source: heimdal/trunk/lib/kadm5/ChangeLog

Last change on this file was 1, checked in by Paul Smedley, 10 years ago

Initial commit of Heimdal 1.5.3
File size: 38.9 KB
Line 
12008-04-23 Love Hörnquist Å
2strand <lha@it.su.se>
3
4 * ipropd_master.c: Only log "sending AYT" once, pointed out by Dr
5 A V Le Blanc.
6
7
82008-01-21 Love Hörnquist Å
9strand <lha@it.su.se>
10
11 * default_keys.c: Use hdb_free_keys().
12
132008-01-11 Love Hörnquist Å
14strand <lha@it.su.se>
15
16 * Makefile.am: add check-cracklib.pl, flush.c,
17 sample_passwd_check.c
18
192007-12-07 Love Hörnquist Å
20strand <lha@it.su.se>
21
22 * use hdb_db_dir() and hdb_default_db()
23
242007-10-18 Love <lha@stacken.kth.se>
25
26 * init_c.c: We are getting default_client, not client. this way
27 the user can override the result.
28
292007-09-29 Love Hörnquist Å
30strand <lha@it.su.se>
31
32 * iprop.8: fix spelling, From Antoine Jacoutt.
33
342007-08-16 Love Hörnquist Å
35strand <lha@it.su.se>
36
37 * version-script.map: export _kadm5_unmarshal_params,
38 _kadm5_acl_check_permission
39
40 * version-script.map: export kadm5_log_ symbols.
41
42 * log.c: Unexport the specific log replay operations.
43
442007-08-10 Love Hörnquist Å
45strand <lha@it.su.se>
46
47 * Makefile.am: build sample_passwd_check.la as part of noinst.
48
49 * sample_passwd_check.c: Add missing prototype for check_length().
50
512007-08-07 Love Hörnquist Å
52strand <lha@it.su.se>
53
54 * log.c: Sprinkle krb5_set_error_string().
55
56 * ipropd_slave.c: Provide better error why kadm5_log_replay
57 failed.
58
592007-08-06 Love Hörnquist Å
60strand <lha@it.su.se>
61
62 * ipropd_master.c: - don't push whole database to the new client
63 every time. - make slaves get the whole new database if they have
64 a newer log the the master (and thus have them go back in time).
65
662007-08-03 Love Hörnquist Å
67strand <lha@it.su.se>
68
69 * ipropd_slave.c: make more sane.
70
71 * ipropd_slave.c: more paranoid check that the log entires are
72 self consistant
73
74 * log.c (kadm5_log_foreach): check that the postamble contains the
75 right data.
76
77 * ipropd_master.c: Sprinkle more info about what versions the
78 master thinks about the client versions.
79
80 * ipropd_master.c: Start the server at the current version, not 0.
81
822007-08-02 Love Hörnquist Å
83strand <lha@it.su.se>
84
85 * ipropd_master.c: Add more logging, to figure out what is
86 happening in the master.
87
882007-08-01 Love Hörnquist Å
89strand <lha@it.su.se>
90
91 * Makefile.am: add version-script for libkadm5srv.la
92
93 * version-script.map: version script fro kadm5 server libary.
94
95 * log.c: only free the orignal entries extentions if there was
96 any. Bug reported by Peter Meinecke.
97
98 * add configuration for signal file and acl file, let user select
99 hostname, catch signals and print why we are quiting, make nop
100 cause one new version, not two
101
1022007-07-30 Love Hörnquist Å
103strand <lha@it.su.se>
104
105 * ipropd_master.c (send_diffs): make current slave's version
106 uptodate when diff have been sent.
107
1082007-07-27 Love Hörnquist Å
109strand <lha@it.su.se>
110
111 * ipropd_slave.c: More comments and some more error checking.
112
1132007-07-26 Love Hörnquist Å
114strand <lha@it.su.se>
115
116 * init_c.c (get_cache_principal): make sure id is reset if we
117 fail. From Benjamin Bennet.
118
1192007-07-10 Love Hörnquist Å
120strand <lha@it.su.se>
121
122 * context_s.c (find_db_spec): match realm-less as the default
123 realm.
124
125 * Makefile.am: New library version.
126
1272007-07-05 Love Hörnquist Å
128strand <lha@it.su.se>
129
130 * context_s.c: Use hdb_get_dbinfo to pick up configuration.
131 ctx->config.realm can be NULL, check for that, from Bjorn S.
132
1332007-07-04 Love Hörnquist Å
134strand <lha@it.su.se>
135
136 * init_c.c: Try harder to use the right principal.
137
1382007-06-20 Love Hörnquist Å
139strand <lha@it.su.se>
140
141 * ipropd_slave.c: Catch return value from krb5_program_setup. From
142 Steven Luo.
143
1442007-05-08 Love Hörnquist Å
145strand <lha@it.su.se>
146
147 * delete_s.c: Write log entry after store is successful, rename
148 out goto statments.
149
150 * randkey_s.c: Write log entry after store is successful.
151
152 * modify_s.c: Write log entry after store is successful.
153
154 * rename_s.c: indent.
155
156 * chpass_s.c: Write log entry after store is successful.
157
158 * create_s.c: Write log entry after store is successful.
159
1602007-05-07 Love Hörnquist Å
161strand <lha@it.su.se>
162
163 * iprop-commands.in: Add default values to make this working
164 again.
165
166 * iprop-log.c (iprop_replay): create the database with more
167 liberal mode.
168
169 * log.c: make it slightly more working.
170
171 * iprop-log.8: Document last-version.
172
173 * iprop-log.c: (last_version): print last version of the log.
174
175 * iprop-commands.in: new command last-version: print last version
176 of the log.
177
178 * log.c (kadm5_log_previous): document assumptions and make less
179 broken. Bug report from Ronny Blomme.
180
1812007-02-17 Love Hörnquist Å
182strand <lha@it.su.se>
183
184 * admin.h: add support to get aliases
185
186 * get_s.c: add support to get aliases
187
1882007-02-11 David Love <fx@gnu.org>
189
190 * iprop-log.8: Small fixes, from David Love.
191
1922006-12-15 Love Hörnquist Å
193strand <lha@it.su.se>
194
195 * init_c.c: if the user have a kadmin/admin initial ticket, don't
196 ask for password, just use the credential instead.
197
1982006-12-06 Love Hörnquist Å
199strand <lha@it.su.se>
200
201 * ipropd_master.c: Use strcspn to remove \n from string returned
202 by fgets. From Björn Sandell
203
2042006-11-30 Love Hörnquist Å
205strand <lha@it.su.se>
206
207 * init_c.c (kadm_connect): clear error string before trying to
208 print a errno, this way we don't pick up a random failure code
209
2102006-11-20 Love Hörnquist Å
211strand <lha@it.su.se>
212
213 * ipropd_slave.c: Make krb5_get_init_creds_opt_free take a context
214 argument.
