Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/debian/krb5-wallet.git/atom?h=release%2F0.12 2010-03-08T18:19:03+00:00 2010-03-08T18:19:03+00:00 Russ Allbery rra@stanford.edu 2010-03-08T18:19:03+00:00 urn:sha1:bc105004b8e88e1ede75dae0028d3ef10c15b57a Parallel to objects name, add an acls name audit that returns all ACLs that do not follow the site naming standard. 2010-03-06T01:25:50+00:00 Russ Allbery rra@stanford.edu 2010-03-06T01:25:50+00:00 urn:sha1:fd7f47ed7dccb3ee01ddaa7e24b8bd7bffb6a1c6 Wallet::Config now supports an additional local function, verify_acl_name, which can be used to enforce ACL naming policies. If set, it is called for any ACL creation or rename and can reject the new ACL name. 2010-03-04T06:44:53+00:00 Russ Allbery rra@stanford.edu 2010-03-04T06:44:53+00:00 urn:sha1:acc73c988b845448230942de0f07263546763420 Do this only in the main text, not in the SEE ALSO section, since the latter is more for conventional man pages. This will produce better results for some POD to HTML converters (although not mine, yet). 2010-03-04T06:37:18+00:00 Russ Allbery rra@stanford.edu 2010-03-04T06:37:18+00:00 urn:sha1:a131c767d1eee7b98170962f7f9d4063be69e576 Add an audit command to wallet-report and one audit: objects name, which returns all objects that do not pass the local naming policy. The corresponding Wallet::Report method is audit(). Wallet::Config::verify_name may now be called with an undefined third argument (normally the user attempting to create an object). This calling convention is used when auditing, and the local policy function should select the correct policy to apply for useful audit results. 2010-02-19T05:31:10+00:00 Russ Allbery rra@stanford.edu 2010-02-19T05:31:10+00:00 urn:sha1:a24d3ac3c7e8cb68fe2268f337a4edb599d5f881 Heimdal supports retrieving a keytab containing the existing keys over the kadmin protocol. Move the support for using remctl to retrieve an existing keytab into Wallet::Kadmin::MIT and provide two separate methods in the Wallet::Kadmin interface: one which rekeys and one which doesn't. Implement the non-rekeying interface for Heimdal. Expand the test suite for the unchanging keytabs to include tests for the Heimdal method. 2010-02-10T07:19:27+00:00 Russ Allbery rra@stanford.edu 2010-02-10T07:19:27+00:00 urn:sha1:ae02de1488068b84371b05842c81a9aecc5f24c4 Also update the POD syntax check to the current version of that check I use elsewhere. Since I'm touching all the POD anyway, also rewrap all of the POD to 74 columns. Fix some references to MIT in the Wallet::Kadmin::Heimdal module documentation. 2010-02-09T21:14:41+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:14:41+00:00 urn:sha1:b037770195ef0bd98d6655a65873b25d90e36032 KEYTAB_KRBTYPE wasn't documented in Wallet::Config. Add it and the variable declaration. Also document the new mandatory setting in NEWS and add the Heimdal::Kadm5 requirement to README. Remove some of the language in README that implies that only MIT Kerberos is supported. Make the setting case-insensitive and improve the error message from Wallet::Kadmin if it isn't set. 2010-02-09T21:06:31+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:06:31+00:00 urn:sha1:59455fd5e6a47a66a2a84779f42928fd66ec9747 Remove kaserver synchronization support. It is no longer tested, and retaining the code was increasing the complexity of wallet, and some specific requirements (such as different realm names between kaserver and Kerberos v5 and the kvno handling) were Stanford-specific. Rather than using this support, AFS sites running kaserver will probably find deploying Heimdal with its internal kaserver compatibility is probably an easier transition approach. 2009-06-09T21:39:39+00:00 Russ Allbery rra@stanford.edu 2009-06-09T21:39:39+00:00 urn:sha1:574a9c0456c182831b3d01a4d7ee0c737b91b107 2008-02-09T01:57:42+00:00 Russ Allbery rra@stanford.edu 2008-02-09T01:57:42+00:00 urn:sha1:b415b347328e7db0f41f0294c06060c6dd156b3d