aboutsummaryrefslogtreecommitdiff
path: root/perl
AgeCommit message (Collapse)Author
2008-01-04The build system now probes for GSS-API, Kerberos v5 and v4, and AFSRuss Allbery
libraries as necessary rather than hard-coding libraries. Building on systems without strong shared library dependencies and building against static libraries should now work. Building kasetkey (for AFS kaserver synchronization) is now optional and not enabled by default. Pass --with-afs to enable it. This allows wallet to be easily built in an environment without AFS.
2007-12-07Fix the module name in the SYNOPSIS example.release/0.5debian/0.5-1Russ Allbery
2007-12-07Test the interaction of the ADMIN ACL with autocreate on get.Russ Allbery
2007-12-07Check a default creation ACL first before the ADMIN ACL when decidingRuss Allbery
whether we can auto-create a non-existent ACL, since creating one with the ADMIN ACL doesn't create a useful object. Allow @ in wallet-backend arguments so that principal names can be passed in.
2007-12-07Correctly implement the documented intention that setting an attributeRuss Allbery
to the empty string clears the attribute values.
2007-12-07Get rid of more return undefs.Russ Allbery
2007-12-07Get rid of a bunch more return undefs.Russ Allbery
2007-12-07Bump version numbers appropriately.Russ Allbery
2007-12-07Load the Perl modules for ACL verifiers and object types dynamicallyRuss Allbery
now that we're reading the class from the database.
2007-12-06Be a bit more careful and conservative when stripping realms off.Russ Allbery
2007-12-06Fix the keytab principal validation regex to allow instancesRuss Allbery
containing periods. Otherwise, it's hard to manage host keytabs. Add a missing test suite for that method.
2007-12-05Various coding style fixes and cleanup based on a much-appreciatedRuss Allbery
code audit by Simon Cozens. I didn't take all of his advise, and he shouldn't be blamed for any remaining issues.
2007-12-05Coding style improvements.Russ Allbery
2007-12-05Bump version number for previous changes.Russ Allbery
2007-12-05Maintain a global cache of ACL verifiers in Wallet::ACL and reuse themRuss Allbery
over the life of the process if we see another ACL line from the same scheme, rather than only reusing ACL verifiers within a single ACL.
2007-12-05Determine the class for object and ACL schema implementations from theRuss Allbery
database rather than a hard-coded list and provide Wallet::Schema methods for adding new class mappings. Add a missing class mapping for the netdb ACL schema verifier.
2007-12-04Add a subclass of the NetDB ACL verifier that requires the principalRuss Allbery
have an instance of "root" and strips that instance before checking NetDB roles.
2007-12-01Fix the test number in the SKIP block for enctype restrictions.Russ Allbery
2007-12-01Add a MySQL method to check the tables remaining after a drop.Russ Allbery
2007-12-01Document that all tests are now run against the configured database ifRuss Allbery
configuration is present.
2007-12-01Run the full schema test with the configured database. It should workRuss Allbery
fine with MySQL.
2007-12-01Following the DBI documentation, turn on AutoCommit after RaiseError soRuss Allbery
that we have some hope of getting error messages if it fails.
2007-12-01If we're using MySQL, force all the tables to InnoDB so that we getRuss Allbery
transactions.
2007-12-01Clean up the database after running this test.Russ Allbery
2007-12-01Don't disconnect on destruction of the server object if the handle isRuss Allbery
marked with InactiveDestroy.
2007-12-01Set InactiveDestroy to the right thing. Doh.Russ Allbery
2007-12-01Make sure we always have a valid object and access to our databaseRuss Allbery
handle when calling kadmin so that we can do our database handle mangling.
2007-12-01Don't use die when forking kasetkey fails and similarly don't close theRuss Allbery
database connection on a failed fork.
2007-12-01Don't close our open database handles after a failed fork.Russ Allbery
2007-12-01Use reinitialize instead of initialize.Russ Allbery
2007-12-01Expiration dates are now expressed in YYYY-MM-DD HH:MM:SS instead ofRuss Allbery
seconds since epoch and returned the same way. Timestamps are now stored in the database as correct date and time types rather than seconds since epoch to work properly with MySQL.
2007-12-01Don't do an in-place edit of the SQL inside the object, since we thenRuss Allbery
can't reuse the object with another database handle.
2007-12-01Actually use the username and password from the database configuration.Russ Allbery
2007-12-01Hide kinit errors. No one cares.Russ Allbery
2007-12-01Move wallet.conf to /etc/wallet since we're going to want to put otherRuss Allbery
things in that directory as well.
2007-12-01The wallet backend test suite now supports using a database other thanRuss Allbery
SQLite for testing. Also start a new Util.pm module for the test suite and move the contents sub into that module. More to follow.
2007-11-30Initial work on supporting testing with MySQL.Russ Allbery
Add a drop() method to Wallet::Schema to destroy the wallet database. Add a test suite for it. Add a reinitialize() method to Wallet;:Server that drops the database before creating it. Modify the wallet object test cases to call reinitialize() to create the initial database and drop() to clean up the database after the test is complete. Fix a bug preventing Wallet::Schema from being initialized multiple times. We now stash the schema in a class static variable and reuse it for subsequent initializations, since re-reading DATA doesn't work.
2007-11-20Attempt to create the object with a default owner on get and storeRuss Allbery
when the object doesn't exist.
2007-11-20Add support for running a user-defined function whenever an object isRuss Allbery
created by a non-ADMIN user and using the default owner ACL returned by that function provided that the calling user is authorized by that ACL. This permits dynamic creation of new objects based on a default owner ACL programmatically determined from the name of the object.
2007-11-15Fix the configuration files for remctld, which had gotten inverted.Russ Allbery
2007-11-15Use the right remctld configuration for the ACL verifier. Don't produceRuss Allbery
Perl warnings if the NetDB roles are empty.
2007-11-15Add an ACL verifier that checks access against NetDB roles using theRuss Allbery
NetDB remctl interface.
2007-10-11Add an acl_history method to the server layer and test it.Russ Allbery
2007-10-10Add a history method to the Wallet::ACL API.Russ Allbery
2007-10-10Use variables for the user and host in the history traces.Russ Allbery
2007-10-10Adjust for the new behavior of showing the former value of an attributeRuss Allbery
when it is set. Use variables for the user and host.
2007-10-10Add tests for the history method and its ACLs.Russ Allbery
2007-10-10Add the history method (for objects).Russ Allbery
2007-10-10Add tests for the history trace, which tests history records forRuss Allbery
attributes.
2007-10-10Make enctype changes in sorted order so that the history trace is reliableRuss Allbery
and can be tested.