summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-01-19The wallet client now supports a -u option, saying to obtain KerberosRuss Allbery
credentials for the given user and use those for authentication rather than using an existing ticket cache.
2008-01-19Note that the file writing change is a security issue.Russ Allbery
2008-01-19Add the new test suite files.Russ Allbery
2008-01-19If -f is used and the output file name with ".new" appended alreadyRuss Allbery
exists, unlink it first and then create it safely rather than truncating it. This is much safer when creating files in a world-writable directory. Also add documentation for keytab merging.
2008-01-19When downloading a keytab to a file that already exists, merge the newRuss Allbery
keytab keys into that file rather than moving aside the old keytab and creating a new keytab with only the new keys. Also fix get handling in the client for all types other than keytabs. This isn't visible yet since the server doesn't yet support other types of objects.
2008-01-17Support enforcing a naming policy for wallet objects via a PerlRuss Allbery
function in the wallet server configuration file.
2008-01-17When getting a keytab with the client with no -f option, correctlyRuss Allbery
write the keytab to standard output rather than dying with a cryptic error.
2008-01-17Remove the right krb5.conf file in client tests. Strip any existingRuss Allbery
wallet configuration from krb5.conf since it confuses the profile library. Add a test for printing keytabs to standard output.
2008-01-17Initialize the temporary variable when getting numbers from appdefaults.Russ Allbery
2008-01-07Update client documentation to reflect my failure to get realm-specificRuss Allbery
configuration working yet.
2008-01-05The wallet client can now get the server, port, principal, and remctlRuss Allbery
type from krb5.conf as well as from compile-time defaults and command-line options.
2008-01-04Dates are now displayed in a more normal format.Russ Allbery
2008-01-04The build system now probes for GSS-API, Kerberos v5 and v4, and AFSRuss Allbery
libraries as necessary rather than hard-coding libraries. Building on systems without strong shared library dependencies and building against static libraries should now work. Building kasetkey (for AFS kaserver synchronization) is now optional and not enabled by default. Pass --with-afs to enable it. This allows wallet to be easily built in an environment without AFS.
2007-12-18* Hard-code lsdb-new.stanford.edu as the wallet server name for the timedebian/0.5-2Russ Allbery
being.
2007-12-07Fix the module name in the SYNOPSIS example.release/0.5debian/0.5-1Russ Allbery
2007-12-07* New upstream release.Russ Allbery
- Allow more valid arguments to wallet-backend. - Load Perl modules for object types and ACL verifiers properly. - Correctly implement clearing attribute values. - Fix keytab principal validation to allow periods. - When writing files from the client, remove old backup files. - Check default creation ACLs before the ADMIN ACL.
2007-12-07Release 0.5.Russ Allbery
2007-12-07Test the interaction of the ADMIN ACL with autocreate on get.Russ Allbery
2007-12-07Check a default creation ACL first before the ADMIN ACL when decidingRuss Allbery
whether we can auto-create a non-existent ACL, since creating one with the ADMIN ACL doesn't create a useful object. Allow @ in wallet-backend arguments so that principal names can be passed in.
2007-12-07Correctly implement the documented intention that setting an attributeRuss Allbery
to the empty string clears the attribute values.
2007-12-07Get rid of more return undefs.Russ Allbery
2007-12-07Get rid of a bunch more return undefs.Russ Allbery
2007-12-07Allow the empty string in wallet-backend arguments.Russ Allbery
When writing to a file in the wallet client program, remove an old backup file before creating a new backup and don't fail if the backup already exists.
2007-12-07Bump version numbers appropriately.Russ Allbery
2007-12-07Load the Perl modules for ACL verifiers and object types dynamicallyRuss Allbery
now that we're reading the class from the database.
2007-12-06Be a bit more careful and conservative when stripping realms off.Russ Allbery
2007-12-06Fix the keytab principal validation regex to allow instancesRuss Allbery
containing periods. Otherwise, it's hard to manage host keytabs. Add a missing test suite for that method.
2007-12-06Don't say what the default remctl port is, since it's changed.Russ Allbery
2007-12-06Some bad wrapping protection.Russ Allbery
2007-12-06* Update standards version to 3.7.3 (no changes required).release/0.4debian/0.4-1Russ Allbery
2007-12-06Add a reference to the GPL v2.Russ Allbery
2007-12-06* Update debian/copyright using the information from LICENSE.Russ Allbery
2007-12-06* New upstream release.Russ Allbery
- Globally cache ACL verifiers. - Add the netdb-root ACL verifier, which requires root instances. - Determine object and ACL scheme classes from the database. - Coding style fixes and cleanup.
2007-12-06Release 0.4.Russ Allbery
2007-12-06Adjust for the tools to build-aux renaming.Russ Allbery
2007-12-05Further bits from Simon's code review.Russ Allbery
2007-12-05Various coding style fixes and cleanup based on a much-appreciatedRuss Allbery
code audit by Simon Cozens. I didn't take all of his advise, and he shouldn't be blamed for any remaining issues.
2007-12-05Coding style improvements.Russ Allbery
2007-12-05Bump version number for previous changes.Russ Allbery
2007-12-05Maintain a global cache of ACL verifiers in Wallet::ACL and reuse themRuss Allbery
over the life of the process if we see another ACL line from the same scheme, rather than only reusing ACL verifiers within a single ACL.
2007-12-05Determine the class for object and ACL schema implementations from theRuss Allbery
database rather than a hard-coded list and provide Wallet::Schema methods for adding new class mappings. Add a missing class mapping for the netdb ACL schema verifier.
2007-12-04Add a subclass of the NetDB ACL verifier that requires the principalRuss Allbery
have an instance of "root" and strips that instance before checking NetDB roles.
2007-12-04Update the alpha warning since the next release will be beta. Add theRuss Allbery
Net::Remctl requirement for the NetDB ACL verifier.
2007-12-04dh_installdirs similarly needs to have DH_OPTIONS unset.release/0.3debian/0.3-1Russ Allbery
2007-12-04Update TODO for 0.3.Russ Allbery
2007-12-04Update the release date for 0.3.Russ Allbery
2007-12-04Install the keytab ACL file (with no principals in it by default) intoRuss Allbery
/etc/remctl/acl in the keytab-backend package.
2007-12-04Rename tools to build-aux to follow the new GNU standard naming scheme.Russ Allbery
2007-12-01dh_install has to be called without any DH_OPTIONS set.Russ Allbery
2007-12-01Enable verbose to try to figure out WTF.Russ Allbery