README
1 Kerberos Version 5, Release 1.23
2
3 Release Notes
4 The MIT Kerberos Team
5
6Copyright and Other Notices
7---------------------------
8
9Copyright (C) 1985-2025 by the Massachusetts Institute of Technology
10and its contributors. All rights reserved.
11
12Please see the file named NOTICE for additional notices.
13
14Documentation
15-------------
16
17Unified documentation for Kerberos V5 is available in both HTML and
18PDF formats. The table of contents of the HTML format documentation
19is at doc/html/index.html, and the PDF format documentation is in the
20doc/pdf directory.
21
22Additionally, you may find copies of the HTML format documentation
23online at
24
25 https://web.mit.edu/kerberos/krb5-latest/doc/
26
27for the most recent supported release, or at
28
29 https://web.mit.edu/kerberos/krb5-devel/doc/
30
31for the release under development.
32
33More information about Kerberos may be found at
34
35 https://web.mit.edu/kerberos/
36
37and at the MIT Kerberos Consortium web site
38
39 https://kerberos.org/
40
41Building and Installing Kerberos 5
42----------------------------------
43
44Build documentation is in doc/html/build/index.html or
45doc/pdf/build.pdf.
46
47The installation guide is in doc/html/admin/install.html or
48doc/pdf/install.pdf.
49
50If you are attempting to build under Windows, please see the
51src/windows/README file.
52
53Reporting Bugs
54--------------
55
56Please report any problems/bugs/comments by sending email to
57krb5-bugs@mit.edu.
58
59You may view bug reports by visiting
60
61https://krbdev.mit.edu/rt/
62
63and using the "Guest Login" button. Please note that the web
64interface to our bug database is read-only for guests, and the primary
65way to interact with our bug database is via email.
66
67PAC transitions
68---------------
69
70Beginning with release 1.20, the KDC will include minimal PACs in
71tickets instead of AD-SIGNEDPATH authdata. S4U requests (protocol
72transition and constrained delegation) must now contain valid PACs in
73the incoming tickets. Beginning with release 1.21, service ticket
74PACs will contain a new KDC checksum buffer, to mitigate a hash
75collision attack against the old KDC checksum. If only some KDCs in a
76realm have been upgraded across versions 1.20 or 1.21, the upgraded
77KDCs will reject S4U requests containing tickets from non-upgraded
78KDCs and vice versa.
79
80Triple-DES and RC4 transitions
81------------------------------
82
83Beginning with the krb5-1.21 release, the KDC will not issue tickets
84with triple-DES or RC4 session keys unless explicitly configured using
85the new allow_des3 and allow_rc4 variables in [libdefaults]. To
86facilitate the negotiation of session keys, the KDC will assume that
87all services can handle aes256-sha1 session keys unless the service
88principal has a session_enctypes string attribute.
89
90Beginning with the krb5-1.19 release, a warning will be issued if
91initial credentials are acquired using the des3-cbc-sha1 encryption
92type. Beginning with the krb5-1.21 release, a warning will also be
93issued for the arcfour-hmac encryption type. In future releases,
94these encryption types will be disabled by default and eventually
95removed.
96
97Beginning with the krb5-1.18 release, all support for single-DES
98encryption types has been removed.
99
100Major changes in 1.23
101---------------------
102
103krb5-1.23 changes by ticket ID
104------------------------------
105
106Acknowledgements
107----------------
108
109Past Sponsors of the MIT Kerberos Consortium:
110
111 Apple
112 Carnegie Mellon University
113 Centrify Corporation
114 Columbia University
115 Cornell University
116 The Department of Defense of the United States of America (DoD)
117 Fidelity Investments
118 Google
119 Iowa State University
120 MIT
121 Michigan State University
122 Microsoft
123 MITRE Corporation
124 Morgan-Stanley
125 The National Aeronautics and Space Administration
126 of the United States of America (NASA)
