| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-02-09 | Use a temporary disk cache in the wallet client instead of memory | Russ Allbery | |
| The wallet client now uses a temporary disk ticket cache when obtaining tickets with the -u option rather than an in-memory cache, allowing for a libremctl built against a different Kerberos implementation than the wallet client. This primarily helps with testing. | |||
| 2010-02-09 | Remove kaserver synchronization support from the wallet client | Russ Allbery | |
| The wallet client no longer enables kaserver synchronization when a srvtab is requested with -S. Instead, it just extracts the DES key from the keytab and writes it to a srvtab. It no longer forces the kvno of the srvtab to 0 (a Stanford-specific action) and instead preserves the kvno from the key in the keytab. This should now do the right thing for sites that use a KDC that serves both Kerberos v4 and Kerberos v5 from the same database. | |||
| 2010-02-09 | Add more to-do items for the next release | Russ Allbery | |
| 2010-02-08 | More to-do items for the 0.10 release | Russ Allbery | |
| 2010-02-08 | Add to-do items for the next release | Russ Allbery | |
| 2010-01-19 | Update NEWS and TODO for recent changes | Russ Allbery | |
| 2009-05-08 | Add switching to Authen::Krb5::Admin to TODO. | Russ Allbery | |
| 2009-04-26 | Add the case-insensitivity bug in object names to TODO. | Russ Allbery | |
| 2008-11-14 | Add mass ACL change to TODO. | Russ Allbery | |
| 2008-07-07 | Add a hook for ACL naming enforcement to TODO. | Russ Allbery | |
| 2008-04-24 | The wallet command-line client now reads the data for store from a | Russ Allbery | |
| file (using -f) or from standard input (if -f wasn't given) when the data isn't specified on the command line. The data still must not contain nul characters. | |||
| 2008-04-24 | Perl 5.8 is required to run the test suite, but IO::String is not. | Russ Allbery | |
| 2008-04-24 | Add supporting keytab authentication. | Russ Allbery | |
| 2008-04-24 | Add a test suite for wallet -u. | Russ Allbery | |
| 2008-04-22 | Add providing a way to list all objects for which the connecting user | Russ Allbery | |
| has show ACLs. | |||
| 2008-04-10 | Add WebAuth keyring object backend. | Russ Allbery | |
| 2008-04-07 | Add a test suite for kasetkey. | Russ Allbery | |
| 2008-03-21 | Add prettier ACL names in history entries. | Russ Allbery | |
| 2008-03-18 | Add syntax-checking ACL entries. | Russ Allbery | |
| 2008-02-13 | Release 0.8. | Russ Allbery | |
| 2008-02-13 | wallet-admin now supports registering new object or ACL verifier | Russ Allbery | |
| implementations in the database. | |||
| 2008-02-12 | Add a few additional bits. | Russ Allbery | |
| 2008-02-09 | Add file object support to the wallet server. | Russ Allbery | |
| 2008-02-07 | Some reorganizing and prioritization. | Russ Allbery | |
| 2008-02-07 | Added POD testing for the client and server documentation. | Russ Allbery | |
| 2008-02-07 | Add additional ideas from jhutz. | Russ Allbery | |
| 2008-01-25 | Add a keytab reporting script. | Russ Allbery | |
| 2008-01-24 | Add a wallet-admin program which can initialize and destroy the | Russ Allbery | |
| database and list all objects and ACLs in the database. | |||
| 2008-01-19 | We need a test suite for wallet -u. | Russ Allbery | |
| 2008-01-19 | Various todo updates around recently added features. | Russ Allbery | |
| 2008-01-19 | The wallet client now supports a -u option, saying to obtain Kerberos | Russ Allbery | |
| credentials for the given user and use those for authentication rather than using an existing ticket cache. | |||
| 2008-01-19 | When downloading a keytab to a file that already exists, merge the new | Russ Allbery | |
| keytab keys into that file rather than moving aside the old keytab and creating a new keytab with only the new keys. Also fix get handling in the client for all types other than keytabs. This isn't visible yet since the server doesn't yet support other types of objects. | |||
| 2008-01-17 | Support enforcing a naming policy for wallet objects via a Perl | Russ Allbery | |
| function in the wallet server configuration file. | |||
| 2008-01-05 | The wallet client can now get the server, port, principal, and remctl | Russ Allbery | |
| type from krb5.conf as well as from compile-time defaults and command-line options. | |||
| 2008-01-04 | Dates are now displayed in a more normal format. | Russ Allbery | |
| 2008-01-04 | The build system now probes for GSS-API, Kerberos v5 and v4, and AFS | Russ Allbery | |
| libraries as necessary rather than hard-coding libraries. Building on systems without strong shared library dependencies and building against static libraries should now work. Building kasetkey (for AFS kaserver synchronization) is now optional and not enabled by default. Pass --with-afs to enable it. This allows wallet to be easily built in an environment without AFS. | |||
| 2007-12-06 | Release 0.4. | Russ Allbery | |
| 2007-12-05 | Further bits from Simon's code review. | Russ Allbery | |
| 2007-12-05 | Maintain a global cache of ACL verifiers in Wallet::ACL and reuse them | Russ Allbery | |
| over the life of the process if we see another ACL line from the same scheme, rather than only reusing ACL verifiers within a single ACL. | |||
| 2007-12-05 | Determine the class for object and ACL schema implementations from the | Russ Allbery | |
| database rather than a hard-coded list and provide Wallet::Schema methods for adding new class mappings. Add a missing class mapping for the netdb ACL schema verifier. | |||
| 2007-12-04 | Update TODO for 0.3. | Russ Allbery | |
| 2007-12-01 | The wallet backend test suite now supports using a database other than | Russ Allbery | |
| SQLite for testing. Also start a new Util.pm module for the test suite and move the contents sub into that module. More to follow. | |||
| 2007-11-20 | Further TODO updates around ACL verifiers, multiple ACL classes, and an | Russ Allbery | |
| ACL implementation that works from a list of entries in memory. | |||
| 2007-11-20 | Add support for running a user-defined function whenever an object is | Russ Allbery | |
| created by a non-ADMIN user and using the default owner ACL returned by that function provided that the calling user is authorized by that ACL. This permits dynamic creation of new objects based on a default owner ACL programmatically determined from the name of the object. | |||
| 2007-11-15 | Add an ACL verifier that checks access against NetDB roles using the | Russ Allbery | |
| NetDB remctl interface. | |||
| 2007-11-14 | The wallet backend script now logs all commands and errors to syslog. | Russ Allbery | |
| 2007-10-11 | Add an acl history function to the server backend and the client | Russ Allbery | |
| documentation and test it. Update NEWS and TODO for the completion of the history code. | |||
| 2007-10-10 | Add some additional history items that I'm not going to get to right | Russ Allbery | |
| away. | |||
| 2007-10-09 | Add user documentation for the enctypes attribute on keytabs. Mention | Russ Allbery | |
| that the enctype must be in the database in the keytab object API documentation. The README and NEWS files are now done. | |||
| 2007-10-06 | Add standard README and NEWS files and organize TODO a bit more by | Russ Allbery | |
| release targets. | |||
 |
index : krb5-wallet.git | |
| Unnamed repository; edit this file 'description' to name the repository. | www-data |
| summaryrefslogtreecommitdiff |