| Age | Commit message (Collapse) | Author | 
|---|
|  | The test created krb5.conf first thing, but didn't delete it if
skipping all of the tests. | 
|  |  | 
|  |  | 
|  |  | 
|  |  | 
|  |  | 
|  |  | 
|  |  | 
|  | Now that the wallet client uses struct iovec, it needs to include the
relevant header file.  Import the portability layer for possible future
Windows support. | 
|  |  | 
|  | Update the wallet client, wallet-backend, and Wallet::Object::File
documentation for the support for storing data containing nul
characters using the new stdin support in remctld.  Add this to NEWS. | 
|  |  | 
|  |  | 
|  | If there is no third argument to store, read it from standard input
instead.  This is the preferred way of running wallet-backend, using
stdin=last support from remctl 2.14 and later.  Receiving the third
argument as a regular argument continues to be supported for backward
compatibility. | 
|  | Refactor the wallet client code to use remctl_commandv and send stores
with data containing nul. | 
|  | Remove some TODO items that are no longer relevant, either because they've
been implemented or because we no longer care about Kerberos v4 principal
name conversion. | 
|  |  | 
|  | Move all reporting from Wallet::Admin to Wallet::Report and simplify
the method names since they're now part of a dedicated reporting
class.  Similarly, create a new wallet-report script to wrap
Wallet::Report, moving all reporting commands to it from wallet-admin,
and simplify the commands since they're for a dedicated reporting
script.
Remove the contrib script wallet-report to wallet-summary so that it
doesn't conflict with the new reporting backend script. | 
|  | Change the API for keytab_rekey to match keytab, returning the keytab
as data instead of writing it to a file.  This simplifies the wallet
object implementation and moves the logic for reading the temporary
file into Wallet::Kadmin and its child classes.  (Eventually, there may
be a kadmin backend that doesn't require using a temporary file.)
Setting KEYTAB_TMP is now required to instantiate either the ::MIT or
::Heimdal Wallet::Kadmin classes. | 
|  | Heimdal supports retrieving a keytab containing the existing keys over
the kadmin protocol.  Move the support for using remctl to retrieve an
existing keytab into Wallet::Kadmin::MIT and provide two separate
methods in the Wallet::Kadmin interface: one which rekeys and one which
doesn't.  Implement the non-rekeying interface for Heimdal.  Expand the
test suite for the unchanging keytabs to include tests for the Heimdal
method. | 
|  | Pull the sync code out into separate methods to avoid a really long and
awkward attr method.  Document the limited object support for the sync
attribute. | 
|  |  | 
|  |  | 
|  | Now that we support multiple versions of Kerberos, use generic names
for the functions in the Wallet::Kadmin interface rather than the
commands from the MIT kadmin interface. | 
|  | Rather than duplicating the API documentation in both ::Heimdal and
::MIT, move it into Wallet::Kadmin and just reference that from the
subclasses.  Add documentation for exists(), since that's part of the
public API.  Move a few methods around and fix a few other minor
documentation differences. | 
|  | Remove the separate kadmin_client method by combining it with the
constructor, since that was the only place it was called. | 
|  | Take advantage of inheritance by providing the error method in
Wallet::Kadmin rather than separately in both the subclasses. | 
|  |  | 
|  | Only call fork_callback in Wallet::Kadmin::MIT if it's set, allowing
the module to work without setting it. | 
|  | Move the stub fork_callback method into Wallet::Kadmin and make both
Wallet::Kadmin::Heimdal and Wallet::Kadmin::MIT inherit from
Wallet::Kadmin.  Add POD documentation for fork_callback. | 
|  | The wallet client documentation said that you always needed an existing
ticket.  Mention that -u will work as well. | 
|  | Add a POD spelling test to the non-Perl-module part of the code and
move the documentation tests into a separate directory.  Merge the
POD syntax tests between client and server into one test.
Reformat all of the POD documentation to use 74 columns.  Fix a few
revealed spelling errors or weird wordings. | 
|  | Add .placeholder to the file list, fix the location of the Automake
support files that are now in build-aux, and remove an old reference
to TEST_FILES. | 
|  |  | 
|  | Also update the POD syntax check to the current version of that check
I use elsewhere.  Since I'm touching all the POD anyway, also rewrap
all of the POD to 74 columns.  Fix some references to MIT in the
Wallet::Kadmin::Heimdal module documentation. | 
|  | Simplify the build rules for the test suite to take advantage of the
improved runtests support for builddir != srcdir.  Stop doing Autoconf
substitution on full.conf now that we have that support. | 
|  | Anything that only was using substitution for the paths to the build
tree now uses $SOURCE and $BUILD instead.  Stop doing substitution.
Also fix tests/data/cmd-wrapper to use the environment variables. | 
|  | Now that runtests has been updated to a version that sets $SOURCE and
$BUILD, use that in the test cases rather than Autoconf substitutions. | 
|  |  | 
|  |  | 
|  |  | 
|  | * Update portable and util tests for C TAP Harness 1.1.
* Remove the need for Autoconf substitution in test programs.
* Support running a single test program with runtests -o.
* Properly handle test cases that are skipped in their entirety.
* Much improved C TAP library more closely matching Test::More.
Rewrite client/basic-t to use the new test library functions and my
current test case coding style. | 
|  | Use the Kerberos portability layer from rra-c-util 3.0 and avoid
Kerberos API calls deprecated on Heimdal.  Break util/util.h into
separate header files and update all source files accordingly.
The test suite is not yet updated.  That will come in subsequent
commits. | 
|  | Add replacements for mkstemp and setenv, since we now use them when
obtaining credentials in the client.  Fix the bool type with Sun Studio
12 on Solaris 10. | 
|  |  | 
|  | Also use set -e in autogen and add --force to autoreconf. | 
|  |  | 
|  | * Sanity-check the results of krb5-config before proceeding.
* Fall back on manual probing if krb5-config results don't work.
* Add --with-krb5-include and --with-krb5-lib configure options.
* Add --with-remctl-include and --with-remctl-lib configure options.
* Add --with-gssapi-include and --with-gssapi-lib configure options.
* Don't break if the user clobbers CPPFLAGS at build time.
* Suppress error output from krb5-config probes.
* Prefer KRB5_CONFIG over a path constructed from --with-*.
* Update GSS-API probes for Solaris 10's native implementation.
* Change AC_TRY_* to AC_*_IFELSE as recommended by Autoconf.
Also strip out more outdated AFS kaserver instructions from README. | 
|  | The wallet client now uses a temporary disk ticket cache when
obtaining tickets with the -u option rather than an in-memory cache,
allowing for a libremctl built against a different Kerberos
implementation than the wallet client.  This primarily helps with
testing. | 
|  |  |