source: heimdal/trunk/kadmin/ChangeLog@ 3

Last change on this file since 3 was 1, checked in by Paul Smedley, 10 years ago

Initial commit of Heimdal 1.5.3

File size: 28.3 KB
Line 
12008-04-07 Love Hörnquist Å
2strand <lha@it.su.se>
3
4 * kadm_conn.c: Use unsigned where appropriate.
5
62007-12-09 Love Hörnquist Å
7strand <lha@it.su.se>
8
9 * kadmin.c: Use hdb_db_dir().
10
11 * kadmind.c: Use hdb_db_dir().
12
132007-07-26 Love Hörnquist Å
14strand <lha@it.su.se>
15
16 * util.c: Clear error string, just to be sure.
17
182007-05-10 Love Hörnquist Å
19strand <lha@it.su.se>
20
21 * kadmin-commands.in: modify --pkinit-acl
22
23 * mod.c: add pk-init command
24
252007-02-22 Love Hörnquist Å
26strand <lha@it.su.se>
27
28 * kadmin.8: document kadmin add_enctype functionallity.
29
30 * Makefile.am: Add new command, add_enctype.
31
32 * kadmin-commands.in: Add new command, add_enctype.
33
34 * add_enctype.c: Add support for adding a random key enctype to a
35 principal.
36
372007-02-17 Love Hörnquist Å
38strand <lha@it.su.se>
39
40 * mod.c: add setting and displaying aliases
41
42 * get.c: add setting and displaying aliases
43
44 * kadmin-commands.in: add setting and displaying aliases
45
462006-12-22 Love Hörnquist Å
47strand <lha@it.su.se>
48
49 * util.c: Make str2time_t parser more robust.
50
51 * Makefile.am: Add test_util test program.
52
53 * test_util.c: Test str2time_t parser.
54
552006-12-05 Love Hörnquist Å
56strand <lha@it.su.se>
57
58 * add-random-users.c: Use strcspn to remove \n from fgets
59 result. Prompted by change by Ray Lai of OpenBSD via Björn
60 Sandell.
61
622006-10-22 Love Hörnquist Å
63strand <lha@it.su.se>
64
65 * mod.c: Try to not leak memory.
66
67 * check.c: Try to not leak memory.
68
692006-10-07 Love Hörnquist Å
70strand <lha@it.su.se>
71
72 * Makefile.am: split build files into dist_ and noinst_ SOURCES
73
742006-08-28 Love Hörnquist Å
75strand <lha@it.su.se>
76
77 * kadmin.c (help): use sl_slc_help().
78
792006-08-24 Love Hörnquist Å
80strand <lha@it.su.se>
81
82 * util.c: Add KRB5_KDB_ALLOW_DIGEST
83
842006-07-14 Love Hörnquist Å
85strand <lha@it.su.se>
86
87 * get.c (format_field): optionally print issuer and anchor.
88
892006-06-21 Love Hörnquist Å
90strand <lha@it.su.se>
91
92 * check.c: Check if afs@REALM and afs/cellname@REALM both exists.
93
942006-06-14 Love Hörnquist Å
95strand <lha@it.su.se>
96
97 * util.c (kdb_attrs): Add KRB5_KDB_ALLOW_KERBEROS4
98
992006-06-07 Love Hörnquist Å
100strand <lha@it.su.se>
101
102 * mod.c (do_mod_entry): Add setting 1 delegation entry
103
1042006-06-01 Love Hörnquist Å
105strand <lha@it.su.se>
106
107 * server.c: Less shadowing.
108
1092006-05-13 Love Hörnquist Å
110strand <lha@it.su.se>
111
112 * Makefile.am: kadmin_SOURCES += add check.c
113
114 * kadmin_locl.h: Avoid shadowing.
115
116 * kadmin.8: Document the new check command.
117
118 * kadmin-commands.in: Add check command
119
120 * check.c: Check database for strange configurations on default
121 principals.
122
1232006-05-08 Love Hörnquist Å
124strand <lha@it.su.se>
125
126 * server.c (kadm_get_privs): one less "pointer targets in passing
127 argument differ in signedness" warning.
128
1292006-05-05 Love Hörnquist Å
130strand <lha@it.su.se>
131
132 * dump-format.txt: Moved to info documentation.
133
134 * Rename u_intXX_t to uintXX_t
135
1362006-05-01 Love Hörnquist Å
137strand <lha@it.su.se>
138
139 * kadmin.8: spelling, update .Dd
140
1412006-04-12 Love Hörnquist Å
142strand <lha@it.su.se>
143
144 * add-random-users.c: Catch empty file case. From Tobias
145 Stoeckmann.
146
1472006-04-07 Love Hörnquist Å
148strand <lha@it.su.se>
149
150 * random_password.c (generate_password): memory leak in error
151 condition case From Coverity NetBSD CID#1887
152
1532006-02-19 Love Hörnquist Å
154strand <lha@it.su.se>
155
156 * cpw.c (cpw_entry): make sure ret have a defined value
157
158 * del.c (del_entry): make sure ret have a defined value
159
160 * mod.c: Return error code so that toplevel function can catch
161 them.
