Updated README and TODO files to reflect the current state of the

project.

CASA-auth-token/client/lib/README

@@ -34,6 +34,14 @@ interacting with ATSs, invoking the authentication mechanism plug-ins, and
 managing the authentication token cache. libcasa_c_authtoken also provides
 the Get Authentication Token API.
 
+CONFIGURATION
+
+libcasa_c_authtoken has several configuration settings that can be modified to
+change its default behavior. To modify the libcasa_c_authtoken configuration
+you need to edit the client.conf file. The path to the client.conf file under
+linux is /etc/CASA/authtoken/client/client.conf. The path to the client.conf file
+under windows is \Program Files\novell\CASA\Etc\Auth\client.conf.
+
 CONFIGURING ADDITIONAL AUTHENTICATION MECHANISM MODULES
 
 libcasa_c_authtoken utilizes mechanism plug-ins for authenticating to ATSs.

CASA-auth-token/client/lib/TODO

@@ -10,4 +10,14 @@ This file contains a list of the items still outstanding for libcasa_c_authtoken
 
 OUTSTANDING ITEMS
 
-None.
+- Add mechanism to try communicating with ATS over port 443 if communications
+  over port 2645 fail.
+
+- Enhance the AuthMechanism interface to support authentication schemes that
+  require several token exchanges between the client and the server. This will
+  also require the enhancement of the client/server protocol utilized for
+  authentication.
+
+- Add mechanism to allow a user to either accept or reject server certificates
+  considered invalid.
+

CASA-auth-token/client/lib/mechanisms/krb5/README

@@ -34,7 +34,6 @@ authentication. The mechanism leverages the services of the native Kerberos 5
 client to obtain Kerberos Tokens that can be used for authenticating an entity
 to a Kerberos service.
 
-
 SECURITY CONSIDERATIONS
 
 The tokens that krb5mech generates are only utilized to authenticate the client

CASA-auth-token/client/lib/mechanisms/krb5/TODO

@@ -10,4 +10,7 @@ This file contains a list of the items still outstanding for krb5mech.
 
 OUTSTANDING ITEMS
 
-None. 
+- Change to also do server authentication once the AuthMechanism interface
+  is enhanced to support authentication schemes that require several token
+  exchanges between the client and the server. Allow this to be configurable.
+. 

CASA-auth-token/client/lib/mechanisms/pwd/TODO

@@ -10,4 +10,8 @@ This file contains a list of the items still outstanding for pwmech.
 
 OUTSTANDING ITEMS
 
-None. 
+- Allow the server to specify that Desktop credentials should not be
+  utilized.
+
+- Try to find way to remove credentials from miCASA cache which are
+  found to be invalid.