krb5-wallet.git/client/wallet.pod, branch debian/0.8-1 Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/debian/krb5-wallet.git/atom?h=debian%2F0.8-1 2008-02-08T21:59:24+00:00 Fix the wallet client to use check instead of exists. 2008-02-08T21:59:24+00:00 Russ Allbery rra@stanford.edu 2008-02-08T21:59:24+00:00 urn:sha1:da92a0d5e259a126095e120c7938c6e3be27618c Add new exists and autocreate wallet server interfaces. The first 2008-02-07T23:33:23+00:00 Russ Allbery rra@stanford.edu 2008-02-07T23:33:23+00:00 urn:sha1:f0bde61f5ecfc6a58a2c0ec0ccadbdd1332b64f8 states whether a given object exists and the second attempts to create the object using the default owner rules. Remove default owner handling from the create interface, which is now for administrators only. Remove server-side auto-creation of objects on get or store and instead have the client check for object existence and call autocreate if necessary. This removes confusion between default ACLs and administrative object creation for users who are also on the ADMIN ACL. Add a new autocreate API call that tries to create an object using the 2008-02-07T06:37:11+00:00 Russ Allbery rra@stanford.edu 2008-02-07T06:37:11+00:00 urn:sha1:45823559a1e64d6c8151a984fcd9c79bbdb57171 default ACLs. Remove autocreation support from create, which now requires that one be on the ADMIN ACL, and from get and store. The wallet client will soon know how to do the right thing. Add a check command to the wallet server to determine whether an object 2008-02-07T01:44:28+00:00 Russ Allbery rra@stanford.edu 2008-02-07T01:44:28+00:00 urn:sha1:428c88bb0a08ba2eb06c7f5181f7cbee2f7ee398 already exists. The wallet client now supports a -u option, saying to obtain Kerberos 2008-01-19T01:20:38+00:00 Russ Allbery rra@stanford.edu 2008-01-19T01:20:38+00:00 urn:sha1:cf71c7dac06561b14c8be3383fdb2ca4f3a318d9 credentials for the given user and use those for authentication rather than using an existing ticket cache. If -f is used and the output file name with ".new" appended already 2008-01-19T01:14:16+00:00 Russ Allbery rra@stanford.edu 2008-01-19T01:14:16+00:00 urn:sha1:1658725f8812ed0bafffd71a1b566706e91c5e85 exists, unlink it first and then create it safely rather than truncating it. This is much safer when creating files in a world-writable directory. Also add documentation for keytab merging. Update client documentation to reflect my failure to get realm-specific 2008-01-07T23:20:38+00:00 Russ Allbery rra@stanford.edu 2008-01-07T23:20:38+00:00 urn:sha1:bf4980fed2bd26260c45d793677e1f5649f06f2d configuration working yet. The wallet client can now get the server, port, principal, and remctl 2008-01-05T00:01:54+00:00 Russ Allbery rra@stanford.edu 2008-01-05T00:01:54+00:00 urn:sha1:b10beb347238b153af8aa544fb276485b34e970e type from krb5.conf as well as from compile-time defaults and command-line options. Don't say what the default remctl port is, since it's changed. 2007-12-06T23:22:36+00:00 Russ Allbery rra@stanford.edu 2007-12-06T23:22:36+00:00 urn:sha1:4ee72e4149ca95e04381b434a13308022f9783cd Some bad wrapping protection. 2007-12-06T23:21:35+00:00 Russ Allbery rra@stanford.edu 2007-12-06T23:21:35+00:00 urn:sha1:db8f1c187ea961949e7386731d9fff94c719332a