162
1632006-01-25 Love Hörnquist Å
164strand <lha@it.su.se>
165
166 * cpw.c (cpw_entry): return 1 on failure.
167
168 * rename.c (rename_entry): return 1 on failure.
169
170 * del.c (del_entry): return 1 on failure.
171
172 * ank.c (add_new_key): return 1 on failure.
173
174 * get.c: Add printing of pkinit-acls. Don't print password by
175 default. Return 1 on failure processing any of the principals.
176
177 * util.c (foreach_principal): If any of calls to `func' failes,
178 the first error is returned when all principals are processed.
179
1802005-12-01 Love Hörnquist Å
181strand <lha@it.su.se>
182
183 * kadmin-commands.in: Add ank as an alias to add, it lost in
184 transition to slc, from MÃ¥ns Nilsson.
185
1862005-09-14 Love Hörquist Å
187strand <lha@it.su.se>
188
189 * dump-format.txt: Add extensions, fill in missing fields.
190
1912005-09-08 Love Hörquist Å
192strand <lha@it.su.se>
193
194 * init.c (create_random_entry): create principal with random
195 password even though its disabled. From Andrew Bartlet
196 <abartlet@samba.org>
197
1982005-09-01 Love Hörquist Å
199strand <lha@it.su.se>
200
201 * kadm_conn.c: Use socket_set_reuseaddr and socket_set_ipv6only.
202
2032005-08-11 Love Hörquist Å
204strand <lha@it.su.se>
205
206 * get.c: Remove structure that is never used (sneaked in the large
207 TL_DATA patch).
208
209 * kadmin-commands.in: Rename password-quality to
210 verify-password-quality.
211
212 * get.c: Indent.
213
214 * server.c: Avoid shadowing exp().
215
216 * load.c: Parse extensions.
217
218 * kadmin_locl.h: Include <hex.h>.
219
220 * get.c: Extend struct field_name to have a subvalue and a
221 extra_mask. Use that to implement printing of KADM5_TL_DATA
222 options and fix a dependency bug (keys needed principal to print
223 the salting).
224
2252005-07-08 Love Hörquist Å
226strand <lha@it.su.se>
227
228 * lower amount of shadow and const warnings
229
2302005-06-07 David Love <fx@gnu.org>
231
232 * dump-format.txt: Clarify, spelling and add examples.
233
2342005-05-30 Love Hörquist Å
235strand <lha@it.su.se>
236
237 * util.c (kdb_attrs): add ok-as-delegate
238
239 * get.c (getit): init data.mask to 0. Problem found by Andrew
240 Bartlett <abartlet@samba.org>
241
2422005-05-09 Love Hörquist Å
243strand <lha@it.su.se>
244
245 * kadmin.c (main): catch -2 as EOF
246
2472005-05-03 Dave Love <d.love@dl.ac.uk>
248
249 * init.c (init): Don't disable forwardable for kadmin/changepw.
250
2512005-05-02 Dave Love <d.love@dl.ac.uk>
252
253 * kadmin.c (help): Don't use non-constant initializer for `fake'.
