aboutsummaryrefslogtreecommitdiff
path: root/TODO
AgeCommit message (Collapse)Author
2017-01-01Add passing realm into krb5_appdefault_* to TODORuss Allbery
2016-01-03Add Wallet::ACL::External ACL typeRuss Allbery
A new ACL type, external (Wallet::ACL::External), is now supported. This ACL runs an external command to check if access is allowed, and passes the principal and the ACL identifier to that command. To enable this ACL type for an existing wallet database, use wallet-admin to register the new verifier. Change-Id: I21b72b4373eefc92985aca1505e2d1a1ec699602
2016-01-03Flesh out NEWS and update TODO for merged changesRuss Allbery
Change-Id: I714a6298c36e6fd7eca6ee3acb01637a96773647
2016-01-03Remove Stanford-internal JIRA identifiers from TODORuss Allbery
Change-Id: I97f466b2221b71ffcc60dd4f1b48e5986496ff46
2014-08-02Update JIRA references in TODO, remove finished itemsRuss Allbery
JIRA's structure has been reorganized, so change the JIRA issue references to be accurate again. Add JIRA issues for the things that hadn't been entered into JIRA yet. Change-Id: I385d19b09108d94430bbe142a2b3f6f80b5e4c39 Reviewed-on: https://gerrit.stanford.edu/1588 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2014-07-15Fix ordering of table drops on wallet-admin destroyRuss Allbery
Fix the ordering of table drops during a wallet-admin destroy action to remove tables with foreign key references before the tables they are referencing. Should fix destroy in MySQL and other database engines that enforce referential integrity. Change-Id: I9b37c516f67acdf1d9e25222f067df6749e8c769 Reviewed-on: https://gerrit.stanford.edu/1558 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2014-07-15Update TODO for more Commerzbank contributions, other changesRuss Allbery
Change-Id: I478ed7812a4d25641ee85846e4092e17536e5a1d Reviewed-on: https://gerrit.stanford.edu/1557 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2013-11-01Flesh out TODO with lots more workRuss Allbery
Change-Id: I8f63cfd9692039f37ecfd46ab6072aa2f71c344d Reviewed-on: https://gerrit.stanford.edu/1328 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2013-02-13Install the wallet schema during make installRuss Allbery
Install the wallet schema files generated by DBIx::Class for the various supported database engines into /usr/local/share/wallet (by default, using pkgdatadir) on make install. Set the default $DB_DDL_DIRECTORY value in Wallet::Config accordingly. Change-Id: I7ec52b171bc6aca2c3e1040c037e7cf24553231f Reviewed-on: https://gerrit.stanford.edu/794 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2013-01-31Resynchronize TODO with JIRARuss Allbery
Change-Id: If4bd4a62517572fed6fe911bc39a0e5c6be36e76 Reviewed-on: https://gerrit.stanford.edu/732 Reviewed-by: Russ Allbery <rra@stanford.edu> Tested-by: Russ Allbery <rra@stanford.edu>
2012-11-04Add new acl check commandRuss Allbery
Add a new acl check command which, given an ACL ID, prints yes if that ACL already exists and no otherwise. This is parallel to the check command for objects. Also fix some documentation errors in the wallet client documentation, saying that the check command doesn't require any ACL and fixing one place where "show" was used instead of "store".
2012-10-03Add splitting get and update to TODORuss Allbery
2012-08-30Add additional TODOs for initial keying and contacting ownersRuss Allbery
2012-07-16Add a few more wallet ideas to TODORuss Allbery
2012-07-10Minor TODO update on database layer redesignRuss Allbery
2012-06-06Resync TODO with JIRARuss Allbery
2012-04-03Add initial LDAP attribute ACL verifierRuss Allbery
A new ACL type, ldap-attr (Wallet::ACL::LDAP::Attribute), is now supported. This ACL type grants access if the LDAP entry corresponding to the principal contains the attribute name and value specified in the ACL. The Net::LDAP and Authen::SASL Perl modules are required to use this ACL type. New configuration settings are required as well; see Wallet::Config for more information. To enable this ACL type for an existing wallet database, use wallet-admin to register the new verifier.
2011-12-31Add IDG JIRA ticket number for one TODO itemRuss Allbery
2011-12-31Resync with JIRARuss Allbery
Add a missing TODO item for purging host-related objects that was filed in JIRA.
