krb5-wallet.git/perl/Wallet, branch debian/1.0-5

Randomize the password on Heimdal principal creation

2014-01-09T22:04:51+00:00

When creating new principals in a Heimdal KDC, generate a long, random password as the temporary password of the disabled principal before randomizing keys. This is necessary if password quality is being enforced on create calls. Since the principal is always inactive until the keys have been randomized, the password should not need to be secure (and indeed is not cryptographically random). Change-Id: If519a82475bb0d387a19d16ef1e024b0da64779a Reviewed-on: https://gerrit.stanford.edu/1374 Reviewed-by: Russ Allbery Tested-by: Russ Allbery Conflicts: NEWS

Fix several bugs in Wallet::Object::Keytab enctype handling

2013-11-05T20:34:28+00:00

There was a missing resultset() call in one place and the wrong resultset used in a different place, causing the enctype management code to not work. Change-Id: I796169c5968ec164f90f3cd75541dd346dd50fdf Reviewed-on: https://gerrit.stanford.edu/1070 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

ACL.pm: Fix a place where the acl history was getting raw timestamp

2013-11-05T20:33:26+00:00

The acl_history table needed to get the DateTime object rather than the raw epoch timestamp in one place. This was causing errors adding new lines to the history. Change-Id: I9c971819484cd0b26cb2561549246c284afc55a1 Reviewed-on: https://gerrit.stanford.edu/1325 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Fix return status of Wallet::Schema

2013-03-28T02:21:52+00:00

The module wasn't always returning a true value when loaded. Change-Id: I998ab25509cb9079034cae6aca467024ec6b4949 Reviewed-on: https://gerrit.stanford.edu/990 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Register the wa-keyring object handler by default

2013-03-27T23:25:02+00:00

In Wallet::Admin, add the wa-keyring object handler to the list of initializations when creating a new database. Change-Id: I804b47ae712ce3d96c57699fb2ba05c45f687881 Reviewed-on: https://gerrit.stanford.edu/986 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Allow owners of objects to destroy them by default

2013-03-27T19:52:58+00:00

Owners of wallet objects are now allowed to destroy them. In previous versions, a special destroy ACL had to be set and the owner ACL wasn't used for destroy actions, but operational experience at Stanford has shown that letting owners destroy their own objects is a better model. Change-Id: I0e97d7a000e62cf5321add7b44140db6edc6769f Reviewed-on: https://gerrit.stanford.edu/973 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Add standard headers to the Wallet::Schema::* classes

2013-02-28T00:54:27+00:00

Change-Id: Iee8d55f6c86563fad71d770398e3221f7efb4b2e Reviewed-on: https://gerrit.stanford.edu/852 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Use correct form of Stanford's copyright statement

2013-02-28T00:52:47+00:00

Change-Id: I06dd9ecca19315179bdd34d4b301548fe7604331 Reviewed-on: https://gerrit.stanford.edu/842 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Add stopwords for new Wallet::Schema classes

2013-02-28T00:52:02+00:00

Change-Id: I48984226f67ded5539f6bc8c8cd88cfa770be775 Reviewed-on: https://gerrit.stanford.edu/839 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Fix NAME sections of new Wallet::Schema::Result::* classes

2013-02-23T04:29:28+00:00

Change-Id: I8aa2d9232a3f15d424eafbda69b6e065824e62b8