254
2552005-04-20 Love Hörquist Å
256strand <lha@it.su.se>
257
258 * util.c (foreach_principal): initialize ret to make sure it have
259 a value
260
2612005-04-04 Love Hörquist Å
262strand <lha@it.su.se>
263
264 * kadmind.c: add verifier libraries with
265 kadm5_add_passwd_quality_verifier
266
267 * kadmin.c: add verifier libraries with
268 kadm5_add_passwd_quality_verifier
269
270 * load.c: max-life and max-renew is of unsigned int in asn1
271 compiler, use that for the parser too
272
2732005-03-26 Love Hörquist Å
274strand <lha@it.su.se>
275
276 * kadmin.8: List of attributes, from James F. Hranicky
277 <jfh@cise.ufl.edu>
278
2792005-01-19 Love Hörquist Å
280strand <lha@it.su.se>
281
282 * dump.c (dump): handle errors
283
2842005-01-08 Love Hörquist Å
285strand <lha@it.su.se>
286
287 * dump-format.txt: text dump format
288
2892004-12-08 Love Hörquist Å
290strand <lha@it.su.se>
291
292 * kadmind.8: use keeps around options, from OpenBSD
293
294 * kadmin.8: use keeps around options, "improve" spelling, from
295 openbsd
296
2972004-11-01 Love Hörquist Å
298strand <lha@it.su.se>
299
300 * get.c (getit): always free columns
301
302 * ank.c (add_one_principal): catch error from
303 UI_UTIL_read_pw_string
304
3052004-10-31 Love Hörquist Å
306strand <lha@it.su.se>
307
308 * del_enctype.c (del_enctype): fix off-by-one error in del_enctype
309 From: <ragge@ludd.luth.se>
310
3112004-08-13 Love Hörquist Å
312strand <lha@it.su.se>
313
314 * get.c: print keytypes on long format
315
3162004-07-06 Love Hörquist Å
317strand <lha@it.su.se>
318
319 * get.c (format_field): allow mod_name to be optional
320
321 * ext.c (do_ext_keytab): if there isn't any keydata, try using
322 kadm5_randkey_principal
323
3242004-07-02 Love Hörquist Å
325strand <lha@it.su.se>
326
327 * load.c: make merge/load work again
328
329 * del.c: fix usage string
330
331 * ank.c: fix slc lossage
332
3332004-06-28 Love Hörquist Å
334strand <lha@it.su.se>
335
336 * kadmin.c: use kadm5_ad_init_with_password_ctx
337
3382004-06-27 Johan Danielsson <joda@pdc.kth.se>
339
340 * kadmin.8: document get -o and stash
341
342 * get.c: implement output column selection, similar to ps -o
343
344 * kadmin-commands.in: make get -l the default again, and add
345 column selection flag; sync list with get
346
3472004-06-24 Johan Danielsson <joda@pdc.kth.se>
348
349 * kadmin-commands.in: mod needs default kvno of -1
350
3512004-06-21 Johan Danielsson <joda@pdc.kth.se>
352
353 * kadmin: convert to use slc; also add stash subcommand
354
3552004-06-15 Love Hörquist Å
356strand <lha@it.su.se>
357
358 * kadmin.c (main): keytab mode requires principal name
359
3602004-06-12 Love Hörquist Å
361strand <lha@it.su.se>
362
363 * kadmind.c: drop keyfile, not used, found by
364 Elrond <elrond@samba-tng.org>
365
366 * kadmin.c: if keyfile is set, pass in to libkadm5 bug pointed out
367 by Elrond <elrond@samba-tng.org>
368
3692004-05-31 Love Hörquist Å
370strand <lha@it.su.se>
371
372 * kadmin.c: add --ad flag, XXX rewrite the init kadm5 interface
373
3742004-05-13 Johan Danielsson <joda@pdc.kth.se>
375
376 * nuke kerberos 4 kadmin goo
377
3782004-05-07 Johan Danielsson <joda@pdc.kth.se>
379
380 * util.c (str2time_t): fix end-of-day logic, from Duncan
381 McEwan/Mark Davies.
382
3832004-04-29 Love Hörquist Å
384strand <lha@it.su.se>
385
386 * version4.c (handle_v4): make sure length is longer then 2,
387 Pointed out by Evgeny Demidov <demidov@gleg.net>
388
389 * kadmind.c: make kerberos4 support default turned off
390
3912004-03-24 Johan Danielsson <joda@pdc.kth.se>
392
393 * kadmin.8: update manpage
394
395 * mod.c: allow wildcarding principals, and make parameters a work
396 same as if prompted
397
3982004-03-08 Love Hörquist Å
399strand <lha@it.su.se>
400
401 * kadmin.8: document password-quality
402
403 * kadmin_locl.h: add prototype for password_quality
404
405 * kadmin.c: add password-quality/pwq command
406
407 * Makefile.am: kadmin_SOURCES += pw_quality.c
408
409 * pw_quality.c: test run the password quality function
410
4112004-03-07 Love Hörquist Å
412strand <lha@it.su.se>
