1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
-*- indented-text -*-
$Id: TODO,v 1.40 2000/01/28 04:10:56 assar Exp $
* configure
use more careful checking before starting to use berkeley db. it only
makes sense to do so if we have the appropriate library and the header
file.
* appl
more programs here
** appl/login
/etc/environment etc.
** appl/popper
Implement RFC1731 and 1734, pop over GSS-API
** appl/test
should test more stuff
** appl/rsh
add rcp program
** appl/ftp
* doc
there's some room for improvement here.
* kdc
* kadmin
is in need of a major cleanup
* lib
** lib/asn1
prepend a prefix on all generated symbols
make asn1_compile use enum types where applicable
** lib/auth
PAM
** lib/des
** lib/gssapi
process_context_token, display_status, add_cred, inquire_cred_by_mech,
export_sec_context, import_sec_context, inquire_names_for_mech, and
inquire_mechs_for_name not implemented.
only DES MAC MD5 and DES implemented.
set minor_status in all functions
init_sec_context: `initiator_cred_handle' and `time_req' ignored.
input channel bindings are not supported
delegation not implemented
anonymous credentials not implemented
** lib/hdb
** lib/kadm5
add policies?
fix to use rpc?
** lib/krb5
rewrite the lookup of KDCs to handle kerberos-<n> and not do any DNS
requests if the information can be found locally. this requires stop
using krb5_get_krbhst.
the replay cache is, in its current state, not very useful
the following encryption types have been implemented: DES-CBC-CRC,
DES-CBC-MD4, DES-CBC-MD5, DES3-CBC-MD5, DES3-CBC-SHA1
supports the following checksums: CRC32, RSA-MD4, RSA-MD5,
RSA-MD4-DES, RSA-MD5-DES, RSA-MD5-DES3, SHA1, HMAC-SHA1-DES3
always generates a new subkey in an authenticator
should the sequence numbers be XORed?
fix pre-authentication with pa-afs3-salt
OTP?
** lib/roken
** lib/sl
|
