kerby-kerb/kerb-client/src/main/java/org/apache/kerby/kerberos/kerb/client/preauth/pkinit/ServerConfiguration.java (3 lines):
	- line 30: * TODO - Whether to use user cert vs. SAN binding.
	- line 31: * TODO - What trusted roots to use.
	- line 32: * TODO - The minimum allowed enc_types.


kerby-backend/ldap-backend/src/main/java/org/apache/kerby/kerberos/kdc/identitybackend/LdapIdentityGetHelper.java (1 line):
	- line 77: key.setKvno(1); // TODO: kvno should be correctly stored and retrieved


kerby-kerb/kerb-crypto/src/main/java/org/apache/kerby/kerberos/kerb/crypto/EncryptionHandler.java (1 line):
	- line 316: //TODO: to implement.


kerby-kerb/kerb-client/src/main/java/org/apache/kerby/kerberos/kerb/client/preauth/pkinit/PkinitPreauth.java (1 line):
	- line 389: //TODO USE CertificateSet


kerby-kerb/kerb-server/src/main/java/org/apache/kerby/kerberos/kerb/server/preauth/pkinit/PkinitPreauth.java (1 line):
	- line 284: //TODO CHOICE


kerby-kerb/kerb-admin/src/main/java/org/apache/kerby/kerberos/kerb/admin/kadmin/remote/AdminUtil.java (1 line):
	- line 81: confDir = new File("/etc/"); // for Linux. TODO: fix for Win etc.


kerby-kerb/kerb-server/src/main/java/org/apache/kerby/kerberos/kerb/server/request/KdcRequest.java (1 line):
	- line 266: // TODO: get checksumed data in stream


kerby-kerb/kerb-identity/src/main/java/org/apache/kerby/kerberos/kerb/identity/backend/MemoryIdentityBackend.java (1 line):
	- line 36: // TODO: configurable


kerby-kdc/src/main/java/org/apache/kerby/kerberos/kdc/impl/NettyKdcNetwork.java (1 line):
	- line 63: executorGroup = new DefaultEventExecutorGroup(10); //TODO: to configure.


kerby-tool/kdc-tool/src/main/java/org/apache/kerby/kerberos/tool/kadmin/KadminTool.java (1 line):
	- line 183: confDir = new File("/etc/kerby/"); // for Linux. TODO: fix for Win etc.


kerby-kerb/kerb-gssapi/src/main/java/org/apache/kerby/kerberos/kerb/gss/impl/GssContext.java (1 line):
	- line 254: throw new GSSException(GSSException.FAILURE, -1, "API not implemented");  // TODO:


kerby-kerb/kerb-core/src/main/java/org/apache/kerby/kerberos/kerb/type/base/Realm.java (1 line):
	- line 77: // TODO : check that it's a valid REALM...


kerby-kerb/kerb-common/src/main/java/org/apache/kerby/kerberos/kerb/transport/KrbTcpTransport.java (1 line):
	- line 49: outputStream.write(message.array()); // TODO: may not be backed by array


kerby-kerb/kerb-core/src/main/java/org/apache/kerby/kerberos/kerb/KrbRuntime.java (1 line):
	- line 28: * TODO: to be enhanced to allow arbitrary provider to be hooked into.


kerby-kerb/kerb-client/src/main/java/org/apache/kerby/kerberos/kerb/client/request/ArmoredRequest.java (1 line):
	- line 129: // TODO: get the right credential.


kerby-kerb/kerb-gssapi/src/main/java/org/apache/kerby/kerberos/kerb/gss/impl/GssCredElement.java (1 line):
	- line 69: throw new GSSException(GSSException.FAILURE, -1, "Unsupported feature");  // TODO:


kerby-kdc/src/main/java/org/apache/kerby/kerberos/kdc/impl/NettyKdcHandler.java (1 line):
	- line 53: boolean isTcp = true; //TODO:


kerby-kerb/kerb-common/src/main/java/org/apache/kerby/kerberos/kerb/preauth/pkinit/PkinitCrypto.java (1 line):
	- line 269: // TODO Build client chain.


kerby-kerb/kerb-client/src/main/java/org/apache/kerby/kerberos/kerb/client/ClientUtil.java (1 line):
	- line 89: confDir = new File("/etc/"); // for Linux. TODO: fix for Win etc.


kerby-kerb/kerb-common/src/main/java/org/apache/kerby/kerberos/kerb/transport/KdcUdpTransport.java (1 line):
	- line 43: long timeout = 1000; // TODO: configurable or option