413
414 * ank.c (add_one_principal): even though the principal is disabled
415 (creation of random key/keydata), create it with a random password
416
4172003-12-07 Love Hörquist Å
418strand <lha@it.su.se>
419
420 * init.c (create_random_entry): print error message on failure
421
422 * ank.c (add_one_principal): pass right argument to
423 kadm5_free_principal_ent From Panasas, Inc
424
4252003-11-18 Love Hörquist Å
426strand <lha@it.su.se>
427
428 * kadmind.c (main): move opening the logfile to after reading
429 kdc.conf move the loading of hdb keytab ops closer to where its
430 used From: Jeffrey Hutzelman <jhutz@cmu.edu>
431
4322003-10-04 Love Hörquist Å
433strand <lha@it.su.se>
434
435 * util.c (str2time_t): allow whitespace between date and time
436 From: Bob Beck <beck@cvs.openbsd.org> and adharw@yahoo.com
437
4382003-09-03 Love Hörquist Å
439strand <lha@it.su.se>
440
441 * ank.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
442
443 * cpw.c: s/des_read_pw_string/UI_UTIL_read_pw_string/
444
4452003-08-21 Love Hörquist Å
446strand <lha@it.su.se>
447
448 * get.c (print_entry_terse): handle error when unparsing name
449
4502003-08-18 Love Hörquist Å
451strand <lha@it.su.se>
452
453 * kadmind.c (main): use krb5_prepend_config_files_default, now all
454 options in kdc.conf is parsed, not just [kdc]key-file=
455
456 * kadmin.c (main): use krb5_prepend_config_files_default, now all
457 options in kdc.conf is parsed, not just [kdc]key-file=
458
4592003-04-14 Love Hörquist Å
460strand <lha@it.su.se>
461
462 * util.c: cast argument to tolower to unsigned char, from
463 Christian Biere <christianbiere@gmx.de> via NetBSD
464
4652003-04-06 Love Hörquist Å
466strand <lha@it.su.se>
467
468 * kadmind.8: s/kerberos/Kerberos/
469
4702003-03-31 Love Hörquist Å
471strand <lha@it.su.se>
472
473 * kadmin.8: initialises -> initializes, from Perry E. Metzger"
474 <perry@piermont.com>
475
476 * kadmin.c: principal, not pricipal. From Thomas Klausner
477 <wiz@netbsd.org>
478
4792003-02-04 Love Hörquist Å
480strand <lha@it.su.se>
481
482 * kadmind.8: spelling, from jmc <jmc@prioris.mini.pw.edu.pl>
483
484 * kadmin.8: spelling, from jmc <jmc@prioris.mini.pw.edu.pl>
485
4862003-01-29 Love Hörquist Å
487strand <lha@it.su.se>
488
489 * server.c (kadmind_dispatch): kadm_chpass: require the password
490 to pass the password quality check in case the user changes the
491 user's own password kadm_chpass_with_key: disallow the user to
492 change it own password to a key, since that password might violate
493 the password quality check.
494
4952002-12-03 Johan Danielsson <joda@pdc.kth.se>
496
497 * util.c (get_response): print a newline if interrupted
498
499 * mod.c (mod_entry): check return value from edit_entry
500
501 * ank.c (add_one_principal): check return value from edit_entry
502
503 * ank.c (add_one_principal): don't continue if create_principal
504 fails
505
506 * init.c: check return value from edit_deltat
507
508 * init.c: add --help
509
5102002-10-29 Johan Danielsson <joda@pdc.kth.se>
511
512 * version4.c: speling (from Tomas Olsson)
513
5142002-10-23 Assar Westerlund <assar@kth.se>
515
516 * version4.c (decode_packet): check the length of the version
517 string and that rlen has a reasonable value
518
5192002-10-21 Johan Danielsson <joda@pdc.kth.se>
520
521 * version4.c: check size of rlen
522
5232002-09-10 Johan Danielsson <joda@pdc.kth.se>
524
525 * server.c: constify match_appl_version()
526
527 * version4.c: change some lingering krb_err_base
528
5292002-09-09 Jacques Vidrine <nectar@kth.se>
530
531 * server.c (kadmind_dispatch): while decoding arguments for
532 kadm_chpass_with_key, sanity check the number of keys given.
533 Potential problem pointed out by
534 Sebastian Krahmer <krahmer@suse.de>.
535
5362002-09-04 Johan Danielsson <joda@pdc.kth.se>
537
538 * load.c (parse_generation): return if there is no generation
539 (spotted by Daniel Kouril)
540
5412002-06-07 Jacques Vidrine <n@nectar.com>
542
543 * ank.c: do not attempt to free uninitialized pointer when
544 kadm5_randkey_principal fails.
