summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorRuss Allbery <eagle@eyrie.org>2014-07-11 17:19:59 -0700
committerRuss Allbery <rra@stanford.edu>2014-07-11 19:02:12 -0700
commit26927d5b7bda7d2892e460fdb2867b6bcd55c8ad (patch)
tree230669b93790088234603f28ae9df9647b2e15c0 /NEWS
parenta5850ddb86a0f596b2bdc0c0b432ea8f1ecb981c (diff)
Add new object type for Duo integrations
A new object type, duo (Wallet::Object::Duo), is now supported. This creates an integration with the Duo Security cloud multifactor authentication service and allows retrieval of the integration key, secret key, and admin hostname. Currently, only UNIX integration types are supported. The Net::Duo Perl module is required to use this object type. New configuration settings are required as well; see Wallet::Config for more information. To enable this object type for an existing wallet database, use wallet-admin to register the new object. Change-Id: I2c0dac75e81f526b34d6b509c4bdaecb43dd4a9d Reviewed-on: https://gerrit.stanford.edu/1516 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS10
1 files changed, 10 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index c79b999..a7cab7e 100644
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,16 @@
wallet 1.1 (unreleased)
+ A new object type, duo (Wallet::Object::Duo), is now supported. This
+ creates an integration with the Duo Security cloud multifactor
+ authentication service and allows retrieval of the integration key,
+ secret key, and admin hostname. Currently, only UNIX integration
+ types are supported. The Net::Duo Perl module is required to use this
+ object type. New configuration settings are required as well; see
+ Wallet::Config for more information. To enable this object type for
+ an existing wallet database, use wallet-admin to register the new
+ object.
+
Fix wallet-rekey on keytabs containing multiple principals. Previous
versions assumed one could concatenate keytab files together to make a
valid keytab file, which doesn't work with some Kerberos libraries.