Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-04-24 | The wallet command-line client now reads the data for store from a | Russ Allbery | |
file (using -f) or from standard input (if -f wasn't given) when the data isn't specified on the command line. The data still must not contain nul characters. | |||
2008-04-24 | Perl 5.8 is required to run the test suite, but IO::String is not. | Russ Allbery | |
2008-04-24 | Add supporting keytab authentication. | Russ Allbery | |
2008-04-24 | Add a test suite for wallet -u. | Russ Allbery | |
2008-04-22 | Add providing a way to list all objects for which the connecting user | Russ Allbery | |
has show ACLs. | |||
2008-04-10 | Add WebAuth keyring object backend. | Russ Allbery | |
2008-04-07 | Add a test suite for kasetkey. | Russ Allbery | |
2008-03-21 | Add prettier ACL names in history entries. | Russ Allbery | |
2008-03-18 | Add syntax-checking ACL entries. | Russ Allbery | |
2008-02-13 | Release 0.8. | Russ Allbery | |
2008-02-13 | wallet-admin now supports registering new object or ACL verifier | Russ Allbery | |
implementations in the database. | |||
2008-02-12 | Add a few additional bits. | Russ Allbery | |
2008-02-09 | Add file object support to the wallet server. | Russ Allbery | |
2008-02-07 | Some reorganizing and prioritization. | Russ Allbery | |
2008-02-07 | Added POD testing for the client and server documentation. | Russ Allbery | |
2008-02-07 | Add additional ideas from jhutz. | Russ Allbery | |
2008-01-25 | Add a keytab reporting script. | Russ Allbery | |
2008-01-24 | Add a wallet-admin program which can initialize and destroy the | Russ Allbery | |
database and list all objects and ACLs in the database. | |||
2008-01-19 | We need a test suite for wallet -u. | Russ Allbery | |
2008-01-19 | Various todo updates around recently added features. | Russ Allbery | |
2008-01-19 | The wallet client now supports a -u option, saying to obtain Kerberos | Russ Allbery | |
credentials for the given user and use those for authentication rather than using an existing ticket cache. | |||
2008-01-19 | When downloading a keytab to a file that already exists, merge the new | Russ Allbery | |
keytab keys into that file rather than moving aside the old keytab and creating a new keytab with only the new keys. Also fix get handling in the client for all types other than keytabs. This isn't visible yet since the server doesn't yet support other types of objects. | |||
2008-01-17 | Support enforcing a naming policy for wallet objects via a Perl | Russ Allbery | |
function in the wallet server configuration file. | |||
2008-01-05 | The wallet client can now get the server, port, principal, and remctl | Russ Allbery | |
type from krb5.conf as well as from compile-time defaults and command-line options. | |||
2008-01-04 | Dates are now displayed in a more normal format. | Russ Allbery | |
2008-01-04 | The build system now probes for GSS-API, Kerberos v5 and v4, and AFS | Russ Allbery | |
libraries as necessary rather than hard-coding libraries. Building on systems without strong shared library dependencies and building against static libraries should now work. Building kasetkey (for AFS kaserver synchronization) is now optional and not enabled by default. Pass --with-afs to enable it. This allows wallet to be easily built in an environment without AFS. | |||
2007-12-06 | Release 0.4. | Russ Allbery | |
2007-12-05 | Further bits from Simon's code review. | Russ Allbery | |
2007-12-05 | Maintain a global cache of ACL verifiers in Wallet::ACL and reuse them | Russ Allbery | |
over the life of the process if we see another ACL line from the same scheme, rather than only reusing ACL verifiers within a single ACL. | |||
2007-12-05 | Determine the class for object and ACL schema implementations from the | Russ Allbery | |
database rather than a hard-coded list and provide Wallet::Schema methods for adding new class mappings. Add a missing class mapping for the netdb ACL schema verifier. | |||
2007-12-04 | Update TODO for 0.3. | Russ Allbery | |
2007-12-01 | The wallet backend test suite now supports using a database other than | Russ Allbery | |
SQLite for testing. Also start a new Util.pm module for the test suite and move the contents sub into that module. More to follow. | |||
2007-11-20 | Further TODO updates around ACL verifiers, multiple ACL classes, and an | Russ Allbery | |
ACL implementation that works from a list of entries in memory. | |||
2007-11-20 | Add support for running a user-defined function whenever an object is | Russ Allbery | |
created by a non-ADMIN user and using the default owner ACL returned by that function provided that the calling user is authorized by that ACL. This permits dynamic creation of new objects based on a default owner ACL programmatically determined from the name of the object. | |||
2007-11-15 | Add an ACL verifier that checks access against NetDB roles using the | Russ Allbery | |
NetDB remctl interface. | |||
2007-11-14 | The wallet backend script now logs all commands and errors to syslog. | Russ Allbery | |
2007-10-11 | Add an acl history function to the server backend and the client | Russ Allbery | |
documentation and test it. Update NEWS and TODO for the completion of the history code. | |||
2007-10-10 | Add some additional history items that I'm not going to get to right | Russ Allbery | |
away. | |||
2007-10-09 | Add user documentation for the enctypes attribute on keytabs. Mention | Russ Allbery | |
that the enctype must be in the database in the keytab object API documentation. The README and NEWS files are now done. | |||
2007-10-06 | Add standard README and NEWS files and organize TODO a bit more by | Russ Allbery | |
release targets. | |||
2007-10-05 | The wallet client now automatically sets the sync attribute on a keytab | Russ Allbery | |
object when get is called with the -S flag. | |||
2007-10-05 | Pull the file writing code for the wallet client into a separate file | Russ Allbery | |
so that the srvtab and keytab management can share it. Write atomically to a new file and then link and rename to do an atomic update. Leave a backup copy of any file that's replaced. | |||
2007-09-27 | Initial cut at srvtab support in the wallet client. This still requires | Russ Allbery | |
additional work and cleanup, particularly support for the sync attribute. | |||
2007-09-26 | Include the synchronization configuration in show() output. Provide a | Russ Allbery | |
new object method that subclasses can override to add attribute information to show() and remove the documentation about overriding show(). | |||
2007-09-26 | Add support for deleting principals out of the AFS kaserver (optionally) | Russ Allbery | |
if synchronization is not set. | |||
2007-09-26 | Various to-do updates. | Russ Allbery | |
2007-09-25 | Add support for synchronizing a key with an AFS kaserver in the keytab | Russ Allbery | |
object implementation, extracting the DES key with Authen::Krb5 (since ktutil doesn't work). Rename the KEYTAB_CACHE variable to KEYTAB_REMCTL_CACHE to match the rest of the keytab retrieval configuration and reorganize the Wallet::Config documentation to group related configuration options for the keytab backend. Fix a column name in the keytab_enctypes table to be more consistent with the rest of the schema. | |||
2007-09-24 | Add support for attribute setting and retrieval to the front end and | Russ Allbery | |
document them in the user documentation. | |||
2007-09-19 | Implement unchanging support in the keytab object backend, which retrieves | Russ Allbery | |
keytabs via remctl from the KDC. | |||
2007-09-18 | Document the locked flag in the server backend and client man pages. | Russ Allbery | |
Document locked flag issues when implementing a new object type. |