545
5462002-06-07 Johan Danielsson <joda@pdc.kth.se>
547
548 * util.c: remove unused variable; reported by Hans Insulander
549
5502002-03-05 Johan Danielsson <joda@pdc.kth.se>
551
552 * kadmind.8: clarify some acl wording, and add an example file
553
5542002-02-11 Johan Danielsson <joda@pdc.kth.se>
555
556 * ext.c: no need to use the "modify" keytab anymore
557
5582001-09-20 Assar Westerlund <assar@sics.se>
559
560 * add-random-users.c: allocate several buffers for the list of
561 words, instead of one strdup per word (running under efence does
562 not work very well otherwise)
563
5642001-09-13 Assar Westerlund <assar@sics.se>
565
566 * add-random-users.c: allow specifying the number of users to
567 create
568
5692001-08-24 Assar Westerlund <assar@sics.se>
570
571 * Makefile.am: rename variable name to avoid error from current
572 automake
573
5742001-08-22 Assar Westerlund <assar@sics.se>
575
576 * kadmin_locl.h: include libutil.h if it exists
577
5782001-08-10 Johan Danielsson <joda@pdc.kth.se>
579
580 * util.c: do something to handle C-c in prompts
581
582 * load.c: remove unused etypes code, and add parsing of the
583 generation field
584
585 * ank.c: add a --use-defaults option to just use default values
586 without questions
587
588 * kadmin.c: add "del" alias for delete
589
590 * cpw.c: call this operation "passwd" in usage
591
592 * kadmin_locl.h: prototype for set_defaults
593
594 * util.c (edit_entry): move setting of default values to a
595 separate function, set_defaults
596
5972001-08-01 Johan Danielsson <joda@pdc.kth.se>
598
599 * kadmin.c: print help message on bad options
600
6012001-07-31 Assar Westerlund <assar@sics.se>
602
603 * add-random-users.c (main): handle --version
604
6052001-07-30 Johan Danielsson <joda@pdc.kth.se>
606
607 * load.c: increase line buffer to 8k
608
6092001-06-12 Assar Westerlund <assar@sics.se>
610
611 * ext.c (ext_keytab): use the default modify keytab per default
612
6132001-05-17 Assar Westerlund <assar@sics.se>
614
615 * kadm_conn.c (start_server): fix krb5_eai_to_heim_errno call
616
6172001-05-15 Assar Westerlund <assar@sics.se>
618
619 * kadmin.c (main): some error cleaning required
620
6212001-05-14 Assar Westerlund <assar@sics.se>
622
623 * kadmind.c: new krb5_config_parse_file
624 * kadmin.c: new krb5_config_parse_file
625 * kadm_conn.c: update to new krb5_sockaddr2address
626
6272001-05-07 Assar Westerlund <assar@sics.se>
628
629 * kadmin_locl.h (foreach_principal): update prototype
630 * get.c (getit): new foreach_principal
631 * ext.c (ext_keytab): new foreach_principal
632 * del.c (del_entry): new foreach_principal
633 * cpw.c (cpw_entry): new foreach_principal
634 * util.c (foreach_principal): add `funcname' and try printing the
635 error string
636
6372001-05-04 Johan Danielsson <joda@pdc.kth.se>
638
639 * rename.c: fix argument number test
640
6412001-04-19 Johan Danielsson <joda@pdc.kth.se>
642
643 * del_enctype.c: fix argument count check after getarg change;
644 spotted by mark@MCS.VUW.AC.NZ
645
6462001-02-15 Assar Westerlund <assar@sics.se>
647
648 * kadmind.c (main): use a `struct sockaddr_storage' to be able to
649 store all types of addresses
650
6512001-02-07 Assar Westerlund <assar@sics.se>
652
653 * kadmin.c: add --keytab / _K, from Leif Johansson
654 <leifj@it.su.se>
655
6562001-01-29 Assar Westerlund <assar@sics.se>
657
658 * kadm_conn.c (spawn_child): close the newly created socket in the
659 packet, it's not used. from <shadow@dementia.org>
660 * version4.c (decode_packet): check success of
661 krb5_425_conv_principal. from <shadow@dementia.org>
662
6632001-01-12 Assar Westerlund <assar@sics.se>
664
665 * util.c (parse_attributes): make empty string mean no attributes,
666 specifying the empty string at the command line should give you no
667 attributes, but just pressing return at the prompt gives you
668 default attributes
669 (edit_entry): only pick up values from the default principal if they
670 aren't set in the principal being edited
671
6722001-01-04 Assar Westerlund <assar@sics.se>
673
674 * load.c (doit): print an error and bail out if storing an entry
675 in the database fails. The most likely reason for it failing is
676 out-of-space.