127 Network Appliance (NetApp)
128 Nippon Telephone and Telegraph (NTT)
129 US Government Office of the National Coordinator for Health
130 Information Technology (ONC)
131 Oracle
132 Pennsylvania State University
133 Red Hat
134 Stanford University
135 TeamF1, Inc.
136 The University of Alaska
137 The University of Michigan
138 The University of Pennsylvania
139
140Past and present members of the Kerberos Team at MIT:
141
142 Danilo Almeida
143 Jeffrey Altman
144 Justin Anderson
145 Richard Basch
146 Mitch Berger
147 Jay Berkenbilt
148 Andrew Boardman
149 Bill Bryant
150 Steve Buckley
151 Joe Calzaretta
152 John Carr
153 Mark Colan
154 Don Davis
155 Sarah Day
156 Alexandra Ellwood
157 Carlos Garay
158 Dan Geer
159 Nancy Gilman
160 Matt Hancher
161 Thomas Hardjono
162 Sam Hartman
163 Paul Hill
164 Marc Horowitz
165 Eva Jacobus
166 Miroslav Jurisic
167 Barry Jaspan
168 Benjamin Kaduk
169 Geoffrey King
170 Kevin Koch
171 John Kohl
172 HaoQi Li
173 Jonathan Lin
174 Peter Litwack
175 Scott McGuire
176 Steve Miller
177 Kevin Mitchell
178 Cliff Neuman
179 Paul Park
180 Ezra Peisach
181 Chris Provenzano
182 Ken Raeburn
183 Jon Rochlis
184 Jeff Schiller
185 Jen Selby
186 Robert Silk
187 Bill Sommerfeld
188 Jennifer Steiner
189 Ralph Swick
190 Brad Thompson
191 Harry Tsai
192 Zhanna Tsitkova
193 Ted Ts'o
194 Marshall Vale
195 Taylor Yu
196
197The following external contributors have provided code, patches, bug
198reports, suggestions, and valuable resources:
199
200 Ian Abbott
201 Daniel Albers
202 Brandon Allbery
203 Russell Allbery
204 Brian Almeida
205 Michael B Allen
206 Pooja Anil
207 Jeffrey Arbuckle
208 Heinz-Ado Arnolds
209 Derek Atkins
210 Mark Bannister
211 David Bantz
212 Alex Baule
213 Nikhil Benesch
214 David Benjamin
215 Thomas Bernard
216 Adam Bernstein
217 Arlene Berry
218 Jeff Blaine
219 Toby Blake
220 Radoslav Bodo
221 Alexander Bokovoy
222 Zoltan Borbely
223 Sumit Bose
224 Emmanuel Bouillon
225 Isaac Boukris
226 Ulf Bremer
227 Pavel Březina
228 Philip Brown
229 Samuel Cabrero
230 Michael Calmer
231 Andrea Campi
232 Julien Chaffraix
233 Jacob Champion
234 Puran Chand
235 Ravi Channavajhala
236 Srinivas Cheruku
237 Leonardo Chiquitto
238 Rachit Chokshi
239 Seemant Choudhary
240 Howard Chu
241 Andrea Cirulli
242 Christopher D. Clausen
243 Kevin Coffman
244 Gerald Combs
245 Simon Cooper
246 Sylvain Cortes
247 Ian Crowther
248 Arran Cudbard-Bell
249 Adam Dabrowski
250 Jeff D'Angelo
251 Nalin Dahyabhai
252 Mark Davies
253 Dennis Davis
254 Rull Deef
255 Alex Dehnert
256 Misty De Meo
257 Mark Deneen
258 Günther Deschner
259 John Devitofranceschi
260 Marc Dionne
261 Roland Dowdeswell
262 Ken Dreyer
263 Dorian Ducournau
264 Viktor Dukhovni
265 Jason Edgecombe
266 Mark Eichin
267 Shawn M. Emery
268 Douglas E. Engert
269 Peter Eriksson
270 Juha Erkkilä
271 Gilles Espinasse
272 Valery Fedorenko
273 Sergey Fedorov
274 Ronni Feldt
275 Bill Fellows
276 JC Ferguson
277 Remi Ferrand
278 Paul Fertser
279 Fabiano Fidêncio
280 Frank Filz
281 William Fiveash
282 Jacques Florent
283 Oliver Freyermuth
284 Ákos Frohner
285 Sebastian Galiano
286 Ilya Gladyshev
287 Marcus Granado
288 Dylan Gray
289 Norm Green
290 Scott Grizzard
291 Helmut Grohne
292 Steve Grubb
293 Philip Guenther
294 Feng Guo
295 Timo Gurr
296 Dominic Hargreaves
