1. Heimdal Status Report Jeffrey Altman 26 March 2014

2. State of the Project 34 contributors in last 12 months 34 contributors in last 12 months –Most in history of the project 127% year over year increase in commits 127% year over year increase in commits Average age of the committers is increasing Average age of the committers is increasing

3. Heimdal 1.5 Last release 1.5.3; tagged Dec 2012 Last release 1.5.3; tagged Dec 2012 42 patches applied to heimdal-1-5- branch since 42 patches applied to heimdal-1-5- branch since Most important for this audience Most important for this audience –DES exception for AFS service principals –Session key selection changes necessary for rxkad-k5 to work

4. 1.6 is a Major Release New Features New Features Improvements Improvements Bug Fixes Bug Fixes Security Fixes Security Fixes Windows Updates Windows Updates

5. Features FAST (RFC 6113) FAST (RFC 6113) HDB password history HDB password history Cross-realm key rollover safety Cross-realm key rollover safety LDAP StartTLS LDAP StartTLS DIR cred cache DIR cred cache MIT/Heimdal KDB/HDB migration functionality MIT/Heimdal KDB/HDB migration functionality

6. Improvements  FILE cred cache improvements  interop bugs (gss_pseudo_random())  New plugin interface model  kinit improvements  Kx509 configuration options

7. Bug Fixes KDC 1DES session key selection KDC 1DES session key selection –AFS rxkad-k5 compatibility Keytab file descriptor / lock leaks Keytab file descriptor / lock leaks FILE cred cache corruption bugs FILE cred cache corruption bugs GSS PRF+ interop bug GSS PRF+ interop bug TGS client requests failed to ask for renewable, forwardable, proxiable TGS client requests failed to ask for renewable, forwardable, proxiable KDC handling of enterprise principals KDC handling of enterprise principals

8. Security Fixes kx509 realm-chopping security bug kx509 realm-chopping security bug

9. Windows Redesign of Side by Side Assembly Redesign of Side by Side Assembly –Plugins must be part of the assembly –Otherwise, internal DLL Version conflicts Public SDK Public SDK –Merge Modules available for third party integration kadmin client provided kadmin client provided MIT KFW 3.2 shim libraries MIT KFW 3.2 shim libraries

10. What is Missing? libkafs supports neither rxkad-k5 nor rxkad-prf libkafs supports neither rxkad-k5 nor rxkad-prf No FAST OTP implementation No FAST OTP implementation

11. HEIMDAL STATUS REPORT 2014 EAKC