677
6782000-12-31 Assar Westerlund <assar@sics.se>
679
680 * kadmind.c (main): handle krb5_init_context failure consistently
681 * kadmin.c (main): handle krb5_init_context failure consistently
682 * add-random-users.c (add_user): handle krb5_init_context failure
683 consistently
684
685 * kadm_conn.c (spawn_child): use a struct sockaddr_storage
686
6872000-12-15 Johan Danielsson <joda@pdc.kth.se>
688
689 * get.c: avoid asprintf'ing NULL strings
690
6912000-12-14 Johan Danielsson <joda@pdc.kth.se>
692
693 * load.c: fix option parsing
694
6952000-11-16 Assar Westerlund <assar@sics.se>
696
697 * kadm_conn.c (wait_for_connection): check for fd's being too
698 large to select on
699
7002000-11-09 Johan Danielsson <joda@pdc.kth.se>
701
702 * get.c: don't try to print modifier name if it isn't set (from
703 Jacques A. Vidrine" <n@nectar.com>)
704
7052000-09-19 Assar Westerlund <assar@sics.se>
706
707 * server.c (kadmind_loop): send in keytab to v4 handling function
708 * version4.c: allow the specification of what keytab to use
709
710 * get.c (print_entry_long): actually print the actual saltvalue
711 used if it's not the default
712
7132000-09-10 Johan Danielsson <joda@pdc.kth.se>
714
715 * kadmin.c: add option parsing, and add `privs' as an alias for
716 `privileges'
717
718 * init.c: complain if there's no realm name specified
719
720 * rename.c: add option parsing
721
722 * load.c: add option parsing
723
724 * get.c: make `get' and `list' aliases to each other, but with
725 different defaults
726
727 * del_enctype.c: add option parsing
728
729 * del.c: add option parsing
730
731 * ank.c: calling the command `add' make more sense from an english
732 pov
733
734 * Makefile.am: add kadmin manpage
735
736 * kadmin.8: short manpage
737
738 * kadmin.c: `quit' should be a alias for `exit', not `help'
739
7402000-08-27 Assar Westerlund <assar@sics.se>
741
742 * server.c (handle_v5): do not try to perform stupid stunts when
743 printing errors
744
7452000-08-19 Assar Westerlund <assar@sics.se>
746
747 * util.c (str2time_t): add alias for `now'.
748
7492000-08-18 Assar Westerlund <assar@sics.se>
750
751 * server.c (handle_v5): accept any kadmin/admin@* principal as the
752 server
753 * kadmind.c: remove extra prototype of kadmind_loop
754 * kadmin_locl.h (kadmind_loop): add prototype
755
756 * init.c (usage): print init-usage and not add-dito
757
7582000-08-07 Johan Danielsson <joda@pdc.kth.se>
759
760 * kadmind.c: use roken_getsockname
761
7622000-08-07 Assar Westerlund <assar@sics.se>
763
764 * kadmind.c, kadm_conn.c: use socklen_t instead of int where
765 appropriate. From <thorpej@netbsd.org>
766
7672000-08-04 Johan Danielsson <joda@pdc.kth.se>
768
769 * Makefile.am: link with pidfile library
770
771 * kadmind.c: write a pid file, and setup password quality
772 functions
773
774 * kadmin_locl.h: util.h
775
7762000-07-27 Assar Westerlund <assar@sics.se>
777
778 * version4.c (decode_packet): be totally consistent with the
779 prototype of des_cbc_cksum
780 * kadmind.c: use sa_size instead of sa_len, some systems define
781 this to emulate anonymous unions
782 * kadm_conn.c: use sa_size instead of sa_len, some systems define
783 this to emulate anonymous unions
784
7852000-07-24 Assar Westerlund <assar@sics.se>
786
787 * kadmin.c (commands): add quit
788 * load.c (doit): truncate the log since there's no way of knowing
789 what changes are going to be added
790
7912000-07-23 Assar Westerlund <assar@sics.se>
792
793 * util.c (str2time_t): be more careful with strptime that might
794 zero out the `struct tm'
795
7962000-07-22 Johan Danielsson <joda@pdc.kth.se>
797
798 * kadm_conn.c: make the parent process wait for children and
799 terminate after receiving a signal, also terminate on SIGINT
800
8012000-07-22 Assar Westerlund <assar@sics.se>
802
803 * version4.c: map both princ_expire_time and pw_expiration to v4
804 principal expiration
805
8062000-07-22 Johan Danielsson <joda@pdc.kth.se>
807
808 * version4.c (handle_v4): check for termination
809
810 * server.c (v5_loop): check for termination
811
812 * kadm_conn.c (wait_term): if we're doing something, set just set
813 a flag otherwise exit rightaway
814
815 * server.c: use krb5_read_priv_message; (v5_loop): check for EOF
816
8172000-07-21 Assar Westerlund <assar@sics.se>
818
819 * kadm_conn.c: remove sys/select.h. make signal handlers
820 type-correct and static
821
822 * kadmin_locl.h: add limits.h and sys/select.h
823
8242000-07-20 Assar Westerlund <assar@sics.se>
825
826 * init.c (init): also create `kadmin/hprop'
827 * kadmind.c: ports is a string argument
828 * kadm_conn.c (start_server): fix printf format
829
830 * kadmin_locl.h: add <sys/select.h>
831 * kadm_conn.c: remove sys/select.h. make signal handlers
832 type-correct and static
833
834 * kadmin_locl.h: add limits.h and sys/select.h
835
8362000-07-17 Johan Danielsson <joda@pdc.kth.se>
837
838 * kadm_conn.c: put all processes in a new process group
839
840 * server.c (v5_loop): use krb5_{read,write}_priv_message
841
8422000-07-11 Johan Danielsson <joda@pdc.kth.se>
843
844 * version4.c: change log strings to match the v5 counterparts
845
846 * mod.c: allow setting kvno
847
848 * kadmind.c: if stdin is not a socket create and listen to sockets
849
850 * kadm_conn.c: socket creation functions
851
852 * util.c (deltat2str): treat 0 and INT_MAX as never
853
8542000-07-08 Assar Westerlund <assar@sics.se>
855
856 * Makefile.am (INCLUDES): add ../lib/krb5
857 * kadmin_locl.h: add krb5_locl.h (since we just use some stuff
858 from there)
859
8602000-06-07 Assar Westerlund <assar@sics.se>
861
862 * add-random-users.c: new testing program that adds a number of
863 randomly generated users
864
8652000-04-12 Assar Westerlund <assar@sics.se>
866
867 * cpw.c (do_cpw_entry): call set_password if no argument is given,
868 it will prompt for the password.
