summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-01-07Added ACL name to object history entriesJon Robertson
When listing an object history, ACLs were only shown as the ACL id. This changes that behavior to show the ACL name as well as ID. Where before it might say "set owner to 1", now it would say "set owner to ADMIN (1)".
2010-01-07Added ability to list only ACLs with no membersJon Robertson
Added new option to the 'wallet-admin list acls' command, 'empty', which will only return those ACLs which have no members. This will help maintenance in the long term by pointing out ACLs in error or no longer needed.
2010-01-05Added randKeyPrincipal to the keytab creation processJon Robertson
randKeyPrincipal was added to the keytab file creation process, in order to reset a principal to first have all possible enctypes. There is no way for us to specify that we only want a specific number of fresh enctypes, so we must reset to have all enctypes first, and then pare down from there each time we create the keytab.
2010-01-05Added keytab testing cases for Heimdal KDCJon Robertson
Added cases to handle the Wallet::Object::Keytab module using a Heimdal KDC as well as an MIT KDC. In most cases this is transparent, but some tests are skipped for Heimdal, and the commands run to test that the created principals and keytabs are correct are different for Heimdal. The code now branches based on the value of $Wallet::Config::KEYTAB_KRBTYPE.
2009-12-17Added keytab testing cases for Heimdal KDCJon Robertson
Added cases to handle the Wallet::Object::Keytab module using a Heimdal KDC as well as an MIT KDC. In most cases this is transparent, but some tests are skipped for Heimdal, and the commands run to test that the created principals and keytabs are correct are different for Heimdal. The code now branches based on the value of $Wallet::Config::KEYTAB_KRBTYPE.
2009-12-16Provided path to call valid_principal directlyJon Robertson
valid_principal used to reside in Wallet::Object::Keytab, but was moved to the individual Wallet::Kadmin::* modules. This isn't necessary currently and may not ever be, but it's there just in case we do ever need to differentiate. To simplify testing, a way to still call it directly from Wallet::Object::Keytab has been added.
2009-12-16Improvements for keytab existance checks and keytab creationJon Robertson
* Fixed keytab existence check to avoid failures when called by a principal with permissions only on specific principals. * Better error cases for non-existant keytabs in several places. * Skipped limiting keytabs to certain enctypes when no enctypes are given.
2009-12-10Added support for Heimdal KDCJon Robertson
Added support for Heimdal as an alternative to MIT Kerberos. This involved separating out the kadmin-specific code into its own set of modules, and changing the existing Wallet::Object::Keytab code to branch based on which module is loaded.
2009-12-10Added support for Heimdal KDCJon Robertson
Added support for Heimdal as an alternative to MIT Kerberos. This involved separating out the kadmin-specific code into its own set of modules, and changing the existing Wallet::Object::Keytab code to branch based on which module is loaded.
2009-12-10Added support for Heimdal KDCJon Robertson
Added support for Heimdal as an alternative to MIT Kerberos. This involved separating out the kadmin-specific code into its own set of modules, and changing the existing Wallet::Object::Keytab code to branch based on which module is loaded.
2009-12-03Improved wallet-admin list command with searchesJon Robertson
wallet-admin's list command now has additional searches added for objects and acls that match certain specifiers. For objects these include searching for objects owned by a specific ACL, objects owned by no one, objects of a specific type, objects with a specific flag, and objects for which a specific ACL has any privileges at all. For acls, this includes the ability to search for any ACL with an entry with given type and identifier.
2009-08-15Add a naming convention for general config filesRuss Allbery
We have some general configuration files that contain database passwords. Add a general naming convention to avoid creating new ones with each new type of config file.
2009-08-07Update Stanford naming documentation for puppet.confRuss Allbery
Add a naming convention for puppet.conf files containing secure data and reorganize the naming convention documentation to group all service objects together.
2009-06-09Add contrib script to map ACLs to contact e-mail addressesRuss Allbery
2009-06-09Add owners reportRuss Allbery
Add a new report owners command to wallet-admin and corresponding report_owners() method to Wallet::Admin, which returns all ACL lines on owner ACLs for matching objects.
2009-06-09Update tests to reflect suppression of store data in loggingRuss Allbery
2009-06-09Add a .gitignore fileRuss Allbery
2009-06-09Remove Subversion Id stringsRuss Allbery
2009-06-09Remove Debian packaging from the master branchRuss Allbery
2009-05-08Add switching to Authen::Krb5::Admin to TODO.Russ Allbery
2009-04-26Add the case-insensitivity bug in object names to TODO.Russ Allbery
2009-03-25Add the shibboleth.xml object naming convention.Russ Allbery
2009-02-27Add htpasswd convention.Russ Allbery
2008-12-15Add ssh key naming to the Stanford naming guide.Russ Allbery
2008-11-14Add mass ACL change to TODO.Russ Allbery
2008-10-06Add additional Stanford naming conventions.Russ Allbery
2008-09-17Clarify database password object naming and add PAM configuration objectRuss Allbery
naming.
2008-09-12Suppress the argument to store from logging on failures as well.Russ Allbery
2008-08-14Fix logging in wallet-backend and the remctl configuration to not logRuss Allbery
the data passed to store.
2008-08-13Correctly handle storing of data that begins with a dash and don'tRuss Allbery
parse it as an argument to wallet-backend.
2008-07-07Initial Stanford naming conventions.Russ Allbery
2008-07-07Add a hook for ACL naming enforcement to TODO.Russ Allbery
2008-06-25Update to the current version.Russ Allbery
2008-04-25Fix the distribution name in the last change.Russ Allbery
2008-04-25Add an explicit mention of builddir != srcdir builds.Russ Allbery
2008-04-25Add missing blank line in comment.Russ Allbery
2008-04-24Now use --with-kaserver instead of --with-afs. Remove therelease/0.9debian/0.9-1Russ Allbery
Stanford-specific wallet-server setting now that we have an updated krb5.conf file everywhere.
2008-04-24For builddir != srcdir builds, remove the files we copy over onRuss Allbery
make distclean.
2008-04-24Disable the uninstall check since Perl can't uninstall.Russ Allbery
2008-04-24ExtUtils::MakeMaker uses prefix more intelligently than I thought.Russ Allbery
2008-04-24If you want variables to be expanded, they have to be in double-quotedRuss Allbery
strings.
2008-04-24If prefix is not /usr or /usr/local, base the installation path onRuss Allbery
$datadir.
2008-04-24For DESTDIR, add a trailing slash when passing it to Perl.Russ Allbery
ExtUtils::MakeMaker's man page indicates this may be needed.
2008-04-24Propagate DESTDIR settings to the Perl install rule.Russ Allbery
2008-04-24Add abs_top_builddir to the search path instead of abs_top_srcdir toRuss Allbery
get the newly built Perl modules.
2008-04-24Create the correct directory name for Perl test utilities.Russ Allbery
2008-04-24Include examples/stanford.conf in the distribution. Create another PerlRuss Allbery
directory for builddir != srcdir builds.
2008-04-24First pass at builddir != srcdir support.Russ Allbery
2008-04-24* Use a separate stamp file for configure and install and use touch $@Russ Allbery
to create stamp files.
2008-04-24* Update debhelper compatibility level to V5 (no changes required).Russ Allbery
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-06 20:36:29 +0000