215
216 * init_c.c: Make krb5_get_init_creds_opt_free take a context
217 argument.
218
2192006-10-22 Love Hörnquist Å
220strand <lha@it.su.se>
221
222 * ent_setup.c: Try to not leak memory.
223
2242006-10-07 Love Hörnquist Å
225strand <lha@it.su.se>
226
227 * Makefile.am: split build files into dist_ and noinst_ SOURCES
228
2292006-08-24 Love Hörnquist Å
230strand <lha@it.su.se>
231
232 * get_s.c: Add KRB5_KDB_ALLOW_DIGEST
233
234 * ent_setup.c: Add KRB5_KDB_ALLOW_DIGEST
235
236 * admin.h: Add KRB5_KDB_ALLOW_DIGEST
237
2382006-06-16 Love Hörnquist Å
239strand <lha@it.su.se>
240
241 * check-cracklib.pl: Add password reuse checking. From Harald
242 Barth.
243
2442006-06-14 Love Hörnquist Å
245strand <lha@it.su.se>
246
247 * ent_setup.c (attr_to_flags): Add KRB5_KDB_ALLOW_KERBEROS4
248
249 * get_s.c (kadm5_s_get_principal): Add KRB5_KDB_ALLOW_KERBEROS4
250
251 * admin.h: Add KRB5_KDB_ALLOW_KERBEROS4
252
2532006-06-06 Love Hörnquist Å
254strand <lha@it.su.se>
255
256 * ent_setup.c (attr_to_flags): Add KRB5_KDB_TRUSTED_FOR_DELEGATION
257
2582006-05-30 Love Hörnquist Å
259strand <lha@it.su.se>
260
261 * password_quality.c (kadm5_check_password_quality): set error
262 message in context.
263
2642006-05-13 Love Hörnquist Å
265strand <lha@it.su.se>
266
267 * iprop-log.c: Avoid shadowing.
268
269 * rename_s.c: Avoid shadowing.
270
2712006-05-08 Love Hörnquist Å
272strand <lha@it.su.se>
273
274 * privs_c.c (kadm5_c_get_privs): privs is a uint32_t, let copy it
275 that way.
276
2772006-05-05 Love Hörnquist Å
278strand <lha@it.su.se>
279
280 * Rename u_intXX_t to uintXX_t
281
2822006-04-27 Love Hörnquist Å
283strand <lha@it.su.se>
284
285 * chpass_s.c,delete_s.c,get_s.c,log.c,modify_s.c,randkey_s.c,rename_s.c:
286 Pass in HDB_F_GET_ANY to all ->hdb fetch to hint what entries we are looking for
287
288 * send_recv.c: set and clear error string
289
290 * rename_s.c: Break out the that we request from principal from
291 the entry and pass it in as a separate argument.
292
293 * randkey_s.c: Break out the that we request from principal from
294 the entry and pass it in as a separate argument.
295
296 * modify_s.c: Break out the that we request from principal from
297 the entry and pass it in as a separate argument.
298
299 * log.c: Break out the that we request from principal from the
300 entry and pass it in as a separate argument.
301
302 * get_s.c: Break out the that we request from principal from the
303 entry and pass it in as a separate argument.
304
305 * delete_s.c: Break out the that we request from principal from
306 the entry and pass it in as a separate argument.
307
308 * chpass_s.c: Break out the that we request from principal from
309 the entry and pass it in as a separate argument.
310
3112006-04-25 Love Hörnquist Å
312strand <lha@it.su.se>
313
314 * create_s.c (create_principal*): If client doesn't send kvno,
315 make sure to set it to 1.
316
3172006-04-10 Love Hörnquist Å
318strand <lha@it.su.se>
319
320 * log.c: (kadm5_log_rename): handle errors better
321 Fixes Coverity, NetBSD CID#628
322
323 * log.c (kadm5_log_delete): add error handling Coverity, NetBSD
324 CID#626
325 (kadm5_log_modify): add error handling Coverity, NetBSD CID#627
326
327 * init_c.c (_kadm5_c_get_cred_cache): handle ccache case better in
328 case no client name was passed in. Coverity, NetBSD CID#919
329
330 * init_c.c (_kadm5_c_get_cred_cache): Free client principal in
331 case of error. Coverity NetBSD CID#1908
332
3332006-02-02 Love Hörnquist Å
334strand <lha@it.su.se>
335
336 * kadm5_err.et: (PASS_REUSE): Spelling,
337 from Václav H?la <ax@natur.cuni.cz>
338
3392006-01-25 Love Hörnquist Å
340strand <lha@it.su.se>
341
342 * send_recv.c: Clear error-string when introducing new errors.
343
344 * *_c.c: Clear error-string when introducing new errors.
345
3462006-01-15 Love Hörnquist Å
347strand <lha@it.su.se>
348
349 * Makefile.am (libkadm5clnt.la) doesn't depend on libhdb, remove
350 dependency
351
3522005-12-13 Love Hörnquist Å
353strand <lha@it.su.se>
354
355 * memset hdb_entry_ex before use
356
3572005-12-12 Love Hörnquist Å
358strand <lha@it.su.se>
359
360 * Wrap hdb_entry with hdb_entry_ex, patch originally
361 from Andrew Bartlet
362
3632005-11-30 Love Hörnquist Å
364strand <lha@it.su.se>
365
366 * context_s.c (set_field): try another way to calculate the path
367 to the database/logfile/signal-socket
368
369 * log.c (kadm5_log_init): set error string on failures
370
3712005-09-08 Love Hörnquist Å
372strand <lha@it.su.se>
373
374 * Constify password.
375
376 * admin.h: Add KRB5_TL_PKINIT_ACL.
377
378 * marshall.c (_kadm5_unmarshal_params): avoid signed-ness warnings
379
380 * get_s.c (kadm5_s_get_principal): clear error string
381
3822005-08-25 Love Hörnquist Å
383strand <lha@it.su.se>
384
385 * iprop-log.8: More text about iprop-log.
386
3872005-08-24 Love Hörnquist Å
388strand <lha@it.su.se>
389
390 * iprop.8: SEE ALSO iprop-log.
391
392 * Makefile.am: man_MANS += iprop-log.8
393
394 * iprop-log.8: Basic for documentation of iprop-log.
395
396 * remove replay_log.c, dump_log.c, and truncate_log.c, folded into
397 iprop-log.