869 * kadmin.c: make help only print the commands that are actually
870 available.
871
8722000-04-03 Assar Westerlund <assar@sics.se>
873
874 * del_enctype.c (del_enctype): set ignore correctly
875
8762000-04-02 Assar Westerlund <assar@sics.se>
877
878 * kadmin.c (main): make parse errors a fatal error
879 * init.c (init): create changepw/kerberos with disallow-tgt and
880 pwchange attributes
881
8822000-03-23 Assar Westerlund <assar@sics.se>
883
884 * util.c (hex2n, parse_des_key): add
885 * server.c (kadmind_dispatch): add kadm_chpass_with_key
886 * cpw.c: add --key
887 * ank.c: add --key
888
8892000-02-16 Assar Westerlund <assar@sics.se>
890
891 * load.c (doit): check return value from parse_hdbflags2int
892 correctly
893
8942000-01-25 Assar Westerlund <assar@sics.se>
895
896 * load.c: checking all parsing for errors and all memory
897 allocations also
898
8992000-01-02 Assar Westerlund <assar@sics.se>
900
901 * server.c: check initial flag in ticket and allow users to change
902 their own password if it's set
903 * ext.c (do_ext_keytab): set timestamp
904
9051999-12-14 Assar Westerlund <assar@sics.se>
906
907 * del_enctype.c (usage): don't use arg_printusage
908
9091999-11-25 Assar Westerlund <assar@sics.se>
910
911 * del_enctype.c (del_enctype): try not to leak memory
912
913 * version4.c (kadm_ser_mod): use kadm5_s_modify_principal (no
914 _with_key)
915
916 * kadmin.c: add `del_enctype'
917
918 * del_enctype.c (del_enctype): new function for deleting enctypes
919 from a principal
920
921 * Makefile.am (kadmin_SOURCES): add del_enctype.c
922
9231999-11-09 Johan Danielsson <joda@pdc.kth.se>
924
925 * server.c: cope with old clients
926
927 * kadmin_locl.h: remove version string
928
9291999-10-17 Assar Westerlund <assar@sics.se>
930
931 * Makefile.am (kadmin_LDADD): add LIB_dlopen
932
9331999-10-01 Assar Westerlund <assar@sics.se>
934
935 * ank.c (add_one_principal): `password' can cactually be NULL in
936 the overwrite code, check for it.
937
9381999-09-20 Assar Westerlund <assar@sics.se>
939
940 * mod.c (mod_entry): print the correct principal name in error
941 messages. From Love <lha@e.kth.se>
942
9431999-09-10 Assar Westerlund <assar@sics.se>
944
945 * init.c (init): also create `changepw/kerberos'
946
947 * version4.c: only create you loose packets when we fail decoding
948 and not when an operation is not performed for some reason
949 (decode_packet): read the service key from the hdb
950 (dispatch, decode_packet): return proper error messages
951
952 * version4.c (kadm_ser_cpw): add password quality functions
953
9541999-08-27 Johan Danielsson <joda@pdc.kth.se>
955
956 * server.c (handle_v5): give more informative message if
957 KRB5_KT_NOTFOUND
958
9591999-08-26 Johan Danielsson <joda@pdc.kth.se>
960
961 * kadmind.c: use HDB keytabs
962
9631999-08-25 Assar Westerlund <assar@sics.se>
964
965 * cpw.c (set_password): use correct variable. From Love
966 <lha@e.kth.se>
967
968 * server.c (v5_loop): use correct error code
969
970 * ank.c (add_one_principal): initialize `default_ent'
971
9721999-08-21 Assar Westerlund <assar@sics.se>
973
974 * random_password.c: new file, stolen from krb4
975
976 * kadmin_locl.h: add prototype for random_password
977
978 * cpw.c: add support for --random-password
979
980 * ank.c: add support for --random-password
981
982 * Makefile.am (kadmin_SOURCES): add random_password.c
983
9841999-08-19 Assar Westerlund <assar@sics.se>
985
986 * util.c (edit_timet): break when we manage to parse the time not
987 the inverse.
