Roadmap MIT KDC: Difference between revisions

From SambaWiki
(Update support)
 
(10 intermediate revisions by the same user not shown)
Line 1: Line 1:
= Samba AD with MIT KDC=
= Samba AD with MIT KDC=


This page lists tasks which need to be done to bring the MIT KDC support for Samba AP on the same functional level as we have with Heimdal. We need help to implement those features. Let us know if you want to pick up a talk, the Samba Team is not actively working on those!
This page lists tasks which need to be done to bring the MIT KDC support for Samba AP on the same functional level as we have with Heimdal. We need help to implement those features. Let us know if you want to pick up a task, the Samba Team is not actively working on those!


== TODO ==
== TODO ==


* Add auth logging support ([https://git.samba.org/?p=asn/samba.git;a=shortlog;h=refs/heads/master-mit-kdc-auditlog WIP branch])
* Implement KDC-canon tests for MIT KDC -> source4/torture/krb5/kdc-canon-heimdal.c
* Allow starting the MIT KDC with multiple worker processes (<code>-w numworkers</code>)
* Support for S4U2Self
* Support for S4U2Proxy
* Add tests for PKINIT support
* Add auth logging support ([https://git.samba.org/?p=asn/samba.git;a=shortlog;h=refs/heads/master-mit-kdc-ok WIP branch])
* Define API for a libkdc in MIT Kerberos
* Define API for a libkdc in MIT Kerberos
* Running as a Read only domain controller (RODC)
* RODC support
* Support for Claims

Latest revision as of 12:17, 18 July 2023

Samba AD with MIT KDC

This page lists tasks which need to be done to bring the MIT KDC support for Samba AP on the same functional level as we have with Heimdal. We need help to implement those features. Let us know if you want to pick up a task, the Samba Team is not actively working on those!

TODO

  • Add auth logging support (WIP branch)
  • Allow starting the MIT KDC with multiple worker processes (-w numworkers)
  • Define API for a libkdc in MIT Kerberos
  • Running as a Read only domain controller (RODC)
  • Support for Claims