398
399 * log.c (kadm5_log_foreach): add a context variable and pass it
400 down to `funcÂŽ.
401
402 * iprop-commands.in: Move truncate_log and replay_log into
403 iprop-log.
404
405 * iprop-log.c: Move truncate_log and replay_log into iprop-log.
406
407 * Makefile.am: Move truncate_log and replay_log into iprop-log.
408
409 * Makefile.am: Make this work with a clean directory.
410
411 * ipropd_master.c: Make compile.
412
413 * ipropd_master.c: Update to new signature of kadm5_log_previous.
414
415 * log.c (kadm5_log_previous): catch errors instead of asserting
416 and set error string.
417
418 * iprop-commands.in: New program iprop-log that incorperates
419 dump_log as a subcommand, truncate_log and replay_log soon to come
420 after.
421
422 * iprop-log.c: New program iprop-log that incorperates dump_log as
423 a subcommand, truncate_log and replay_log soon to come after.
424
425 * Makefile.am: New program iprop-log that incorperates dump_log as
426 a subcommand, truncate_log and replay_log soon to come after.
427
4282005-08-11 Love Hörnquist Å
429strand <lha@it.su.se>
430
431 * get_s.c: Implement KADM5_LAST_PWD_CHANGE.
432
433 * set_keys.c: Set and clear password where appropriate.
434
435 * randkey_s.c: Operation modifies tl_data.
436
437 * log.c (kadm5_log_replay_modify): Check return values of
438 malloc(), replace all extensions.
439
440 * kadm5_err.et: Make BAD_TL_TYPE error more helpful.
441
442 * get_s.c: Expose KADM5_TL_DATA options to the client.
443
444 * ent_setup.c: Merge in KADM5_TL_DATA in the database.
445
446 * chpass_s.c: Operations modify extensions, mark that with
447 TL_DATA.
448
449 * admin.h: Add more TL types (password and extension).
450
4512005-06-17 Love Hörnquist Å
452strand <lha@it.su.se>
453
454 * constify
455
456 * ipropd_slave.c: avoid shadowing
457
458 * ipropd_master.c: rename local variable slave to s, optind ->
459 optidx
460
461 * get_princs_c.c: rename variable exp to expression
462
463 * ad.c: rename variable exp to expression
464
465 * log.c: rename shadowing len to num
466
467 * get_princs_s.c: rename variable exp to expression
468
469 * context_s.c: const poison
470
471 * common_glue.c: rename variable exp to expression
472
4732005-05-30 Love Hörnquist Å
474strand <lha@it.su.se>
475
476 * ent_setup.c (attr_to_flags): check for KRB5_KDB_OK_AS_DELEGATE
477
478 * get_s.c (kadm5_s_get_principal): set KRB5_KDB_OK_AS_DELEGATE
479
480 * admin.h: add KRB5_KDB_OK_AS_DELEGATE, sync KRB5_TL_ flags
481
4822005-05-25 Love Hörnquist Å
483strand <lha@it.su.se>
484
485 * kadm5_pwcheck.3: please mdoclint
486
4872005-05-25 Dave Love <fx@gnu.org>
488
489 * kadm5_pwcheck.3: document kadm5_add_passwd_quality_verifier,
490 improve text
491
4922005-05-24 Dave Love <fx@gnu.org>
493
494 * iprop.8: Added some info about defaults, fixed some markup.
495
4962005-05-23 Dave Love <fx@gnu.org>
497
498 * ipropd_slave.c: Don't test HAVE_DAEMON since roken supplies it.
499
500 * ipropd_master.c: Don't test HAVE_DAEMON since roken supplies it.
501
5022005-05-13 Love Hörnquist Å
503strand <lha@it.su.se>
504
505 * init_c.c (_kadm5_c_init_context): fix memory leak in case of
506 failure
507
5082005-05-09 Dave Love <fx@gnu.org>
509
510 * password_quality.c (find_func): Fix off-by-one and logic error.
511 (external_passwd_quality): Improve messages.
512
513 * test_pw_quality.c (main): Call kadm5_setup_passwd_quality_check
514 and kadm5_add_passwd_quality_verifier.
515
5162005-04-30 Love Hörnquist Å
517strand <lha@it.su.se>
518
519 * default_keys.c: #include <err.h>, only print salt it its longer
520 then 0, use krb5_err instead of errx where appropriate
521
5222005-04-25 Love Hörnquist Å
523strand <lha@it.su.se>
524
525 * ipropd_slave.c: add the documented option --port
526
527 * ipropd_master.c: add the documented option --port
528
529 * dump_log.c: use the newly generated units function
530
5312005-04-24 Love Hörnquist Å
532strand <lha@it.su.se>
533
534 * dump_log.c: use strlcpy
535
536 * password_quality.c: don't use sizeof(pointer)
537
5382005-04-15 Love Hörnquist Å
539strand <lha@it.su.se>
540
541 * check-cracklib.pl: external password verifier sample
542
543 * password_quality.c (kadm5_add_passwd_quality_verifier): if NULL
544 is passed in, load defaults
545
5462005-04-14 Love Hörnquist Å
547strand <lha@it.su.se>
548
549 * password_quality.c: add an end tag to the external password
550 quality check protocol
551
5522005-04-13 Love Hörnquist Å
553strand <lha@it.su.se>
554
555 * password_quality.c: add external passsword quality check builtin
556 module
557
558 [password_quality]
559 policies = external-check
560 external-program = /bin/false
561
562 To approve password a, make the test program return APPROVED on
563 stderr and fail with exit code 0.
564
5652004-10-12 Love Hörnquist Å
566strand <lha@it.su.se>
567
568 * Makefile.am: bump version to 7:7:0 and 6:5:2
569
570 * default_keys.c (parse_file): use hdb_generate_key_set
571
572 * keys.c,set_keys.c: Move keyset parsing and password based keyset
573 generation into hdb. Requested by Andrew Bartlett <abartlet@samba.org>
574 for hdb-ldb backend.
575
5762004-09-23 Johan Danielsson <joda@pdc.kth.se>
577
578 * ipropd_master.c: add help strings to some options
579
5802004-09-12 Love Hörnquist Å
581strand <lha@it.su.se>
582
583 * chpass_s.c: deal with changed prototype for _kadm5_free_keys
584
585 * keys.c (_kadm5_free_keys): change prototype, make it use
586 krb5_context instead of a kadm5_server_context
587
588 * set_keys.c (parse_key_set): do way with static returning
589 (function) static variable and returned allocated memory
590 (_kadm5_generate_key_set): free enctypes returned by parse_key_set
591
5922004-09-06 Love Hörnquist Å
593strand <lha@it.su.se>
594
595 * set_keys.c: Fix memory leak, don't return stack variables From
596 Andrew Bartlett
597
598 * set_keys.c: make all_etypes const and move outside function to
599 avoid returning data on stack
600
6012004-08-26 Love Hörnquist Å
602strand <lha@it.su.se>
603
604 * acl.c (fetch_acl): use " \t\n" instead of just "\n" for the
605 delim of the third element, this is so we can match
606 "foo@REALM<SPC>all<SPC><SPC>*@REALM", before it just matched
607 "foo@REALM<SPC>all<SPC>*@REALM", but that is kind of lucky since
608 what really happen was that the last <SPC> was stamped out, and
609 the it never strtok_r never needed to parse over it.
