Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/debian/krb5-wallet.git/atom?h=release%2F0.12 2010-08-14T01:32:00+00:00 2010-08-14T01:32:00+00:00 Russ Allbery rra@stanford.edu 2010-08-14T01:32:00+00:00 urn:sha1:a0432d103c690119255cbf7d612531d4af616efb Rekey the keytab in the same principal order as what's stored in the keytab rather than reversing it, since that makes it easier to test. Suppress the error message about no data from the server if the server sent an error. Fix some coding style and spelling errors. 2010-08-14T00:46:36+00:00 Russ Allbery rra@stanford.edu 2010-08-14T00:46:36+00:00 urn:sha1:1a57d2409a43623cd1396bff6b22f815dbc9e799 In wallet-rekey, if the keytab we're supposed to rekey has no rekeyable principals, die rather than sysdie since there's no errno error to report. 2010-07-30T02:25:17+00:00 Russ Allbery rra@stanford.edu 2010-07-30T02:25:17+00:00 urn:sha1:dacc1c6b8e8d4bdd1daffb84efd58f16e45e3cba If we get a failure to rekey a principal before we've succeeded with any principal, abort rather than continuing. 2010-07-30T02:20:46+00:00 Russ Allbery rra@stanford.edu 2010-07-30T02:20:46+00:00 urn:sha1:81b7ba2a6503b4bc7199d78adf97d956b1e932a5 The loop handling finding principals to rekey was not correctly coping with principals from foreign realms. 2010-07-29T05:05:05+00:00 Russ Allbery rra@stanford.edu 2010-07-29T05:05:05+00:00 urn:sha1:5a48a5d5f7f2af72cf84114453748fbd2a337537 Build a separate wallet-rekey client that rekeys every keytab given on the command-line. Fix some coding style issues and add internal prototypes. Build the shared source for both clients into an uninstalled library to save compilation time. 2010-07-28T00:08:56+00:00 Jon Robertson jonrober@stanford.edu 2010-07-28T00:08:56+00:00 urn:sha1:5047dee97b80e2db2c57a2654a549e87411c1813 Cleaned up several bugs preventing the rekey command from working (bad calls to variables, matching on version of principal name already stripped of realm), and removed debugging code. 2010-07-27T19:40:12+00:00 Jon Robertson jonrober@stanford.edu 2010-07-27T19:40:12+00:00 urn:sha1:534f2111ab41ed63024d811a3d8f5b81256d83a9 First, testing version of wallet rekey code, committed in order to get feedback from Russ. This code will eventually take an existing keytab file, and for every principal belonging to our default realm in it, get new versions of that keytab and merge them into the file. This allows for quietly rekeying principals automatically. 2010-02-10T00:00:04+00:00 Russ Allbery rra@stanford.edu 2010-02-10T00:00:04+00:00 urn:sha1:d05f66dbff10b525d37f60ee01d5b9f94bf5192e Use the Kerberos portability layer from rra-c-util 3.0 and avoid Kerberos API calls deprecated on Heimdal. Break util/util.h into separate header files and update all source files accordingly. The test suite is not yet updated. That will come in subsequent commits. 2010-02-09T21:37:58+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:37:58+00:00 urn:sha1:2d33440272200cad20a5a4c58e5d8aa0dfad9a1f The wallet client no longer enables kaserver synchronization when a srvtab is requested with -S. Instead, it just extracts the DES key from the keytab and writes it to a srvtab. It no longer forces the kvno of the srvtab to 0 (a Stanford-specific action) and instead preserves the kvno from the key in the keytab. This should now do the right thing for sites that use a KDC that serves both Kerberos v4 and Kerberos v5 from the same database. 2010-02-09T03:41:27+00:00 Russ Allbery rra@stanford.edu 2010-02-09T03:41:27+00:00 urn:sha1:b093893870d56cd460b16645496ec6c30c62a02f Just get the client code to compile with Heimdal. This will need more work later to use my regular Kerberos portability layer.