| <!-- |
| SPDX-License-Identifier: Apache-2.0 |
| |
| Licensed to the Apache Software Foundation (ASF) under the Apache License, Version 2.0. |
| See the umbrella threat model and SECURITY.md for security guidance. |
| --> |
| |
| # Agent Guide for directory-kerby |
| |
| ## Security |
| |
| Security model: [SECURITY.md](./SECURITY.md) -> the Apache Directory umbrella threat |
| model at https://github.com/apache/directory-server/blob/master/THREAT_MODEL.md |
| |
| This repository is a Kerberos implementation (KDC, client, crypto, PKINIT/token preauth). Agents scanning it should consult the umbrella threat |
| model (Kerberos addendum (K)) before reporting issues. |