610
6112004-08-25 Love Hörnquist Å
612strand <lha@it.su.se>
613
614 * set_keys.c (_kadm5_generate_key_set): since arcfour-hmac-md5 is
615 without salting, some people tries to add the string
616 "arcfour-hmac-md5" when they really should have used
617 "arcfour-hmac-md5:pw-salt", help them and add glue for that
618
6192004-08-18 Johan Danielsson <joda@pdc.kth.se>
620
621 * ipropd_slave.c: add --detach
622
6232004-07-06 Love Hörnquist Å
624strand <lha@it.su.se>
625
626 * ad.c: use new tsasl interface remove debug printf add upn to
627 computer-accounts
628
6292004-06-28 Love Hörnquist Å
630strand <lha@it.su.se>
631
632 * ad.c: implement kadm5_ad_init_with_password_ctx set more error
633 strings
634
6352004-06-21 Love Hörnquist Å
636strand <lha@it.su.se>
637
638 * Makefile.am: man_MANS = kadm5_pwcheck.3
639
640 * kadm5_pwcheck.3: document new password quality api
641
642 * password_quality.c: new password check interface (old still
643 supported)
644
645 * kadm5-pwcheck.h: new password check interface
646
6472004-06-08 Love Hörnquist Å
648strand <lha@it.su.se>
649
650 * ipropd_master.c (main): process all slaves, not just up to the
651 last slave sending data
652 (bug report from Björn Sandell <biorn@dce.chalmers.se>)
653 (*): only send one ARE_YOU_THERE
654
6552004-06-02 Love Hörnquist Å
656strand <lha@it.su.se>
657
658 * ad.c: use krb5_set_password_using_ccache
659
6602004-06-01 Love Hörnquist Å
661strand <lha@it.su.se>
662
663 * ad.c: try handle spn's better
664
6652004-05-31 Love Hörnquist Å
666strand <lha@it.su.se>
667
668 * ad.c: add expiration time
669
670 * ad.c: add modify operations
671
672 * ad.c: handle create and delete
673
6742004-05-27 Love Hörnquist Å
675strand <lha@it.su.se>
676
677 * ad.c: more code for get, handle attributes
678
679 * ad.c: more code for get, handle time stamps and bad password
680 counter
681
682 * ad.c: more code for get, only fetches kvno for now
683
6842004-05-26 Love Hörnquist Å
685strand <lha@it.su.se>
686
687 * ad.c: add support for tsasl
688
689 * private.h: add kadm5_ad_context
690
691 * ipropd_master.c (prop_one): store the opcode in the begining of
692 the blob, not the end
693
694 * ad.c: try all ldap servers in dns, generate a random password,
695 base64(random_block(64)), XXX must make it support other then
696 ARCFOUR
697
698 * ad.c: framework for windows AD backend
699
7002004-03-07 Love Hörnquist Å
701strand <lha@it.su.se>
702
703 * create_s.c (kadm5_s_create_principal): remove old XXX command
704 and related code, _kadm5_set_keys will do all this now
705
7062004-02-29 Love Hörnquist Å
707strand <lha@it.su.se>
708
709 * set_keys.c (_kadm5_set_keys_randomly): make sure enctype to copy
710 enctype for des keys From: Andrew Bartlett <abartlet@samba.org>
711
712 * create_s.c (kadm5_s_create_principal_with_key): don't call
713 _kadm5_set_keys2, create_principal will do that for us. Set kvno
714 to 1.
715
716 * chpass_s.c (change): bump kvno
717 (kadm5_s_chpass_principal_with_key): bump kvno
718
719 * randkey_s.c (kadm5_s_randkey_principal): bump kvno
720
721 * set_keys.c (_kadm5_set_*): don't change the kvno, let the callee
722 to that
723
7242003-12-30 Love Hörnquist Å
725strand <lha@it.su.se>
726
727 * chpass_s.c (change): fix same-password-again by decrypting keys
728 and setting an error code From: Buck Huppmann <buckh@pobox.com>
729
7302003-12-21 Love Hörnquist Å
731strand <lha@it.su.se>
732
733 * init_c.c (_kadm5_c_init_context): catch errors from strdup and
734 other krb5_ functions
735
7362003-12-08 Love Hörnquist Å
737strand <lha@it.su.se>
738
739 * rename_s.c (kadm5_s_rename_principal): allow principal to change
740 realm From Panasas Inc
741
7422003-12-07 Love Hörnquist Å
743strand <lha@it.su.se>
744
745 * destroy_c.c (kadm5_c_destroy): fix memory leaks, From Panasas,
746 Inc
747
7482003-11-23 Love Hörnquist Å
749strand <lha@it.su.se>
750
751 * iprop.h: don't include <krb5-private.h>
752
753 * ipropd_slave.c: stop using krb5 lib private byte-frobbing
754 functions and replace them with with krb5_storage
755
756 * ipropd_master.c: stop using krb5 lib private byte-frobbing
757 functions and replace them with with krb5_storage
758
7592003-11-19 Love Hörnquist Å
760strand <lha@it.su.se>
761
762 * ipropd_slave.c (receive_loop): when seeking over the entries we
763 already have, skip over the trailer. From: Jeffrey Hutzelman
764 <jhutz@cmu.edu>
765
766 * dump_log.c,ipropd_master.c,ipropd_slave.c,
767 replay_log.c,truncate_log.c: parse kdc.conf
768 From: Jeffrey Hutzelman <jhutz@cmu.edu>
769
7702003-10-10 Love Hörnquist Å
771strand <lha@it.su.se>
772
773 * Makefile.am: += test_pw_quality
774
775 * test_pw_quality.c: test program for verifying password quality
776 function
777
7782003-09-03 Love Hörnquist Å
779strand <lha@it.su.se>
780
781 * Makefile.am: add and enable check program default_keys
782
783 * default_keys.c: test program for _kadm5_generate_key_set
784
785 * init_c.c: use
786 krb5_get_init_creds_opt_alloc/krb5_get_init_creds_opt_free
787
7882003-08-17 Love Hörnquist Å
789strand <lha@it.su.se>
790
791 * set_keys.c (_kadm5_set_keys_randomly): remove dup return
792
793 * ipropd_master.c (main): make sure current_version is initialized
794
7952003-08-15 Love Hörnquist Å
796strand <lha@it.su.se>
797
798 * set_keys.c: use default_keys for the both random keys and
799 password derived keys if its defined
800
8012003-07-24 Love Hörnquist Å
802strand <lha@it.su.se>
803
804 * ipropd_slave.c (receive_everything): switch close and rename
805 From: Alf Wachsmann <alfw@SLAC.Stanford.EDU>
806
8072003-07-03 Love Hörnquist Å
808strand <lha@it.su.se>
809
810 * iprop.h, ipropd_master.c, ipropd_slave.c:
811 Add probing from the server that the client is still there, also
812 make the client check that the server is probing.