2011-08-15Check command for ACLs to TODORuss Allbery
2011-06-20Add a comment field to objectsRuss Allbery
Add a comment field to objects and corresponding commands to wallet-backend and wallet to set and retrieve it. The comment field can only be set by the owner or wallet administrators but can be seen by anyone on the show ACL.
2011-06-12Add checksums of file objects and refreshing to TODORuss Allbery
2011-05-17Remove completed TODO entriesRuss Allbery
2010-07-29Add NEWS and remove TODO for wallet-rekeyRuss Allbery
2010-05-12Add a report of all objects that have never been downloadedRuss Allbery
Add a objects unused report to wallet-report and Wallet::Report, returning all objects that have never been downloaded (in other words, have never been the target of a get command).
2010-03-16Add TODO to explore anonymous PKINITRuss Allbery
2010-03-08Add additional reports needed to TODORuss Allbery
2010-03-05Update TODO for recent changesRuss Allbery
2010-03-03Note that all front-ends need a help functionRuss Allbery
2010-02-20Reformat TODO by area instead of time frameRuss Allbery
Remove some TODO items that are no longer relevant, either because they've been implemented or because we no longer care about Kerberos v4 principal name conversion.
2010-02-19The client now builds on Heimdal, remove from TODORuss Allbery
2010-02-19Refactor reporting into a separate module and scriptRuss Allbery
Move all reporting from Wallet::Admin to Wallet::Report and simplify the method names since they're now part of a dedicated reporting class. Similarly, create a new wallet-report script to wrap Wallet::Report, moving all reporting commands to it from wallet-admin, and simplify the commands since they're for a dedicated reporting script. Remove the contrib script wallet-report to wallet-summary so that it doesn't conflict with the new reporting backend script.
2010-02-18Support unchanging keytabs with Heimdal without remctlRuss Allbery
Heimdal supports retrieving a keytab containing the existing keys over the kadmin protocol. Move the support for using remctl to retrieve an existing keytab into Wallet::Kadmin::MIT and provide two separate methods in the Wallet::Kadmin interface: one which rekeys and one which doesn't. Implement the non-rekeying interface for Heimdal. Expand the test suite for the unchanging keytabs to include tests for the Heimdal method.
2010-02-18Refactor sync handling in Wallet::Object::KeytabRuss Allbery
Pull the sync code out into separate methods to avoid a really long and awkward attr method. Document the limited object support for the sync attribute.
2010-02-18KRBTYPE is already case-insensitive; remove from TODORuss Allbery
2010-02-18Rename functions in Wallet::Kadmin APIRuss Allbery
Now that we support multiple versions of Kerberos, use generic names for the functions in the Wallet::Kadmin interface rather than the commands from the MIT kadmin interface.
2010-02-09Use a temporary disk cache in the wallet client instead of memoryRuss Allbery
The wallet client now uses a temporary disk ticket cache when obtaining tickets with the -u option rather than an in-memory cache, allowing for a libremctl built against a different Kerberos implementation than the wallet client. This primarily helps with testing.
2010-02-09Remove kaserver synchronization support from the wallet clientRuss Allbery
The wallet client no longer enables kaserver synchronization when a srvtab is requested with -S. Instead, it just extracts the DES key from the keytab and writes it to a srvtab. It no longer forces the kvno of the srvtab to 0 (a Stanford-specific action) and instead preserves the kvno from the key in the keytab. This should now do the right thing for sites that use a KDC that serves both Kerberos v4 and Kerberos v5 from the same database.
2010-02-09Add more to-do items for the next releaseRuss Allbery
2010-02-08More to-do items for the 0.10 releaseRuss Allbery
2010-02-08Add to-do items for the next releaseRuss Allbery
2010-01-19Update NEWS and TODO for recent changesRuss Allbery
2009-05-08Add switching to Authen::Krb5::Admin to TODO.Russ Allbery
2009-04-26Add the case-insensitivity bug in object names to TODO.Russ Allbery
2008-11-14Add mass ACL change to TODO.Russ Allbery
2008-07-07Add a hook for ACL naming enforcement to TODO.Russ Allbery
2008-04-24The wallet command-line client now reads the data for store from aRuss Allbery
file (using -f) or from standard input (if -f wasn't given) when the data isn't specified on the command line. The data still must not contain nul characters.
2008-04-24Perl 5.8 is required to run the test suite, but IO::String is not.Russ Allbery
2008-04-24Add supporting keytab authentication.Russ Allbery
2008-04-24Add a test suite for wallet -u.Russ Allbery
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-05 21:53:14 +0000