297 Robbie Harwood
298 John Hascall
299 Jakob Haufe
300 Matthieu Hautreux
301 Jochen Hein
302 Paul B. Henson
303 Kihong Heo
304 Jeff Hodges
305 Christopher Hogan
306 Love Hörnquist Åstrand
307 Ken Hornstein
308 Henry B. Hotz
309 Luke Howard
310 Jakub Hrozek
311 Shumon Huque
312 Jeffrey Hutzelman
313 Sergey Ilinykh
314 Wyllys Ingersoll
315 Holger Isenberg
316 Spencer Jackson
317 Diogenes S. Jesus
318 Mike Jetzer
319 Pavel Jindra
320 Brian Johannesmeyer
321 Joel Johnson
322 Lutz Justen
323 Ganesh Kamath
324 Alexander Karaivanov
325 Anders Kaseorg
326 Bar Katz
327 Zentaro Kavanagh
328 Mubashir Kazia
329 W. Trevor King
330 Patrik Kis
331 Martin Kittel
332 Thomas Klausner
333 Tomasz Kłoczko
334 Ivan Korytov
335 Matthew Krupcale
336 Mikkel Kruse
337 Reinhard Kugler
338 Harshawardhan Kulkarni
339 Tomas Kuthan
340 Pierre Labastie
341 Andreas Ladanyi
342 Chris Leick
343 Volker Lendecke
344 Jan iankko Lieskovsky
345 Todd Lipcon
346 Oliver Loch
347 Chris Long
348 Kevin Longfellow
349 Frank Lonigro
350 Jon Looney
351 Nuno Lopes
352 Todd Lubin
353 Ryan Lynch
354 Glenn Machin
355 Roland Mainz
356 Sorin Manolache
357 Robert Marshall
358 Andrei Maslennikov
359 Michael Mattioli
360 Nathaniel McCallum
361 Greg McClement
362 Cameron Meadors
363 Vipul Mehta
364 Alexey Melnikov
365 Ivan A. Melnikov
366 Franklyn Mendez
367 Stefan Metzmacher
368 Mantas Mikulėnas
369 Markus Moeller
370 Kyle Moffett
371 Jon Moore
372 Paul Moore
373 Keiichi Mori
374 Michael Morony
375 Robert Morris
376 Sam Morris
377 Zbysek Mraz
378 Edward Murrell
379 Bahaa Naamneh
380 Joshua Neuheisel
381 Nikos Nikoleris
382 Demi Obenour
383 Felipe Ortega
384 Michael Osipov
385 Andrej Ota
386 Dmitri Pal
387 Javier Palacios
388 Dilyan Palauzov
389 Tom Parker
390 Eric Pauly
391 Leonard Peirce
392 Ezra Peisach
393 Alejandro Perez
394 Zoran Pericic
395 W. Michael Petullo
396 Mark Phalan
397 Sharwan Ram
398 Brett Randall
399 Jonathan Reams
400 Jonathan Reed
401 Robert Relyea
402 Tony Reix
403 Martin Rex
404 Pat Riehecky
405 Julien Rische
406 Jason Rogers
407 Matt Rogers
408 Nate Rosenblum
409 Solly Ross
410 Mike Roszkowski
411 Guillaume Rousse
412 Joshua Schaeffer
413 Alexander Scheel
414 Jens Schleusener
415 Ryan Schmidt
416 Andreas Schneider
417 Eli Schwartz
418 Paul Seyfert
419 Tom Shaw
420 Jim Shi
421 Jerry Shipman
422 Peter Shoults
423 Richard Silverman
424 Cel Skeggs
425 Simo Sorce
426 Anthony Sottile
427 Michael Spang
428 Michael Ströder
429 Bjørn Tore Sund
430 Ondřej Surý
431 Joseph Sutton
432 Alexey Tikhonov
433 Joe Travaglini
434 Sergei Trofimovich
435 Greg Troxel
436 Fraser Tweedale
437 Tim Uglow
438 Rathor Vipin
439 Denis Vlasenko
440 Thomas Wagner
441 Jorgen Wahlsten
442 Stef Walter
443 Max (Weijun) Wang
444 John Washington
445 Stef Walter
446 Xi Wang
447 Nehal J Wani
448 Kevin Wasserman
449 Margaret Wasserman
450 Marcus Watts
451 Andreas Wiese
452 Simon Wilkinson
453 Nicolas Williams
454 Ross Wilper
455 Augustin Wolf
456 Garrett Wollman
457 David Woodhouse
458 Tsu-Phong Wu
459 Xu Qiang
460 Neng Xue
461 Zhaomo Yang
462 Tianjiao Yin
463 Nickolai Zeldovich
464 Bean Zhang
465 ChenChen Zhou
466 Hanz van Zijst
467 Gertjan Zwartjes
468
469The above is not an exhaustive list; many others have contributed in
470various ways to the MIT Kerberos development effort over the years.
471