813
8142003-07-02 Love Hörnquist Å
815strand <lha@it.su.se>
816
817 * truncate_log.c (main): add missing ``if (ret)''
818
8192003-06-26 Love Hörnquist Å
820strand <lha@it.su.se>
821
822 * set_keys.c (make_keys): add AES support
823
824 * set_keys.c: fix off by one in the aes case, pointed out by Ken
825 Raeburn
826
8272003-04-30 Love Hörnquist Å
828strand <lha@it.su.se>
829
830 * set_keys.c (_kadm5_set_keys_randomly): add
831 ETYPE_AES256_CTS_HMAC_SHA1_96 key when configuried with aes
832 support
833
8342003-04-16 Love Hörnquist Å
835strand <lha@it.su.se>
836
837 * send_recv.c: check return values from krb5_data_alloc
838 * log.c: check return values from krb5_data_alloc
839
8402003-04-16 Love Hörnquist Å
841strand <lha@it.su.se>
842
843 * dump_log.c (print_entry): check return values from
844 krb5_data_alloc
845
8462003-04-01 Love Hörnquist Å
847strand <lha@it.su.se>
848
849 * init_c.c (kadm_connect): if a context realm was passed in, use
850 that to form the kadmin/admin principal
851
8522003-03-19 Love Hörnquist Å
853strand <lha@it.su.se>
854
855 * ipropd_master.c (main): make sure we don't consider dead slave
856 for select processing
857 (write_stats): use slave_stats_file variable,
858 check return value of strftime
859 (args): allow specifying slave stats file
860 (slave_dead): close the fd when the slave dies
861
8622002-10-21 Johan Danielsson <joda@pdc.kth.se>
863
864 * ipropd_slave.c (from Derrick Brashear): Propagating a large
865 database without this means the slave kdcs can get erroneous
866 HDB_NOENTRY and return the resulting errors. This creates a new db
867 handle, populates it, and moves it into place.
868
8692002-08-26 Assar Westerlund <assar@kth.se>
870
871 * ipropd_slave.c (receive_everything): type-correctness calling
872 _krb5_get_int
873
874 * context_s.c (find_db_spec): const-correctness in parameters to
875 krb5_config_get_next
876
8772002-08-16 Johan Danielsson <joda@pdc.kth.se>
878
879 * private.h: rename header file flag macro
880
881 * Makefile.am: generate kadm5-{protos,private}.h
882
8832002-08-15 Johan Danielsson <joda@pdc.kth.se>
884
885 * ipropd_master.c: check return value of krb5_sockaddr2address
886
8872002-07-04 Johan Danielsson <joda@pdc.kth.se>
888
889 * ipropd_master.c: handle slaves that come and go; add status
890 reporting (both from Love)
891
892 * iprop.h: KADM5_SLAVE_STATS
893
8942002-03-25 Jacques Vidrine <n@nectar.com>
895
896 * init_c.c (get_cred_cache): bug fix: the default credentials
897 cache was not being used if a client name was specified.
898
8992002-03-25 Johan Danielsson <joda@pdc.kth.se>
900
901 * init_c.c (get_cred_cache): when getting the default_client from
902 the cred cache, make sure the instance part is "admin"; this
903 should require fewer uses of -p
904
9052002-03-11 Assar Westerlund <assar@sics.se>
906
907 * Makefile.am (libkadm5srv_la_LDFLAGS): set version to 7:5:0
908 (libkadm5clnt_la_LDFLAGS): set version to 6:3:2
909
9102002-02-08 Johan Danielsson <joda@pdc.kth.se>
911
912 * init_c.c: we have to create our own param struct before
913 marshaling
914
9152001-09-05 Johan Danielsson <joda@pdc.kth.se>
916
917 * Makefile.am: link with LIB_pidfile
918
919 * iprop.h: include util.h for pidfile
920
9212001-08-31 Assar Westerlund <assar@sics.se>
922
923 * ipropd_slave.c (main): syslog with the correct name
924
9252001-08-30 Jacques Vidrine <n@nectar.com>
926
927 * ipropd_slave.c, ipropd_master.c (main): call pidfile
928
9292001-08-28 Assar Westerlund <assar@sics.se>
930
931 * Makefile.am (libkadm5srv_la_LDFLAGS): set version to 7:4:0
932
9332001-08-24 Assar Westerlund <assar@sics.se>
934
935 * acl.c (fetch_acl): do not return bogus flags and re-organize
936 function
937
938 * Makefile.am: rename variable name to avoid error from current
939 automake
940
9412001-08-13 Johan Danielsson <joda@pdc.kth.se>
942
943 * set_keys.c: add easier afs configuration, defaulting to the
944 local realm in lower case; also try to remove duplicate salts
945
9462001-07-12 Assar Westerlund <assar@sics.se>
947
948 * Makefile.am: add required library dependencies
949
9502001-07-03 Assar Westerlund <assar@sics.se>
951
952 * Makefile.am (libkadm5clnt_la_LDFLAGS): set version to 6:2:2
953
9542001-06-29 Johan Danielsson <joda@pdc.kth.se>
955
956 * init_c.c: call krb5_get_init_creds_opt_set_default_flags
957
9582001-02-19 Johan Danielsson <joda@pdc.kth.se>
959
960 * replay_log.c: add --{start-end}-version flags to replay just
961 part of the log
962
9632001-02-15 Assar Westerlund <assar@sics.se>
964
965 * ipropd_master.c (main): fix select-loop to decrement ret
966 correctly. from "Brandon S. Allbery KF8NH" <allbery@ece.cmu.edu>
967
9682001-01-30 Assar Westerlund <assar@sics.se>
969
970 * Makefile.am: bump versions
971
9722000-12-31 Assar Westerlund <assar@sics.se>
973
974 * init_s.c (*): handle krb5_init_context failure consistently
975 * init_c.c (init_context): handle krb5_init_context failure
976 consistently
977
9782000-12-11 Assar Westerlund <assar@sics.se>
979
980 * Makefile.am (libkadm5srv_la_LDFLAGS): bump version to 7:2:0
