolved Jiajia Li
          19.
          Implementing PKINIT mechanism Sub-task Open Unassigned
          20.
          Implementing TokenPreauth mechanism Sub-task Resolved Jiajia Li
          21.
          Implementing the TokenPreauth Access Token profile Sub-task Resolved Jiajia Li
          22.
          KrbClient supports both TCP and UDP, trying TCP first Sub-task Resolved Kai Zheng
          23.
          KDC server supports both TCP and UDP Sub-task Resolved Kai Zheng
          24.
          Consolidate the existing Change Password protocol implementation Sub-task Open Xu Yaning
          25.
          Update the Kerberos part in Directory Server in favor of Kerby Sub-task Open Unassigned
          26.
          Update the Kerberos part in Directory Studio in favor of Kerby Sub-task Open Unassigned
          27.
          Adding Apache License Sub-task Resolved Lin Chen
          28.
          Installation packaging and service wrapper Sub-task Resolved Lin Chen
          29.
          Add logging support in both KDC and KrbClient Sub-task Closed Jiajia Li
          30.
          Adding maven rat plugin for license check Sub-task Resolved Lin Chen
          31.
          Section support in Configuration Sub-task Resolved Lin Chen
          32.
          Adding kinit like tool Sub-task Resolved Lin Chen
          33.
          Re-organize the project layout with the new name 'Apache Kerby' Sub-task Resolved Kai Zheng
          34.
          Switching to AssertJ framework for unit tests Sub-task Resolved Lin Chen
          35.
          Packing related jars as Kerberos client library for applications Sub-task Resolved Lin Chen
          36.
          Packing related jars as Kerberos server library for applications Sub-task Resolved Lin Chen
          37.
          Adding a json file based identity backend Sub-task Resolved Lin Chen
          38.
          [Kerby-KDC] Working on a standalone KDC server Sub-task Resolved Unassigned
          39.
          [Kerby-KDC] A Zookeeper based high reliable & performance identity backend Sub-task Resolved Jiajia Li
          40.
          Adding klist utility tool Sub-task Resolved Liqi Yi
          41.
          Adding kadmin tool to support the KDC Sub-task Resolved Unassigned
          42.
          [KrbClient] Support both blocking and event based network transport Sub-task Resolved Kai Zheng
          43.
          [KDC] Pluggable KDC server implementation based on different network transport model Sub-task Resolved Kai Zheng
          44.
          [Kerby-KDC] Netty based KDC server implementation Sub-task Resolved Kai Zheng
          45.
          Interoperable and compatible tests/fixes with MS AD Sub-task Open Unassigned
          46.
          Interoperable and compatible tests/fixes with MIT Kerberos Sub-task Open Unassigned
          47.
          Add an end to end test for KdcServer Sub-task Resolved Colm O hEigeartaigh
          48.
          Handling krb errors and respond correctly Sub-task Resolved Wei Zhou
          49.
          Ensure encryption types list is correctly sent by client and processed by KDC Sub-task Resolved Jiajia Li
          50.
          Support UDP transport for default KdcNetwork Sub-task Resolved Xu Yaning
          51.
          Support UDP transport for NettyKdcNetwork Sub-task Resolved Xu Yaning
          52.
          Allow to disable TCP to test UDP transport Sub-task Resolved Xu Yaning
          53.
          Fix problems found in code analysis Sub-task Open Unassigned
          54.
          Extract Kadmin API Sub-task Resolved Jiajia Li
          55.
          Add kdcinit tool Sub-task Closed Jiajia Li
          56.
          Having master key to encrypt principal keys Sub-task Open Xu Yaning
          57.
          Kadmin tool will be authenticated first before any real operation Sub-task Closed Jiajia Li
          58.
          REST representation for Kadmin interface Sub-task Open Unassigned
          59.
          Embed a web server in Kerby KDC Sub-task Open Unassigned
          60.
          A web management console for Kerby KDC Sub-task Open Unassigned
          61.
          Implement remote mode kadmin tool based on Kadmin REST API Sub-task Open Unassigned
          62.
          Kerby's KDC supports MIT's kinit Sub-task Closed Wei Zhou
          63.
          Kerby's kinit supports MIT's KDC Sub-task Resolved Wei Zhou
          64.
          Create kerb-server-api-all and kerb-client-api-all jars Sub-task Resolved Jiajia Li
          65.
          More end to end integration tests Sub-task Resolved Kai Zheng
          66.
          Have a BUILDING readme to document the supported build options Sub-task Resolved Xu Yaning
          67.
          Support for s4u2self and s4u2proxy in the kerby client library Sub-task Open Unassigned
          68.
          Cryptographic Message Syntax (CMS) support Sub-task Closed Jiajia Li
          69.
          X509 types support Sub-task Resolved Kai Zheng
          70.
          Refine and enhance the client side library Sub-task Closed Kai Zheng
          71.
          Improve the ASN1 framework Sub-task Resolved Kai Zheng
          72.
          Docker building support for integration tests Sub-task Open Kai Zheng
          73.
          XDR (RFC 4506) support Sub-task Closed Unassigned
          74.
          Kerby Authorization Sub-task Resolved Gerard Gagliano
          75.
          Allow semicolon as a comment character in krb5.conf files Sub-task Resolved Unassigned

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                drankye Kai Zheng
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated: