summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-02-07Added POD testing for the client and server documentation.Russ Allbery
2008-02-07Include news message for previous commit.Russ Allbery
2008-02-07Add new exists and autocreate wallet server interfaces. The firstRuss Allbery
states whether a given object exists and the second attempts to create the object using the default owner rules. Remove default owner handling from the create interface, which is now for administrators only. Remove server-side auto-creation of objects on get or store and instead have the client check for object existence and call autocreate if necessary. This removes confusion between default ACLs and administrative object creation for users who are also on the ADMIN ACL.
2008-02-07Fix copyright date.Russ Allbery
2008-02-07Correctly enable syslog logging in wallet-backend.Russ Allbery
2008-02-07Update copyright date.Russ Allbery
2008-02-07Switch to our, which works fine with testing.Russ Allbery
2008-02-07The current version of Net::Remctl can't handle explicit undef or theRuss Allbery
empty string as a principal argument. Be careful not to provide a principal argument if no principal was set. This workaround can be removed once we depend on a later version of Net::Remctl.
2008-02-07Add additional ideas from jhutz.Russ Allbery
2008-02-07Add a new autocreate API call that tries to create an object using theRuss Allbery
default ACLs. Remove autocreation support from create, which now requires that one be on the ADMIN ACL, and from get and store. The wallet client will soon know how to do the right thing.
2008-02-07Add a check command to the wallet server to determine whether an objectRuss Allbery
already exists.
2008-02-07When creating a srvtab based on a just-downloaded keytab, extract theRuss Allbery
srvtab key before merging the keytab into an existing file. Otherwise, if the new keys had a lower kvno than the old keys (possible after deleting and recreating the object), the wrong key would be extracted for the srvtab.
2008-02-07Add UNUSED markers for older versions of Kerberos.Russ Allbery
2008-02-06Check naming policy on wallet object creation before checking theRuss Allbery
default ACLs to avoid creating and stranding an ACL when the naming policy check fails.
2008-02-05Fix the example remctl configuration for keytab-backend to use theRuss Allbery
correct script name.
2008-02-01keytab-backend now passes kadmin.local ktadd its options in a specificRuss Allbery
order to satisfy the picky option parser.
2008-01-31* Create /var/lib/keytabs in the keytab-backend package.Russ Allbery
2008-01-28Upstream ships the wallet-report man page; we just have to install it.debian/0.6-1Russ Allbery
2008-01-28Fix installation location of wallet-report.Russ Allbery
2008-01-28* Add --enable-reduced-depends to configure to eliminate unnecessaryRuss Allbery
shared library dependencies.
2008-01-28Build and distribute a man page for wallet-report. Include libtest.shRuss Allbery
in the distribution.
2008-01-28Restore the Debian-specific bit in the copyright file.Russ Allbery
2008-01-28Finalize 0.6-1 changes.Russ Allbery
2008-01-28* Change hard-coded wallet server to wallet.stanford.edu.Russ Allbery
2008-01-28Initial packaging for 0.6-1.Russ Allbery
2008-01-28Release 0.6.release/0.6Russ Allbery
2008-01-28Minor NEWS updates for wallet-report and the new configure option.Russ Allbery
2008-01-25Add a keytab reporting script.Russ Allbery
2008-01-24Add a wallet-admin program which can initialize and destroy theRuss Allbery
database and list all objects and ACLs in the database.
2008-01-23Add the Wallet::Admin and Wallet::Database Perl modules and the admin.tRuss Allbery
test script.
2008-01-23Avoid return undef as a matter of style.Russ Allbery
2008-01-23Fix license header layout.Russ Allbery
2008-01-23Return IDs and names from list_acls.Russ Allbery
2008-01-23No longer any reason to load DBI directly here.Russ Allbery
2008-01-23Add Wallet::Admin interfaces to list all objects and all ACLs in theRuss Allbery
database.
2008-01-23Only disconnect the database handle during Wallet::Server objectRuss Allbery
destruction if the database handle hasn't already been destroyed.
2008-01-23Fix the module inclusions.Russ Allbery
2008-01-23Remove dupliate use of Wallet::Admin.Russ Allbery
2008-01-23Add a destroy() method to the Wallet::Admin object and use that insteadRuss Allbery
of Wallet::Schema::drop in the test suite.
2008-01-23Refactor database initialization into a new Wallet::Admin module.Russ Allbery
2008-01-23Add a pointer to the wallet URL in the documentation.Russ Allbery
2008-01-22Update documentation for the API to Wallet::Object::Base andRuss Allbery
Wallet::ACL to take Wallet::Database objects instead of database handles.
2008-01-22Add a Wallet::Database class that now holds the database connection codeRuss Allbery
previously in Wallet::Server. Remove all the attribute setting on database handles in the other classes since Wallet::Database handles that initialization.
2008-01-19We need a test suite for wallet -u.Russ Allbery
2008-01-19Various todo updates around recently added features.Russ Allbery
2008-01-19The wallet client now supports a -u option, saying to obtain KerberosRuss Allbery
credentials for the given user and use those for authentication rather than using an existing ticket cache.
2008-01-19Note that the file writing change is a security issue.Russ Allbery
2008-01-19Add the new test suite files.Russ Allbery
2008-01-19If -f is used and the output file name with ".new" appended alreadyRuss Allbery
exists, unlink it first and then create it safely rather than truncating it. This is much safer when creating files in a world-writable directory. Also add documentation for keytab merging.
2008-01-19When downloading a keytab to a file that already exists, merge the newRuss Allbery
keytab keys into that file rather than moving aside the old keytab and creating a new keytab with only the new keys. Also fix get handling in the client for all types other than keytabs. This isn't visible yet since the server doesn't yet support other types of objects.