summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2007-10-05Add comprehensive license information in LICENSE and update the copyrightRuss Allbery
and license statements in all files. Make sure that some files that were missing copyright information now have them. Reference LICENSE rather than README in all notices.
2007-10-05Flesh out EXTRA_DIST for all the new test suite and config files.Russ Allbery
2007-10-05Fix the keytab attribute handling to call getattr and setattr instead ofRuss Allbery
just attr to match the actual API.
2007-10-05The wallet client now automatically sets the sync attribute on a keytabRuss Allbery
object when get is called with the -S flag.
2007-10-05Refactor the remctl calls in the wallet client to share a common routine.Russ Allbery
2007-10-05Pull keytab handling in the client into a separate file for laterRuss Allbery
expansion. Use the fine-grained remctl API instead of the simple one since in some cases we'll be running multiple commands.
2007-10-05Pull the file writing code for the wallet client into a separate fileRuss Allbery
so that the srvtab and keytab management can share it. Write atomically to a new file and then link and rename to do an atomic update. Leave a backup copy of any file that's replaced.
2007-10-04Use die, warn, and xmalloc, now that we have them.Russ Allbery
2007-10-04Update runtests to the latest version. Fix various other missing orRuss Allbery
incorrect makefile and configure rules and some include issues so that the portability layer compiles and passes its test suite.
2007-10-04Initial import of a C portability framework and utility functions fromRuss Allbery
remctl so that the wallet client error handling can rest on a firmer foundation.
2007-10-04Fix error handling if we cannot dup stdout.Russ Allbery
2007-09-27Set MIME type to avoid diffs.Russ Allbery
2007-09-27Initial cut at srvtab support in the wallet client. This still requiresRuss Allbery
additional work and cleanup, particularly support for the sync attribute.
2007-09-26Include the synchronization configuration in show() output. Provide aRuss Allbery
new object method that subclasses can override to add attribute information to show() and remove the documentation about overriding show().
2007-09-26Add tests for the Kerberos v5 to Kerberos v4 name mapping and do moreRuss Allbery
tests of the machinery around kaserver synchronization even if we don't have a full configuration.
2007-09-26Add support for deleting principals out of the AFS kaserver (optionally)Russ Allbery
if synchronization is not set.
2007-09-26Various to-do updates.Russ Allbery
2007-09-25If synchronization is enabled, destroy the principal out of K4 when theRuss Allbery
keytab object is destroyed.
2007-09-25Add support for synchronizing a key with an AFS kaserver in the keytabRuss Allbery
object implementation, extracting the DES key with Authen::Krb5 (since ktutil doesn't work). Rename the KEYTAB_CACHE variable to KEYTAB_REMCTL_CACHE to match the rest of the keytab retrieval configuration and reorganize the Wallet::Config documentation to group related configuration options for the keytab backend. Fix a column name in the keytab_enctypes table to be more consistent with the rest of the schema.
2007-09-25Add a note about error codes and debugging.Russ Allbery
2007-09-25Be consistent in how we handle cells and realms in kasetkey. AssumeRuss Allbery
that all cells in the interfaces we call are actually realms, and assume that fully-qualified principals, when parsed from the command-line, will give us realms. If we are using the local cell, convert it to a realm at the very start and then don't worry about the conversion thereafter. Also improve debugging output in a few places.
2007-09-25Determine the cell of our target principal before we open an authserverRuss Allbery
connection and use that cell as the authserver cell.
2007-09-24Add support for attribute setting and retrieval to the front end andRuss Allbery
document them in the user documentation.
2007-09-20Take multiple values in the attr() method and convert it to a referenceRuss Allbery
to an array internally so that the callers don't have to be aware of the internal API.
2007-09-20Change the error handling of the Wallet::ACL list() method to return theRuss Allbery
empty list on errors and clear error() so that it can be used to distinguish between an error and an empty ACL.
2007-09-20Change flag_list to return the empty list on error and clear error.Russ Allbery
Change the documentation to tell the caller to call error() after an empty return to see if an error occurred.
2007-09-20Update the documentation to get rid of the stupid error return fromRuss Allbery
attr and instead tell the caller to call error() on an empty return to see if there was a problem.
2007-09-20Call attr() correctly when setting attributes, even if it doesn'tRuss Allbery
matter for this test.
2007-09-20Add support for attribute setting and retrieving to the high-levelRuss Allbery
interface with appropriate ACL support. Retrieving is controlled by the show ACL and setting is controlled by the store ACL, both falling back to owner.
2007-09-19Add generic attribute support to the object layer and update the APIRuss Allbery
documentation to talk about overriding it. Update some other bits of the API documentation to include more hints about how to handle overridden methods.
2007-09-19Redirect stderr from remctld to stdout so that it doesn't show up inRuss Allbery
the test summary.
2007-09-19Skip the unchanging tests if Net::Remctl isn't available.Russ Allbery
2007-09-19Implement unchanging support in the keytab object backend, which retrievesRuss Allbery
keytabs via remctl from the KDC.
2007-09-19Allow creation of a keytab object for a principal that already exists.Russ Allbery
Catch more errors when checking the existence of a principal. Add a test for creating a principal for which we don't have permissions.
2007-09-19Drop the leading underscore for internal methods. I haven't been usingRuss Allbery
that convention elsewhere.
2007-09-18Document the locked flag in the server backend and client man pages.Russ Allbery
Document locked flag issues when implementing a new object type.
2007-09-18Test that retrieving data from a locked object still works.Russ Allbery
2007-09-18Implement the locked flag.Russ Allbery
2007-09-18Note cases where one might want to override flag_set() or flag_clear().Russ Allbery
2007-09-18Flags are now displayed as part of show.Russ Allbery
2007-09-18Add flag clear and flag set to the public interface.Russ Allbery
2007-09-18Add flag_set and flag_clear to Wallet::Server.Russ Allbery
2007-09-17Add methods to the base object to set, clear, list, and check flags. WrapRuss Allbery
attribute setting in objects inside eval to catch SQL errors and set the object error accordingly rather than throwing an exception.
2007-09-17Add additional information about the history entry semantics when loggingRuss Allbery
flag changes.
2007-09-17Add information about the attribute implementation and reorganize a bit.Russ Allbery
2007-09-17Add an acl show command to the front end that calls the appropriateRuss Allbery
Wallet::Server method.
2007-09-17Add an acl_show() method to Wallet::Server that calls the underlying ACLRuss Allbery
show() method.
2007-09-17In show() for an object, call show() for each of the ACLs on that objectRuss Allbery
and append that information to the object description.
2007-09-17Add a show method to Wallet::ACL.Russ Allbery
2007-09-16Add a few more test cases.Russ Allbery