diff options
| author | Russ Allbery <rra@stanford.edu> | 2013-03-27 16:13:24 -0700 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2013-03-27 16:24:54 -0700 |
| commit | 3a6d69ab78981b53aa5c20f99e2ee370268a40ff (patch) | |
| tree | 97779028e4fe8d9e0d20d96bd42fbdc4fc6ef236 | |
| parent | 06c44c9eb5efb00bb9368ed3709106c91b0b36b5 (diff) | |
Document the new WebAuth keyring object type
Add a mention to NEWS and to the REQUIREMENTS section of README.
Change-Id: I560f737e9cb899046f7fe3c8d2c8c648d31041e7
Reviewed-on: https://gerrit.stanford.edu/985
Reviewed-by: Russ Allbery <rra@stanford.edu>
Tested-by: Russ Allbery <rra@stanford.edu>
| -rw-r--r-- | NEWS | 7 | ||||
| -rw-r--r-- | README | 3 |
2 files changed, 10 insertions, 0 deletions
@@ -20,6 +20,13 @@ wallet 1.0 (2013-03-27) this ACL type for an existing wallet database, use wallet-admin to register the new verifier. + A new object type, wa-keyring (Wallet::Object::WAKeyring), is now + supported. This stores a WebAuth keyring and handles both key + rotation and garbage collection of old keys on retrieval of the + keyring. The WebAuth Perl module is required to use this object + type. To enable this object type for an existing wallet database, use + wallet-admin to register the new object. + Add a new acl check command which, given an ACL ID, prints yes if that ACL already exists and no otherwise. This is parallel to the check command for objects. @@ -101,6 +101,9 @@ REQUIREMENTS binary that supports the -norandkey option to ktadd. This option is included in MIT Kerberos 1.7 and later. + The WebAuth keyring object support in the wallet server requires the + WebAuth Perl module from WebAuth 4.4.0 or later. + To support the LDAP attribute ACL verifier, the Authen::SASL and Net::LDAP Perl modules must be installed on the server. This verifier only works with LDAP servers that support GSS-API binds. |