Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/debian/krb5-wallet.git/atom?h=upstream%2F1.3 2016-01-17T20:25:15+00:00 2016-01-17T20:25:15+00:00 Russ Allbery eagle@eyrie.org 2016-01-17T20:25:15+00:00 urn:sha1:4feab8a987a345e38c44077d1042bf05ec03f0eb The versions of all of the wallet Perl modules now match the overall package version except for Wallet::Schema, which is used to version the database schema. Import the test from rra-c-util 5.10 and exclude Wallet::Schema from the tests. Go through all Perl modules and standardize the syntax for setting the version and indicating the required version of Perl. Fix a few other syntax issues while I'm in there. 2015-11-19T07:48:07+00:00 Jon Robertson jonrober@stanford.edu 2015-08-27T17:34:22+00:00 urn:sha1:6b0cad572edef05d119abc8fc843c8c5d33665b8 Added a version of the LDAP attribute ACL. Like the root version for NetDB, this requires that the principal end in /root, and then strips off /root before doing matching against the given LDAP attribute. Change-Id: I23119ef9c9ce3e0556f5d71a509815f2efc1bbe6 2015-06-08T22:24:34+00:00 Jon Robertson jonrober@stanford.edu 2015-06-08T18:15:37+00:00 urn:sha1:86533bf43d071048d654691dc18a3004b6142081 This verifier will allow embedding one ACL in another for more flexible ACL handling. As part of thise we've also added the ability for each verifier to do a syntax check to see if a given name is valid for that verifier. For the moment this returns true for everything but Nested. Nested will check to make sure the given name is an existing group. Change-Id: Iacdf146d46ed882d57b7534058d34db6e6ec1de4 2015-06-08T22:24:34+00:00 Jon Robertson jonrober@stanford.edu 2015-04-17T20:41:52+00:00 urn:sha1:feacbd7d685b1790579f949b3e72a48412835d92 To handle local proliferation of Duo integration type requests, all Duo types have been merged into one module that will pick up and decide integration specifics off of the object type. If you are using the Duo types locally already, you'll want to load perl/sql/wallet-1.3-update-duo.sql to your database to update the old object types to all use the Duo module. All existing Duo integrations have been added to the module for handling, but nothing new has been added to the wallet object types. Since there are a lot of Duo integrations, sites should only manually add the ones they're interested in to the wallet types table. Change-Id: If9c9a0a3e77923354f31d8f9c98a519c93df200b 2015-06-08T22:24:34+00:00 Jon Robertson jonrober@stanford.edu 2015-02-07T21:59:34+00:00 urn:sha1:55875aa020f31751f295ae6c07547fe2949c5e82 The password type inherits almost everything from the file object, but if you try to get a password object that has never been stored, we generate a random string to put in the object rather than just erroring out. The maximum and minimum length of the string can be set in the wallet config. If a password object was stored earlier and then cleared out, we don't generate another random string. Change-Id: I17a65ca7dac9d4430e8a731f417297890ee612bb 2014-10-14T05:28:30+00:00 Jon Robertson jonrober@stanford.edu 2014-10-14T05:28:30+00:00 urn:sha1:0e39650c6a831987057a8a9ed615dc3023fcab4a Change-Id: Ic728297fa830ffdd40c1580e32a81f8c5123f66a 2014-10-09T03:33:56+00:00 Jon Robertson jonrober@stanford.edu 2014-10-09T03:33:56+00:00 urn:sha1:34d83c2dd2a17af92e48d74ebfbbfce28c7e8525 The existing functionality is now in the duo-pam object type. The old duo type now returns output in a generic config file, and new types for the Duo auth proxy in LDAP and Radius proxies are added. Change-Id: I1525d79b44dafcf3ef85368297baefafcb5dc179 2014-07-16T23:45:03+00:00 Russ Allbery eagle@eyrie.org 2014-07-16T23:44:37+00:00 urn:sha1:f00065a90838efcc4d80c7490c46ee7c9a7bbcbf Change-Id: I1c53e0503b29d7add289d26e67b11f9789ba8ad8 Reviewed-on: https://gerrit.stanford.edu/1576 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu> 2014-07-16T23:25:56+00:00 Russ Allbery eagle@eyrie.org 2014-07-16T23:20:10+00:00 urn:sha1:3e913fa65e9e5c1d687372b89b5467edb3e77973 This turned out to not be necessary for testing since I was already using sqlite3 to load an unversioned schema. Remove the offending line and restore the old code with some cleanup. Change-Id: I282b6f3b4754e4899222be6366b77a47f0cb7189 Reviewed-on: https://gerrit.stanford.edu/1575 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu> 2014-07-16T05:58:35+00:00 Russ Allbery eagle@eyrie.org 2014-07-16T05:07:48+00:00 urn:sha1:ee79913831be70fc51c193ea4118a15abb038a67 Fix the ordering of table drops during a wallet-admin destroy action to remove tables with foreign key references before the tables they are referencing. Should fix destroy in MySQL and other database engines that enforce referential integrity. Change-Id: I9b37c516f67acdf1d9e25222f067df6749e8c769 Reviewed-on: https://gerrit.stanford.edu/1558 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>