summaryrefslogtreecommitdiff
path: root/perl
AgeCommit message (Collapse)Author
2007-11-30Initial work on supporting testing with MySQL.Russ Allbery
Add a drop() method to Wallet::Schema to destroy the wallet database. Add a test suite for it. Add a reinitialize() method to Wallet;:Server that drops the database before creating it. Modify the wallet object test cases to call reinitialize() to create the initial database and drop() to clean up the database after the test is complete. Fix a bug preventing Wallet::Schema from being initialized multiple times. We now stash the schema in a class static variable and reuse it for subsequent initializations, since re-reading DATA doesn't work.
2007-11-20Attempt to create the object with a default owner on get and storeRuss Allbery
when the object doesn't exist.
2007-11-20Add support for running a user-defined function whenever an object isRuss Allbery
created by a non-ADMIN user and using the default owner ACL returned by that function provided that the calling user is authorized by that ACL. This permits dynamic creation of new objects based on a default owner ACL programmatically determined from the name of the object.
2007-11-15Fix the configuration files for remctld, which had gotten inverted.Russ Allbery
2007-11-15Use the right remctld configuration for the ACL verifier. Don't produceRuss Allbery
Perl warnings if the NetDB roles are empty.
2007-11-15Add an ACL verifier that checks access against NetDB roles using theRuss Allbery
NetDB remctl interface.
2007-10-11Add an acl_history method to the server layer and test it.Russ Allbery
2007-10-10Add a history method to the Wallet::ACL API.Russ Allbery
2007-10-10Use variables for the user and host in the history traces.Russ Allbery
2007-10-10Adjust for the new behavior of showing the former value of an attributeRuss Allbery
when it is set. Use variables for the user and host.
2007-10-10Add tests for the history method and its ACLs.Russ Allbery
2007-10-10Add the history method (for objects).Russ Allbery
2007-10-10Add tests for the history trace, which tests history records forRuss Allbery
attributes.
2007-10-10Make enctype changes in sorted order so that the history trace is reliableRuss Allbery
and can be tested.
2007-10-10Redo history tracking for attributes. Currently, all of our attributesRuss Allbery
take multiple values, so log them like flags. Hopefully this will continue to work; if not, we'll have to revisit it later. Improve logging for unsetting of attributes.
2007-10-10Test rollback when attempting to set an invalid enctype.Russ Allbery
2007-10-10Start checking the history.Russ Allbery
2007-10-10Pass a timestamp in for trace information as well and check the timestampRuss Allbery
on show rather than zeroing it.
2007-10-10Add an object history method and tests for it.Russ Allbery
2007-10-09Fix foreign key reference in the history table for the object name.Russ Allbery
2007-10-09Bump version number for the keytab changes.Russ Allbery
2007-10-09Add NEWS entry for enctypes. Clarify in the documentation the behaviorRuss Allbery
of the enctypes attribute when the unchanging flag is set.
2007-10-09Add user documentation for the enctypes attribute on keytabs. MentionRuss Allbery
that the enctype must be in the database in the keytab object API documentation. The README and NEWS files are now done.
2007-10-09Flesh out the rest of the tests for enctype handling.Russ Allbery
2007-10-09We have to check the validity of enctypes ourselves since SQLite doesn'tRuss Allbery
enforce referential integrity.
2007-10-09Initial implementation of enctype restriction with a basic test suite.Russ Allbery
Still needs a more comprehensive test suite. Remove all attributes for a keytab object when it is destroyed so that when the object is recreated, it doesn't inherit attributes from its previous self. Add a test case for that for the sync attribute.
2007-10-05Updates to the required test configuration for the kaserver sync tests.Russ Allbery
2007-10-05Add comprehensive license information in LICENSE and update the copyrightRuss Allbery
and license statements in all files. Make sure that some files that were missing copyright information now have them. Reference LICENSE rather than README in all notices.
2007-10-04Fix error handling if we cannot dup stdout.Russ Allbery
2007-09-26Include the synchronization configuration in show() output. Provide aRuss Allbery
new object method that subclasses can override to add attribute information to show() and remove the documentation about overriding show().
2007-09-26Add tests for the Kerberos v5 to Kerberos v4 name mapping and do moreRuss Allbery
tests of the machinery around kaserver synchronization even if we don't have a full configuration.
2007-09-26Add support for deleting principals out of the AFS kaserver (optionally)Russ Allbery
if synchronization is not set.
2007-09-25If synchronization is enabled, destroy the principal out of K4 when theRuss Allbery
keytab object is destroyed.
2007-09-25Add support for synchronizing a key with an AFS kaserver in the keytabRuss Allbery
object implementation, extracting the DES key with Authen::Krb5 (since ktutil doesn't work). Rename the KEYTAB_CACHE variable to KEYTAB_REMCTL_CACHE to match the rest of the keytab retrieval configuration and reorganize the Wallet::Config documentation to group related configuration options for the keytab backend. Fix a column name in the keytab_enctypes table to be more consistent with the rest of the schema.
2007-09-20Take multiple values in the attr() method and convert it to a referenceRuss Allbery
to an array internally so that the callers don't have to be aware of the internal API.
2007-09-20Change the error handling of the Wallet::ACL list() method to return theRuss Allbery
empty list on errors and clear error() so that it can be used to distinguish between an error and an empty ACL.
2007-09-20Change flag_list to return the empty list on error and clear error.Russ Allbery
Change the documentation to tell the caller to call error() after an empty return to see if an error occurred.
2007-09-20Update the documentation to get rid of the stupid error return fromRuss Allbery
attr and instead tell the caller to call error() on an empty return to see if there was a problem.
2007-09-20Call attr() correctly when setting attributes, even if it doesn'tRuss Allbery
matter for this test.
2007-09-20Add support for attribute setting and retrieving to the high-levelRuss Allbery
interface with appropriate ACL support. Retrieving is controlled by the show ACL and setting is controlled by the store ACL, both falling back to owner.
2007-09-19Add generic attribute support to the object layer and update the APIRuss Allbery
documentation to talk about overriding it. Update some other bits of the API documentation to include more hints about how to handle overridden methods.
2007-09-19Redirect stderr from remctld to stdout so that it doesn't show up inRuss Allbery
the test summary.
2007-09-19Skip the unchanging tests if Net::Remctl isn't available.Russ Allbery
2007-09-19Implement unchanging support in the keytab object backend, which retrievesRuss Allbery
keytabs via remctl from the KDC.
2007-09-19Allow creation of a keytab object for a principal that already exists.Russ Allbery
Catch more errors when checking the existence of a principal. Add a test for creating a principal for which we don't have permissions.
2007-09-19Drop the leading underscore for internal methods. I haven't been usingRuss Allbery
that convention elsewhere.
2007-09-18Test that retrieving data from a locked object still works.Russ Allbery
2007-09-18Implement the locked flag.Russ Allbery
2007-09-18Flags are now displayed as part of show.Russ Allbery
2007-09-18Add flag_set and flag_clear to Wallet::Server.Russ Allbery