Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/debian/krb5-wallet.git/atom?h=upstream%2F1.4 2018-06-03T22:36:42+00:00 2018-06-03T22:36:42+00:00 Russ Allbery eagle@eyrie.org 2018-06-03T22:36:21+00:00 urn:sha1:4a0b9e747c8abfca24f30b7ce1e9a725ce11474a Add SPDX-License-Identifier headers to all substantial source files. Collapse copyright years. Add some Emacs configuration for files where the copyright notice is at the end. Add a test that every file has SPDX-License-Identifier. 2018-05-28T05:05:31+00:00 Russ Allbery eagle@eyrie.org 2018-05-28T05:05:31+00:00 urn:sha1:769217510b97e23101a01d228e2b8510fd43a725 Mostly changing http eyrie.org URLs to https, but also remove my old email address in one place and switch some tests away from my old RRA_MAINTAINER_TESTS environment variable to use the Lancaster Consensus variables properly. This uncovered a bug in skipping one test unless Stanford Kerberos credentials existed. 2016-01-23T23:24:19+00:00 Russ Allbery eagle@eyrie.org 2016-01-23T23:24:19+00:00 urn:sha1:43d3a892cb5aa69234a2591bf584036970a7243e 2016-01-17T20:25:15+00:00 Russ Allbery eagle@eyrie.org 2016-01-17T20:25:15+00:00 urn:sha1:4feab8a987a345e38c44077d1042bf05ec03f0eb The versions of all of the wallet Perl modules now match the overall package version except for Wallet::Schema, which is used to version the database schema. Import the test from rra-c-util 5.10 and exclude Wallet::Schema from the tests. Go through all Perl modules and standardize the syntax for setting the version and indicating the required version of Perl. Fix a few other syntax issues while I'm in there. 2015-11-19T07:48:07+00:00 Jon Robertson jonrober@stanford.edu 2015-08-27T17:34:22+00:00 urn:sha1:6b0cad572edef05d119abc8fc843c8c5d33665b8 Added a version of the LDAP attribute ACL. Like the root version for NetDB, this requires that the principal end in /root, and then strips off /root before doing matching against the given LDAP attribute. Change-Id: I23119ef9c9ce3e0556f5d71a509815f2efc1bbe6 2015-06-08T22:24:34+00:00 Jon Robertson jonrober@stanford.edu 2015-06-08T18:15:37+00:00 urn:sha1:86533bf43d071048d654691dc18a3004b6142081 This verifier will allow embedding one ACL in another for more flexible ACL handling. As part of thise we've also added the ability for each verifier to do a syntax check to see if a given name is valid for that verifier. For the moment this returns true for everything but Nested. Nested will check to make sure the given name is an existing group. Change-Id: Iacdf146d46ed882d57b7534058d34db6e6ec1de4 2015-06-08T22:24:34+00:00 Jon Robertson jonrober@stanford.edu 2015-04-17T20:41:52+00:00 urn:sha1:feacbd7d685b1790579f949b3e72a48412835d92 To handle local proliferation of Duo integration type requests, all Duo types have been merged into one module that will pick up and decide integration specifics off of the object type. If you are using the Duo types locally already, you'll want to load perl/sql/wallet-1.3-update-duo.sql to your database to update the old object types to all use the Duo module. All existing Duo integrations have been added to the module for handling, but nothing new has been added to the wallet object types. Since there are a lot of Duo integrations, sites should only manually add the ones they're interested in to the wallet types table. Change-Id: If9c9a0a3e77923354f31d8f9c98a519c93df200b 2015-06-08T22:24:34+00:00 Jon Robertson jonrober@stanford.edu 2015-02-07T21:59:34+00:00 urn:sha1:55875aa020f31751f295ae6c07547fe2949c5e82 The password type inherits almost everything from the file object, but if you try to get a password object that has never been stored, we generate a random string to put in the object rather than just erroring out. The maximum and minimum length of the string can be set in the wallet config. If a password object was stored earlier and then cleared out, we don't generate another random string. Change-Id: I17a65ca7dac9d4430e8a731f417297890ee612bb 2014-10-14T05:28:30+00:00 Jon Robertson jonrober@stanford.edu 2014-10-14T05:28:30+00:00 urn:sha1:0e39650c6a831987057a8a9ed615dc3023fcab4a Change-Id: Ic728297fa830ffdd40c1580e32a81f8c5123f66a 2014-10-09T03:33:56+00:00 Jon Robertson jonrober@stanford.edu 2014-10-09T03:33:56+00:00 urn:sha1:34d83c2dd2a17af92e48d74ebfbbfce28c7e8525 The existing functionality is now in the duo-pam object type. The old duo type now returns output in a generic config file, and new types for the Duo auth proxy in LDAP and Radius proxies are added. Change-Id: I1525d79b44dafcf3ef85368297baefafcb5dc179