summaryrefslogtreecommitdiff
path: root/perl/lib/Wallet/Kadmin/AD.pm
AgeCommit message (Collapse)Author
2017-05-27correcting msktutil usage to support more enctypesepackorigan
with multiple enctypes specified, only the last one will actually take effect. If you wish to provide support for more then one, you need to add the values (0x04 + 0x08 + 0x10 = 0x1C). replacing the 3 lines with one line to enable all three. Note that the keytabs generated will have 3 line for each principal (one for each enctypes). See msktutil man page for further details on enctypes.
2016-01-23Update Perl module versions for 1.4Russ Allbery
2016-01-17Standardize Perl module versionsRuss Allbery
The versions of all of the wallet Perl modules now match the overall package version except for Wallet::Schema, which is used to version the database schema. Import the test from rra-c-util 5.10 and exclude Wallet::Schema from the tests. Go through all Perl modules and standardize the syntax for setting the version and indicating the required version of Perl. Fix a few other syntax issues while I'm in there.
2016-01-16Fix spelling errors and add stopwordsRuss Allbery
2016-01-16Add documentation of the Active Directory supportRuss Allbery
Also remove some configuration checks that aren't required, and unify handling of some configuration options.
2015-12-29Add in missing use statement for Sys::SyslogBill MacAllister
2015-12-29Add error check for partially created AD keytabsBill MacAllister
The msktutil script does not always signal error conditions. This change implements a check that examines the output from msktutil and reports and error when the keytab creation fails to create the keytab but does create a computer entry in the directory. If an error is detected the directory entry is deleted leaving the directory in a clean state. Also, support has been added for output of debugging information to syslog using the AD_DEBUG configuration variable. Finally perltidy suggested changes were made to AD.pm.
2015-12-03Implement support for managed Active Directory keytabsBill MacAllister
This version implements Active Directory as the store for keytabs. The interface to Active Directory uses a combination of direct LDAP queries and the msktutil utility. This version does not support the wallet unchanging flag. Unchanging requires that a keytab be retrieved without changing the password/kvno which is not supported by msktutil.