981
9822000-11-16 Assar Westerlund <assar@sics.se>
983
984 * set_keys.c (make_keys): clean-up salting loop and try not to
985 leak memory
986
987 * ipropd_master.c (main): check for fd's being too large to select
988 on
989
9902000-08-16 Assar Westerlund <assar@sics.se>
991
992 * Makefile.am (libkadm5srv_la_LDFLAGS): bump version to 7:1:0
993
9942000-08-10 Assar Westerlund <assar@sics.se>
995
996 * acl.c (fetch_acl): fix wrong cases, use krb5_principal_match
997
9982000-08-07 Assar Westerlund <assar@sics.se>
999
1000 * ipropd_master.c (main): ignore SIGPIPE
1001
10022000-08-06 Assar Westerlund <assar@sics.se>
1003
1004 * ipropd_slave.c (receive_everything): make `fd' an int instead of
1005 a pointer. From Derrick J Brashear <shadow@dementia.org>
1006
10072000-08-04 Johan Danielsson <joda@pdc.kth.se>
1008
1009 * admin.h: change void** to void*
1010
10112000-07-25 Johan Danielsson <joda@pdc.kth.se>
1012
1013 * Makefile.am: bump versions to 7:0:0 and 6:0:2
1014
10152000-07-24 Assar Westerlund <assar@sics.se>
1016
1017 * log.c (kadm5_log_get_version): rename kadm5_log_get_version_fd
1018 and make a new that takes a context
1019 (kadm5_log_nop): add logging of missing lengths
1020 (kadm5_log_truncate): new function
1021
1022 * dump_log.c (print_entry): update and correct
1023 * randkey_s.c: call _kadm5_bump_pw_expire
1024 * truncate_log.c: new program for truncating the log
1025 * Makefile.am (sbin_PROGRAMS): add truncate_log
1026 (C_SOURCES): add bump_pw_expire.c
1027 * bump_pw_expire.c: new function for extending password expiration
1028
10292000-07-22 Assar Westerlund <assar@sics.se>
1030
1031 * keys.c: new file with _kadm5_free_keys, _kadm5_init_keys
1032
1033 * set_keys.c (free_keys, init_keys): elevate to internal kadm5
1034 functions
1035
1036 * chpass_s.c (kadm5_s_chpass_principal_cond): new function
1037 * Makefile.am (C_SOURCES): add keys.c
1038 * init_c.c: remove unused variable and handle some parameters
1039 being NULL
1040
10412000-07-22 Johan Danielsson <joda@pdc.kth.se>
1042
1043 * ipropd_slave.c: use krb5_read_priv_message
1044
1045 * ipropd_master.c: use krb5_{read,write}_priv_message
1046
1047 * init_c.c: use krb5_write_priv_message
1048
10492000-07-11 Johan Danielsson <joda@pdc.kth.se>
1050
1051 * ipropd_slave.c: no need to call gethostname, since
1052 sname_to_principal will
1053
1054 * send_recv.c: assert that we have a connected socket
1055
1056 * get_princs_c.c: call _kadm5_connect
1057
1058 * rename_c.c: call _kadm5_connect
1059
1060 * randkey_c.c: call _kadm5_connect
1061
1062 * privs_c.c: call _kadm5_connect
1063
1064 * modify_c.c: call _kadm5_connect
1065
1066 * get_c.c: call _kadm5_connect
1067
1068 * delete_c.c: call _kadm5_connect
1069
1070 * create_c.c: call _kadm5_connect
1071
1072 * chpass_c.c: call _kadm5_connect
1073
1074 * private.h: add more fields to client context; remove prototypes
1075
1076 * admin.h: remove prototypes
1077
1078 * kadm5-protos.h: move public prototypes here
1079
1080 * kadm5-private.h: move private prototypes here
1081
1082 * init_c.c: break out connection code to separate function, and
1083 defer calling it until we actually do something
1084
10852000-07-07 Assar Westerlund <assar@sics.se>
1086
1087 * set_keys.c (make_keys): also support `[kadmin]use_v4_salt' for
1088 backwards compatability
1089
10902000-06-26 Johan Danielsson <joda@pdc.kth.se>
1091
1092 * set_keys.c (_kadm5_set_keys): rewrite this to be more easily
1093 adaptable to different salts
1094
10952000-06-19 Johan Danielsson <joda@pdc.kth.se>
1096
1097 * get_s.c: pa_* -> KRB5_PADATA_*
1098
10992000-06-16 Assar Westerlund <assar@sics.se>
1100
1101 * ipropd_slave.c: change default keytab to default keytab (as in
1102 typically FILE:/etc/krb5.keytab)
1103
11042000-06-08 Assar Westerlund <assar@sics.se>
1105
1106 * ipropd_slave.c: bug fixes, for actually writing the full dump to
1107 the database. based on a patch from Love <lha@stacken.kth.se>
1108
11092000-06-07 Assar Westerlund <assar@sics.se>
1110
1111 * acl.c: add support for patterns of principals
1112 * log.c (kadm5_log_replay_create): handle more NULL pointers
1113 (should they really happen?)
1114 * log.c (kadm5_log_replay_modify): handle max_life == NULL and
1115 max_renew == NULL
1116
1117 * ipropd_master.c: use syslog. be less verbose
1118 * ipropd_slave.c: use syslog
1119
11202000-06-05 Assar Westerlund <assar@sics.se>
1121
1122 * private.h (kadm_ops): add kadm_nop more prototypes
1123 * log.c (kadm5_log_set_version, kadm5_log_reinit, kadm5_log_nop,
1124 kadm5_log_replay_nop): add
1125 * ipropd_slave.c: and some more improvements
1126 * ipropd_master.c: lots of improvements
1127 * iprop.h (IPROP_PORT, IPROP_SERVICE): add
1128 (iprop_cmd): add new commands
1129
1130 * dump_log.c: add nop
1131
11322000-05-15 Assar Westerlund <assar@sics.se>
1133
1134 * Makefile.am (libkadm5clnt_la_LDFLAGS): set version to 5:1:1
1135
11362000-05-12 Assar Westerlund <assar@sics.se>
1137
1138 * get_s.c (kadm5_s_get_principal): set life, rlife to INT_MAX as a
1139 fallback. handle not having any creator.
