Security model: SECURITY.md -> the Apache Directory umbrella threat model at https://github.com/apache/directory-server/blob/master/THREAT_MODEL.md
This repository is a Kerberos implementation (KDC, client, crypto, PKINIT/token preauth). Agents scanning it should consult the umbrella threat model (Kerberos addendum (K)) before reporting issues.