krb5.git/.gitignore, branch proxymech MIT Kerberos patches Add tests for localauth interface 2013-03-09T07:03:32+00:00 Greg Hudson ghudson@mit.edu 2013-02-27T20:00:37+00:00 b8696b1ed70ffebbeee7142f1e5e086d75ce4e30 Create a test module, program, and script to exercise the krb5_aname_to_localname and krb5_k5userok functions as well as the localauth pluggable interface. ticket: 7583 
Create a test module, program, and script to exercise the
krb5_aname_to_localname and krb5_k5userok functions as well as the
localauth pluggable interface.

ticket: 7583
Add localauth pluggable interface 2013-03-09T06:56:59+00:00 Greg Hudson ghudson@mit.edu 2013-02-13T20:29:48+00:00 4216fb5b0e0abb80a3ccd8251abddc18435d81f3 Add a new pluggable interface for local authorization, and replace the existing krb5_aname_to_localname and krb5_kuserok implementations with implementations based on the pluggable interface. ticket: 7583 (new) 
Add a new pluggable interface for local authorization, and replace the
existing krb5_aname_to_localname and krb5_kuserok implementations with
implementations based on the pluggable interface.

ticket: 7583 (new)
Add missing .gitignore entries and clean rules 2013-02-27T21:33:50+00:00 Greg Hudson ghudson@mit.edu 2013-02-27T21:33:28+00:00 f09c97320e683a2ad0e42df63aeedd16b78c9ad2 ticket: 7585 
ticket: 7585
Install pkg-config data files 2013-01-04T06:33:12+00:00 Greg Hudson ghudson@mit.edu 2013-01-03T18:47:01+00:00 c5e826e6071bc1ba5208f4ea6997d1952114e27a Add seven data files for pkg-config, corresponding to the five modules supported by krb5-config. For krb5 and krb5-gssapi, we also provide mit- versions for callers desiring to distinguish between our implementation and Heimdal's. Based on a patch from Stef Walter <stefw@gnome.org>. ticket: 7529 (new) 
Add seven data files for pkg-config, corresponding to the five modules
supported by krb5-config.  For krb5 and krb5-gssapi, we also provide
mit- versions for callers desiring to distinguish between our
implementation and Heimdal's.

Based on a patch from Stef Walter <stefw@gnome.org>.

ticket: 7529 (new)
Move krb5-config to new src/build-tools directory 2013-01-04T06:32:49+00:00 Greg Hudson ghudson@mit.edu 2013-01-03T16:07:15+00:00 5adaa8f50af31056a06934bc219e7f5ca33c1ae5 In preparation for adding a bunch of pkg-config data files, move krb5-config into a new source tree subdirectory containing tools we provide as outputs to other build systems. 
In preparation for adding a bunch of pkg-config data files, move
krb5-config into a new source tree subdirectory containing tools we
provide as outputs to other build systems.
Fix gss_str_to_oid and gss_oid_to_str edge cases 2013-01-01T22:41:49+00:00 Greg Hudson ghudson@mit.edu 2013-01-01T05:23:43+00:00 9b702abe222d4b279d5869f96f09074452478b1e Neither function correctly handled OIDs whose second arc exceeds 47 (theoretically possible if the first arc is 2). gss_str_to_oid had additional problems: it used scanf, it didn't consistently protect against read overrun if the input buffer wasn't null-terminated, and it could get confused by + or - characters in the first two arcs. Fix gss_oid_to_str and rewrite gss_str_to_oid. Also add a test program. ticket: 7524 (new) 
Neither function correctly handled OIDs whose second arc exceeds 47
(theoretically possible if the first arc is 2).  gss_str_to_oid had
additional problems: it used scanf, it didn't consistently protect
against read overrun if the input buffer wasn't null-terminated, and
it could get confused by + or - characters in the first two arcs.  Fix
gss_oid_to_str and rewrite gss_str_to_oid.

Also add a test program.

ticket: 7524 (new)
Add automated tests for LDAP KDB module 2012-11-15T18:58:45+00:00 Greg Hudson ghudson@mit.edu 2012-11-11T03:08:39+00:00 4f349b6e154eb05e591cd0de10791e29f4c44fb9 Add new tests kdbtest.c and t_kdb.py. Together these exercise most of the code in the LDAP back end. kdbtest is also run against the DB2 module, which is mostly redundant with other tests, but does exercise the lockout logic a little more thoroughly than t_lockout.py can. To test the LDAP back end, we look for slapd and ldapadd binaries in the path. The system slapd is sometimes constrained by AppArmor or the like, which we can typically work around by making a copy of the binary. slapd detaches before listening on its server socket (this got better in 2.4.27 but still isn't perfect), so we unfortunately have to use a one-second sleep in the slapd setup. 
Add new tests kdbtest.c and t_kdb.py.  Together these exercise most of
the code in the LDAP back end.  kdbtest is also run against the DB2
module, which is mostly redundant with other tests, but does exercise
the lockout logic a little more thoroughly than t_lockout.py can.

To test the LDAP back end, we look for slapd and ldapadd binaries in
the path.  The system slapd is sometimes constrained by AppArmor or
the like, which we can typically work around by making a copy of the
binary.  slapd detaches before listening on its server socket (this
got better in 2.4.27 but still isn't perfect), so we unfortunately
have to use a one-second sleep in the slapd setup.
Make glue for building PDFs 2012-11-14T19:15:24+00:00 Ben Kaduk kaduk@mit.edu 2012-10-17T00:11:14+00:00 f06725b7a98c16630f80d8cc1dd6386a7d21a058 sphinx-build's latex output engine creates a subdirectory with various latex files, and a Makefile. The generated Makefile assumes gmake, which we do not. The logic needed in this makefile is rather simple, so we just include it in src/doc/Makefile.in, even if we do need a rather complicated shell expression to work in the subdirectory. ticket: 7433 tags: pullup 
sphinx-build's latex output engine creates a subdirectory with
various latex files, and a Makefile.  The generated Makefile assumes
gmake, which we do not.  The logic needed in this makefile is rather
simple, so we just include it in src/doc/Makefile.in, even if we
do need a rather complicated shell expression to work in the subdirectory.

ticket: 7433
tags: pullup
Generate and use version.py for Sphinx 2012-11-14T19:09:03+00:00 Tom Yu tlyu@mit.edu 2012-10-17T22:12:52+00:00 07c77b51d33c23d3ea28d588adc43b6c5ec5c20f Sphinx's idea of the version number appears in the man pages and compiled PDF documents, and shows up as metadata in the generated HTML sources. Extract the version information from the master source (patchlevel.h) into a form usable by Sphinx. ticket: 7433 tags: pullup 
Sphinx's idea of the version number appears in the man pages and
compiled PDF documents, and shows up as metadata in the generated
HTML sources.

Extract the version information from the master source (patchlevel.h)
into a form usable by Sphinx.

ticket: 7433
tags: pullup
Catch up to RST move/rename 2012-10-15T23:22:21+00:00 Ben Kaduk kaduk@mit.edu 2012-10-15T22:17:50+00:00 970fc63c63c13a9a15fd0c6dcb6ba7a11ab63c36 Change the make rules for the directory structure. Update the RST sources which include other RST sources for the loss of the krb_ prefix. ticket: 7409 
Change the make rules for the directory structure.
Update the RST sources which include other RST sources for the
loss of the krb_ prefix.

ticket: 7409