1140 * destroy_s.c (kadm5_s_destroy): free all allocated memory
1141 * context_s.c (set_field): free variable if it's already set
1142 (find_db_spec): malloc space for all strings
1143
11442000-04-05 Assar Westerlund <assar@sics.se>
1145
1146 * Makefile.am (LDADD): add LIB_openldap
1147
11482000-04-03 Assar Westerlund <assar@sics.se>
1149
1150 * Makefile.am (libkadm5srv_la_LDFLAGS): set version to 6:0:1
1151 (libkadm5clnt_la_LDFLAGS): set version to 5:0:1
1152
11532000-03-24 Assar Westerlund <assar@sics.se>
1154
1155 * set_keys.c (_kadm5_set_keys2): rewrite
1156 (_kadm5_set_keys3): add
1157
1158 * private.h (struct kadm_func): add chpass_principal_with_key
1159 * init_c.c (set_funcs): add chpass_principal_with_key
1160
11612000-03-23 Assar Westerlund <assar@sics.se>
1162
1163 * context_s.c (set_funcs): add chpass_principal_with_key
1164 * common_glue.c (kadm5_chpass_principal_with_key): add
1165 * chpass_s.c: comment-ize and change calling convention for
1166 _kadm5_set_keys*
1167 * chpass_c.c (kadm5_c_chpass_principal_with_key): add
1168
11692000-02-07 Assar Westerlund <assar@sics.se>
1170
1171 * Makefile.am (libkadm5clnt_la_LDFLAGS): set version to 4:2:0
1172
11732000-01-28 Assar Westerlund <assar@sics.se>
1174
1175 * init_c.c (get_new_cache): make sure to request non-forwardable,
1176 non-proxiable
1177
11782000-01-06 Assar Westerlund <assar@sics.se>
1179
1180 * Makefile.am (libkadm5srv.la): bump version to 5:1:0
1181
1182 * context_s.c (_kadm5_s_init_context): handle params == NULL
1183
11841999-12-26 Assar Westerlund <assar@sics.se>
1185
1186 * get_s.c (kadm5_s_get_principal): handle modified_by->principal
1187 == NULL
1188
11891999-12-20 Assar Westerlund <assar@sics.se>
1190
1191 * Makefile.am (libkadm5clnt_la_LDFLAGS): bump version to 4:1:0
1192
1193 * init_c.c (_kadm5_c_init_context): handle getting back port
1194 number from admin host
1195 (kadm5_c_init_with_context): remove `proto/' part before doing
1196 getaddrinfo()
1197
11981999-12-06 Assar Westerlund <assar@sics.se>
1199
1200 * Makefile.am: bump version to 5:0:0 and 4:0:0
1201
1202 * init_c.c (kadm5_c_init_with_context): don't use unitialized
1203 stuff
1204
12051999-12-04 Assar Westerlund <assar@sics.se>
1206
1207 * replay_log.c: adapt to changed kadm5_log_foreach
1208
1209 * log.c (kadm5_log_foreach): change to take a
1210 `kadm5_server_context'
1211
1212 * init_c.c: use krb5_warn{,x}
1213
1214 * dump_log.c: adapt to changed kadm5_log_foreach
1215
1216 * init_c.c: re-write to use getaddrinfo
1217 * Makefile.am (install-build-headers): add dependency
1218
12191999-12-03 Johan Danielsson <joda@pdc.kth.se>
1220
1221 * log.c (kadm5_log_foreach): pass context
1222
1223 * dump_log.c: print more interesting things
1224
12251999-12-02 Johan Danielsson <joda@pdc.kth.se>
1226
1227 * ipropd_master.c (process_msg): check for short reads
1228
12291999-11-25 Assar Westerlund <assar@sics.se>
1230
1231 * modify_s.c (kadm5_s_modify_principal): support key_data
1232 (kadm5_s_modify_principal_with_key): remove
1233
1234 * admin.h (kadm5_s_modify_principal_with_key): remove
1235
12361999-11-20 Assar Westerlund <assar@sics.se>
1237
1238 * context_s.c (find_db_spec): ugly cast work-around.
1239
12401999-11-14 Assar Westerlund <assar@sics.se>
1241
1242 * context_s.c (_kadm5_s_init_context): call krb5_add_et_list so
1243 that we aren't dependent on the layout of krb5_context_data
1244 * init_c.c (_kadm5_c_init_context): call krb5_add_et_list so that
1245 we aren't dependent on the layout of krb5_context_data
1246
12471999-11-13 Assar Westerlund <assar@sics.se>
1248
1249 * password_quality.c (kadm5_setup_passwd_quality_check): use
1250 correct types for function pointers
1251
12521999-11-09 Johan Danielsson <joda@pdc.kth.se>
1253
1254 * randkey_s.c: always bail out if the fetch fails
1255
1256 * admin.h (kadm5_config_params): remove fields we're not using
1257
1258 * ipropd_slave.c: allow passing a realm
1259
1260 * ipropd_master.c: allow passing a realm
1261
1262 * dump_log.c: allow passing a realm
1263
1264 * acl.c: correctly get acl file
1265
1266 * private.h (kadm5_server_context): add config_params struct and
1267 remove acl_file; bump protocol version number
1268
1269 * marshall.c: marshalling of config parameters
1270
1271 * init_c.c (kadm5_c_init_with_context): try to cope with old
1272 servers
1273
1274 * init_s.c (kadm5_s_init_with_context): actually use some passed
1275 values
1276
1277 * context_s.c (_kadm5_s_init_context): get dbname, acl_file, and
1278 stash_file from the config parameters, try to figure out these if
1279 they're not provided
1280
12811999-11-05 Assar Westerlund <assar@sics.se>
1282
1283 * Makefile.am (install-build-headers): use `cp' instead of
1284 INSTALL_DATA
1285
12861999-11-04 Assar Westerlund <assar@sics.se>
1287
1288 * Makefile.am: bump version to 4:0:0 and 3:0:0 (they access fields
1289 directly in libkrb5's context - bad functions)
1290
1291 * set_keys.c (_kadm5_set_keys_randomly): set enctypes correctly in
1292 the copied keys
1293
12941999-10-20 Assar Westerlund <assar@sics.se>
1295
1296 * Makefile.am: set version of kadm5srv to 3:0:2 (new password
1297 quality functions).
1298 set version of kdam5clnt to 2:1:1 (no interface changes)
1299
1300 * Makefile.am (LDADD): add $(LIB_dlopen)
1301
13021999-10-17 Assar Westerlund <assar@sics.se>
1303
1304 * randkey_s.c (kadm5_s_randkey_principal): use
1305 _kadm5_set_keys_randomly
1306
1307 * set_keys.c (free_keys): free more memory
1308 (_kadm5_set_keys): a little bit more generic
1309 (_kadm5_set_keys_randomly): new function for setting random keys.
