summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2007-10-09Initial implementation of enctype restriction with a basic test suite.Russ Allbery
Still needs a more comprehensive test suite. Remove all attributes for a keytab object when it is destroyed so that when the object is recreated, it doesn't inherit attributes from its previous self. Add a test case for that for the sync attribute.
2007-10-08Fix some heading levels for attribute information.Russ Allbery
2007-10-08Include the server scripts in the distribution.release/0.2Russ Allbery
2007-10-08Add autogen to the distributed files.Russ Allbery
2007-10-08Release 0.2.Russ Allbery
2007-10-08Remove the Automake helper programs on make maintainer-clean.Russ Allbery
2007-10-08Add --with-wallet-server and --with-wallet-port.Russ Allbery
2007-10-08Add documentation for the --with-wallet-server option, which is currentlyRuss Allbery
required.
2007-10-08Add a missing close parenthesis to the wallet -h output.Russ Allbery
2007-10-07Default to a port of 0, which tells remctl to use its default.Russ Allbery
2007-10-07Use WALLET_SERVER and WALLET_PORT rather than SERVER and PORT.Russ Allbery
2007-10-07Add a CONFIGURATION section.Russ Allbery
2007-10-06Add standard README and NEWS files and organize TODO a bit more byRuss Allbery
release targets.
2007-10-06Include LICENSE. We don't have to list TODO explicitly; it's includedRuss Allbery
by default in the distribution.
2007-10-05Updates to the required test configuration for the kaserver sync tests.Russ Allbery
2007-10-05Remove some repetativeness in our license statement.Russ Allbery
2007-10-05Add comprehensive license information in LICENSE and update the copyrightRuss Allbery
and license statements in all files. Make sure that some files that were missing copyright information now have them. Reference LICENSE rather than README in all notices.
2007-10-05Flesh out EXTRA_DIST for all the new test suite and config files.Russ Allbery
2007-10-05Fix the keytab attribute handling to call getattr and setattr instead ofRuss Allbery
just attr to match the actual API.
2007-10-05The wallet client now automatically sets the sync attribute on a keytabRuss Allbery
object when get is called with the -S flag.
2007-10-05Refactor the remctl calls in the wallet client to share a common routine.Russ Allbery
2007-10-05Pull keytab handling in the client into a separate file for laterRuss Allbery
expansion. Use the fine-grained remctl API instead of the simple one since in some cases we'll be running multiple commands.
2007-10-05Pull the file writing code for the wallet client into a separate fileRuss Allbery
so that the srvtab and keytab management can share it. Write atomically to a new file and then link and rename to do an atomic update. Leave a backup copy of any file that's replaced.
2007-10-04Use die, warn, and xmalloc, now that we have them.Russ Allbery
2007-10-04Update runtests to the latest version. Fix various other missing orRuss Allbery
incorrect makefile and configure rules and some include issues so that the portability layer compiles and passes its test suite.
2007-10-04Initial import of a C portability framework and utility functions fromRuss Allbery
remctl so that the wallet client error handling can rest on a firmer foundation.
2007-10-04Fix error handling if we cannot dup stdout.Russ Allbery
2007-09-27Set MIME type to avoid diffs.Russ Allbery
2007-09-27Initial cut at srvtab support in the wallet client. This still requiresRuss Allbery
additional work and cleanup, particularly support for the sync attribute.
2007-09-26Include the synchronization configuration in show() output. Provide aRuss Allbery
new object method that subclasses can override to add attribute information to show() and remove the documentation about overriding show().
2007-09-26Add tests for the Kerberos v5 to Kerberos v4 name mapping and do moreRuss Allbery
tests of the machinery around kaserver synchronization even if we don't have a full configuration.
2007-09-26Add support for deleting principals out of the AFS kaserver (optionally)Russ Allbery
if synchronization is not set.
2007-09-26Various to-do updates.Russ Allbery
2007-09-25If synchronization is enabled, destroy the principal out of K4 when theRuss Allbery
keytab object is destroyed.
2007-09-25Add support for synchronizing a key with an AFS kaserver in the keytabRuss Allbery
object implementation, extracting the DES key with Authen::Krb5 (since ktutil doesn't work). Rename the KEYTAB_CACHE variable to KEYTAB_REMCTL_CACHE to match the rest of the keytab retrieval configuration and reorganize the Wallet::Config documentation to group related configuration options for the keytab backend. Fix a column name in the keytab_enctypes table to be more consistent with the rest of the schema.
2007-09-25Add a note about error codes and debugging.Russ Allbery
2007-09-25Be consistent in how we handle cells and realms in kasetkey. AssumeRuss Allbery
that all cells in the interfaces we call are actually realms, and assume that fully-qualified principals, when parsed from the command-line, will give us realms. If we are using the local cell, convert it to a realm at the very start and then don't worry about the conversion thereafter. Also improve debugging output in a few places.
2007-09-25Determine the cell of our target principal before we open an authserverRuss Allbery
connection and use that cell as the authserver cell.
2007-09-24Add support for attribute setting and retrieval to the front end andRuss Allbery
document them in the user documentation.
2007-09-20Take multiple values in the attr() method and convert it to a referenceRuss Allbery
to an array internally so that the callers don't have to be aware of the internal API.
2007-09-20Change the error handling of the Wallet::ACL list() method to return theRuss Allbery
empty list on errors and clear error() so that it can be used to distinguish between an error and an empty ACL.
2007-09-20Change flag_list to return the empty list on error and clear error.Russ Allbery
Change the documentation to tell the caller to call error() after an empty return to see if an error occurred.
2007-09-20Update the documentation to get rid of the stupid error return fromRuss Allbery
attr and instead tell the caller to call error() on an empty return to see if there was a problem.
2007-09-20Call attr() correctly when setting attributes, even if it doesn'tRuss Allbery
matter for this test.
2007-09-20Add support for attribute setting and retrieving to the high-levelRuss Allbery
interface with appropriate ACL support. Retrieving is controlled by the show ACL and setting is controlled by the store ACL, both falling back to owner.
2007-09-19Add generic attribute support to the object layer and update the APIRuss Allbery
documentation to talk about overriding it. Update some other bits of the API documentation to include more hints about how to handle overridden methods.
2007-09-19Redirect stderr from remctld to stdout so that it doesn't show up inRuss Allbery
the test summary.
2007-09-19Skip the unchanging tests if Net::Remctl isn't available.Russ Allbery
2007-09-19Implement unchanging support in the keytab object backend, which retrievesRuss Allbery
keytabs via remctl from the KDC.
2007-09-19Allow creation of a keytab object for a principal that already exists.Russ Allbery
Catch more errors when checking the existence of a principal. Add a test for creating a principal for which we don't have permissions.