1Library 2~~~~~~~ 3) Better/FASTER random numbers (init time is pretty miserable) 4) Test suite [still] needs work 5) better support for including missing routines 6) check return settings (ssf, etc.) on auth failure 7 8Documentation 9~~~~~~~~~~~~~ 10) so much to do here 11) man pages (check spelling) 12) programmers/sysadmin guide updates and clarifications 13) update INSTALL to have clearer step-by-step instructions 14 15Mechs to write 16~~~~~~~~~~~~~~ 17 18SRP 19~~~ 20) Testing 21 22OTP 23~~~ 24) Checking edge cases 25) Testing 26 27Digest-MD5 28~~~~~~~~~~ 29) Checking wacko cases or even not so wacko cases 30) Testing 31 32Kerberos_V4 33~~~~~~~~~~~ 34) client-side should set realm 35) is prompt_need callback set default value 36 37GSSAPI 38~~~~~~ 39) Allow specification of alternate keytab file 40 41Plain 42~~~~~ 43 44Cram-MD5 45~~~~~~~~ 46) needs snprintf support 47 48Database stuff 49~~~~~~~~~~~~~~ 50) transactions? 51) version the database? 52) atomic updates of passwords (we can crash and leave the user with 53 different passwords for different mechanisms) [through failure to 54 make setpass calls] 55) locks (to help fortify protection against OTP race attack)? 56 57ABI 58~~~ 59) Consider IRIX ABI issues for plugins 60 - /usr/lib32/sasl? 61 - /usr/lib/sasl/{ABI}? 62) Standardize the plugin ABI 63