1310
13111999-10-14 Assar Westerlund <assar@sics.se>
1312
1313 * set_keys.c (_kadm5_set_keys): ignore old keys when setting new
1314 ones and always add 3 DES keys and one 3DES key
1315
13161999-10-03 Assar Westerlund <assar@sics.se>
1317
1318 * init_c.c (_kadm5_c_init_context): use `krb5_get_krb_admin_hst'.
1319 check return value from strdup
1320
13211999-09-26 Assar Westerlund <assar@sics.se>
1322
1323 * acl.c (_kadm5_privs_to_string): forgot one strcpy_truncate ->
1324 strlcpy
1325
13261999-09-24 Johan Danielsson <joda@pdc.kth.se>
1327
1328 * dump_log.c: remove unused `optind'
1329
1330 * replay_log.c: remove unused `optind'
1331
13321999-09-13 Assar Westerlund <assar@sics.se>
1333
1334 * chpass_c.c (kadm5_c_chpass_principal): new _kadm5_client_recv
1335
1336 * send_recv.c (_kadm5_client_recv): return result in a `krb5_data'
1337 so that we avoid copying it and don't need to dimension in
1338 advance. change all callers.
1339
13401999-09-10 Assar Westerlund <assar@sics.se>
1341
1342 * password_quality.c: new file
1343
1344 * admin.h
1345 (kadm5_setup_passwd_quality_check,kadm5_check_password_quality):
1346 add prototypes
1347
1348 * Makefile.am (S_SOURCES): add password_quality.c
1349
13501999-07-26 Assar Westerlund <assar@sics.se>
1351
1352 * Makefile.am: update versions to 2:0:1
1353
13541999-07-24 Assar Westerlund <assar@sics.se>
1355
1356 * ent_setup.c (_kadm5_setup_entry): make princ_expire_time == 0
1357 and pw_expiration == 0 mean never
1358
13591999-07-22 Assar Westerlund <assar@sics.se>
1360
1361 * log.c (kadm5_log_flush): extra cast
1362
13631999-07-07 Assar Westerlund <assar@sics.se>
1364
1365 * marshall.c (store_principal_ent): encoding princ_expire_time and
1366 pw_expiration in correct order
1367
13681999-06-28 Assar Westerlund <assar@sics.se>
1369
1370 * randkey_s.c (kadm5_s_randkey_principal): nuke old mkvno,
1371 otherwise hdb will think that the new random keys are already
1372 encrypted which will cause lots of confusion later.
1373
13741999-06-23 Assar Westerlund <assar@sics.se>
1375
1376 * ent_setup.c (_kadm5_setup_entry): handle 0 == unlimited
1377 correctly. From Michal Vocu <michal@karlin.mff.cuni.cz>
1378
13791999-06-15 Assar Westerlund <assar@sics.se>
1380
1381 * init_c.c (get_cred_cache): use get_default_username
1382
13831999-05-23 Assar Westerlund <assar@sics.se>
1384
1385 * create_s.c (create_principal): if there's no default entry the
1386 mask should be zero.
1387
13881999-05-21 Assar Westerlund <assar@sics.se>
1389
1390 * init_c.c (get_cred_cache): use $USERNAME
1391
13921999-05-17 Johan Danielsson <joda@pdc.kth.se>
1393
1394 * init_c.c (get_cred_cache): figure out principal
1395
13961999-05-05 Johan Danielsson <joda@pdc.kth.se>
1397
1398 * send_recv.c: cleanup _kadm5_client_{send,recv}
1399
14001999-05-04 Assar Westerlund <assar@sics.se>
1401
1402 * set_keys.c (_kadm5_set_keys2): don't check the recently created
1403 memory for NULL pointers
1404
1405 * private.h (_kadm5_setup_entry): change prototype
1406
1407 * modify_s.c: call new _kadm5_setup_entry
1408
1409 * ent_setup.c (_kadm5_setup_entry): change so that it takes three
1410 masks, one for what bits to set and one for each of principal and
1411 def containing the bits that are set there.
1412
1413 * create_s.c: call new _kadm5_setup_entry
1414
1415 * create_s.c (get_default): check return value
1416 (create_principal): send wider mask to _kadm5_setup_entry
1417
14181999-05-04 Johan Danielsson <joda@pdc.kth.se>
1419
1420 * send_recv.c (_kadm5_client_recv): handle arbitrarily sized
1421 packets, check for errors
1422
1423 * get_c.c: check for failure from _kadm5_client_{send,recv}
1424
14251999-05-04 Assar Westerlund <assar@sics.se>
1426
1427 * init_c.c (get_new_cache): don't abort when interrupted from
1428 password prompt
1429
1430 * destroy_c.c (kadm5_c_destroy): check if we should destroy the
1431 auth context
1432
14331999-05-03 Johan Danielsson <joda@pdc.kth.se>
1434
1435 * chpass_s.c: fix arguments to _kadm5_set_keys2
1436
1437 * private.h: proto
1438
1439 * set_keys.c: clear mkvno
1440
1441 * rename_s.c: add flags to fetch and store; seal keys before
1442 logging
1443
1444 * randkey_s.c: add flags to fetch and store; seal keys before
1445 logging
1446
1447 * modify_s.c: add flags to fetch and store; seal keys before
1448 logging
1449
1450 * log.c: add flags to fetch and store; seal keys before logging
1451
1452 * get_s.c: add flags to fetch and store; seal keys before logging
1453
1454 * get_princs_s.c: add flags to fetch and store; seal keys before
1455 logging
1456
1457 * delete_s.c: add flags to fetch and store; seal keys before
1458 logging
1459
1460 * create_s.c: add flags to fetch and store; seal keys before
1461 logging
1462
1463 * chpass_s.c: add flags to fetch and store; seal keys before
1464 logging
1465
1466 * Makefile.am: remove server.c
1467
1468 * admin.h: add prototypes
1469
1470 * ent_setup.c (_kadm5_setup_entry): set key_data
1471
1472 * set_keys.c: add _kadm5_set_keys2 to sey keys from key_data
1473
1474 * modify_s.c: add kadm5_s_modify_principal_with_key
1475
1476 * create_s.c: add kadm5_s_create_principal_with_key
1477
1478 * chpass_s.c: add kadm5_s_chpass_principal_with_key
1479
1480 * kadm5_locl.h: move stuff to private.h
1481
1482 * private.h: move stuff from kadm5_locl.h
1483
Note: See TracBrowser for help on using the repository browser.