Kerberos for Windows Release 4.2

Kerberos for Windows release 4.2 Beta 1 is now available

The MIT Kerberos Team announces the availability of the kfw-4.2 Beta 1 testing release. The KfW 4.2 series of releases is based on the MIT krb5 1.17 series of releases, modernizing the support relative to the KfW 4.1 series, which was based on the MIT krb5 1.13 series.

KfW 4.2 is distributed as a Windows Installer MSI file, with both 64-bit and 32-bit installers available. The MSI installer has been digitally signed by MIT.

KfW is supported on Windows Vista (SP2 required), Windows 7, Windows 8, Windows Server 2003, and Windows Server 2008.

DES transition

The Data Encryption Standard (DES) is widely recognized as weak. Just as the Unix krb5 releases have had measures to encourage sites to migrate away from single-DES cryptosystems since the krb5 1.7 release, KfW 4.2 has a configuration variable that enables "weak" enctypes, defaulting to "false".

Major changes in 4.2

Developer experience:
End-user experience:

Known Bugs

The Close button from the system menu has no effect. Use the 'x' in the upper right corner to minimze, or the Exit option from the Application menu to close.

The ticket viewer does not give an indication of which cache the given tickets are in (e.g., MSLSA:, API:, etc.).

HTML Help for kfw-4.2

The builtin HTML Help from KfW 4.2 will be available with the final release.

Retrieving Kerberos for Windows 4.2 Beta 1

Installers for Kerberos for Windows 4.2 Beta 1 are available here.


$Id: kfw-4.2.html,v 1.1 2019/04/05 14:53:37 ghudson Exp $
MIT Kerberos [ home ] [ contact ]