Unnamed repository; edit this file 'description' to name the repository. https://git.gnuabordo.com.br/krb5-wallet.git/atom?h=release%2F0.10 2010-02-22T04:58:27+00:00 2010-02-22T04:58:27+00:00 Russ Allbery rra@stanford.edu 2010-02-22T04:58:27+00:00 urn:sha1:d04d26c6e447727cd43bd2182182117ec7302dc7 2010-02-21T07:19:50+00:00 Russ Allbery rra@stanford.edu 2010-02-21T07:19:50+00:00 urn:sha1:c4234b72a39b25122dbba769e028d1d105a4132e 2010-02-19T09:21:48+00:00 Russ Allbery rra@stanford.edu 2010-02-19T09:21:48+00:00 urn:sha1:345333f027be0b34318584b3f1b5e3e12adcaa98 Move all reporting from Wallet::Admin to Wallet::Report and simplify the method names since they're now part of a dedicated reporting class. Similarly, create a new wallet-report script to wrap Wallet::Report, moving all reporting commands to it from wallet-admin, and simplify the commands since they're for a dedicated reporting script. Remove the contrib script wallet-report to wallet-summary so that it doesn't conflict with the new reporting backend script. 2010-02-19T06:06:17+00:00 Russ Allbery rra@stanford.edu 2010-02-19T06:06:17+00:00 urn:sha1:93eb5f8fe8d05398dd6fb364680e40eb8dae23e4 Change the API for keytab_rekey to match keytab, returning the keytab as data instead of writing it to a file. This simplifies the wallet object implementation and moves the logic for reading the temporary file into Wallet::Kadmin and its child classes. (Eventually, there may be a kadmin backend that doesn't require using a temporary file.) Setting KEYTAB_TMP is now required to instantiate either the ::MIT or ::Heimdal Wallet::Kadmin classes. 2010-02-19T05:31:10+00:00 Russ Allbery rra@stanford.edu 2010-02-19T05:31:10+00:00 urn:sha1:a24d3ac3c7e8cb68fe2268f337a4edb599d5f881 Heimdal supports retrieving a keytab containing the existing keys over the kadmin protocol. Move the support for using remctl to retrieve an existing keytab into Wallet::Kadmin::MIT and provide two separate methods in the Wallet::Kadmin interface: one which rekeys and one which doesn't. Implement the non-rekeying interface for Heimdal. Expand the test suite for the unchanging keytabs to include tests for the Heimdal method. 2010-02-19T02:03:09+00:00 Russ Allbery rra@stanford.edu 2010-02-19T02:03:09+00:00 urn:sha1:2651ef4352c8cc782c4e0f3175257f7bb0c1e495 Now that we support multiple versions of Kerberos, use generic names for the functions in the Wallet::Kadmin interface rather than the commands from the MIT kadmin interface. 2010-02-19T00:12:10+00:00 Russ Allbery rra@stanford.edu 2010-02-19T00:12:10+00:00 urn:sha1:ae9db60c9b9601f66b34b564b80bbcfbe41301e1 2010-02-10T07:19:27+00:00 Russ Allbery rra@stanford.edu 2010-02-10T07:19:27+00:00 urn:sha1:ae02de1488068b84371b05842c81a9aecc5f24c4 Also update the POD syntax check to the current version of that check I use elsewhere. Since I'm touching all the POD anyway, also rewrap all of the POD to 74 columns. Fix some references to MIT in the Wallet::Kadmin::Heimdal module documentation. 2010-02-10T02:42:26+00:00 Russ Allbery rra@stanford.edu 2010-02-10T02:42:26+00:00 urn:sha1:31c47c6f5efde6df930b11be281470f75e685324 2010-02-09T21:06:31+00:00 Russ Allbery rra@stanford.edu 2010-02-09T21:06:31+00:00 urn:sha1:59455fd5e6a47a66a2a84779f42928fd66ec9747 Remove kaserver synchronization support. It is no longer tested, and retaining the code was increasing the complexity of wallet, and some specific requirements (such as different realm names between kaserver and Kerberos v5 and the kvno handling) were Stanford-specific. Rather than using this support, AFS sites running kaserver will probably find deploying Heimdal with its internal kaserver compatibility is probably an easier transition approach.