krb5-wallet.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2010-02-09	Document and make case-insensitive KEYTAB_KRBTYPE	Russ Allbery
	KEYTAB_KRBTYPE wasn't documented in Wallet::Config. Add it and the variable declaration. Also document the new mandatory setting in NEWS and add the Heimdal::Kadm5 requirement to README. Remove some of the language in README that implies that only MIT Kerberos is supported. Make the setting case-insensitive and improve the error message from Wallet::Kadmin if it isn't set.
2010-02-09	Remove kaserver synchronization support from the wallet backend	Russ Allbery
	Remove kaserver synchronization support. It is no longer tested, and retaining the code was increasing the complexity of wallet, and some specific requirements (such as different realm names between kaserver and Kerberos v5 and the kvno handling) were Stanford-specific. Rather than using this support, AFS sites running kaserver will probably find deploying Heimdal with its internal kaserver compatibility is probably an easier transition approach.
2009-06-09	Remove Subversion Id strings	Russ Allbery

2008-02-09	Add file object support to the wallet server.	Russ Allbery

2008-02-08	Wallet::Config and hence the wallet server now checks for the	Russ Allbery
	environment variable WALLET_CONFIG and loads configuration from the file specified there instead of /etc/wallet/wallet.conf if it is set.
2008-01-17	Support enforcing a naming policy for wallet objects via a Perl	Russ Allbery
	function in the wallet server configuration file.
2007-12-01	Move wallet.conf to /etc/wallet since we're going to want to put other	Russ Allbery
	things in that directory as well.
2007-11-20	Add support for running a user-defined function whenever an object is	Russ Allbery
	created by a non-ADMIN user and using the default owner ACL returned by that function provided that the calling user is authorized by that ACL. This permits dynamic creation of new objects based on a default owner ACL programmatically determined from the name of the object.
2007-11-15	Add an ACL verifier that checks access against NetDB roles using the	Russ Allbery
	NetDB remctl interface.
2007-10-05	Add comprehensive license information in LICENSE and update the copyright	Russ Allbery
	and license statements in all files. Make sure that some files that were missing copyright information now have them. Reference LICENSE rather than README in all notices.
2007-09-26	Add support for deleting principals out of the AFS kaserver (optionally)	Russ Allbery
	if synchronization is not set.
2007-09-25	Add support for synchronizing a key with an AFS kaserver in the keytab	Russ Allbery
	object implementation, extracting the DES key with Authen::Krb5 (since ktutil doesn't work). Rename the KEYTAB_CACHE variable to KEYTAB_REMCTL_CACHE to match the rest of the keytab retrieval configuration and reorganize the Wallet::Config documentation to group related configuration options for the keytab backend. Fix a column name in the keytab_enctypes table to be more consistent with the rest of the schema.
2007-09-19	Implement unchanging support in the keytab object backend, which retrieves	Russ Allbery
	keytabs via remctl from the KDC.
2007-08-31	Add documentation.	Russ Allbery

2007-08-29	Load the configuration file after setting defaults for variables.	Russ Allbery

2007-08-29	Add the database parameters.	Russ Allbery

2007-08-28	Add the keytab object implementation. Add the skeleton of a config	Russ Allbery
	module which currently doesn't do anything useful except define some variables so that I can do syntax checking.