krb5.git/src/config-files, branch kinit-c MIT Kerberos patches Update sample configs to include master_kdc 2014-04-15T15:55:21+00:00 Greg Hudson ghudson@mit.edu 2014-04-08T18:07:30+00:00 3b72cefb1bbf231192a2b92c31f2c91217f7d58c Where we have ATHENA.MIT.EDU stanzas in sample or test krb5.conf files which define kdc entries, also define a master_kdc entry. Remove default_domain and v4_instance_convert entries in examples as they are only needed for krb5/krb4 principal conversions. In the krb5_conf.rst example, remove enctype specifications as we don't want to encourage their use when they aren't necessary, and remove a redundant domain_realm entry. ticket: 7901 (new) 
Where we have ATHENA.MIT.EDU stanzas in sample or test krb5.conf files
which define kdc entries, also define a master_kdc entry.  Remove
default_domain and v4_instance_convert entries in examples as they are
only needed for krb5/krb4 principal conversions.  In the krb5_conf.rst
example, remove enctype specifications as we don't want to encourage
their use when they aren't necessary, and remove a redundant
domain_realm entry.

ticket: 7901 (new)
Remove redundant domain_realm mappings 2013-08-12T19:28:07+00:00 Ben Kaduk kaduk@mit.edu 2013-08-12T17:47:42+00:00 8f5ce824012f2caab6770df464f096c38dc4cb2e This fixes a long-standing documentation bug where we claimed that a domain_realm mapping for a host name would not affect entries under that domain name. The code has always had the behavior where a host name mapping implies the corresponding domain name mapping, since the 1.0 release. While here, replace media-lab with csail in example files, as the media lab realm is no longer in use. Also strip port 88 from KDC specifications, and drop the harmful default_{tgs,tkt}_enctypes lines from src/util/profile/krb5.conf. Further cleanup on these files to remove defunct realms may be in order. ticket: 7690 (new) tags: pullup target_version: 1.11.4 
This fixes a long-standing documentation bug where we claimed that
a domain_realm mapping for a host name would not affect entries
under that domain name.  The code has always had the behavior where
a host name mapping implies the corresponding domain name mapping,
since the 1.0 release.

While here, replace media-lab with csail in example files, as the
media lab realm is no longer in use.  Also strip port 88 from KDC
specifications, and drop the harmful default_{tgs,tkt}_enctypes
lines from src/util/profile/krb5.conf.

Further cleanup on these files to remove defunct realms may be in order.

ticket: 7690 (new)
tags: pullup
target_version: 1.11.4
Remove install-oldman 2012-10-17T15:40:49+00:00 Ben Kaduk kaduk@mit.edu 2012-10-17T15:37:01+00:00 01ff91f5e9fc6ae2ff1884a6d4b28ea108e04232 The old man pages are gone, so we can't install them anymore. Also clean up install and install-unix targets that were installing the old man pages by hand. 
The old man pages are gone, so we can't install them anymore.
Also clean up install and install-unix targets that were installing
the old man pages by hand.
Remove nroff man pages 2012-10-16T21:08:08+00:00 Ben Kaduk kaduk@mit.edu 2012-10-16T20:03:10+00:00 0bb69fbcc306a3bf28370ac57d7e79120ccc7ce1 We generate man pages from RST sources now; they are checked into the tree in src/man/. The gen-manpages directory is no longer needed. 
We generate man pages from RST sources now; they are checked into
the tree in src/man/.

The gen-manpages directory is no longer needed.
Remove admin_keytab references in code and docs 2012-03-04T00:38:48+00:00 Greg Hudson ghudson@mit.edu 2012-03-04T00:38:48+00:00 f938afd6b6f61a96a0aa72c57a280aa721566fe6 The admin keytab hasn't been needed or used by kadmind since 1.4 (except possibly by legacy admin daemons which we no longer ship). Eliminate remaining references to it in code, test cases, and documentation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25729 dc483132-0cff-0310-8789-dd5450dbe970 
The admin keytab hasn't been needed or used by kadmind since 1.4
(except possibly by legacy admin daemons which we no longer ship).
Eliminate remaining references to it in code, test cases, and
documentation.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25729 dc483132-0cff-0310-8789-dd5450dbe970
install sphinx-generated manpages 2012-01-09T20:13:10+00:00 Tom Yu tlyu@mit.edu 2012-01-09T20:13:10+00:00 bde5e9efadbdf0fb0b2d1dd16efcb83e82e433e4 Install sphinx-generated manpages. Original nroff manpages remain for reference until proofreading is complete. Modify doc/rst_source/conf.py to better deal with shadow manpages -- sphinx will now build k5login.5 instead of .k5login.5, and kadmin.1 instead of both kadmin.1 and kadmin.local.8. Proofreaders should ensure that the original nroff manpages (and associated Makefile rules) are deleted once their reST format equivalents have been proofread. ticket: 7064 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25625 dc483132-0cff-0310-8789-dd5450dbe970 
Install sphinx-generated manpages.  Original nroff manpages remain for
reference until proofreading is complete.  Modify
doc/rst_source/conf.py to better deal with shadow manpages -- sphinx
will now build k5login.5 instead of .k5login.5, and kadmin.1 instead
of both kadmin.1 and kadmin.local.8.

Proofreaders should ensure that the original nroff manpages (and
associated Makefile rules) are deleted once their reST format
equivalents have been proofread.

ticket: 7064
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25625 dc483132-0cff-0310-8789-dd5450dbe970
Use built-in modules for encrypted timestamp 2011-10-07T14:26:25+00:00 Greg Hudson ghudson@mit.edu 2011-10-07T14:26:25+00:00 ca3ec7f3fd59baa0d0eedcb61c7009165ea2730c Break out the encrypted timestamp code from kdc_preauth.c and preauth2.c into built-in modules, allowing admins to disable it and reducing the size of the framework code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25319 dc483132-0cff-0310-8789-dd5450dbe970 
Break out the encrypted timestamp code from kdc_preauth.c and
preauth2.c into built-in modules, allowing admins to disable it and
reducing the size of the framework code.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25319 dc483132-0cff-0310-8789-dd5450dbe970
Man page spelling corrections from ville.skytta@iki.fi 2011-10-02T14:05:44+00:00 Greg Hudson ghudson@mit.edu 2011-10-02T14:05:44+00:00 41944ee6ad71cb6f3c443bba77f184e335388b64 ticket: 6968 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25290 dc483132-0cff-0310-8789-dd5450dbe970 
ticket: 6968

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25290 dc483132-0cff-0310-8789-dd5450dbe970
Document some variables in the right section 2011-08-02T20:59:19+00:00 Greg Hudson ghudson@mit.edu 2011-08-02T20:59:19+00:00 e3a6ff820b83997f9a668a24c2dad8c26fefc5e7 database_name, disable_last_success, and disable_lockout should be under dbmodules, not dbdefaults. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25067 dc483132-0cff-0310-8789-dd5450dbe970 
database_name, disable_last_success, and disable_lockout should be
under dbmodules, not dbdefaults.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25067 dc483132-0cff-0310-8789-dd5450dbe970
Document loadable profile modules 2011-07-20T19:14:38+00:00 Greg Hudson ghudson@mit.edu 2011-07-20T19:14:38+00:00 510f82a3dfdca65a7c9cd145739cd115d6edcdf0 ticket: 6929 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25027 dc483132-0cff-0310-8789-dd5450dbe970 
ticket: 6929

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25027 dc483132-0cff-0310-8789-dd5450dbe970