Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/krb5-wallet.git/atom?h=release%2F0.11 2010-03-04T06:44:53+00:00 2010-03-04T06:44:53+00:00 Russ Allbery rra@stanford.edu 2010-03-04T06:44:53+00:00 urn:sha1:acc73c988b845448230942de0f07263546763420 Do this only in the main text, not in the SEE ALSO section, since the latter is more for conventional man pages. This will produce better results for some POD to HTML converters (although not mine, yet). 2010-02-21T05:52:38+00:00 Russ Allbery rra@stanford.edu 2010-02-21T05:52:38+00:00 urn:sha1:3b3e387b6bca35a00a86ad41e39874eeadcb78b9 Update the wallet client, wallet-backend, and Wallet::Object::File documentation for the support for storing data containing nul characters using the new stdin support in remctld. Add this to NEWS. 2010-02-19T06:06:17+00:00 Russ Allbery rra@stanford.edu 2010-02-19T06:06:17+00:00 urn:sha1:93eb5f8fe8d05398dd6fb364680e40eb8dae23e4 Change the API for keytab_rekey to match keytab, returning the keytab as data instead of writing it to a file. This simplifies the wallet object implementation and moves the logic for reading the temporary file into Wallet::Kadmin and its child classes. (Eventually, there may be a kadmin backend that doesn't require using a temporary file.) Setting KEYTAB_TMP is now required to instantiate either the ::MIT or ::Heimdal Wallet::Kadmin classes. 2010-02-19T05:31:10+00:00 Russ Allbery rra@stanford.edu 2010-02-19T05:31:10+00:00 urn:sha1:a24d3ac3c7e8cb68fe2268f337a4edb599d5f881 Heimdal supports retrieving a keytab containing the existing keys over the kadmin protocol. Move the support for using remctl to retrieve an existing keytab into Wallet::Kadmin::MIT and provide two separate methods in the Wallet::Kadmin interface: one which rekeys and one which doesn't. Implement the non-rekeying interface for Heimdal. Expand the test suite for the unchanging keytabs to include tests for the Heimdal method. 2010-02-19T02:23:23+00:00 Russ Allbery rra@stanford.edu 2010-02-19T02:23:23+00:00 urn:sha1:748170660e3a7b1db4320ba9b0144da2e252cd27 Pull the sync code out into separate methods to avoid a really long and awkward attr method. Document the limited object support for the sync attribute. 2010-02-19T02:03:09+00:00 Russ Allbery rra@stanford.edu 2010-02-19T02:03:09+00:00 urn:sha1:2651ef4352c8cc782c4e0f3175257f7bb0c1e495 Now that we support multiple versions of Kerberos, use generic names for the functions in the Wallet::Kadmin interface rather than the commands from the MIT kadmin interface. 2010-02-10T07:19:27+00:00 Russ Allbery rra@stanford.edu 2010-02-10T07:19:27+00:00 urn:sha1:ae02de1488068b84371b05842c81a9aecc5f24c4 Also update the POD syntax check to the current version of that check I use elsewhere. Since I'm touching all the POD anyway, also rewrap all of the POD to 74 columns. Fix some references to MIT in the Wallet::Kadmin::Heimdal module documentation. 2010-02-09T21:06:31+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:06:31+00:00 urn:sha1:59455fd5e6a47a66a2a84779f42928fd66ec9747 Remove kaserver synchronization support. It is no longer tested, and retaining the code was increasing the complexity of wallet, and some specific requirements (such as different realm names between kaserver and Kerberos v5 and the kvno handling) were Stanford-specific. Rather than using this support, AFS sites running kaserver will probably find deploying Heimdal with its internal kaserver compatibility is probably an easier transition approach. 2010-02-08T23:47:04+00:00 Russ Allbery rra@stanford.edu 2010-02-08T23:47:04+00:00 urn:sha1:346660359be7666e8629c14b2d12cebf794f6f26 Combine a long series of eval blocks into a single block and a single error check. Remove trailing whitespace, and in some cases remove trailing () on method calls where the parens aren't useful. 2010-01-26T22:45:40+00:00 Jon Robertson jonrober@stanford.edu 2010-01-26T22:45:40+00:00 urn:sha1:dad764bc84d371ffc775e66b942ecbbc59f05c8e The MIT kadmin module currently directly runs the MIT kadmin program. Some data needs to be cleaned during the forks for this. This provides a callback that can be registered and is called during the fork process, currently just to mark database handles inactive. It was added to both the MIT and Heimdal modules, though it's only a stub in the Heimdal module. Heimdal is not forking kadmin, but the stub is there in order to allow the caller to not care which module is being used and just always register the callbacks.