988
989 * mod.c: add parsing of lots of options. From Love
990 <lha@stacken.kth.se>
991
992 * ank.c: add setting of expiration and password expiration
993
994 * kadmin_locl.h: update util.c prototypes
995
996 * util.c: move-around. clean-up, rename, make consistent (and
997 some other weird stuff). based on patches from Love
998 <lha@stacken.kth.se>
999
1000 * version4.c (kadm_ser_cpw): initialize password
1001 (handle_v4): remove unused variable `ret'
1002
10031999-08-16 Assar Westerlund <assar@sics.se>
1004
1005 * version4.c (handle_v4): more error checking and more correct
1006 error messages
1007
1008 * server.c (v5_loop, kadmind_loop): more error checking and more
1009 correct error messages
1010
10111999-07-24 Assar Westerlund <assar@sics.se>
1012
1013 * util.c (str2timeval, edit_time): functions for parsing and
1014 editing times. Based on patches from Love <lha@stacken.kth.se>.
1015 (edit_entry): call new functions
1016
1017 * mod.c (mod_entry): allow modifying expiration times
1018
1019 * kadmin_locl.h (str2timeval): add prototype
1020
1021 * ank.c (add_one_principal): allow setting expiration times
1022
10231999-07-03 Assar Westerlund <assar@sics.se>
1024
1025 * server.c (v5_loop): handle data allocation with krb5_data_alloc
1026 and check return value
1027
10281999-06-23 Assar Westerlund <assar@sics.se>
1029
1030 * version4.c (kadm_ser_cpw): read the key in the strange order
1031 it's sent
1032
1033 * util.c (edit_entry): look at default
1034 (edit_time): always set mask even if value == 0
1035
1036 * kadmin_locl.h (edit_entry): update
1037
1038 * ank.c: make ank use the values of the default principal for
1039 prompting
1040
1041 * version4.c (values_to_ent): convert key data correctly
1042
10431999-05-23 Assar Westerlund <assar@sics.se>
1044
1045 * init.c (create_random_entry): more correct setting of mask
1046
10471999-05-21 Assar Westerlund <assar@sics.se>
1048
1049 * server.c (handle_v5): read sendauth version correctly.
1050
10511999-05-14 Assar Westerlund <assar@sics.se>
1052
1053 * version4.c (error_code): try to handle really old krb4
1054 distributions
1055
10561999-05-11 Assar Westerlund <assar@sics.se>
1057
1058 * init.c (init): initialize realm_max_life and realm_max_rlife
1059
10601999-05-07 Assar Westerlund <assar@sics.se>
1061
1062 * ank.c (add_new_key): initialize more variables
1063
10641999-05-04 Assar Westerlund <assar@sics.se>
1065
1066 * version4.c (kadm_ser_cpw): always allow a user to change her
1067 password
1068 (kadm_ser_*): make logging work
1069 clean-up and restructure
1070
1071 * kadmin_locl.h (set_entry): add prototype
1072
1073 * kadmin.c (usage): update usage string
1074
1075 * init.c (init): new arguments realm-max-ticket-life and
1076 realm-max-renewable-life
1077
1078 * util.c (edit_time, edit_attributes): don't do anything if it's
1079 already set
1080 (set_entry): new function
1081
1082 * ank.c (add_new_key): new options for setting max-ticket-life,
1083 max-renewable-life, and attributes
1084
1085 * server.c (v5_loop): remove unused variable
1086
1087 * kadmin_locl.h: add prototypes
1088
1089 * version4.c: re-insert krb_err.h and other miss
1090
1091 * server.c (kadmind_loop): break-up and restructure
1092
1093 * version4.c: add ACL checks more error code checks restructure
1094
10951999-05-03 Johan Danielsson <joda@pdc.kth.se>
1096
1097 * load.c: check for (un-)encrypted keys
1098
1099 * dump.c: use hdb_print_entry
1100
1101 * version4.c: version 4 support
1102
1103 * Makefile.am: link with krb4
1104
1105 * kadmin_locl.h: include <sys/un.h>
1106
1107 * server.c: move from lib/kadm5, and add basic support for krb4
1108 kadmin protocol
1109
1110 * kadmind.c: move recvauth to kadmind_loop()
Note: See TracBrowser for help on using the repository browser.