Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-11-15 | Fix the configuration files for remctld, which had gotten inverted. | Russ Allbery | |
2007-11-15 | Use the right remctld configuration for the ACL verifier. Don't produce | Russ Allbery | |
Perl warnings if the NetDB roles are empty. | |||
2007-11-15 | Add an ACL verifier that checks access against NetDB roles using the | Russ Allbery | |
NetDB remctl interface. | |||
2007-10-11 | Add an acl_history method to the server layer and test it. | Russ Allbery | |
2007-10-10 | Add a history method to the Wallet::ACL API. | Russ Allbery | |
2007-10-10 | Use variables for the user and host in the history traces. | Russ Allbery | |
2007-10-10 | Adjust for the new behavior of showing the former value of an attribute | Russ Allbery | |
when it is set. Use variables for the user and host. | |||
2007-10-10 | Add tests for the history method and its ACLs. | Russ Allbery | |
2007-10-10 | Add tests for the history trace, which tests history records for | Russ Allbery | |
attributes. | |||
2007-10-10 | Test rollback when attempting to set an invalid enctype. | Russ Allbery | |
2007-10-10 | Start checking the history. | Russ Allbery | |
2007-10-10 | Pass a timestamp in for trace information as well and check the timestamp | Russ Allbery | |
on show rather than zeroing it. | |||
2007-10-10 | Add an object history method and tests for it. | Russ Allbery | |
2007-10-09 | Flesh out the rest of the tests for enctype handling. | Russ Allbery | |
2007-10-09 | Initial implementation of enctype restriction with a basic test suite. | Russ Allbery | |
Still needs a more comprehensive test suite. Remove all attributes for a keytab object when it is destroyed so that when the object is recreated, it doesn't inherit attributes from its previous self. Add a test case for that for the sync attribute. | |||
2007-10-05 | Updates to the required test configuration for the kaserver sync tests. | Russ Allbery | |
2007-10-05 | Add comprehensive license information in LICENSE and update the copyright | Russ Allbery | |
and license statements in all files. Make sure that some files that were missing copyright information now have them. Reference LICENSE rather than README in all notices. | |||
2007-09-26 | Include the synchronization configuration in show() output. Provide a | Russ Allbery | |
new object method that subclasses can override to add attribute information to show() and remove the documentation about overriding show(). | |||
2007-09-26 | Add tests for the Kerberos v5 to Kerberos v4 name mapping and do more | Russ Allbery | |
tests of the machinery around kaserver synchronization even if we don't have a full configuration. | |||
2007-09-26 | Add support for deleting principals out of the AFS kaserver (optionally) | Russ Allbery | |
if synchronization is not set. | |||
2007-09-25 | If synchronization is enabled, destroy the principal out of K4 when the | Russ Allbery | |
keytab object is destroyed. | |||
2007-09-25 | Add support for synchronizing a key with an AFS kaserver in the keytab | Russ Allbery | |
object implementation, extracting the DES key with Authen::Krb5 (since ktutil doesn't work). Rename the KEYTAB_CACHE variable to KEYTAB_REMCTL_CACHE to match the rest of the keytab retrieval configuration and reorganize the Wallet::Config documentation to group related configuration options for the keytab backend. Fix a column name in the keytab_enctypes table to be more consistent with the rest of the schema. | |||
2007-09-20 | Take multiple values in the attr() method and convert it to a reference | Russ Allbery | |
to an array internally so that the callers don't have to be aware of the internal API. | |||
2007-09-20 | Call attr() correctly when setting attributes, even if it doesn't | Russ Allbery | |
matter for this test. | |||
2007-09-20 | Add support for attribute setting and retrieving to the high-level | Russ Allbery | |
interface with appropriate ACL support. Retrieving is controlled by the show ACL and setting is controlled by the store ACL, both falling back to owner. | |||
2007-09-19 | Add generic attribute support to the object layer and update the API | Russ Allbery | |
documentation to talk about overriding it. Update some other bits of the API documentation to include more hints about how to handle overridden methods. | |||
2007-09-19 | Redirect stderr from remctld to stdout so that it doesn't show up in | Russ Allbery | |
the test summary. | |||
2007-09-19 | Skip the unchanging tests if Net::Remctl isn't available. | Russ Allbery | |
2007-09-19 | Implement unchanging support in the keytab object backend, which retrieves | Russ Allbery | |
keytabs via remctl from the KDC. | |||
2007-09-19 | Allow creation of a keytab object for a principal that already exists. | Russ Allbery | |
Catch more errors when checking the existence of a principal. Add a test for creating a principal for which we don't have permissions. | |||
2007-09-18 | Test that retrieving data from a locked object still works. | Russ Allbery | |
2007-09-18 | Implement the locked flag. | Russ Allbery | |
2007-09-18 | Flags are now displayed as part of show. | Russ Allbery | |
2007-09-18 | Add flag_set and flag_clear to Wallet::Server. | Russ Allbery | |
2007-09-17 | Add methods to the base object to set, clear, list, and check flags. Wrap | Russ Allbery | |
attribute setting in objects inside eval to catch SQL errors and set the object error accordingly rather than throwing an exception. | |||
2007-09-17 | Add an acl_show() method to Wallet::Server that calls the underlying ACL | Russ Allbery | |
show() method. | |||
2007-09-17 | In show() for an object, call show() for each of the ACLs on that object | Russ Allbery | |
and append that information to the object description. | |||
2007-09-17 | Add a show method to Wallet::ACL. | Russ Allbery | |
2007-09-01 | Add a test for the download trace information. Do that in the keytab | Russ Allbery | |
test because that's the only place we can successfully run get right now. | |||
2007-09-01 | Test a couple more ADMIN ACL manipulation cases. | Russ Allbery | |
2007-09-01 | Test another case around the ADMIN ACL. | Russ Allbery | |
2007-09-01 | Add some additional safeguards to ensure that users cannot destroy, | Russ Allbery | |
rename, or remove the last entry from the ADMIN ACL. Add full documentation for Wallet::Server. | |||
2007-08-31 | Check for proper handling of lots of configuration errors or failure | Russ Allbery | |
to run kadmin. | |||
2007-08-31 | Check handling of invalid database configuration and failure to connect | Russ Allbery | |
to the database. | |||
2007-08-31 | You don't have to explicitly load the driver module for DBI. | Russ Allbery | |
2007-08-30 | Added a full test suite for Wallet::Object::Keytab and instructions on | Russ Allbery | |
how to set up and run it. | |||
2007-08-30 | Finish the test suite. This should now be fairly comprehensive. | Russ Allbery | |
2007-08-30 | Checkpoint. Add tests for basic object operations. | Russ Allbery | |
2007-08-30 | Test clearing attributes. | Russ Allbery | |
2007-08-30 | Initial test suite for the Wallet::Server interface. Right now, just | Russ Allbery | |
checks the ACL management functions. |