krb5-wallet.git/perl/Wallet/Config.pm, branch release/0.10 Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/debian/krb5-wallet.git/atom?h=release%2F0.10 2010-02-19T05:31:10+00:00 Support unchanging keytabs with Heimdal without remctl 2010-02-19T05:31:10+00:00 Russ Allbery rra@stanford.edu 2010-02-19T05:31:10+00:00 urn:sha1:a24d3ac3c7e8cb68fe2268f337a4edb599d5f881 Heimdal supports retrieving a keytab containing the existing keys over the kadmin protocol. Move the support for using remctl to retrieve an existing keytab into Wallet::Kadmin::MIT and provide two separate methods in the Wallet::Kadmin interface: one which rekeys and one which doesn't. Implement the non-rekeying interface for Heimdal. Expand the test suite for the unchanging keytabs to include tests for the Heimdal method. Check spelling of server API POD and tweak server docs 2010-02-10T07:19:27+00:00 Russ Allbery rra@stanford.edu 2010-02-10T07:19:27+00:00 urn:sha1:ae02de1488068b84371b05842c81a9aecc5f24c4 Also update the POD syntax check to the current version of that check I use elsewhere. Since I'm touching all the POD anyway, also rewrap all of the POD to 74 columns. Fix some references to MIT in the Wallet::Kadmin::Heimdal module documentation. Document and make case-insensitive KEYTAB_KRBTYPE 2010-02-09T21:14:41+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:14:41+00:00 urn:sha1:b037770195ef0bd98d6655a65873b25d90e36032 KEYTAB_KRBTYPE wasn't documented in Wallet::Config. Add it and the variable declaration. Also document the new mandatory setting in NEWS and add the Heimdal::Kadm5 requirement to README. Remove some of the language in README that implies that only MIT Kerberos is supported. Make the setting case-insensitive and improve the error message from Wallet::Kadmin if it isn't set. Remove kaserver synchronization support from the wallet backend 2010-02-09T21:06:31+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:06:31+00:00 urn:sha1:59455fd5e6a47a66a2a84779f42928fd66ec9747 Remove kaserver synchronization support. It is no longer tested, and retaining the code was increasing the complexity of wallet, and some specific requirements (such as different realm names between kaserver and Kerberos v5 and the kvno handling) were Stanford-specific. Rather than using this support, AFS sites running kaserver will probably find deploying Heimdal with its internal kaserver compatibility is probably an easier transition approach. Remove Subversion Id strings 2009-06-09T21:39:39+00:00 Russ Allbery rra@stanford.edu 2009-06-09T21:39:39+00:00 urn:sha1:574a9c0456c182831b3d01a4d7ee0c737b91b107 Add file object support to the wallet server. 2008-02-09T01:57:42+00:00 Russ Allbery rra@stanford.edu 2008-02-09T01:57:42+00:00 urn:sha1:b415b347328e7db0f41f0294c06060c6dd156b3d Wallet::Config and hence the wallet server now checks for the 2008-02-08T23:42:40+00:00 Russ Allbery rra@stanford.edu 2008-02-08T23:42:40+00:00 urn:sha1:96d7a9fbc8fb9648a592bad4cf43f29dc6ccf6d0 environment variable WALLET_CONFIG and loads configuration from the file specified there instead of /etc/wallet/wallet.conf if it is set. Support enforcing a naming policy for wallet objects via a Perl 2008-01-17T22:55:17+00:00 Russ Allbery rra@stanford.edu 2008-01-17T22:55:17+00:00 urn:sha1:275cc7eac5d693bffec19884bf37322df59a871c function in the wallet server configuration file. Move wallet.conf to /etc/wallet since we're going to want to put other 2007-12-01T00:47:22+00:00 Russ Allbery rra@stanford.edu 2007-12-01T00:47:22+00:00 urn:sha1:5563464c5392112f0f7b20fcfd610a734303e4c2 things in that directory as well. Add support for running a user-defined function whenever an object is 2007-11-20T02:01:27+00:00 Russ Allbery rra@stanford.edu 2007-11-20T02:01:27+00:00 urn:sha1:66da128c39971f9a40553af9351b489f1ad186e1 created by a non-ADMIN user and using the default owner ACL returned by that function provided that the calling user is authorized by that ACL. This permits dynamic creation of new objects based on a default owner ACL programmatically determined from the name of the object.