aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2007-09-01Add the URL of the wallet distribution page.Russ Allbery
2007-09-01Note that not all objects support store.Russ Allbery
2007-09-01Add acl destroy as a command, add newlines after the owner, expires, andRuss Allbery
getacl returns, and handle undef returns from owner, expires, and getacl that aren't errors.
2007-09-01Test a couple more ADMIN ACL manipulation cases.Russ Allbery
2007-09-01Test another case around the ADMIN ACL.Russ Allbery
2007-09-01Add some additional safeguards to ensure that users cannot destroy,Russ Allbery
rename, or remove the last entry from the ADMIN ACL. Add full documentation for Wallet::Server.
2007-08-31Remove duplicate error documentation.Russ Allbery
2007-08-31Use a better method of setting the internal error that automaticallyRuss Allbery
adjusts for trailing newlines and exception detritus, saving duplicate code. Standardize the documentation of the error() method and document using this in child classes of the generic ACL and Object classes. Disable printing of errors during connect in Wallet::Server since we're going to throw our own exception.
2007-08-31A few more items.Russ Allbery
2007-08-31More of the documentation is finished.Russ Allbery
2007-08-31Add documentation.Russ Allbery
2007-08-31Check for proper handling of lots of configuration errors or failureRuss Allbery
to run kadmin.
2007-08-31Check handling of invalid database configuration and failure to connectRuss Allbery
to the database.
2007-08-31Be considerably more robust in the face of configuration errors. CheckRuss Allbery
our configuration and die if it isn't correct. Catch all the exceptions thrown by the _kadmin method and do something with them. Print a warning and then rethrow the exception in the parent when running a non-existent kadmin binary rather than throwing an exception in the child, which doesn't close things down cleanly. Be robust against an undefined KEYTAB_FLAGS setting. Ensure KEYTAB_TMP is set. Also some minor doc improvements.
2007-08-31Allow empty DB_INFO and DB_NAME settings as long as they're defined.Russ Allbery
2007-08-31Remove the ACL API, which is now in the Wallet::ACL documentation, andRuss Allbery
rework the introduction a little.
2007-08-31Add documentation.Russ Allbery
2007-08-31Fix some documentation issues around trace information and add more SEERuss Allbery
ALSO references.
2007-08-31Add a few more SEE ALSO references.Russ Allbery
2007-08-31Add documentation.Russ Allbery
2007-08-31Testing is basically done. Add testing of the backends, what little bitRuss Allbery
of code is in them, and add some additional neat ideas for the future.
2007-08-31Implement argument checking. Stop explicitly including the MySQL driverRuss Allbery
since DBI doesn't require it.
2007-08-31You don't have to explicitly load the driver module for DBI.Russ Allbery
2007-08-30Added a full test suite for Wallet::Object::Keytab and instructions onRuss Allbery
how to set up and run it.
2007-08-30Fix the valid principal check and fix assumptions about who qualifiesRuss Allbery
principals in all the kadmin functions. Pass the realm to the kadmin command. Parse ktadd errors properly. Call _kadmin_ktadd with the correct arguments.
2007-08-30Finish the test suite. This should now be fairly comprehensive.Russ Allbery
2007-08-30Fix ACL verification for destroy and flags actions. Clear the internalRuss Allbery
error before accessor functions that can return undef not because of an error but just because the column is null so that the caller can tell the difference.
2007-08-30Checkpoint. Add tests for basic object operations.Russ Allbery
2007-08-30Test clearing attributes.Russ Allbery
2007-08-30Return true from object creation, not the new object, which would be aRuss Allbery
layering violation. Fix permission denied error messages for store. Don't give administrators global access to get and store, since it would encourage bad ACL practices. When checking ACLs, instantiate the ACL object correctly. Support clearing attributes and propagate object errors into the server error correctly. Reject stores of undefined data (the empty string is okay).
2007-08-30Don't allow empty object types or names. Return true from settingRuss Allbery
attributes rather than the new value; returning the new value is kind of pointless and makes it harder to test. Add support for clearing attributes by passing in the empty string as the new value.
2007-08-30Do not require (or allow) principals to be qualified with the realm.Russ Allbery
2007-08-30Note that we should switch to using names for ACLs in errors to be moreRuss Allbery
friendly.
2007-08-30Initial test suite for the Wallet::Server interface. Right now, justRuss Allbery
checks the ACL management functions.
2007-08-30Properly clean up errors from exceptions. Properly catch exceptions whenRuss Allbery
creating ACL objects in Wallet::Server. Don't return the ACL object from the acl_create method of Wallet::Server -- it's a layering violation.
2007-08-30Unlink the database before creating it to protect against previous testRuss Allbery
failures.
2007-08-30Add a test for renaming to an existing name. Unlink the database beforeRuss Allbery
creating it to protect against previous test failures.
2007-08-30Finish the test suite for the ACL layer.Russ Allbery
2007-08-30Add primary keys for tables where everything is a key to be sure that weRuss Allbery
get the uniqueness constraint.
2007-08-30Don't reuse the same reference in list; expand each return separately.Russ Allbery
Reject check with an empty principal.
2007-08-30Add an initial test suite for ACLs. Not all the methods are checked yet.Russ Allbery
2007-08-30use all the modules we need.Russ Allbery
2007-08-30Reject all-numeric ACL names since they're ambiguous. Change the storedRuss Allbery
name on rename.
2007-08-30Add the additional ACL verifiers that need to be written.Russ Allbery
2007-08-30Rename acl.t to verifier.t to free up acl.t for tests of the more generalRuss Allbery
ACL interface.
2007-08-30Clean up all exception output when storing it in the error variable toRuss Allbery
remove the " at line" stuff added by Perl and the newlines so that the errors stored in objects are consistent. Fix various bugs in the base object, including a few more type vs. name inversions and use of object instead of name. Allow owners to be specified as ACL names instead of IDs, and change the ID to a name in show. Add a new test suite for the base object implementation.
2007-08-30Fix all the interfaces so that objects are identified as type, name, notRuss Allbery
name, type, and fix the schema for the places where I'd renamed name to object for no good reason. I don't know what I was thinking originally.
2007-08-30Adjust for the classes we're actually using.Russ Allbery
2007-08-30Need history functions.Russ Allbery
2007-08-30Test case for database initialization.Russ Allbery