krb5-wallet.git, branch debian/1.0-5

Add changelog for upstream password randomization

2014-01-09T22:05:26+00:00

Change-Id: I368bb1ffc8a9f3aad0a9ea96c268f21dbf6db5d8

Randomize the password on Heimdal principal creation

2014-01-09T22:04:51+00:00

When creating new principals in a Heimdal KDC, generate a long, random password as the temporary password of the disabled principal before randomizing keys. This is necessary if password quality is being enforced on create calls. Since the principal is always inactive until the keys have been randomized, the password should not need to be secure (and indeed is not cryptographically random). Change-Id: If519a82475bb0d387a19d16ef1e024b0da64779a Reviewed-on: https://gerrit.stanford.edu/1374 Reviewed-by: Russ Allbery Tested-by: Russ Allbery Conflicts: NEWS

Add changelog for cherry-picked test fix

2014-01-07T05:34:19+00:00

Fix test skip count in the verifier-ldap-attr test

2014-01-07T05:33:44+00:00

When the correct Kerberos tickets aren't available, this test skipped the wrong number of tests. Change-Id: Icf27178fe88027f38764285bb671560e051f9105 Reviewed-on: https://gerrit.stanford.edu/1373 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Add additional dependencies for the test suite

2014-01-07T05:27:53+00:00

* Add libauthen-sasl-perl and libnet-ldap-perl to Build-Depends for the test suite.

Add changelog for cherry-picked wallet-rekey fix

2014-01-07T05:16:45+00:00

Fix wallet-rekey on keytabs containing multiple principals

2014-01-07T05:15:12+00:00

Fix wallet-rekey on keytabs containing multiple principals. Previous versions assumed one could concatenate keytab files together to make a valid keytab file, which doesn't work with some Kerberos libraries. This caused new keys downloaded for principals after the first to be discarded. As a side effect of this fix, wallet-rekey always appends new keys directly to the existing keytab file, and never creates a backup copy of that file. Change-Id: I5f863239ce4ebba66b35ff09454f2897367bd359 Reviewed-on: https://gerrit.stanford.edu/1369 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Finalize changes for 1.0-3

2013-11-05T21:17:58+00:00

Change-Id: I5b10208b0b164e39242cf20ed4bd57398a3b9898

Depend on the DateTime::Format::* modules

2013-11-05T21:17:07+00:00

* Move the DateTime::Format::* Perl modules for various databases to Depends from Recommends and add the Pg and MySQL versions as alternatives. Change-Id: I39ea83bb2dc2d2042ba539895738e0fd9b362254

Add changelog for upstream cherry-picks

2013-11-05T20:36:54+00:00

Change-Id: I8f4b7b7798ee34271c5bfc1b46733a3649064192