summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2007-10-10Make enctype changes in sorted order so that the history trace is reliableRuss Allbery
and can be tested.
2007-10-10Redo history tracking for attributes. Currently, all of our attributesRuss Allbery
take multiple values, so log them like flags. Hopefully this will continue to work; if not, we'll have to revisit it later. Improve logging for unsetting of attributes.
2007-10-10Test rollback when attempting to set an invalid enctype.Russ Allbery
2007-10-10Start checking the history.Russ Allbery
2007-10-10Pass a timestamp in for trace information as well and check the timestampRuss Allbery
on show rather than zeroing it.
2007-10-10Add an object history method and tests for it.Russ Allbery
2007-10-09Fix foreign key reference in the history table for the object name.Russ Allbery
2007-10-09Bump version number for the keytab changes.Russ Allbery
2007-10-09Document the DBI and DBD::SQLite requirements.Russ Allbery
2007-10-09Add NEWS entry for enctypes. Clarify in the documentation the behaviorRuss Allbery
of the enctypes attribute when the unchanging flag is set.
2007-10-09Add user documentation for the enctypes attribute on keytabs. MentionRuss Allbery
that the enctype must be in the database in the keytab object API documentation. The README and NEWS files are now done.
2007-10-09Flesh out the rest of the tests for enctype handling.Russ Allbery
2007-10-09We have to check the validity of enctypes ourselves since SQLite doesn'tRuss Allbery
enforce referential integrity.
2007-10-09Initial implementation of enctype restriction with a basic test suite.Russ Allbery
Still needs a more comprehensive test suite. Remove all attributes for a keytab object when it is destroyed so that when the object is recreated, it doesn't inherit attributes from its previous self. Add a test case for that for the sync attribute.
2007-10-08Fix some heading levels for attribute information.Russ Allbery
2007-10-08Include the server scripts in the distribution.release/0.2Russ Allbery
2007-10-08Add autogen to the distributed files.Russ Allbery
2007-10-08Release 0.2.Russ Allbery
2007-10-08Remove the Automake helper programs on make maintainer-clean.Russ Allbery
2007-10-08Add --with-wallet-server and --with-wallet-port.Russ Allbery
2007-10-08Add documentation for the --with-wallet-server option, which is currentlyRuss Allbery
required.
2007-10-08Add a missing close parenthesis to the wallet -h output.Russ Allbery
2007-10-07Default to a port of 0, which tells remctl to use its default.Russ Allbery
2007-10-07Use WALLET_SERVER and WALLET_PORT rather than SERVER and PORT.Russ Allbery
2007-10-07Add a CONFIGURATION section.Russ Allbery
2007-10-06Add standard README and NEWS files and organize TODO a bit more byRuss Allbery
release targets.
2007-10-06Include LICENSE. We don't have to list TODO explicitly; it's includedRuss Allbery
by default in the distribution.
2007-10-05Updates to the required test configuration for the kaserver sync tests.Russ Allbery
2007-10-05Remove some repetativeness in our license statement.Russ Allbery
2007-10-05Add comprehensive license information in LICENSE and update the copyrightRuss Allbery
and license statements in all files. Make sure that some files that were missing copyright information now have them. Reference LICENSE rather than README in all notices.
2007-10-05Flesh out EXTRA_DIST for all the new test suite and config files.Russ Allbery
2007-10-05Fix the keytab attribute handling to call getattr and setattr instead ofRuss Allbery
just attr to match the actual API.
2007-10-05The wallet client now automatically sets the sync attribute on a keytabRuss Allbery
object when get is called with the -S flag.
2007-10-05Refactor the remctl calls in the wallet client to share a common routine.Russ Allbery
2007-10-05Pull keytab handling in the client into a separate file for laterRuss Allbery
expansion. Use the fine-grained remctl API instead of the simple one since in some cases we'll be running multiple commands.
2007-10-05Pull the file writing code for the wallet client into a separate fileRuss Allbery
so that the srvtab and keytab management can share it. Write atomically to a new file and then link and rename to do an atomic update. Leave a backup copy of any file that's replaced.
2007-10-04Use die, warn, and xmalloc, now that we have them.Russ Allbery
2007-10-04Update runtests to the latest version. Fix various other missing orRuss Allbery
incorrect makefile and configure rules and some include issues so that the portability layer compiles and passes its test suite.
2007-10-04Initial import of a C portability framework and utility functions fromRuss Allbery
remctl so that the wallet client error handling can rest on a firmer foundation.
2007-10-04Fix error handling if we cannot dup stdout.Russ Allbery
2007-09-27Set MIME type to avoid diffs.Russ Allbery
2007-09-27Initial cut at srvtab support in the wallet client. This still requiresRuss Allbery
additional work and cleanup, particularly support for the sync attribute.
2007-09-26Include the synchronization configuration in show() output. Provide aRuss Allbery
new object method that subclasses can override to add attribute information to show() and remove the documentation about overriding show().
2007-09-26Add tests for the Kerberos v5 to Kerberos v4 name mapping and do moreRuss Allbery
tests of the machinery around kaserver synchronization even if we don't have a full configuration.
2007-09-26Add support for deleting principals out of the AFS kaserver (optionally)Russ Allbery
if synchronization is not set.
2007-09-26Various to-do updates.Russ Allbery
2007-09-25If synchronization is enabled, destroy the principal out of K4 when theRuss Allbery
keytab object is destroyed.
2007-09-25Add support for synchronizing a key with an AFS kaserver in the keytabRuss Allbery
object implementation, extracting the DES key with Authen::Krb5 (since ktutil doesn't work). Rename the KEYTAB_CACHE variable to KEYTAB_REMCTL_CACHE to match the rest of the keytab retrieval configuration and reorganize the Wallet::Config documentation to group related configuration options for the keytab backend. Fix a column name in the keytab_enctypes table to be more consistent with the rest of the schema.
2007-09-25Add a note about error codes and debugging.Russ Allbery
2007-09-25Be consistent in how we handle cells and realms in kasetkey. AssumeRuss Allbery
that all cells in the interfaces we call are actually realms, and assume that fully-qualified principals, when parsed from the command-line, will give us realms. If we are using the local cell, convert it to a realm at the very start and then don't worry about the conversion thereafter. Also improve debugging output in a few places.