[1695] in Kerberos
Re: status of kerberos 5
daemon@ATHENA.MIT.EDU (Joe Pato)
Mon Jan 6 11:49:34 1992
From: pato@apollo.com (Joe Pato)
Date: Mon, 6 Jan 92 11:07:29 EST
To: jfc@Athena.MIT.EDU (John Carr)
Cc: jh@efd.lth.se, kerberos@Athena.MIT.EDU
In-Reply-To: jfc@Athena.MIT.EDU (John Carr), fri, 3 jan 92 22:53:07
MIT is continuing development and testing of Kerberos 5, but we can't give a
date for the next beta release. Expect at least one more beta release
before the final release.
We won't change the database format without a reason, but we do assume that
file format and API changes relative to the current beta release will not
affect any production code. It is possible that even the Kerberos protocol
may change if bugs are found in it.
I would like to point out that the Kerberos V5 protocol is changing (in small
but important ways) from the first beta. The changes have been discussed on the
kerberos-protocol list and have been known for some time. Cliff Neuman will
be releasing a new version of the protocol spec that rolls all of these
changes into the document imminently. It should be understood that some
changes to the ASN.1 description of principals will prevent inter-operability
between beta1 code and code that is conformant with the new spec.
The OSF DCE version of Kerberos implements the protocol described in the new
spec and should be available from the OSF as soon as final packaging is
completed. (The database format of the OSF DCE offering is entirely
different from the MIT code, but this should be transparent to applications
using Kerberos).
-- Joe Pato
Cooperative Object Computing Division / East
Hewlett-Packard Company
pato@apollo.hp.com
-------
