Today I released Heimdal 0.7 and Heimdal 0.6.5.
Heimdal 0.7 is a major leap forward and contains about 2-3 years of
development. I’m the two things I like the most of the release in the
improved quality of the documentation and all work that have gone in
to making the tools and api easier to use and bugfixes.
The largest change in the release that stand out is the adding of AES
support. Its a very large change that touches code all over the place
and there is for sure bugs in there so if you are deploying 0.7, you
should do good amount of testing for your enviroment to make sure.
Other new features are GSS-API SNEPGO support, KCM (process’ based
credential caching), CCAPI (for Mac OS X), and tons of bugfixes.
For Heimdal 0.8 I’ll try to glue in PK-INIT support, it requires
changes to the ASN.1 compiler, and some more quality checking should
be done to verify it correctness. I should also try merge in Luke
Howards mech-glue and new SPNEGO, its a very invasive patch that
changes the behavior of the GSS-API stack, but it open up for new
adding new mechaisms, and that is something that is badly needed.
The prototype SASL library and prototype SSH client/server I have
should also be cleaned up and added to Heimdal. Both are very
lightweight and only tries to solve the simple problem.
A other subsystem is that needs some work is testing. We should to add
more tests more aggressively, both unit testing and system
testing. The later is not really there at all today.
I’ll continue working with the Samba folks to improve the API and
integration with Samba. Its a very important area for me, I feel that
I need to bring some order to the mess of kerberos in Samba. Its very
understandable that is happen, and shouldn’t be to hard to do simple
fixes that improves samba administators life.