Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/krb5-wallet.git/atom?h=release%2F0.10 2010-02-21T00:39:59+00:00 2010-02-21T00:39:59+00:00 Russ Allbery rra@stanford.edu 2010-02-21T00:39:59+00:00 urn:sha1:77581a6a1620118ca17e26ec8b549603ab67b91b Remove some TODO items that are no longer relevant, either because they've been implemented or because we no longer care about Kerberos v4 principal name conversion. 2010-02-19T21:04:36+00:00 Russ Allbery rra@stanford.edu 2010-02-19T21:04:36+00:00 urn:sha1:c46d99178ef073e23f99c676872b10afd4c15577 2010-02-19T09:21:48+00:00 Russ Allbery rra@stanford.edu 2010-02-19T09:21:48+00:00 urn:sha1:345333f027be0b34318584b3f1b5e3e12adcaa98 Move all reporting from Wallet::Admin to Wallet::Report and simplify the method names since they're now part of a dedicated reporting class. Similarly, create a new wallet-report script to wrap Wallet::Report, moving all reporting commands to it from wallet-admin, and simplify the commands since they're for a dedicated reporting script. Remove the contrib script wallet-report to wallet-summary so that it doesn't conflict with the new reporting backend script. 2010-02-19T05:31:10+00:00 Russ Allbery rra@stanford.edu 2010-02-19T05:31:10+00:00 urn:sha1:a24d3ac3c7e8cb68fe2268f337a4edb599d5f881 Heimdal supports retrieving a keytab containing the existing keys over the kadmin protocol. Move the support for using remctl to retrieve an existing keytab into Wallet::Kadmin::MIT and provide two separate methods in the Wallet::Kadmin interface: one which rekeys and one which doesn't. Implement the non-rekeying interface for Heimdal. Expand the test suite for the unchanging keytabs to include tests for the Heimdal method. 2010-02-19T02:23:23+00:00 Russ Allbery rra@stanford.edu 2010-02-19T02:23:23+00:00 urn:sha1:748170660e3a7b1db4320ba9b0144da2e252cd27 Pull the sync code out into separate methods to avoid a really long and awkward attr method. Document the limited object support for the sync attribute. 2010-02-19T02:05:23+00:00 Russ Allbery rra@stanford.edu 2010-02-19T02:05:23+00:00 urn:sha1:908aa143b92b12e7d39989f6895625f255bc8d5b 2010-02-19T02:03:09+00:00 Russ Allbery rra@stanford.edu 2010-02-19T02:03:09+00:00 urn:sha1:2651ef4352c8cc782c4e0f3175257f7bb0c1e495 Now that we support multiple versions of Kerberos, use generic names for the functions in the Wallet::Kadmin interface rather than the commands from the MIT kadmin interface. 2010-02-09T22:00:35+00:00 Russ Allbery rra@stanford.edu 2010-02-09T22:00:35+00:00 urn:sha1:3b7b000d2d2423a578c0ddfa63773764417aec9e The wallet client now uses a temporary disk ticket cache when obtaining tickets with the -u option rather than an in-memory cache, allowing for a libremctl built against a different Kerberos implementation than the wallet client. This primarily helps with testing. 2010-02-09T21:37:58+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:37:58+00:00 urn:sha1:2d33440272200cad20a5a4c58e5d8aa0dfad9a1f The wallet client no longer enables kaserver synchronization when a srvtab is requested with -S. Instead, it just extracts the DES key from the keytab and writes it to a srvtab. It no longer forces the kvno of the srvtab to 0 (a Stanford-specific action) and instead preserves the kvno from the key in the keytab. This should now do the right thing for sites that use a KDC that serves both Kerberos v4 and Kerberos v5 from the same database. 2010-02-09T21:04:15+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:04:15+00:00 urn:sha1:26619788ec1f818a567bd1eb3208a541ce6a27a5